Top Secret parameter file equivalents for RACF SETROPTS

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

What are the Top Secret equivalent parameter file options for the following RACF SETROPTS

   SETROPTS INISTATS(ON)
   SETROPTS SAUDIT(ON)
   SETROPTS CMDVIOL(ON)
   SETROPTS OPERAUDIT(ON)
   SETROPTS AUDIT(‘classe’)
   SETROPTS BATCHALLRACF(ON)
   SETROPTS PROTECTALL(FAILURES) 

Resolution

SETROPTS INISTATS(ON) ==> LOG(INIT) at FACILITY level and/or as global control option LOG(), see the link here:

SETROPTS SAUDIT(ON) ==> there is no Top Secret equivalent as such, but see the global control option LOG(CMDA,CMDS), also refer to the above link.

SETROPTS CMDVIOL(ON) ==> Global option LOG(CMDA,CMDS) and the above link.

SETROPTS OPERAUDIT(ON) ==> there is no Top Secret equivalent as such, but see the AUDIT attribute here:

SETROPTS AUDIT(‘classe’) ==> there is no Top Secret equivalent as such, but see the record AUDIT to audit resource class and resources, see the above link.

SETROPTS BATCHALLRACF(ON) for JES ==> see the Top Secret global control option JES(VERIFY/NOVERIFY) and Top Secret always checks the submitting acid.

SETROPTS PROTECTALL(FAILURES) ==> With Top Secret, DATASETs are protected by default in FAIL mode.