Sample Top Secret RACF commands equivalent commands to secure a ZFS

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

How to secure ZFS files? 

Environment

Release:
Component: TSSMVS

Resolution

The following TSS sample commands can be used to secure a zFS file ZFS.SC43.IEOSZFS:

TSS CREATE(DFSGRP) TYPE(GROUP) NAME('DFS GROUP') DEPT(dept) 
TSS ADD(DFSGRP) GID(2) 
TSS CREATE(DFS) TYPE(USER) PASS(xxxx,0) NAME('ZFS region acid') 
DEPT(dept) 
TSS ADD(DFS) UID(0) HOME(/opt/dfslocal/home/dfscntl) DFLTGRP(DFSGRP) 
GROUP(DFSGRP) 
TSS ADD(STC) PROCN(ZFS) ACID(DFS) 
TSS ADD(STC) PROCN(DFS) ACID(DFS) 
TSS MODI OMVSTABS 

TSS ADD(dept) IBMFAC(BPX.SUPERUSER) ** You may already have completed **
TSS PER(acid) IBMFAC(BPX.SUPERUSER) ACCESS(READ)
 
TSS ADD(dept) UNIXPRIV(BPX.SUPERUSER) ** You may already have completed **
TSS PER(acid) UNIXPRIV(BPX.SUPERUSER.FILESYS.PFSCTL) ACCESS(READ) 
TSS PER(acid) UNIXPRIV(BPX.SUPERUSER.FILESYS.MOUNT) ACCESS(UPDATE) 
TSS ADD(dept) DSN(ZFS.) 
TSS PER(DFS) DSN(ZFS.SC43.IEOSZFS) ACCESS(ALL)