search cancel

RACF TRUST bit equivalent in Top Secret

book

Article ID: 253470

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

What is the equivalent for activating the RACF TRUST bit in Top Secret?

Environment

Release : 16.0

Resolution

Top Secret doesnt have a one for one direct equivalent of the RACF TRUSTED attribute, but the same results can be achieved by:

1. Giving the user all the Top Secret bypass attributes via:

  1. TSS ADD(acid) NORESCHK NOVOLCHK NODSNCHK NOLCFCHK NOSUBCHK
  2. An alternative is putting the started task in BYPASS in the Top Secret Started Task Table via TSS ADD(STC) PROCNAME(xxxx) ACID(BYPASS)

2. ***AND*** Giving superuser authority via:

  1. TSS ADD(acid) UID(0) ***OR***
  2. TSS PER(acid) UNIXPRIV(BPX.SUPERUSER) ACC(READ)

3. ***AND*** Giving user USS permission to the directories it needs by:

  1. Making the user owner of the directory or file via USS chown command ***OR**  
  2. Adding the fukwa/directory GROUP to the user.via USS addgroup