Top Secret commands for IBM Z Virtual Test Platform Server Extension

Products

• Top Secret

Issue/Introduction

 The following Racf commands for IBM Z Virtual Test Platform Server Extension need to be translated into Top Secret.

ADDGROUP BZOGROUP OMVS(AUTOGID) +

  DATA('GROUP WITH OMVS SEGMENT FOR STARTED TASKS')

 ADDUSER BZO DFLTGRP(BZOGROUP) NOPASSWORD +

  OMVS(AUTOUID HOME(/u/bzo) PROGRAM(/bin/sh) +

  NAME('Server Extension') +

  DATA('IBM Z Virtual Test Platform Server Extension')

 RDEFINE STARTED BZOSRVR.* +

  STDATA(USER(BZO) GROUP(BZOGROUP) TRUSTED(NO)) +

  DATA('IBM Z Virtual Test Platform Server Extension')

 SETROPTS RACLIST(STARTED) REFRESH

Environment

Release : 16.0

Resolution

It is assumed that a group called BZOGROUP does not exist.  Also be aware that these RACF commands are using auto-assign to give the group a GID and the user BZO a UID.  If IBM wanted a superuser it would show the values and not use auto-assign, so values need to be given for each.
TSS CREATE(BZOGROUP) NAME('GROUP WITH OMVS SEGMENT FOR STARTED TASKS')  DEPT(dept) TYPE(GROUP)
TSS ADD(BZOGROUP) GID(xx)
TSS CREATE(BZO) NAME('IBM Z Virtual Test Platform Server Extension') TYPE(USER) PROTECTED
TSS ADD(BZO) UID(xx) HOME('/u/bzo') OMVSPGM('/bin/sh') 
TSS ADD(BZO) GROUP(BZOGROUP) DFLTGRP(BZOGROUP)
TSS ADD(STC) PROCN(BZOSRVR) ACID(BZO)