Permit MODE(WARN) in Top Secret

Products

• Top Secret

Issue/Introduction

Is TSS PERMIT with ACCESS(NONE) and MODE(WARN) valid? 
This would enable users to continue working and identify who needs a permit.

 

 

  

 

 

 

Resolution

There is no way to code a rule in WARN mode, ie ACTION(WARN) is not valid on a TSS PERMIT command. (Only ACTION(FAIL) is valid.)

In FAIL mode, once the resource is defined to Top Secret, or the DEFPROT attribute is set on the resource class, a user must be explicitly permitted to access to the resource. 

For this situation, the following action is recommended: 

 

TSS PER(ALL) class(SpecificResource) ACCESS(ALL) ACTION(AUDIT) 

 

and run TSSUTIL report:

 

REPORT EVENT(AUDTA) class(Report) END