Excessive Top Secret USS events with RC=0 getting logged to SMF 231 records.

Products

• Top Secret

Issue/Introduction

Receiving many OMVS events with RC 0 being recorded to the SMF dataset as SMF 231 records by Top Secret.

 

 

Environment

 

Resolution

Any ACID with the TRACE or AUDIT attribute will cause all Unix System Services security events, including return code zero, to be logged for the ACID.

The Top Secret OMVSTRACE will also cause security events with RC=0 to be logged to the SMF dataset.

Issue a 'ST DEL,ID=ALL,END' to turn off all Top Secret OMVSTRACEs.