How can we setup Top Secret for VSE DITTO control in VSEn 6.+ ?

Products

• Top Secret for z/VSE

Issue/Introduction

Trying to setup TSS/VSE security protection for DITTO under the 21CS version of VSEn 6.+.

How can this be accomplished?

Environment

VSEn 6.+  from 21CS

TSS/VSE 3.+ from Broadcom

Resolution

SMDMU (i.e., DITTO) external security using Top Secret is established by using one of the following methods -

(1) Establish ownership of the following resource ID -

            "IBMFAC(DITTO.FU)"

      Issue permits as necessary using the following resource IDs -

            "IBMFAC(DITTO.FUNCTION,{ditto-function-ID-nn}) ACCESS(READ)"

      Each function to be utilized by the user must be individually permitted.

(2) Establish ownership of the following resource IDs -

            "IBMFAC(DITTO.DI)"

            "IBMFAC(DITTO.OA)"

            "IBMFAC(DITTO.OT)"

            "IBMFAC(DITTO.SP)"

            "IBMFAC(DITTO.TA)"

            "IBMFAC(DITTO.VS)"

      Issue permits as necessary using the following resource IDs -

            "IBMFAC(DITTO.DISK.INPUT) ACCESS(READ)"

            "IBMFAC(DITTO.DISK.UPDATE) ACCESS(READ)"

            "IBMFAC(DITTO.OAM.OUTPUT) ACCESS(READ)"

            "IBMFAC(DITTO.OAM.UPDATE) ACCESS(READ)"

            "IBMFAC(DITTO.OTHER.ALL) ACCESS(READ)"

            "IBMFAC(DITTO.SPOOL.CONTROL) ACCESS(READ)"

            "IBMFAC(DITTO.SPOOL.DISPLAY) ACCESS(READ)"

            "IBMFAC(DITTO.TAPE.DUPLICATE) ACCESS(READ)"

            "IBMFAC(DITTO.TAPE.INPUT) ACCESS(READ)"

            "IBMFAC(DITTO.TAPE.OUTPUT) ACCESS(READ)"

            "IBMFAC(DITTO.TAPE.UPDATE) ACCESS(READ)"

            "IBMFAC(DITTO.VSAM.UPDATE) ACCESS(READ)"

Please be aware that in implementation method (2) the permits are for groups of commands in lieu of the individual commands in implementation method (1) and so may have the effect of permitting the use of commands that you do not desire to be so permitted.

Please note that the following commands are unrestricted and that no security check is performed -

      "LVL"

      "MB"

      "PB"

      "SET"

      "VER"