What does the Class OPERCMDS resource MVS.UNKNOWN represent?

book

Article ID: 52463

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA PanApt CA PanAudit

Issue/Introduction

Description:

I have found reference to violations against OPERCMDS resource MVS.UNKNOWN - what is this?

Solution:

MVS.UNKNOWN is used to handle MVS system commands that operators might enter but which the system does not recognize. Some command processors, including CANCEL, FORCE, MODIFY, and STOP, also use this resource when auditing unknown tasks or address spaces.

A specific LOG rule may be used to allow and log these validations to SMF for subsequent reporting via the ACFRPTRV report, i.e.:

$KEY(MVS) TYPE(opr)
other.rules...
UNKNOWN UID(*) LOG

(where opr is the OPERCMDS RSRCTYPE defined in GSO CLASMAP)

Environment

Release:
Component: ACF2MS