VM Directory Command Limiting and Logging Support

The VM directory contains information for all authorized users on your system. These entries contain the user ID (user's identification), the password, virtual storage size, spool addresses, and the minidisk locations and sizes for each user. CA provides a directory maintenance program, CA-Director. IBM also provides a directory maintenance program, DirMaint. Both programs control access to the VM directory by restricting the additions of new minidisks, changing the size of an existing minidisk, deleting minidisks, and transferring ownership of minidisks.

CA ACF2 for z/ VM provides an optional interface to the DirMaint program product that controls:

The execution of all DIRM commands by all users. All of these command executions are logged in the DirMaint Event Log (ACFRPTDL). For DirMaint logging records for the MDISK and MDPW functions, the user-specified password in the SMF records is Xed out unless you specified the ALL parameter for ACFRPTDL.
All minidisk overlaps, to help guard against accidental disclosure, modification, or destruction of data on minidisks.
The DirMaint command and its operands, so you can decentralize directory maintenance between multiple DirMaint privileged users.

DirMaint command limiting violations do not increment a user's violation count. CA ACF2 for z/ VM only increments this count for access violations. If access violations cause the user to reach the MAXVIO threshold, CA ACF2 for z/ VM forces him off.

This section contains the following topics:

Important Installation Information

Protecting the VM Directory in DirMaint