Unified Install Process › Review Installer Security Privileges

Review Installer Security Privileges

Before you begin the installation process, verify that the installer user ID has the following security privileges defined:

• For UNIX System Services:
  • A valid OMVS definition and the installer user ID have a valid UID that is not UID(0).
  • Superuser authority.
  • READ access to the following resources in the FACILITY class:
    • (Optional) BPX.SUPERUSER
    • BPX.FILEATTR.APF
    • BPX.FILEATTR.PROGCTL
    • BPX.FILEATTR.SHARELIB
    • (Optional) BPX.SERVER
    • SUPERUSER.FILESYS.PFSCTL profile in UNIXPRIV resource class

    (Optional, depending on your site's security configuration) Ability to manipulate zFS data sets. This requires UPDATE authority to the appropriate entities within the FSACCESS class.

    Note: Verify with your Security Administrator if FSACCESS permissions are needed.

    FSACCESS lets you secure access to a zFS file system container (that is, a data set). The resource name is the zFS file system name.

    For example: You defined a zFS file system that is named OMVS.ZFS.WEBSRV.TOOLS, and then you created directories U1 and U2 with files in the directories. A resource check for class FSACCESS resource OMVS.ZFS.WEBSRV.TOOLS occurs when a user tries to access a file in directory U1 or U2 in the zFS file system. For more details, see the applicable security product documentation.

• For z/OS:
  • Authority to read, create, update, and execute from the CA Chorus Security and Compliance Discipline installation data sets and libraries.
  • Authority to execute commands to manipulate the external security manager (CA ACF2, CA Top Secret, or IBM RACF) database.
  • APF-authorization and other security requirements that must be performed through an external security product are defined during the CA Chorus configuration process, as described in the CA Chorus Installation Guide. You complete those tasks during the installation because you need to access various jobs and members from the installation package.