Use the SECURITYRULESET parameter to allocate a rule set containing only security rules, allowing you to easily enable and disable security-rules.
To prevent accidental or unauthorized editing of security rules, use the installation security product to allow read/write access to only those users that maintain security rules.
For example, consider these parameter settings:
Using these examples, your security rule set is the PDS named OPSMVS.PROD.SEC.RULES and is the only rule set from which the AOF allows a SEC type rule to be enabled.
Note: For more information about the SECURITYRULESET parameter and other security parameters that affect rule security such as SECRULEFAILURE and AOFINITOPEN, see the Parameter Reference.
|
Copyright © 2011 CA.
All rights reserved.
|
|