Using the TBESAF99 Utility to Generate Security Profiles › Sample TBESAF99-Generated Control Statements for RACF › Sample Command Protection Control Statements for RACF

Sample Command Protection Control Statements for RACF

The following sample shows a command protection control statement in TBESAF99 format.

Note: Command protection statements for CA Tape Encryption console commands are defined in the OPERCMDS resource class and not in the CA@BES resource class.

BES  TYPE=COMMAND,NAME=DISPLAY
BES2  TYPE=COMMAND,NAME=RELOAD
BES2  TYPE=COMMAND,NAME=REFRESH.CAEKMAPI
BES7  TYPE=COMMAND,NAME=REFRESH.KEYRINGS

The following sample shows the resulting control statements generated by TBESAF99 for importing into IBM Security Server RACF. It defines the DISPLAY commands globally to all BES subsystems, the RELOAD commands to BES2, and the REFRESH=KEYRINGS command to BES7.

RDEF OPERCMDS BES.DISPLAY                                          

 OWNER(RACFOWNR)

RDEF OPERCMDS BES2.RELOAD                                          

 OWNER(RACFOWNR)

RDEF OPERCMDS BES2.REFRESH.CAEKMAPI 

 OWNER(RACFOWNR) 

RDEF OPERCMDS BES7.REFRESH.KEYRINGS                                

 OWNER(RACFOWNR)