Using the TBESAF99 Utility to Generate Security Profiles › Sample TBESAF99-Generated Control Statements for CA ACF2 › Sample Utility Protection Control Statements for CA ACF2

Sample Utility Protection Control Statements for CA ACF2

The following sample shows a UTILITY protection control statement in TBESAF99 format. The first statement will protect the TBESHOW display utility in the BES3 subsystem. The second utility statement will protect the sensitive TBEKMUTL (Key Maintenance Utility) for all users on BES4.

BES3 TYPE=UTILITY,NAME=TBESHOW

BES4 TYPE=UTILITY,NAME=TBEKMUTL

The following sample shows the resulting utility protection control statements generated by TBESAF99 for importing into CA ACF2.

//*+------ Define BES3 Utilities ----+
//ACFBATCH EXEC PGM=ACFBCOMP,REGION=1M
//SYSUDUMP DD SYSOUT=*
//SYSPRINT DD SYSOUT=*
//RULES    DD  *
$KEY(BES3.UTILITY.TBESHOW) TYPE(BES)
$OWNER(BES     )
 UID(uid-value) ALLOW
 UID(uid-value) PREVENT
/*
//*+------ Define BES4 Utilities ----+
//ACFBATCH EXEC PGM=ACFBCOMP,REGION=1M
//SYSUDUMP DD SYSOUT=*
//SYSPRINT DD SYSOUT=*
//RULES    DD  *
$KEY(BES4.UTILITY.TBEKMUTL) TYPE(BES)
$OWNER(BES     )
 UID(uid-value) ALLOW
 UID(uid-value) PREVENT
/*