Specific Control Options › FSACCESS—Enable or Disable FSACCESS Resource Class Checks

FSACCESS—Enable or Disable FSACCESS Resource Class Checks

Valid on z/OS.

Use the FSACCESS control option to enable or disable FSACCESS resource class checks that originate from the SAF component. The FSACCESS IBM z/OS feature added a security check for the FSACCESS resource class to verify user authority to access the file system objects on z/OS UNIX zFS. This support was added by IBM APARS OA35970/OA35974 at z/OS 1.12 and is included at base z/OS 1.13.

With the IBM feature installed, the resource class checks occur by default many times, so disabling the calls can help significantly reduce overhead.

All entry methods are accepted.

This control option has the following format:

FSACCESS(ENABLE|DISABLE)

ENABLE

Allows USS authorization requests to generate RACROUTE AUTH requests for the FSACCESS class. This value is the default value.

DISABLE

Prevents USS authorization requests from generating RACROUTE AUTH requests for the FSACCESS class.