Controlling Access to the Hierarchical File System › HFS Control Using the Native UNIX Security Model › Processes that Affect HFS Security › HFS FASTPATH Checking

HFS FASTPATH Checking

OMVS issues a SAF call at initialization that checks if access is authorized for OMVS to the FACILITY class resource BPX.SAFFASTPATH. When the IBMFAC(BPX.SAFFASTPATH) resource is defined (for example, TSS ADD(dept) IBMFAC(BPX.)), OMVS performs permission bit checking internally instead of calling the external security manager bypassing any audit trail of violations. This internal checking is FASTAUTH processing.

To activate FASTPATH checking for all users, enter:

TSS ADDTO(anydept) IBMFAC(BPX.SAFF)

To deactivate FASTPATH checking for all users, enter:

TSS REMOVE(anydept) IBMFAC(BPX.SAFF)

Do not give the STC ACID associated with the OMVS started task the NORESCHK attribute.