Controlling Access to the Hierarchical File System › Secure HFS Functions

Secure HFS Functions

In addition to file access security, HFS functions can also be secured. These functions can be a system action, such as setting a ptrace or a job’s priority, or they can be file‑related, such as changing the file mode or audit settings.

A system function is secured by a rule in the IBMFAC class, while a file‑related function is secured by a combination of an IBMFAC class rule and a HFS file resource rule. By following this approach, changes to file attributes can be permitted at a global basis, or restricted to a particular file.

The resource name format for HFS IBMFAC rules is: .BPX.CAHFS.function

Example: HFS function security

This example secures HFS functions:

TSS PER(USER01) IBMFAC(BPX.CAHFS.function)
                ACCESS(READ)