Implementing and Administering an Multilevel Secure System › Activating Security Levels, Categories, and Security Labels › Assigning Security Labels to Data Sets

Assigning Security Labels to Data Sets

In an MLS environment, an authorized security administrator can assign defined security labels to data sets.

The format of this command is:

TSS ADD|REMOVE(MLS) DSN(dsname)
                    SECLABEL(seclabel)
                    MODE(mode)

DSN(dsname)

Specifies the name of the dataset to be protected with a security label. The dsname can be the full dataset name or a prefix name and can contain any of the masking characters that are supported in CA Top Secret.

Seclabel(seclabel)

Specifies the alphanumeric-national character name of a security label. The security label must be predefined in the MLS record or it may be one of the system defined security label names.

Range: 1 to 8 bytes

Mode(mode)

Specifies the security mode under which security validation will be performed

To assign a security label to an existing data set, create an MLS record for it.

This example assigns security label, SYSLOW, to data set, SYS1.BRODCAST, and sets the mode to FAIL. When MLS is activated on the system, users who have entered the system with a security label of at least SYSLOW, would be able to access dataset SYS1.BRODCAST.

TSS ADD(mls) DSN(sys1.broadcast)
             SECLABEL(syslow)
             MODE(fail)