Special Security Records

CA Top Secret has reserved or special ACIDs that are pre-defined and maintain resource and attribute information. These include:

ALL Record: Identifies resources that are globally accessible to all signed on users.
APPCLU Record: Stores the names and security requirements of the logical units (LUs) involved in APPC conversations.
Audit Record: Stores the resource names that are to be audited.
Data Lookaside Table (DLF): Controls the loading of selected data sets into ESA hyperspace by selected jobs. With the proper authority and keywords, CA Top Secret can identify and control those data sets and jobs valid for DLF.
Delegate Record: Contains delegate resource definitions. Each definition specifies a resource class and entity name used in nested ACEE processing.
Facility Matrix Table: Contains all the facilities defined to CA Top Secret. Each entry contains information about the specific attributes associated with a particular facility (like VM, TSO, and so on), and can be viewed and modified with the FACILITY control option.
Field Descriptor Table (FDT): Defines fields (classes) that can be attached to ACIDs within the Security File. Each field description contains a field name, field code, and field attributes.
MLS Delegate: Contains SECLABEL, CATEGORY, and SECLEVEL records, which are the hierarchical elements of multi-level security.
Node Descriptor Table (NDT): Contains all CPF, LDAP, LINUX, and PassTicket application and session key-related node information. The NDT is a global record similar to the Resource Descriptor and Field Descriptor Tables.
Resource Descriptor Table (RDT): Contains pre-defined resource classes. Each resource class is identified by a unique keyword and has certain attributes associated with it.
Started Task Table (STC): Stores all started task procedure names and the ACIDs associated with them. CA Top Secret offers security protection for all required STC definitions or only for STCs that reference sensitive data or affect system integrity.
Static Data Table (SDT): Contains record elements that you can use to control which users have access to certain resources.