Implementing Ownable Resource Security › OS/DOS Data Set Protection

Previous Topic: Diagnose Code Protection

Next Topic: Steps to Implementing CP-level Protection

OS/DOS Data Set Protection

CA Top Secret does not automatically protect OS/DOS data sets except in FAIL mode. In order to give default protection to OS/DOS data sets in any other mode, you must attach the DEFPROT attribute using the TSS REPLACE(RDT) command function.

CA Top Secret protects all defined (meaning “owned”) OS/DOS data sets through the FACILITY control option SIOCHK: FAC(VM=SIOCHK)

Note: Caution should be used when initially implementing this feature. In DORMANT mode with the SIOCHK option specified, CP level OS/DOS data set protection may deny access to a resource (or fail an I/O request) if it is unable to determine the resource being accessed.