Previous Topic: Diagnose Code ProtectionNext Topic: Steps to Implementing CP-level Protection


OS/DOS Data Set Protection

CA Top Secret does not automatically protect OS/DOS data sets except in FAIL mode. To give default protection to OS/DOS data sets in any other mode, you must attach the DEFPROT attribute by using the TSS REPLACE(RDT) command function.

CA Top Secret protects all defined (meaning “owned”) OS/DOS data sets through the FACILITY control option SIOCHK: FAC(VM=SIOCHK).

Note: To enable CP-level OS/DOS security, include an OPTIONS ({19}) entry in the parameter file. Caution should be used when initially implementing this feature. In DORMANT mode with the SIOCHK option specified, CP-level OS/DOS data set protection might deny access to a resource (or fail an I/O request) if it is unable to determine the resource being accessed.