Specific Control Options › DRC—Detailed Error Reason Code Characteristics

DRC—Detailed Error Reason Code Characteristics

Valid on z/OS and z/VM.

Use the DRC control option to modify the characteristics of Detailed Error Reason Codes (DRCs).

This control option uses the Parameter file, O/S and TSS MODIFY commands entry methods.

This control option has the following format:

DRC(nnn,option,option...)

nnn

A three‑digit decimal number which represents the DRC being modified or listed. Hexadecimal equivalents appear in many messages and on violation reports in TSSUTIL. Do not use these equivalents.

Range: 001 to 159

AUDIT

Violation event is tagged with an audit attribute to allow TSSUTIL to select it with EVENT(AUDIT) as well as normal EVENT(VIOL).

NOAUDIT

Resets the AUDIT suboption.

FAIL

Violation causes CA Top Secret to terminate the access attempt in ALL modes.

NOFAIL

Resets the FAIL suboption.

FAILWARN

Violation causes CA Top Secret to terminate access attempts in WARN as well as FAIL or IMPL modes.

NOFAILWARN

Resets the FAILWARN option.

PW

Indicates that the violation is a password type violation, such as an invalid password entry, as opposed to an access violation such as an unauthorized resource access attempt.

NOPW

Resets the PW suboption.

NOVIOL

Do not treat event as a violation. Instead, flag the event, but do not FAIL the user.

VIOL

Resets the NOVIOL suboption.

Additional violation control can be performed in the installation exit via the VIOLATION call.