Use the VMTAPE MOUNT SYSTEM rule to control who can mount a tape volume created on a z/OS system in a shared TMC environment. The rule can also be used in a z/VM shared TMC environment where users from one system do not exist on the other. Because these rules do not relate to resources owned by a z/VM user ID or group, they are valid in the SYSTEM override and default rules files only.
{ACCEPT | REJECT} requester VMTAPE MOUNT "Parms" [("Options"]
Parms:
SYSTEM {VOLUME volser | DSN dsname} [access]
Options:
[DAY dayname[-dayname]] [EXPIRE mm/dd/yy [hh:mm:ss]] [GROUP] [LOGPASS | NOPASS] [TIME hhmm hhmm]
Accepts or rejects the CA VM:Tape MOUNT request controlled by this rule.
Defines the set of requesting user IDs this rule is to govern. When specified without the GROUP option, requester is a user ID. Enter an asterisk (*) for requester to specify all user IDs. When specified with the GROUP option, requester is the name of a security group. Enter an * for requester to specify all user IDs in all security groups.
Specifies the tape volume to which the rule applies. The volser variable specifies a volume created on another system in a CA VM:Tape shared TMC environment. You can specify asterisk (*) for this rule to apply to all SYSTEM volumes.
Unless your tape volumes will not expire, caution should be used in using VOLUME to specify the target. The tape volumes can expire, become scratched, be re-used, and can contain data that you do not want users to have access to. If you use the VOLUME parameter and the volumes are not permanent, be sure to have a mechanism in place to change the rule when the tape volume expires.
Specifies that the rule applies to any tape volume owned by another system with a data set name dsname in the CA VM:Tape shared TMC. The software issues the request based on DSN regardless of which volume the DSN resides on. You can use an asterisk (*) for dsname to specify all data set names.
Defines the type of tape mount access to which the rule is to apply. Valid values are READ, WRITE, and asterisk (*). A rule with an access value of * or WRITE applies to both read and write mounts. The default access type depends on the type of rule. The default access for an ACCEPT rule is for read mounts. The default access for a REJECT rule is for read and write mounts.
Note: The DAY, EXPIRE, GROUP, LOGPASS, NOPASS, and TIME options are explained in Common Rule Options.
|
Copyright © 2014 CA.
All rights reserved.
|
|