SMF 1154 subtype 83: RACF compliance data record
Common header
The common header has the following information:
Name | (Filter) | Tag | CEF Name | Description |
|---|---|---|---|---|
SMF1154CAT | (EGNX) | Cat | cat | No description provided |
SMF1154STP | (Integer) | SubT | Record subtype as an integer | |
SMF1154STPD | (Mapped Integer) | SubText | Record subtype as text | |
SMF1154WID | (EGNX) | SSID | Subsystem identification | |
SMF1154_RACFHTNU | (Integer) | NumOfTriplets | Number of triplets | |
SMF1154_RT00001O | (Integer) | OffsetDataSec1 | Offset to first data section 1 (RACFSMRY) | |
SMF1154_RT00001L | (Integer) | LenDataSec1 | Length of a single data section 1 | |
SMF1154_RT00001C | (Integer) | CountDataSec1 | Count of RACFSMRY sections | |
SMF1154_RT00002O | (Integer) | OffsetDataSec2 | Offset to first data section 2 (RACFCRIT) | |
SMF1154_RT00002L | (Integer) | LenDataSec2 | Length of a single data section 2 | |
SMF1154_RT00002C | (Integer) | CountDataSec2 | Count of RACFCRIT sections | |
SMF1154_RT00003O | (Integer) | OffsetDataSec3 | Offset to data section 3 (RACFAPFL) | |
SMF1154_RT00003L | (Integer) | LenDataSec3 | Length of a single data section 3 | |
SMF1154_RT00003C | (Integer) | CountDataSec3 | Count of RACFAPFL sections | |
SMF1154_RT00004O | (Integer) | OffsetDataSec4 | Offset to data section 4 (RACFACTL) | |
SMF1154_RT00004L | (Integer) | LenDataSec4 | Length of a single data section 4 | |
SMF1154_RT00004C | (Integer) | CountDataSec4 | Count of RACFACTL sections |
Data section 1 (RACFSMRY)
Data section 1 ("RACF summary") is a non-repeating section that contains basic RACF configuration information and reports general RACF security settings. Information available in the RACFSMRY section follows:
Name | (Filter) | Tag | CEF Name | Description |
|---|---|---|---|---|
SMF1154_RACFLEN | (Integer) | LenSubSec1 | Length of this subsection RACFSMRY | |
SMF1154_RACFVSN | (Integer) | Ver | Version (X'01') | |
SMF1154_RACFEYEC | (EGNX) | EyeCatcher | Eye catcher: C'RACF' | |
SMF1154_RACFVMRC | (EGNX) | VerFMID | RACF version (FMID) | |
SMF1154_RACFMULP | StatusFlag | RACF status verification | ||
SMF1154_RACFMULV | Status | RACF status | ||
SMF1154_RACFBYPP | StatsFlag | RACF statistics verification | ||
SMF1154_RACFBYPV | StatsStatus | RACF statistics status | ||
SMF1154_RACFDRVP | DefUserFlag | RACF default user status verification | ||
SMF1154_RACFDRVV | DefUserStatus | RACF default user status | ||
SMF1154_RACFARAP | AuditFlag | RACF administrator auditing verification | ||
SMF1154_RACFARAV | (Mapped Integer) | AuditStatus | RACF administrator auditing status | |
SMF1154_RACFPSRP | PwdRuleFlag | Count of password rules verification | ||
SMF1154_RACFPSRV | (Integer) | CountPwdRules | Count of password rules | |
SMF1154_RACFSTXA | (EGNX) | SyntaxRules | RACF syntax rules | |
SMF1154_RACFPLCP | LowCaseFlag | Lower case characters in passwords verification | ||
SMF1154_RACFPLCV | LowCaseAllow | Lower case characters in passwords allowed status | ||
SMF1154_RACFPSCP | SpeCharFlag | Special characters in passwords verification | ||
SMF1154_RACFPSCV | SpeCharAllow | Special characters in passwords allowed status | ||
SMF1154_RACFPWXP | PwExitFlag | Password exit status verification | ||
SMF1154_RACFPWXV | PwExitStatus | Password exit status | ||
SMF1154_RACFPWIP | PwIntvlFlag | Password interval verification | ||
SMF1154_RACFPWIV | (Mapped Integer) | PwIntvl | Password interval | |
SMF1154_RACFPWMP | PwMinFlag | Password minimum lifetime verification | ||
SMF1154_RACFPWMV | (Integer) | PwMinLife | Password minimum lifetime | |
SMF1154_RACFHISP | PwHisFlag | Password history count verification | ||
SMF1154_RACFHISV | (Integer) | PwHisCount | Password history count | |
SMF1154_RACFRVKP | MaxFailPwFlag | Maximum failed password attempt verification | ||
SMF1154_RACFRVKV | (Integer) | MaxFailPwAtmpts | Maximum failed password attempts | |
SMF1154_RACFINAP | MaxPwInacFlag | Maximum password inactivity in days verification | ||
SMF1154_RACFINAV | (Integer) | MaxPwInacDays | Maximum password inactivity in days | |
SMF1154_RACFRVSP | RVARYSwFlag | Default RVARY SWITCH password use verification | ||
SMF1154_RACFRVSV | RVARYSwStatus | Default RVARY SWITCH password use status | ||
SMF1154_RACFRVTP | RVARYStFlag | Default RVARY STATUS password use verification | ||
SMF1154_RACFRVTV | RVARYStatus | Default RVARY STATUS password use status | ||
SMF1154_RACFPWEP | PwEncrypFlag | Password encryption verification | ||
SMF1154_RACFPWEV | PwEncryption | Password encryption | ||
SMF1154_RACFDPAP | ProtAllFlag | PROTECTALL(FAIL) status verification | ||
SMF1154_RACFDPAV | ProtAllStatu | PROTECTALL(FAIL) status | ||
SMF1154_RACFDGPP | GenProfFlag | Generic profiles status verification | ||
SMF1154_RACFDGPV | GenProfStatus | Generic profiles status | ||
SMF1154_RACFDUCP | CATDSNSFlag | CATDSNS in effect status verification | ||
SMF1154_RACFDUCV | CATDSNSStatus | CATDSNS in effect status | ||
SMF1154_RACFEOSP | ErasAllFlag | ERASE(ALL) status verification | ||
SMF1154_RACFEOSV | ErasAllStatus | ERASE(ALL) status | ||
SMF1154_RACFACEP | ACEECHKFlag | ACEECHK class status verification | ||
SMF1154_RACFACEV | ACEECHKStatus | ACEECHK class status | ||
SMF1154_RACFACRP | RACLISTFlag | ACEECHK class RACLISTed status verification | ||
SMF1154_RACFACRV | RACLISTStatus | ACEECHK class RACLISTed status | ||
SMF1154_RACFJALP | BATCHALLFlag | BATCHALLRACF status verification | ||
SMF1154_RACFJALV | BATCHALLStatu | BATCHALLRACF status |
Data section 2 (RACFCRIT)
Data section 2 ("RACF critical settings") is a possibly repeating section that reports on RACF critical settings. The RACFCRIT section contains information about resource profiles that are known to RACF and this information is critical to proper system function. Information available in the RACFCRIT section follows:
Name | (Filter) | Tag | CEF Name | Description |
|---|---|---|---|---|
SMF1154_RACFRINA | (EGNX) | ResName | Resource name | |
SMF1154_RACFRICL | (EGNX) | ClassName | Class name | |
SMF1154_RACFRIPM | ResultFlag | Meaningful results status | ||
SMF1154_RACFRIPX | ProfStatus | Profile exists status | ||
SMF1154_RACFRIUA | (Mapped Integer) | RACFCRIT_UACC | Flags for UACC keyword | |
SMF1154_RACFRIAS | (Mapped Integer) | RACFCRIT_AUDITQS | AUDIT success qualifier (AUDITQS) | |
SMF1154_RACFRIAU | (Mapped Integer) | RACFCRIT_AUDIT | Flags for AUDIT keyword | |
SMF1154_RACFRIAF | (Mapped Integer) | RACFCRIT_AUDITQF | AUDIT failure qualifier (AUDITQF) | |
SMF1154_RACFRIGU | (Mapped Integer) | RACFCRIT_GAUDIT | GAUDIT qualifier (GAUDIT) | |
SMF1154_RACFRIGS | (Mapped Integer) | RACFCRIT_GAUDITQS | GAUDIT success qualifier (GAUDITQS) | |
SMF1154_RACFRIGF | (Mapped Integer) | RACFCRIT_GAUDITQF | GAUDIT failure qualifier (GAUDITQF) | |
SMF1154_RACFRIWR | (Mapped Integer) | RACFCRIT_WARNING | Warning flag | |
SMF1154_RACFRIIS | IDUsage | ID(*) usage | ||
SMF1154_RACFRIIA | (Mapped Integer) | RACFCRIT_USERACS | ID(*) access |
Data section 3 (RACFAPFL)
Data section 3 ("RACF APF list") is a possibly repeating section that reports on APF-authorized programs. The RACFCRIT section contains information about data sets that are known to RACF, such as:
- APF authorized libraries
- Data sets used by RACF
- Data sets used by the RACF remote sharing facility (RRSF)
- Parmlib data sets
- Linklib data sets
Information available in the RACFAPFL section follows:
Name | (Filter) | Tag | CEF Name | Description |
|---|---|---|---|---|
SMF1154_RACFAINN | (EGNX) | DsnName | Data set name | |
SMF1154_RACFAINV | (EGNX) | Volume | Volume | |
SMF1154_RACFAINM | ResultStatus | Meaningful results status | ||
SMF1154_RACFAINX | ProfExistFlag | Profile status | ||
SMF1154_RACFAINU | (Mapped Integer) | RACFAPFL_UACC | Flags for UACC keyword | |
SMF1154_RACFAIWR | (Mapped Integer) | RACFAPFL_WARNING | Warning flag | |
SMF1154_RACFAIIS | IDStatus | ID(*) status | ||
SMF1154_RACFAIIA | (Mapped Integer) | RACFAPFL_USERACS | ID(*) access | |
SMF1154_RACFAITY | (Mapped Integer) | DataSetType | Data set type |
Data section 4 (RACFACTL)
Data section 4 ("RACF APF list") is a possibly repeating section that reports on the RACF authorized callers table. Information available in the RACFACTL section follows:
Name | (Filter) | Tag | CEF Name | Description |
|---|---|---|---|---|
SMF1154_RACFACTN | (EGNX) | ModuleName | Module name | |
SMF1154_RACFACTU | (Boolean) | AuthCode | Authority code set by RACROUTE REQUEST=LIST and RACROUTE REQUEST=VERIFY Indicates that the user has the OPERATIONS attribute and has used this authority to obtain access to the resource | |
SMF1154_RACFACTL | ModuleLoc | Module location |
The SMF field names and descriptions are derived from IBM z/OS System Management Facilities documentation.