IBM GC28-1920-01 Server User Manual


 
For more information on SMF records, see
OS/390 Security Server (RACF) Macros
and Interfaces
.
Figure 23 (Page 2 of 2). Changes to SMF Records
Record
Type
Record
Field
Description of Change Support
80 Relocate
65
For event code 2, this SMF record
contains flags indicating the ACEE type:
Unauthenticated client
Authenticated client
Server
OS/390
OpenEdition
DCE
80 Relocate
315
For event codes 28, 29, 30, 31, 32, 33,
34, 41, 44, 47, 48, 54, 55, 56, 57, 63, and
64, this SMF record contains a link value
to connect client and server audit records.
OS/390
OpenEdition
DCE
80 Relocate
316
For event codes 28, 29, 30, 31, 32, 33,
34, 41, 44, 47, 48, 54, 55, 56, 57, 63, and
64, this SMF record contains flags
indicating the ACEE type:
Unauthenticated client
Authenticated client
Server
OS/390
OpenEdition
DCE
Auditing New OS/390 OpenEdition MVS Services
RACF provides two new audit function codes (99 and 100) to audit two new
OS/390 OpenEdition MVS services: a new console communications service (CCS)
and a new workload manager (WLM) service. Creation of the audit records is
controlled by the existing PROCESS class. Customers that are not already
auditing the PROCESS class must issue SETROPTS AUDIT(PROCACT) to obtain the
new SMF records, where
option
is ALWAYS, NEVER, SUCCESSES, FAILURES,
or DEFAULT. Customers that are already auditing the PROCESS class
automatically receive the new SMF records. These customers might see an
increase in the number of SMF records that RACF writes during OpenEdition
processing.
RACF also provides three new audit function codes (95, 96, and 97) to audit the
passing of access rights from one process to another. Creation of the audit records
is controlled by the existing PROCACT class. Customers that are not already
auditing the PROCACT class must issue SETROPTS LOGOPTIONS(option(PROCACT))
to obtain the new SMF records, where
option
is ALWAYS, NEVER, SUCCESSES,
FAILURES, or DEFAULT. Customers that are already auditing the PROCACT
class automatically receive the new SMF records. These customers might see an
increase in the number of SMF records that RACF writes during OpenEdition
processing.
46 OS/390 V1R2.0 Security Server (RACF) Planning: Installation and Migration