IBM OS/390 Server User Manual


 
set that is RACF-protected by a discrete profile must
also be RACF-indicated.
RACROUTE macro. An assembler macro that
provides a means of calling RACF to provide security
functions. See also
AUDIT request,
AUTH request,
DEFINE request,
DIRAUTH request, EXTRACT request,
FASTAUTH request,
LIST request,
SIGNON request,
STAT request, TOKENBLD request,
TOKENMAP
request,
TOKENXTR request,
VERIFY request,
and
VERIFYX request
.
remote logical unit (remote LU). See
partner logical
unit (partner LU)
. These two terms are interchangeable.
remote node. An RRSF node that is logically
connected to a node from whose point of view you are
talking. For example, if MVSX and MVSY are two RRSF
nodes that are logically connected, from MVSX's point
of view MVSY is a remote node, and from MVSY's point
of view MVSX is a remote node. See also
local node
,
target node
.
Resource Access Control Facility (RACF). An
IBM-licensed product that provides for access control by
identifying and verifying users to the system, authorizing
access to protected resources, logging detected
unauthorized attempts to enter the system, and logging
detected accesses to protected resources.
resource profile. A profile that provides RACF
protection for one or more resources. User, group, and
connect profiles are not resource profiles. The
information in a resource profile can include the data
set profile name, profile owner, universal access
authority, access list, and other data. Resource profiles
can be discrete profiles or generic profiles. See
discrete
profile
and
generic profile
.
root. (1) The starting point of the file system. (2) The
first directory in the system. (3) See
appropriate
privileges
.
RRSF. See
RACF remote sharing facility
.
RRSF logical node connection. Two RRSF nodes
are logically connected when they are properly
configured to communicate via APPC/MVS, and each
has been configured via the TARGET command to have
an OPERATIVE connection to the other.
RRSF network. Two or more RRSF nodes that have
established RRSF logical node connections to each
other.
RRSF node. One or more MVS system images with
MVS/ESA 4.3 or later installed, RACF 2.2 installed, and
the RACF subsystem address space active. See also
RRSF logical node connection
.
S
SAF. System authorization facility.
security. See
data security
.
security classification. The use of security
categories, a security level, or both, to impose
additional access controls on sensitive resources. An
alternative way to provide security classifications is to
use security labels.
SFS. Shared file system
shared file system (SFS). A part of CMS that lets
users organize their files into groups known as
directories and selectively share those files and
directories with other users.
shell. (1) In OpenEdition MVS, a program that
interprets and processes interactive commands from a
pseudoterminal or from lines in a shell script. (2) A
program that interprets sequences of text input as
commands. It may operate on an input stream, or it
may interactively prompt and read commands from a
terminal. Synonymous with
command language
interpreter
. (3) A software interface between a user
and the operating system of a computer. Shell
programs interpret commands and user interactions on
devices such as keyboards, pointing devices and
touch-sensitive screens and communicate them to the
operating system. (4) The command interpreter that
provides a user interface to the operating system and
its commands. (5) The program that reads a user's
commands and executes them. (6) The shell command
language interpreter, a specific instance of a shell.
(7) A layer, above the kernel, that provides a flexible
interface between users and the rest of the system.
(8) Software that allows a kernel program to run under
different operating system environments.
SIGNON request. The issuing of the RACROUTE
macro with REQUEST=SIGNON specified. A SIGNON
request is used to provide management of the
signed-on lists associated with persistent verification
(PV), a feature of the APPC architecture of LU 6.2.
single-system RRSF node. An RRSF node consisting
of one MVS system image.
SMF records. See
RACF SMF data unload utility
.
STAT request. The issuing of the RACROUTE macro
with REQUEST=STAT specified. A STAT request
determines if RACF is active and, optionally, whether a
given resource class is defined to RACF and active.
The STAT request replaces the RACSTAT function.
structure. See
cache structure
.
44 OS/390 V2R4.0 Security Server (RACF) Planning: Installation and Migration