z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Steps for changing a POSIT value of an existing dynamic class

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

Perform the following steps to change the current POSIT value of an existing class:
  1. Execute the following command to list the SETROPTS options for all classes.
    SETROPTS LIST
    Record all active system options for the class that you want to change.

    ______________________________________________________________________

  2. Examine all dynamic and static CDT entries to see if any other existing class shares the current POSIT value or the new POSIT value.
    • If no other existing class shares the current POSIT value, use the SETROPTS command to deactivate all options associated with the class you want to change to ensure that any new class will not have unexpected options if you add a new class using that POSIT value in the future. For example, if the SETROPTS options CLASSACT, STATISTICS, GENERIC and GENCMD are active for the class, you would issue the following command to deactivate those options.
      SETROPTS NOCLASSACT(classname) NOSTATISTICS(classname) 
         NOGENERIC(classname) NOGENCMD(classname)
    • If another existing class shares the current POSIT value, do not use the SETROPTS command to deactivate any SETROPTS option associated with the class you want to change because this would turn off the SETROPTS option for all classes sharing the POSIT value. In this case, proceed to Step 3 without making any changes.

    ______________________________________________________________________

  3. Change the POSIT value.
    RALTER CDT classname CDTINFO(POSIT(new-posit-value))

    ______________________________________________________________________

  4. Refresh the CDT class on all systems that will use the changed class.
    SETROPTS RACLIST(CDT) REFRESH

    ______________________________________________________________________

  5. Activate the desired SETROPTS options, using the SETROPTS LIST output from Step 1 as reference, assuming for this example that SETROPTS options CLASSACT, STATISTICS, GENERIC, and GENCMD were previously active for the class you changed.
    • If an existing class does not share the new POSIT value, issue the following command to reactivate those options.
      SETROPTS CLASSACT(classname) STATISTICS(classname)
         GENERIC(classname) GENCMD(classname)
    • If an existing class shares the new POSIT value, all of the same RACF® processing options that were in effect for the shared class are automatically in effect for the class you changed, with the exception of the SETROPTS RACLIST option.
      Rules:
      1. If you want SETROPTS RACLIST active for a changed class, you must execute the SETROPTS RACLIST command after you change the class to build its new associated dataspace. If the class was RACLISTed before the POSIT change, add the REFRESH option to rebuild the dataspace.
        SETROPTS RACLIST(classname) REFRESH
      2. If SETROPTS GENLIST is active for the changed class, you must execute the SETROPTS GENERIC REFRESH command after you change the class to refresh its associated in-storage profiles.
        SETROPTS GENERIC(classname) REFRESH

    ______________________________________________________________________

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014