RACF configuration

You must configure RACF® with certain options.

To conform with the evaluated configuration, configure RACF with the following options (using the RACF SETROPTS command):
  • CATDSNS(FAILURES)
  • CLASSACT(TEMPDSN)
  • ERASE(ALL)
  • GENERIC(*)
  • GRPLIST
  • JES(BATCHALLRACF)
  • NOCOMPATMODE
  • PASSWORD
  • PROTECTALL(FAILURES)
  • Labeled Security only: MLACTIVE(FAILURES)
  • Labeled Security only: MLFSOBJ(ACTIVE)
  • Labeled Security only: MLIPCOBJ(ACTIVE)
  • Labeled Security only: MLS(FAILURES)
  • Labeled Security only: MLSTABLE
  • Labeled Security only: SECLABELAUDIT
  • Labeled Security only: SECLABELCONTROL
All other RACF options are optional.