Compare processing

Use comparison processing to detect and report on changes in security settings. For example, you can examine changes performed on userids or changes to systems. You can compare security settings on a single system or multiple systems. You can do this comparison by comparing values in a designated baseline security database source against another security database source or by comparing values in a designated baseline CKFREEZE file against another CKFREEZE file.

The comparison process identifies changes in selected comparison fields by comparing values in a designated baseline source against one or more current sources. The result is a set of records that match the selected comparison criteria.

You can set up your own compare process using the CARLa language statements and options for compare processing. For information about the comparison process, see Setting up and running a comparison using the COMPAREOPT statement.

In zSecure ISPF panels, the automatic comparison function uses CKRCARLA program default settings. As an alternative to using the zSecure ISPF panels, you can code a custom comparison by using the CARLa statement COMPAREOPT. The zSecure ISPF panels that support the comparison function include a Show differences selection. For panels with only a few selection criteria, the options are available on the selection panel:

Figure 1. Show differences options

Show differences
/  ADD  /  DEL  /  CHG+  /  CHG-  /  CHGu  _  SAME   _ BASE

For panels with many selection criteria, when you select Show differences, the following panel is displayed:

Figure 2. Show differences selection panel

                         zSecure - Show differences        
Command ===>  _________________________________________________________________                                                                  
                                                                                
Select the type(s) of difference for display                                    
_  ADD   Entries that were added into selected set                              
_  DEL   Entries that were deleted from selected set                            
_  CHG+  Changes that improve security                                          
_  CHG-  Changes that reduce security                                           
_  CHGu  Changes with effect on overall security unknown                        
_  SAME  Identical entries                                                      
_  BASE  Baseline records                                                       
                                                                                
                                                                                
                                                                                
Note: For comparing input sources, you need to select one baseline input set    
(by using the SETUP FILES C action command),                                    
and at least one regular main set (by using the SETUP FILES S action command)