In addition to restricting access to individual zFS file systems, your installation might consider adding a top generic profile in the FSACCESS class to restrict access to all zFS file systems. The profile name might consist of two asterisks (**) as the MVS™ data set name. By defining and activating a top generic profile, you will disallow access for all users to any zFS file system that is not protected by another FSACCESS profile.

Important: Before implementing a top generic profile in the FSACCESS class, work with the z/OS® UNIX administrator and carefully plan your profile names and access lists.

RDEFINE FSACCESS ** UACC(NONE)