z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Security labels for tapes

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

To add a security label of LABEL1 to the profile of tape volume 123456, enter:
RALTER TAPEVOL 123456 SECLABEL(LABEL1)

When a user creates data sets on tape volume 123456, the user should ensure that each data set has the same security label (LABEL1) as was specified on the RALTER command that defined the tape volume.

Note: When the SECLABEL class is active, and both the SETROPTS MLS(FAILURES) and SETROPTS MLACTIVE options are in effect, the security label of the tape volume profile is used for all data sets on the volume. For tape volume profiles without TVTOCs, the security label is assigned when the tape volume profile is defined. Tape volume profiles with TVTOCs are assigned a security label when the first data set is written to the tape.
To delete the security label from the volume's profile (for example, when a user has finished working with a tape volume), issue the RALTER command rather than the RDELETE command with the NOSECLABEL operand. For tape volume 123456, enter the command as follows:
RALTER TAPEVOL 123456 NOSECLABEL

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014