Quiescing RACF activity (MLQUIET option)

If you have the SPECIAL attribute, and MLSTABLE is in effect, you can prevent users other than SPECIAL users, console operators, and started procedures from logging on, starting new jobs, or accessing resources. This prevents them from using the RACROUTE AUTH, DEFINE, and VERIFY requests.

To do this, enter:

SETROPTS MLQUIET

To cancel this option, specify NOMLQUIET on the SETROPTS command.

Restriction: If SETROPTS MLSTABLE is not in effect, the SETROPTS MLQUIET command is ignored.

Note: Do not specify SETROPTS MLQUIET if any system sharing the RACF® database is not at the necessary software level for multilevel security support. For details, see z/OS Planning for Multilevel Security and the Common Criteria.

Use of the MLQUIET option can prevent a successful IPL of these systems. In addition, if no systems sharing the RACF database are capable of multilevel security, you might have to IPL with RACF inactive and update the database with the block update command (BLKUPD) in order to turn off the MLQUIET option.