Data Labeling

The z/OS NFS server supports the RACF Data Labeling option MLNAMES (also known as name-hiding). For more details on this option, see z/OS Security Server RACF Security Administrator's Guide.

This option is activated by RACF command:

  SETROPTS MLNAMES

and is deactivated by RACF command:

  SETROPTS NOMLNAMES

When this option is active MVS data set names will be hidden from NFS users who do not have at least READ access to the data sets. Therefore, it may change the contents of an MVS data set index list produced by the ls -l command.

Note:

The z/OS NFS server supports this option only in saf or safexp SECURITY mode.
This function only applies to MVS data set access, not to z/OS Unix file access.
The name-hiding function can degrade system performance because it requires authorization checks for every object for which a non-SPECIAL user attempts to list the name.