DFSMS
DFSMS supports
storage management for DASD and tape. DFSMS has four components:
- DFSMSdfp controls data, DASD, and tape storage for the operating system. DFSMSdfp acts as the link between the processor and the storage devices to provide storage, data, and device management functions. DFSMSdfp is a base element of z/OS®.
- DFSMSdss provides functions including moving or copying data between volumes, managing DASD space, data backup and recovery, and converting data sets and volumes to system-managed storage. DFSMSdss is an optional feature of z/OS.
- DFSMShsm provides space management which improves DASD space usage, availability management, and application backup and recovery for disaster recovery purposes. DFSMShsm is an optional feature of z/OS.
- DFSMSrmm manages removable media resources, including tape cartridges and reels. DFSMSrmm is an optional feature of z/OS.
Where to find more information
- z/OS DFSMSdfp Diagnosis
- z/OS DFSMSdfp Storage Administration
- z/OS DFSMS Using the New Functions
- z/OS DFSMSrmm Managing and Using Removable Media
- z/OS DFSMSrmm Implementation and Customization Guide
- z/OS MVS Initialization and Tuning Guide
- z/OS MVS Initialization and Tuning Reference
- z/OS Security Server RACF Security Administrator's Guide
DFSMS provides
the following support for multilevel security:
- DFSMSdfp supports multilevel security, including the name-hiding function.
- DFSMSrmm uses resource profiles in the RACF® FACILITY, DATASET, and TAPEVOL classes to authorize access to information in the DFSMSrmm control data set about volumes and data sets. DFSMSrmm also supports the name-hiding function.
- DFSMShsm supports mandatory access control. It does not support the name-hiding function. DFSMShsm allows security administrators to control authorization to DFSMShsm storage administrator and user commands, using profiles in the RACF FACILITY class. For more information on the FACILITY class profiles, see z/OS DFSMS Using the New Functions.
- DFSMSdss supports mandatory access control. It preserves security labels when it dumps or restores zFS file systems. It does not preserve security labels when it dumps or restores MVS™ data sets. It does not support the name-hiding function.
- OAM functions in support of system-managed or automated manual tape libraries support multilevel security, because OAM's support is at the tape volume level versus the data set level.