RMF

The Resource Measurement Facility (RMF) helps you to manage the performance of your system by providing tools that monitor and report performance data.

Where to find more information

RMF does not perform mandatory access checks for objects it presents in tabular report displays, or hide data set names in reports. Monitor II SMF type 79 data and Monitor III set-of-samples data might contain data set names. If you are implementing the name-hiding function and want to protect data set names from being exposed by RMF, create profiles in the RACF® FACILITY class to protect the following resources:

ERBSDS.MON3DATA - controls access to set-of-samples data by controlling who can invoke the ERB3XDRS service
ERBSDS.MON2DATA - controls access to SMF type 79 data by controlling who can invoke the ERB2XDGS service.

If you do not define a profile to protect one of these resources, RACF does not restrict any user ID from invoking the service it protects.

Example: To allow only the user ID PERFMON to invoke the ERB3XDRS service and the ERB2XDGS service:

RDEFINE FACILITY ERBSDS.MON3DATA UACC(NONE)
RDEFINE FACILITY ERBSDS.MON2DATA UACC(NONE)
PERMIT ERBSDS.MON3DATA CLASS(FACILITY) ID(PERFMON) ACCESS(READ)
PERMIT ERBSDS.MON2DATA CLASS(FACILITY) ID(PERFMON) ACCESS(READ)
SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY)

You could also do this using a generic profile:

RDEFINE FACILITY ERBSDS.* UACC(NONE)
PERMIT ERBSDS.* CLASS(FACILITY) ID(PERFMON) ACCESS(READ)
SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY)