z/OS Security Server RACF System Programmer's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


GENLIST processing

z/OS Security Server RACF System Programmer's Guide
SA23-2287-00

The GENLIST operand on the SETROPTS command improves performance by copying generic profiles from the RACF® database. The profile copies are put in an extended common storage area (ECSA). Using GENLIST saves real storage because generic profiles are not duplicated in each user's address space. I/O is required only once to bring them into storage for all address spaces to use, instead of each address space needing to perform the I/O.

RACF uses these profile copies to check the authorization of any user who wants to access a resource the profiles protect, if RACF does not find a discrete profile for the resource in the RACF database.

To activate GENLIST processing, a user with the SPECIAL attribute issues the SETROPTS command:
SETROPTS GENLIST(classname...) CLASSACT(classname...)

Use SETROPTS GENLIST when the class contains a small number of frequently referenced generic profiles.

If you issue a SETROPTS GENLIST on one system, that action is propagated to other systems that share the RACF database. You do not need to issue the SETROPTS GENLIST command separately for each system.

In-storage profiles for the following classes supplied by IBM® can be shared by using SETROPTS GENLIST:

  • APPL
  • CPSMOBJ
  • DASDVOL
  • DCEUUIDS
  • DSNR
  • FACILITY
  • FIELD
  • GXFACILI
  • ILMADMIN
  • INFOMAN
  • JESJOBS
  • KEYSMSTR
  • LOGSTRM
  • PRINTSRV
  • RACFEVNT
  • RRSFDATA
  • SDSF
  • TERMINAL
  • TMEADMIN
  • VMBATCH
  • VMCMD
  • VMDEV
  • VMLAN
  • VMMDISK
  • VMNODE
  • VMRDR
  • VMSEGMT
  • XFACILIT

Generic profiles for the DATASET class will continue to be created within each address space and chained off the ACEE.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014