|
- The basic syntax for a policy statement that updates
a check should look something like this:
ADDREPLACE POLICY STMT(statement_name) UPDATE CHECK(check_owner,
check_name) options REASON(’reason_for_change’) DATE(yyyymmdd)
The
ADDREPLACE POLICY statement is identified by the statement name defined
in the STMT parameter. If you have already defined a policy statement
with the same name, the system replaces it with the new policy statement,
as long as the DATE specified is more current than the existing one.
For this reason, be careful when you specify ADDREPLACE with a policy
statement name that already exists, because you'll most likely be
overwriting the old policy statement with your new one.
- Make all checks low severity except for UNIX System Services checks:
ADDREPLACE POLICY STMT( LOW ) UPDATE CHECK(*,*)
SEVERITY(LOW) (’Make all checks low severity to start’) DATE(20061130)
ADDREPLACE POLICY STMT( USSMED ) UPDATE CHECK(IBMUSS,*)
SEVERITY(MEDIUM) REASON(’Make all USS checks medium severity’) DATE(20061130)
- Policy statement LOW makes all checks
low severity
- Policy statement USSMED then makes
the UNIX System Services checks
medium severity
- Update the severity value for all IBMGRS checks:
ADDREPLACE POLICY STMT(POL4) UPDATE CHECK(IBMGRS,*)
SEVERITY(HIGH) REASON('change policy') DATE(20050901)
The
system applies the values to all: - Existing IBMGRS checks
- New IBMGRS checks added later
These same values will be applied to all IBMGRS checks every
time they are refreshed or added.
- Apply the following changes to all checks:
- Apply a severity of HIGH
- Apply a WTO type of IMMEDIATE
- Use additional descriptor code 16
- Use routing codes 126,127
ADDREPLACE POLICY STMT(POL3) CHECK(*,*) UPDATE SEVERITY(HIGH)
WTOTYPE(IMMEDIATE) DESCCODE(16) ROUTCODE(126,127)
REASON(Updating all my checks) DATE(20050920)
- Delete a check:
ADDREPLACE POLICY STMT(DEL1) DELETE Check(IBMRACF,RACF_GRS_RNL)
We
recommend that you delete checks in your policy, see Why does my check reappear after I delete it? Understanding delete processing for details.
|