z/OS Security Server RACF System Programmer's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Selecting options with ICHSECOP

z/OS Security Server RACF System Programmer's Guide
SA23-2287-00

The ICHSECOP module enables you to select the number of resident data blocks (when you do not have a data set name table, ICHRDSNT.) It enables you to bypass RACF® initialization processing (and RACF is inactive) and you can disallow duplicate names for discrete data set profiles. These options are typically not needed and are not recommended. See RACF customization for options that are recommended.

This section describes the following options that you can specify in the ICHSECOP module:
  • Bypassing RACF initialization processing during IPL.
  • Selecting the number of resident data blocks (only if there is no data set name table).

    Guideline: Use the data set name table instead of the ICHSECOP module to control the number of resident data blocks. If you specify the number of resident data blocks in both the ICHSECOP module and the data set name table, RACF uses the figure in the data set name table.

  • Disallowing duplicate names for data set profiles.

RACF contains a module (ICHSECOP) that you must replace so you cn use these options. When you receive the module from IBM®, it is set so that RACF initialization processing is performed during IPL (and RACF is activated), ten data blocks are made resident, and duplicate data set profile names are allowed.

The module is used only during IPL. When you change the module, the changes are not effective until after the next IPL.

Module ICHSECOP contains 5 bytes of data, formatted as follows:
Byte Bit Description
Byte 0 Bit 0 Bypass RACF-initialization processing (when set on)
  Bit 1 Disallow duplicate names for data set profiles (when set on)
  Bits 2-7 Reserved for IBM's use
Bytes 1-4   The number of data blocks to be made resident

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014