SECCLS command operands

DESCRIPTION('cc......cc')

Describes the security class. DFSMSrmm uses the description you provide as the security class name. Specify a description between 1 and 32 characters.

Default: None. You must specify this operand.

ERASE(N|Y)

Specifies whether volumes must be erased on release. Y indicates volumes must be erased on released, and N indicates that they do not have to be.

You can use the DFSMSrmm utility EDGINERS to automatically erase and reinitialize tapes, or you can use your own method to erase them.

Default: ERASE(N)

Note: DFSMSrmm supports the use of the RACF 'erase on scratch' setting in DATASET profiles instead of using the SECCLS ERASE option. The support is only provided when TAPEAUTHDSN=YES is set in DEVSUPxx and the DATASET class is active.

MASK(,'dsname_mask')

Specifies a data set name mask used for assigning a security classification. You can specify multiple data set name masks separated by a comma. In addition to standard data set naming conventions, you can use these masking characters to create the data set name mask:

*

A single * represents a single qualifier of any number of characters.

a single * when used within a qualifier represents zero or more characters.

more than one single * can be used within a qualifier as long as a character precedes or follows the *.

.** represents zero or more qualifiers. At the end of the mask, it indicates to ignore any remaining characters.

** indicates to select all data sets.

% (percent_sign)

A place holder for a single character.

For example, you can specify MASK('USERID.**.CONF.**').

Default: You are required to specify this operand.

MESSAGE|MSG(N|Y)

Specifies whether to issue operator confirmation messages when a data set on a volume in this security class is opened. Specify Y to issue operator confirmation messages for this class, or N to suppress the messages. The message number is EDG4008A.

You can use this opportunity to perform any local operation procedures, such as adding a security sticker to a volume.

Default: MSG(N)

NAME(name)

Specifies a name for the security class. The name is used for reports and communication with users. Specify a value between 1 and 8 characters.

Default: None. You are required to specify this operand.

NUMBER(nnn)

Specifies a security classification number between 1 and 255.

The security classification numbers indicate relative levels of importance. Higher numbers mean higher levels of security. Your installation can assign more specific meanings to the numbers.

Default: None. You are required to specify this operand.

SMF(N|Y)

Specifies whether to write an SMF security record each time a tape data set in this class is opened. Y means to write an SMF record, and N means not to write it. See z/OS DFSMSrmm Reporting for information on using EDGAUD to produce a report for these SMF records.

Default: SMF(N)