DIRMAINT needs to do additional RACF commands when creating a new virtual machine

DIRMAINT needs to do additional RACF commands when creating a new virtual machine. This is useful in a RACF environment using sitewide SECLABELs for mandatory access control. The commands affected would be DIRM ADD. An additional operand of SECLABEL <seclabel name> would do it. Or perhaps a RAC <command> option expressed as keyword/value pair?

Idea priority

Urgent

Post comment

Admin

Kerry Wilson

Reply
| Jul 13, 2023

Hi David, I received this response from the DirMaint development team:

This is something that can be accomplished with an Exit. One can write a DVHXUN EXEC exit which gets called by DirMaint ADD processing (along with additional user related commands). The documentation can be found in the DirMaint Tailoring and Administration Guide, Chapter 9, Exit Routines. At the beginning of the chapter is a section titled, 'Command and Exit Routine Interactions', which describes how specific commands interact with user-created exit routines. For the ADD command, add any additional RACF calls for the added user to the DVHXUN (User Change Notification Exit) EXEC, which is described on page 180. We also provide a DVHXUN sample exec on the 7VMDIRx0 2C2 disk which contains the framework for the user exit.

To activate the user exit, the following line would need to be added to the CONFIGxx DATADVH configuration override file:

USER_CHANGE_NOTIFICATION_EXIT= DVHXUN EXEC

0 reply Hide replies

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.

Shape the future of IBM!

Search existing ideas

Post your ideas

Specific links you will want to bookmark for future use

DIRMAINT needs to do additional RACF commands when creating a new virtual machine

Please enter your email address

RELATED IDEAS

DIRMAINT needs to do additional RACF commands when creating a new virtual machine