I don't think that you have anything to worry about. The dsname you see in the IEF285I is not a temporary dataset in this context. That is, it does not actually exist on DASD under that name.
The JESSPOOL class should be all you need. HTH. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Nick Jealous Sent: Monday, January 31, 2011 9:52 AM To: [email protected] Subject: Protecting spool output datasets We want to be able to control output to SYSOUT datasets on the spool when accessed via SDSF. So for example we may want to allow access to the spool dataset assigned to a SYSPRINT DD statement and deny access to a spool dataset with a REPORT DD statement. I know that we can define relevant profiles in the JESSPOOL class as detailed in the SDSF customisation manual but the problem is associating the JES temporary dataset name with the DD statement it is used on. Unless the DSNAME parameter is coded on the output dataset the allocated JES temporary dataset will end with a ? for example the following JCL //TEST EXEC PGM=IEFBR14 //DD1 DD SYSOUT=X //DD2 DD SYSOUT=X //DD3 DD SYSOUT=X,DSNAME=&&DD3 causes the following to be allocated. IEF285I COSSNJ9.COSSNJ1B.JOB96806.D0000101.? SYSOUT IEF285I COSSNJ9.COSSNJ1B.JOB96806.D0000102.? SYSOUT IEF285I COSSNJ9.COSSNJ1B.JOB96806.D0000103.DD3 SYSOUT So if we add a DSNAME parameter to a spool dataset that we wish to protect this allows us to define a suitable RACF profile in the JESSPOOL class. My question is what is the best way of achieving this? Please assume that we do not wish to mass change the JCL in the production libraries using a source management package, a JCL tool such as JOBSCAN, JCLPREP, JCLCHECK etc, or an edit macro etc. This is a JES2 system at Z/OS 1.11 using RACF security. I think this can be done by using JES exit 4 and exit 40 to add a DSNAME parameter to JES output datasets as we see fit which would probably be to make the DSNAME=&&XX where XX is the DDNAME of the current JCL statement. I have down loaded some of the JES2 mods from the CBT tape but have not managed to find (it may of course exist) a suitable example to change. Any ideas on other ways of achieving this e.g. by mods to SDSF itself or using other exit points. Has anyone got a suitable exit they may be willing to share? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
