The print command/PF*/Print sequence shows the physical screens and line numbers start/end for each screen.
Save the ISPF.LIST dataset (KEEP NEW) and that should suffice. Our external auditors ask for a RACF SETROPTS LIST, similar kind of request and of course it could be fudged. Currently trying to convince another team that z/OS has Unix and have people who can SUDO (SU) and gasp that started tasks run as UID(0). They usually start with "Well I understand Windows security, but? " On Thu, Feb 18, 2021 at 12:58 PM Clark Morris <[email protected]> wrote: > [Default] On 17 Feb 2021 11:18:10 -0800, in bit.listserv.ibm-main > [email protected] (Carmen Vitullo) wrote: > > >you took the words right out of my mouth, I told our team auditor rep to > ask them, "how to we use ISRDDN and provide the output you require", > unfortunately this person is afraid to rock the boat, I on the other hand > had some good teachers and was taught I need to be a pain, be a fly in the > ointment ! > > > Based on this thread, I seriously doubt that these auditors are > capable of doing a competent job of assessing risk. You could spoof > ISRDDN by using a STEPLIB in the logon PROC. I would trust a console > display of D PROG,APF,ALL more. Incidentally what is the status of > modules? They remind me of an auditor who in the 1980s after being > told we had effectively no security (by me and then my boss who put it > in management terms) was more concerned with the fact we were running > JES3 on a single computer system. It might be worthwhile to research > this company. > > Clark Morris > > > >Carmen Vitullo > > > > > > > >-----Original Message----- > > > >From: Lizette <[email protected]> > >To: IBM-MAIN <[email protected]> > >Date: Wednesday, 17 February 2021 1:09 PM CST > >Subject: Re: Anyway to save ISRDDN output? > > > >Then I would go back and say > > > >Please provide your tool to do this, as you do not want to trust one of > mine > > > > > > > >-----Original Message----- > >From: IBM Mainframe Discussion List <[email protected]> On Behalf > Of Carmen Vitullo > >Sent: Wednesday, February 17, 2021 11:59 AM > >To: [email protected] > >Subject: Re: Anyway to save ISRDDN output? > > > >Lizette, you are absolutely correct and this is one of the options I > provided, the only problem, the HITRUST contractor(s) tell us what > commands, what tools to use to provide them what they require. > >they require us to use ISRDDN, any other tool or command, in their eye's > can be spoofed, faked > > > >Carmen Vitullo > > > > > > > >-----Original Message----- > > > >From: Lizette <[email protected]> > >To: IBM-MAIN <[email protected]> > >Date: Wednesday, 17 February 2021 12:49 PM CST > >Subject: Re: Anyway to save ISRDDN output? > > > >Why not go to SDSF APF and list there? > > > >Or maybe in SDSF use CK and go to APF Health Check details. > > > >You can use either depending on what your Auditors need. > > > >The APF in SDSF can probably be captured with an ISFEXEC function. > > > >Lizette > > > > > > > >-----Original Message----- > >From: IBM Mainframe Discussion List <[email protected]> On Behalf > Of Carmen Vitullo > >Sent: Wednesday, February 17, 2021 7:45 AM > >To: [email protected] > >Subject: Anyway to save ISRDDN output? > > > >We have a HI TRUST requirement to use ISRDDN (only) to report on APF > datasets and other system information. Is there a way to invoke ISRDDN and > save the output to a dataset? > >We've tried ISRDDN APF then save but it does not provide the APF info I > requested. reading the find manual I don't see any options to allow us to > save the output, any ideas? > >thanks > > > >---------------------------------------------------------------------- > >For IBM-MAIN subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO IBM-MAIN > > > >---------------------------------------------------------------------- > >For IBM-MAIN subscribe / signoff / archive access instructions, > >send email to [email protected] with the message: INFO IBM-MAIN > > > >---------------------------------------------------------------------- > >For IBM-MAIN subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO IBM-MAIN > > > >---------------------------------------------------------------------- > >For IBM-MAIN subscribe / signoff / archive access instructions, > >send email to [email protected] with the message: INFO IBM-MAIN > > > >---------------------------------------------------------------------- > >For IBM-MAIN subscribe / signoff / archive access instructions, > >send email to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- Wayne V. Bickerdike ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
