Hi Paul, You can set the audit bits on the directory such that no ICH408I message and SMF record will be generated for a read, write, and/or execute/search access violation. To view the audit bits, enter command "ls -W directory-name". You will see two sets of three bits, the first being for Owner and second being for Auditor. By default, the audit bits are set to fff---, where f is failures (i.e., violations) and - is null (i.e., neither successes nor failures). Much like permission bits, the positions in each set are for read, write, and execute/search events. Use the chaudit command to change the bits. For example, to remove failures auditing for execute/search, enter "chaudit x-f directory-name". To change the Owner audit bits if you are not the Owner, you must be Superuser. To change the Auditor bits, you much have RACF AUDITOR authority.
Regards, Bob Robert S. Hansel 2024 IBM Champion Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel www.rshconsulting.com -----Original Message----- Date: Fri, 8 Nov 2024 21:04:29 GMT From: "esst...@juno.com" <esst...@juno.com> Subject: Suppressing a Very Specific Instance of ICH408I Hello - .I have been looking at the MPF and IEAVMXIT, and don't see that its specific enough for what I want to suppress -These Exits seem to be too generic -I would like to suppress a very specific instance of ICH408I message when a specific uss directory is identified in the message -AGAIN we don't want to suppress every instance of ICH408I - We only want to suppress a specifc instance of ICH408I with a specific USS (UNIX) directory is identified -.ANy way I can do this, MPF and IEAVMXIT isn't specific enough as far as I can tell -.paul ......................... ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
