RACF - Rebuild SETROPTS command which was executed with SMF

newroad · New User Joined: 30 Oct 2015 Posts: 8 Location: India

I'm looking help on finding if it is possible to completely rebuild the SETROPTS command which was issued by SPECIAL user, using only SMF Records.

Any pointers would be helpful.

Joerg.Findeisen · Posted: Wed Mar 27, 2024 3:45 am

See RACF Report Writer (RACFRW) in the z/OS Security Server RACF Auditor's Guide

newroad · New User Joined: 30 Oct 2015 Posts: 8 Location: India

Hi Joerg,
Thanks for your response. I am actually interested in knowing how report writer does it, which record types it reads from etc. As I need to build the commands outside of mainframe without using Report Writer.

Thank you
NR

Joerg.Findeisen · Posted: Wed Mar 27, 2024 11:43 am

Have another look at https://www.ibm.com/docs/en/zos/3.1.0?topic=data-record-extensions#xrwustr

It describes the SMF Record 80 with the fields you are looking for.