FM/Db2 options specified in FMN2PARM

This section describes the FM/Db2 options specified in parmlib member FMN2PARM. You can modify these FM/Db2 options to suit your requirements.

The FMN2PARM member provides a secure location for sensitive FM/Db2 parameters used to control, for example, audit logging. FM/Db2 uses system macros to locate this member in the current logical parmlib concatenation, making it difficult to over-ride or bypass the contents, which can occur when using the FMN2POPT module. When used to specify SAF- rule controlled audit logging, particularly to SMF, a high level of integrity over the auditing process is possible. The FMN2PARM member can also be used to force the use of a particular version of the FMN2POPT module, by specifying a specific data set from which the module should be loaded. This can be used to prevent a knowledgeable user creating a private version of the FMN2POPT module and loading it from a data set allocated to their TSO session, thereby bypassing installation-specified parameters.

This section includes the description of the options that can be specified in the FMN2PARM member, followed by a description of the facilities that can be used to customize the FMN2PARM member. Customization is entirely optional, but might be necessary, for example, in a sysplex environment where not all z/OS® images have the same auditing requirements. It is also possible to specify different auditing options for different users using FMN2PARM statements; these changes can be made directly to the FMN2PARM member. When changes are made to the FMN2PARM member, no IPL is required and the changes become active the next time the user starts FM/Db2.