Operator Commands

MVS operator communication with the daemon is achieved using the z/OS Modify (F) command. All operator commands for the SAF Security Kernel are prefixed with SAF. For example: 

F jobname,SAF SSTAT

The available operator commands are:

Command Description
SHELP Display all possible SAF Kernel operator commands.
SLOGOFF userid Log an individual SAF User ID off from the security system. Any cached security checks for this user are discarded.
SNEWCOPY Restart the SAF Kernel, ensuring that all data held in its cache is flushed (the same as SREST). Additionally, reload SAFKRN and its dynamically loaded modules.
SREST Restart the SAF Kernel, ensuring that all data held in its cache is flushed. Any data held by the security system itself in the SAF Kernel address space is also flushed. The operation is transparent to all online and batch users.
SSHUT Perform an orderly shutdown of the SAF Kernel started task. This command should always be used to request an orderly termination. You may also use ADAEND, for example: 
F jobname,ADAEND
SSNAP hhhhhhhh Display a selected portion of the SAF Kernel's memory. Operation is not terminated.
SSTAT Display general statistics on the operator console for the SAF Kernel.
STRACE {0|1|2|3} Dynamically activate or deactivate SAF Kernel diagnostic tracing:

  • 0 – tracing is suppressed

  • 1 – only security violations are traced

  • 2 – only successful checks are traced

  • 3 – all checks are traced
SUSERS Display a list of active users.
SUSTAT userid Display statistics for a specified user.
SSIGTERM All active ENF Signal listeners are terminated. The use of SSIGTERM requires Adabas Limited Library (WAL) version 8.5 SP4 patch level 1 and above.