Enforcer uses an ISPF interface to generate baseline datasets and set corrective action execution options. In addition, they can be used to alter the current execution options. Monitor special authorized program privileges and modes granted by the Program Properties Table, Started Procedures Table and Facility Classes. Protect Critical Data, User Groups and Resources. Data on special volumes can be protected in the same way.
Enforcer applies the same kind of measures to critical user groups and systems resources.
Assure Correct Program Version Execution. Control Special User Privileges. This includes system and group level privileges. Block Misuse of Supervisor Calls. Enforcer identifies and blocks use of unauthorized SVCs closing one of the holes experts use to gain operating system-level authorization and control.