General security system values

General security system values provide the cornerstone for your security policy.

General security system values allow you to set security function to support the decisions you made when developing your security policy. For example, in your security policy you state that systems containing confidential information, such as customer accounts or payroll inventories, need a stricter level of security than systems used for testing applications that are developed within your company. You can then plan and set a security level on these systems that corresponds with the decisions you made in your security policy.

• Security level system value
  This system value allows you to set the security level for the system.
• Retain server security
  This system value determines whether or not the security data needed by a server to authenticate a user on a target system through client-server interfaces can be retained on the host system.
• Share memory control
  This system value determines whether or not to allow access to shared memory, or use mapped memory stream files.
• Remote service attribute
  This system value allows you to analyze a system from an area other that where the system located.
• Remote power-on and restart
  This system value determines whether or not you will allow remote users to power-on and restart the system.
• Use adopted authority
  Adopted authority adds the authority of a program owner to the authority of the user running the program.
• Allow user domain objects
  This system value specifies whether to allow user domain objects and where these objects will be located.
• Authority for new objects
  This system value is used to determine the public authority for a newly created object.
• Scan file system
  This system value can be used to specify whether file systems should be scanned using the integrated file system scan-related exit programs.
• Scan file system control
  The scan file systems control system value controls the integrated file system scanning that is enabled when exit programs are registered with any of the integrated file system scan-related exit points.