Re: PTF Object Manifests?

[PaulMmn <PaulMmn@xxxxxxxxxxxxx>]

We've explained to our auditors that the PTFs are in a list that 
comes from IBM, and that we have no way of knowing what is being 
fixed or updated.   We note that we 'blindly' apply the PTFs as 
recommended by IBM; we don't pick and choose.

And we let them know that we try to let the PTFs 'age' on IBM's vine 
before we apply them on any of our systems.

We have an LPAR that runs our flashcopy backups, and we update that 
LPAR before the PTFs get to our test box.

Then we also do as Roger does, and apply the PTFs to our test box, 
let them 'age' a bit, then apply the PTFs to our production box.

We've been fortunate that they accept this, and don't push for anything deeper.

--Paul  E  Musselman

ps-- I think we had some E&Y types asking those questions!

.


At 9:41 PM -0500 8/1/19, Ron Adams wrote:
> We had an odd request by auditors to verify objects changed by PTFs.
> Is there an easy way to do this? I see there is an API (QPZRTVFX), but I
> was hoping for something more standardized like an already existing CMD.
> I suppose we could capture the log messages when we apply fixes, but that
> only helps us for the future. We need to show past changes right now.
> --
> Ron Adams