On 12/18/2013 7:58 PM, Blaicher, Christopher Y. wrote:
The short answer is that any module loaded by an authorized program
must come from an authorized library. Loaded modules don't have to
be authorized (AC=1), they just have to come from an authorized
library. Now it gets more complicated.
I solved this problem a long time ago. First on OS/360 by having a
special step account code, and on later (test) systems by having a
utility program that authorizes the tasklib, then loads the needed
program(s). RACF can keep it out of unwanted hands. It saves time and
effort testing programs that need authorization, and it also has a ZAP
function for testing. It's heavily modified code from Don Higgins that I
found on the cbt tape, but I don't remember what he called it; his
version only has the ZAP capability. The added code is:
SPACE 1
APFSET ICM R7,15,TCBJLB TEST STEPLIB PRESENCE
BZ APFQUIT NO STEPLIB
USING IHADCB,R7 DECLARE IT
L R7,DCBDEBAD LOAD DEB FOR STEPLIB
N R7,=X'00FFFFFF' FIX HIGH BYTE
USING DEBBASIC,R7
OI DEBFLGS1,DEBAPFIN TURN ON APF LIBRARY BIT
Gerhard Postpischil
Bradford, Vermont
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN