On 12/18/2013 7:58 PM, Blaicher, Christopher Y. wrote:
The short answer is that any module loaded by an authorized program
must come from an authorized library.  Loaded modules don't have to
be authorized (AC=1), they just have to come from an authorized
library.  Now it gets more complicated.

I solved this problem a long time ago. First on OS/360 by having a special step account code, and on later (test) systems by having a utility program that authorizes the tasklib, then loads the needed program(s). RACF can keep it out of unwanted hands. It saves time and effort testing programs that need authorization, and it also has a ZAP function for testing. It's heavily modified code from Don Higgins that I found on the cbt tape, but I don't remember what he called it; his version only has the ZAP capability. The added code is:

         SPACE 1
APFSET   ICM   R7,15,TCBJLB  TEST STEPLIB PRESENCE
         BZ    APFQUIT       NO STEPLIB
         USING IHADCB,R7     DECLARE IT
         L     R7,DCBDEBAD   LOAD DEB FOR STEPLIB
         N     R7,=X'00FFFFFF'  FIX HIGH BYTE
         USING DEBBASIC,R7
         OI    DEBFLGS1,DEBAPFIN  TURN ON APF LIBRARY BIT

Gerhard Postpischil
Bradford, Vermont

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to