On 1/5/2006 8:57 AM, [EMAIL PROTECTED] wrote:
FYI - the doc says the default module returns a 4.
The default module does return a 4. And it lives in SYS1.LINKLIB (where RACF won't use it), not SYS1.LPALIB. If you have one in SYS1.LPALIB you put it there yourself.
I recommend that you remove that one from SYS1.LPALIB. You might consider replacing it with one that sets return code 16, which will provide the best security.
Walt Farrell, CISSP z/OS Security Design, IBM ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html