Pardon you? The DEBAPFIN is to mark a specific dataset APF, not the job step task. I use that bit setting in my SCVUPDTE TSO command to add a dynamic SVC from a library that needs to be APFed. I don't expect it to mark my job step task to be authorized except the time I set that bit knowing the fact that yes, I'm APF to set the bit just for the time to set DEBAPFIN in the DEB.
We have a SVC call that sets the JSCBAUTH bit and we use it on our test systems. It's a quick way to test code that needs authorization to do whatever. After testing, we do the ligetimate thing for the code to run in a APF library or set it up to use IKJEFSTR on Production or write a legit SVC call. In other words, we don't use the magic SVC call in production--just for testing. I see nothing wrong in that. The magic SVC requires the caller to have some RACF authority and limited to a chosen few in my shop that can code at that level. George Fogg -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Craddock, Chris Sent: Tuesday, April 15, 2008 4:16 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Authorized Rexx Assembler Function Binyamin said > :>That's all I've collected so far. Are there more ways? > > DEBAPFIN > > SVC screening. Pardon? Modifying the APF bit isn't going to do you any good in an address space that is already running since AC(1) is only relevant for job step tasks. You would have to already be running in key zero to alter it after the fact anyway, so chicken meets egg. Likewise with SVC screening; That requires building an SVC screening table in LSQA and storing the address of the SVC screen table in the TCB, so again it would require pre-conditioning by a key zero supervisor state program. AFAICT the OP wants to know how to run a Rexx exec in an authorized state so it can in turn call compiled code that requires authorization. Leaving aside the advisability of doing that, if it was going to require a serious amount of setup ahead of time, then why not just wrap the necessary functions inside of a PC or SVC and be done with it? CC ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
