Marcy,

As others have suggested, what commands are in which classes is less the issue than what commands specific users can issue.  That's what auditors should be asking for (especially since Wells Fargo holds my home mortgage!).

Nonetheless, someone posted the following command which may be of use.  It sure helped us find a command override that kept getting changed at IPL time (it as defined twice in SYSTEM CONFIG, the second specification override the first).  And it's a handy addition to the Sysprog Toolbox!

Mike Walter                                                          

Hewitt Associates                                                    
Any opinions expressed herein are mine alone and do not necessarily represent the opinions or policies of Hewitt Associates.            

* CMDTABLE EXEC
* Description:  Find out all the IBM classes of the system commands
* Operation: Use the COMMANDS command and LOCATE CMDBK to find the
*            current priv. classes of all CP commands.
* Files used:
*   Output: CPCMD PRIVC A, CPDIAG PRIVC A
* Notes:  Must be run from an authorized user  */
/*%COPYRIGHT (C) Copyright IBM Corporation 1998 */

Address Command
'PIPE CP Q PRIVCLASS *',
  '| strip',
  '| xlate',
  '| find CURRENTLY:' ||,
  '| not chop after blank',
  '| var curclasses'
Call diag 8,'SET PRIVCLASS * *'   /* All classes */

buf=65536                         /* Buffer value for diag 8        */

'PIPE (end /)',
    'CP' buf 'COMMANDS',
 '|  deblock fixed 12',
 '|  strip',
 '|  nfind DIAG' ||,
 '|  nfind QUERY' ||,
 '|  nfind SET' ||,
 '|  spec "LOCATE CMDBK" 1 1-* nw',
 '|  CP' buf,
 '|  nfind Command' ||,
 '|  nfind ------------' ||,
 '|  spec w1 1 "IBMCLASS=" 35 w4 next "PRIVCLASS=" 47 w5 next',
 '|m:merge 1-14',
 '|  > CPCMD PRIVC A',
,
 '/  CP' buf 'LOCATE CMDBK SET SUBCMD *',
 '|  nfind Subcommand' ||,
 '|  nfind ------------' ||,
 '|  locate w3 "*"',
 '|  spec "SET" 1 "SUBCMD" 15 w1 nw "IBMCLASS=" 35 w4 next',
         '"PRIVCLASS=" 47 w5 next',
 '|m:',
,
 '/  CP' buf 'LOCATE CMDBK QUERY SUBCMD *',
 '|  nfind Subcommand' ||,
 '|  nfind ------------' ||,
 '|  locate w3 "*"',
 '|  spec "QUERY" 1 "SUBCMD" 15 w1 nw "IBMCLASS=" 35 w4 next',
         '"PRIVCLASS=" 47 w5 next',
 '|m:',
,
 '/  CP' buf 'LOCATE CMDBK QUERY V SUBCMD *',
 '|  nfind Subcommand' ||,
 '|  nfind ------------' ||,
 '|  change 1.9 "         "<Generic>"',
 '|  locate w3 "*"',
 '|  spec "QUERY VIRTUAL" 1 "SUBCMD" 15 w1 nw "IBMCLASS=" 35 w4 next',
         '"PRIVCLASS=" 47 w5 next',
 '|m:'

'PIPE CP' buf 'QUERY DIAG ALL',
  '| drop 1',
  '| nfind ----' ||,
  '| change 1.4 "0000"----"',
  '| strip leading 0',
  '| change 1.4 "----"   0"',
  '| spec w1 1.4 right "PRIVCLASS=" nw w4 next',
  '| > CPDIAG PRIVC A'

Call diag 8,'SET PRIVCLASS * ='curclasses
Exit




"Marcy Cortes" <[EMAIL PROTECTED]>

Sent by: "The IBM z/VM Operating System" <IBMVM@LISTSERV.UARK.EDU>

08/22/2006 04:31 PM

Please respond to
"The IBM z/VM Operating System" <IBMVM@LISTSERV.UARK.EDU>


To
IBMVM@LISTSERV.UARK.EDU
cc
Subject
CP Privilege classes





Is there a way to list all the commands in a given class?  Or does it
appear in the manual in that order?  

Darn auditors.

Marcy Cortes


This message may contain confidential and/or privileged information.  If
you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein.  If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message.  Thank you for your cooperation."


 
The information contained in this e-mail and any accompanying documents 
may contain information that is confidential or otherwise protected 
from disclosure. If you are not the intended recipient of this message, 
or if this message has been addressed to you in error, please 
immediately alert the sender by reply e-mail and then delete this message, 
including any attachments. Any dissemination, distribution or other use of 
the contents of this message by anyone other than the intended recipient 
is strictly prohibited.

Reply via email to