Re: Verify APF libraries

2014-10-21 Thread Peter Relson
Consider the case of placing a load library of mostly installation-written COBOL batch programs into the LNKLST to avoid having to code perhaps thousands of //STEPLIB or //JOBLIB statements in the nightly batch run. Would you really want those programs to be APF-authorized? Of course not, but

Re: Verify APF libraries

2014-10-21 Thread Elardus Engelbrecht
Barry Merrill wrote: -A flag in RACF Unload file (RAC900: USS RACF BASIC RECORD) APF CHAR 4 APF BIT ON? Sorry, I don't find it in my RACF books. Not in SMF unload or RACF unload chapters either. Where is that documented? Just curious if you don't mind, please. Two

Re: Verify APF libraries

2014-10-21 Thread Walt Farrell
On Tue, 21 Oct 2014 07:13:50 -0500, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: Barry Merrill wrote: -A flag in RACF Unload file (RAC900: USS RACF BASIC RECORD) APF CHAR 4 APF BIT ON? Sorry, I don't find it in my RACF books. Not in SMF unload or RACF unload

Re: Verify APF libraries

2014-10-21 Thread Elardus Engelbrecht
Walt Farrell wrote: He's referring to the type 0900 database unload record created by the IRRHFSU utility from the RACF Downloads page at http://www-03.ibm.com/systems/z/os/zos/features/racf/downloads/irrhfsu.html Yes! That is that! Many thanks for kindly helping out. I totally forgot about

Re: Verify APF libraries

2014-10-20 Thread John McKown
My first attempt would be to see if any module not in the actual APF list is marked as APF. You can do this rather easily by browsing each library in ISPF option 1, then doing a SORT APF D on the command line. But this doesn't guarantee that some other APF linked program does not do a LINK or LOAD

Re: Verify APF libraries

2014-10-20 Thread R.S.
W dniu 2014-10-20 o 18:56, gsg pisze: We're making the change from LNKAUTH=LNKLST to LNKAUTH=APFTAB. We've compared what is in LINKLIST to what is in APFLIST and came up with a list of datasets that are not in APFLIST, but could need to be APF-Authorized. Is there an easy way to determine

Re: Verify APF libraries

2014-10-20 Thread Bob Shannon
We're making the change from LNKAUTH=LNKLST to LNKAUTH=APFTAB I'm curious why you are making this change. I view LNKAUTH=LNLKST as a godsend. Bob Shannon Rocket Software Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ +1

Re: Verify APF libraries

2014-10-20 Thread Paul Peplinski
An audit? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Verify APF libraries

2014-10-20 Thread Mark Zelden
On Mon, 20 Oct 2014 17:41:44 +, Bob Shannon bshan...@rocketsoftware.com wrote: We're making the change from LNKAUTH=LNKLST to LNKAUTH=APFTAB I'm curious why you are making this change. I view LNKAUTH=LNLKST as a godsend. In general, it seems auditors frown upon that option. I've had

Re: Verify APF libraries

2014-10-20 Thread John Eells
0053fe88ed35-dmarc-requ...@listserv.ua.edu (gsg) wrote: We're making the change from LNKAUTH=LNKLST to LNKAUTH=APFTAB. We've compared what is in LINKLIST to what is in APFLIST and came up with a list of datasets that are not in APFLIST, but could need to be APF-Authorized. Is there an

Re: Verify APF libraries

2014-10-20 Thread Barry Merrill
The only references to APF status that I can find in all records processed by MXG, SMF and others are: -A flag in RACF Unload file (RAC900: USS RACF BASIC RECORD) APF CHAR 4 APF BIT ON? Two fields in SMF 92 subtype 15 (TY9215: OMVS EXTENDED SECURITY CHANGES) SMF92ANA