ACF2 equivalent of RACF requirements for IBM Apar OA51174

Products

• ACF2

Issue/Introduction

IBM toleration z/OS 2.4 Maintenance APAR OA51174 is required. The PTF requires action for use of use log stream subsystem exits with name other than IXGSEXIT, IFASEXIT, IFBSEXIT or DFHLGCNV. 

 

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Based on the IBM documentation 'OA51527: DOCUMENTATION UPDATES RELATED TO APAR OA51174' if a site does not use one of the log stream subsystem exit routines IXGSEXIT, IFASEXIT, IFBSEXIT or DFHLGCNV you will need to allow READ access(all users) to the FACILITY class resource IXGLOGR.SUBSYS.LSEXIT.exit_routine_name where exit_routine_name identifies the name of the log stream subsystem exit routine that you will be using.

For ACF2 the FACILITY class is protected by default and there is not ACF2 RDEFINE equivalent so you would just need to write the TYPE(FAC) resource rule. For example:

ACF
SET RESOURCE(FAC)
RECKEY IXGLOGR ADD( SUBSYS.LSEXIT.exit_routine_name UID(*) SERVICE(READ) ALLOW)
F ACF2,REBUILD(FAC)