Security changes after upgrade to 2.4 ACF2 and XRXINT program from COMPUSET
Article ID: 246082
Updated On:
Products
Issue/Introduction
$KEY(CSR) TYPE(FAC)
BLSRHIPR.BLSR UID(E***xxxxxxxx) SERVICE(READ) ALLOW
after upgrade to z/os 2.4 resource changed from CSR.BLSRHIPR.BLSR to CSR.BLSRHIPR.
Environment
Release : 16.0
Component : ACF2 for z/OS
Resolution
facility resource should be csr.blsrhipr.blsr but after z/OS 2.4 upgrade
the resource was validated as csr.blsrhipr.
(note period and no suffix).
Suggested either rewriting rules or create a resource pre validation exit to complete
the name of the resource.
The program issuing the facility call is XRXINT which is supplied by COMPUSET
They have stated that this product is not supported under z/OS 2.4
Resource pre validation exit details in
https://techdocs.broadcom.com/us/en/ca-mainframe-software/security/ca-acf2-for-z-os/16-0/system-programming/user-exits/resource-prevalidation-exit-rscxit1.html
Feedback
