Security changes after upgrade to 2.4 ACF2 and XRXINT program from COMPUSET

Products

• ACF2 - z/OS
• ACF2
• ACF2 - MISC

Issue/Introduction

After upgrade to z/OS 2.4, the resource name for the ACF2 validation changed from CSR.BLSRHIPR.BLSR to CSR.BLSRHIPR. How can the validation be changed back to the way it was?

$KEY(CSR) TYPE(FAC)
BLSRHIPR.BLSR UID(uid for user) SERVICE(READ) ALLOW

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

The FACILITY resource should be CSR.BLSRHIPR.BLSR but after z/OS 2.4 upgrade the resource was validated as CSR.BLSRHIPR.
(note period and no suffix).

It is suggested to either rewrite the ACF2 rules or create a Resource Prevalidation Exit to complete the name of the resource.

The program issuing the facility call is XRXINT which is supplied by COMPUSET and they have stated that this product is not supported under z/OS 2.4.