ACF2 : HFS rule to create symbolic in root

Products

• ACF2 - z/OS

Issue/Introduction

I want to create a symbolic link in root, however getting a security violation

ln -s /'$SYSNAME'/CES /CES

getting a security violation for /CES

RHFS-/CES                                       *VIO  RHFS-/CES                       
xxxxXXXXXX              userid sys ACF9CFAT NO-REC      -     DIRECTRY ADD        
yy.nnn dd/mm hh.mm XXXXXX   XXXXXX   surname,firstname             0   8   0   0  16      
SAF RESOURCE CLASS HFSSEC                                                             
                                                                                      
RESOURCE NAME: /CES                                                                   

just wondering if best solution will be a rule /*******

 

 

Environment

Release : 16.0

Resolution

The violation is for add access to resource /CES.
You could write the rule for /CES (to allow for this particular link)
or you can specify the masked rule /******* to allow for ANY future symbolic link.

The following knowledge document provides details of LINK rules and what might be required.

Please see the resolution rather than the problem description.

Unexpected behavior with HFSSEC rules and Symbolic links after deleting ACF2 rules

Additional Information

Unexpected behavior with HFSSEC rules and Symbolic links after deleting ACF2 rules