I coded a TYPE(TGR) resource rule for OMVS supplemental groups and the rule does not appear to be working. What could cause this?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

SERVICE keyword in TYPE(TGR) rules cannot be used.

 

 

Environment

Release: ACF2..001AO-15-ACF2
Component:

Resolution

SERVICE granularity is not available with TYPE(TGR) resource rules. Since service is part of the rule "environment" for ACF2 rule checking, that line would be ignored for all rule validations. So SERVICE should not be used in TYPE(TGR) resource rules.

TYPE(TGR) resource rules only have the ability to ALLOW or PREVENT access to the resource.