How can an ACF2 Resource rule be compiled and stored using TSO ACF commands?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

How can an ACF2 Resource rule be compiled and stored using TSO ACF commands?

Environment

Release:
Component: ACF2MS

Resolution

There are two methods of compiling and storing a rule with TSO, ACF commands.

The first method utilizes the RECKEY Subcommand. The RECKEY subcommand assists security administrators in maintaining rule sets and compiled infostorage rule records. This subcommand allows the user to decompile, add, delete or modify a rule entry, recompile, and store the updated rule set with one command. This command can be used in any ACF mode that handles compiled records and it executes on other CPF-defined nodes.

For example the following TSO, ACF RECKEY commands compiles and stores
the $KEY(*AUTH*.IRR_VIRTUAL_KEYRING.LST) resource rule:

SET RESOURCE(RDA)
RECKEY *AUTH*.IRR_VIRTUAL_KEYRING.LST add( UID(-) SERVICE(READ) ALLOW)

Details on the RECKEY subcommand can be found in the ACF2 documentationin section "RECKEY Subcommand".

The second method utilizes the COMPILE and STORE subcommands. The COMPILE subcommand lets you enter the control statements and rule entries at the 
terminal. Follow this sequence:

- Type COMPILE and Press ENTER, a prompt with a period is returned.
- Type the $KEY and $TYPE control statements first. Press ENTER.
- Type each additional control statement on a separate line beginning in 
   column two. Press ENTER.
- Type each rule entry on a separate line, one line at a time. Press ENTER.
- If a rule entry is longer than 72 characters, type a dash at the end of 
  the line to indicate that the entry continues on the next line.
- Press ENTER when you reach the end of each rule entry.
- Type END and press ENTER (or hit ENTER twice) to signal the end of the rule.
- Type STORE and Press ENTER to store the rule.

For example the following TSO, ACF COMPILE and STORE commands compiles and stores the $KEY(*AUTH*.IRR_VIRTUAL_KEYRING.LST) resource rule:

SET RESOURCE(RDA)
COMPILE                                                           
 ACF70010 ACF COMPILER ENTERED                                 
                                                               
 .  $KEY(*AUTH*.IRR_VIRTUAL_KEYRING.LST) TYPE(RDA)             
 .   UID(-) SERVICE(READ) ALLOW                                
 .            
                                                 
 ACF70051 TOTAL RECORD LENGTH= 150 BYTES, 3 PERCENT UTILIZED   
 RESOURCE  
store    
 ACF60029 RESOURCE  *AUTH*.IRR_VIRTUAL_KEYRING.LST STORED                                                             

Details on the COMPILE and STORE subcommands can be found in the ACF2 documentation in section "Create Resource Rule Sets/Compiling at the 
Terminal" .