I have resource rules under type FSE that only show up under LIST LIKE(-). Why?
search cancel

I have resource rules under type FSE that only show up under LIST LIKE(-). Why?

book

Article ID: 14504

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC PanApt PanAudit

Issue/Introduction

I can list like(-) but can't list SYS1 or SYS2 explicitly 

l like(-) 
 RESOURCE RULE SYS1 STORED BY SECADMIN ON 02/27/17-23:01 
 $KEY(SYS1) TYPE(FSE) 
HFS.- UID(*) LOG 
ZFS.- UID(ABC) ALLOW 
ZFS.- UID(XYZ) ALLOW 
ZFS.- UID(*) LOG 
 TOTAL RECORD LENGTH= 390 BYTES, 1 PERCENT UTILIZED 

RESOURCE RULE SYS2 STORED BY SECADMIN ON 02/22/17-23:00 
 $KEY(SYS2) TYPE(FSE) 
-.HFS.- UID(*) LOG 
-.ZFS.- UID(ABC) ALLOW 
-.ZFS.- UID(*) LOG 
 TOTAL RECORD LENGTH= 341 BYTES, 1 PERCENT UTILIZED 

RESOURCE 
l sys1 
 RECORD(S) NOT FOUND 
 RESOURCE 
l sys2 
 RECORD(S) NOT FOUND 



I have resource rules under type FSE that only show up under LIST LIKE(-).  Why?

Environment

Release:
Component: ACF2MS

Resolution

The ptf added a CLASMAP record that looks like this:



  MUSASS         RESOURCE      TYPE    ENTITY     PROFINT     LOG  MIXED    EXTERNAL     POSIT   SIGNL



    ID                  CLASS         CODE   LENGTH                                                            VALUE       



 ========   ========    ===   ======  =======   === ===== ======== ===== =====



 



********         FSEXEC         FSE       44                                     MIX                        599  



 



Notice the case is mixed or case sensitive.



You need to do the list command in UPPERCASE to display these rules.



LIST SYS1



LIST SYS2

Additional Information

The resource check for the FSEXEC rule will be made on a z/OS 2.2 system    

and higher, when the FSEXEC class has been defined in the INFODIR or RESDIR 

GSO records and the record has been refreshed.  The resource check is done  

via RACROUTE FASTAUTH which requires rules in directories.   If the FSEXEC class is not defined in the INFODIR or RESDIR, then the call is not made.                  

 

This support was added in ACF2 r16 with ptf RO91933.