Command Limiting the CP Spooling System

Command Limiting the CP Spooling System

CP spooling facilities maintain input and output files for access by virtual machines through unit record devices (printers, readers, punches, and consoles). Spooling gives all users access to real unit devices that are under the control of the spooling system. Below is a list of spool file commands that class D users can normally execute. Most companies enforce strict access controls to data files. Often, they do not carry this level of protection far enough (printed output that sits in the spool queue waiting to be printed).

This chapter includes:

• Guidelines for using CA ACF2 for z/ VM to control spool-related commands
• Suggestions for protecting the spool files
• Examples of actual command limiting rules to control spool-related commands.

This section contains the following topics:

CP Commands That Affect Spooling

Using Command Limiting to Protect Spool Files

Using Command Limiting to Protect the Spool Queue