Previous Topic: Selecting CP Commands for CA ACF2 for z/VM ValidationNext Topic: Writing Initial Command Limiting Rule Sets


Setting up Command Limiting Validation

If you write command‑limiting rules for ACFSERVE commands, you must grant all users authority to use the ACFSERVE QUERY STATUS command. You can do this by adding the following rule entry to the ACFSERVE rule set:

$KEY(ACFSERVE)
 QUERY STATUS UID(‑) ALLOW

Ensuring Models are Activated and Loaded

Command limiting models are activated through the MDLTYPE operand of the CMDLIM VMO record. There is one command model for each standard CP command. Each model describes the valid operands and combinations for a command. Change the MDLTYPE operand of the CMDLIM VMO record and compile the models. We provide models for standard CP commands. If you have developed unique CP commands, you can use CA ACF2 for z/VM to validate them. You must write a model to describe the command and its operands. See the Command and Diagnose Limiting Guide for complete details about writing models.