Writing Command Limiting Rules › Writing Initial Command Limiting Rule Sets

Writing Initial Command Limiting Rule Sets

Write the command limiting rules before you implement CP command limiting for selected commands. Write one rule set for each CP command subject to command limiting validation. Each rule set is identified by the CP command name.

The initial command limiting rule sets can be general, like this one:

$KEY(SPOOL) MDLTYPE(440)
‑ ALLOW

The following rule logs each command execution. These loggings provide a more specific view of who uses the command and how it is used. With this information, you can write a more specific rule set.

$KEY(SPOOL) MDLTYPE(440)
‑ LOG

The MDLTYPE parameter lets you have different command limiting rule sets on the database. It lets you have separate rules for new and changed CP commands and also provides for separate rule sets for multiple systems sharing the same database. The MDLTYPE parameter must correspond to the MDLTYPE of the CMDLIM VMO record. The following rule set lets you use the CP SPOOL command on the test system.

$KEY(SPOOL) MDLTYPE(TST)
- ALLOW