Writing Diagnose Limiting Rules

Writing Diagnose Limiting Rules

CA ACF2 for z/VM diagnose limiting rules tell CA ACF2 for z/VM to validate a user’s authority to issue a diagnose instruction with a particular diagnose code. These rules let you protect specific diagnose codes. Each rule entry has the following elements:

• A description of the user that the rule applies to
• A description of the circumstances under which the rule is valid
• The type of access allowed (ALLOW, LOG, or PREVENT).

This chapter explains the process for implementing diagnose limiting and writing rules to protect diagnose codes.

This section contains the following topics:

Implementing Diagnose Limiting

Selecting Diagnose Codes for CA ACF2 for z/VM Validation

Setting up Diagnose Limiting Validation

Writing Initial Diagnose Limiting Rule Sets

Compiling and Storing Diagnose Limiting Rule Sets