Writing Resource Rules › Protecting IUCV, APPC/VM, and VMCF › Writing APPC/VM Resource Rules

Writing APPC/VM Resource Rules

You can initiate VMCF communication through VMCF AUTHORIZE and terminate it with VMCF UNAUTHORIZE. The path is controlled in exactly the same way as IUCV communication. The following rule allows a path connection. TLCPJM can issue a VMCF AUTHORIZE to communicate with TLCAMS. You must specify the initiator (TLCAMS) in the UID of the rule entry. You must specify the target (TLCPJM) as the $KEY value:

$KEY(TLCPJM) TYPE(VMC)
 UID(TLCAMS) ALLOW

Establishing and terminating the VMCF communication path is logged only if you specify the LOG access permission in the rule entry. If this is the case, CA ACF2 for z/VM creates an SMF record during the VMCF AUTHORIZE function (indicating VMCF path initiation) and during the VMCF UNAUTHORIZE function (indicating VMCF path termination).