563W

<num> NOSORT specified ‑ check rule entry order carefully

Reason

You specified the NOSORT keyword for the rule set and $NOSORT is specified in the RULEOPTS VMO record, meaning the NOSORT keyword is allowed. The compiler does not sort the rule set. This will have a major effect on how CA ACF2 for z/VM interprets rules. The variable <num> is the sequence number from the input rule where CA ACF2 for z/VM found the keyword. If the input is from the terminal, this field is not present.

Action

Check the rule sequence carefully to determine if the rules control access. It is possible to have a less specific rule before a more specific one, which will prevent the more specific rule from ever being matched.