Previous Topic: JES3 Parameters

Next Topic: JCL Library Search

JES2 Procedure Library Display

The z/OS procedure library (proclib) stores job control language for JCL procedure references and for console operator started tasks. Because SMF exits and access control software can affect processing, see the Usage Guide before you begin your review. This display (option 4.2) is available only on JES2 systems.

Auditor___________________________ Location___________________ Page____of____

Approved__________________________ CPU________________________ Date__________

Step

Description

W/P Ref

Finding

Remarks

1

Determine the date and time of the last IPL from the System Overview display (1.1).

To obtain the JES2 parameters specified at IPL, obtain a copy of the console log (SYSLOG) from the Operations staff and find the command the operator used to start JES2. It is in response to a HASP426 SPECIFY SYSTEM OPTIONS prompt and begins with S JES2.

We also recommend that you request a systems programmer or someone in operations issue the $DOPTSDEF JES2 command on the MVS console for you. The output of the $HASP820 message provides the HASPPARM value specified when JES2 was started, along with other information including the startup option (FORMAT, COLD, WARM) and startup type actually performed (FORMAT, COLD, and so on).

Doing both will provide a snapshot of how JES2 was started at IPL time and how it is currently running. Remember that under certain circumstances, it is possible to stop JES2 and restart it within the lifespan of an IPL.

 

 

 

2

Select the JES2 Proclib Display (4.2) to review the default proclibs.

If the S JES2 found in Step 1 was not followed by a comma and more information, then go on to Step 3.

Alternatively, you can use the HASPPARM value identified in the $HASP820 message if you have issued the $DOPTSDEF command. You can use whatever HASPPARM value was specified and enter that additional information in the field provided for optional parameters and press Enter. This updates the display to show the actual proclibs JES2 used instead of the defaults.

 

 

 

3

Use this Proclib display to prepare a work paper that notes the name and location of each procedure library.

Determine if adequate documentation is available that defines the purpose, use, and function of each proclib.

 

 

 

4

Use the Catalog (6.2), Volume File Scan display (6.3), or your access control software to determine if each proclib noted in Step 3 is protected from unauthorized access and modification.

 

 

 

5

Use the JES2 Proclib Display (4.2) to search for references to superzap (AMASPZAP, HMASPZAP, INCORZAP, and IMASPZAP). Note if the load libraries that are referenced for superzap are APF‑authorized.

 

 

 

6

Use the JES2 Proclib Display (4.2) to search for references to powerful restricted utilities, such as IEHDASDR, FDR, FDRDSF IEHATLAS, IEHINITT, ICKDSF, ADRDSSU, Resolve, and Omegamon. You should find these utilities only in libraries restricted from general access.

 

 

 

7

Use the JES2 Proclib Display (4.2) to search for the TIME=1440 parameter to detect jobs that can execute without time limits.

 

 

 

See the CA Auditor JCL Library Search Checklist items next for additional items to search for.