Previous Topic: APF-Authorized Programs

Next Topic: Program Comparison

Review Considerations

You should also review programs that reside in production libraries to ensure that the load module and control section (CSECT) sizes conform to data center standards. You should ensure that link‑edit dates agree with the dates on the change control forms. If any irregularities are discovered, decompile the module and request a “peer review” of the code.

The residency mode of each CSECT determines if the CSECT is compatible with 24‑ or 31‑bit addressing. The detail display of the Program Statistics Display shows you each CSECT’s residency mode.

The possible use of superzap on a production or system program is a potential security risk. Superzap can modify volume tables of contents (VTOCs) to remove the RACF indicator. Newer RACF versions do not use this indicator. Superzap can also modify data in production data sets stored on disk. The Program Statistics Display shows you if key z/OS system libraries or production programs were superzapped. When you find a program that was superzapped, you can also determine which CSECT of the program was affected.