Previous Topic: Security Risks with Appendages

Next Topic: Reviewing Source Programs

Review Considerations

To ensure that I/O appendages are not subverting the system, you first need to ensure that the libraries that contain them are properly protected. z/OS requires that appendages be kept in SYS1.SVCLIB, SYS1.LPALIB, or any of the LPA libraries. The LPA Library Display (2.4.3) gives you the names of LPA libraries. Make sure these libraries are protected from unauthorized update. See the System Review Checklist for the specific tests you need to perform.