|
|
|
The JES2 Proclib Display also shows all potential proclibs. Any partitioned data set in the JES startup JCL can be designated as a proclib if a JOBPARM statement refers to it. Even libraries that do not have a fixed 80‑byte record format can be used as proclibs. You should scan each of the libraries shown in the display, even if they are not intended for use as proclibs.
Assigning different proclibs to different job classes in JES by the JES parameter specifications is another exposure that is frequently overlooked. Because of STEPLIB and JOBLIB statements, this can mean that different versions of the same program are used, depending on which job class is selected. See the JES Parms Displays to determine which proclibs are assigned to which job classes.
Most security experts recommend protecting all proclibs from unauthorized update. It does little good to protect production JCL if the proclibs are vulnerable to uncontrolled modification. Because a job can use a JES JOBPARM statement to access any proclib, all proclibs should be treated as a group for access control purposes.
| Copyright © 2009 CA. All rights reserved. | Tell Technical Publications how we can improve this information |