System Installation Choices › APF-Authorized Libraries › Controlling APF Authorization › Hierarchical File System (HFS)

Hierarchical File System (HFS)

In addition, it is possible for APF-authorized programs to reside within the UNIX System Services (USS) Hierarchical File System (HFS). Because this is a completely different file structure than standard PDS and PDSE-based libraries, the standard IEAAPFxx and PROGxx controls do not pertain to HFS files. The BPXPRMxx logical Parmlib member, along with the SET OMVS command, controls USS operational characteristics.

For a HFS program to be considered APF-authorized, the following must be true:

• The program itself must have the APF extended attribute set by the program binder.
• The file system in which the program itself is contained must be mounted with the SETUID attribute set. If the file system is mounted with NOSETUID that file system is said to be uncontrolled and the APF extended attribute is therefore not honored.
• Optionally, the AUTHPGMLIST control can designate a list of APF-authorized pathnames and program names.

For further details about these BPXPRMxx and SET OMVS-based controls, see the IBM z/OS MVS Initialization and Tuning Reference and IBM z/OS UNIX System Services Planning.