|
|
|
Exits pose the same threats to system security that APF‑authorized programs do, and they must be controlled in the same manner. To ensure that clandestine exits are not destroying the integrity of the system, first ensure that the libraries which contain them are properly protected. Exits are kept in many places. Some are kept in LPA libraries. Others are kept in linklist libraries. Some are linked into the system nucleus in SYS1.NUCLEUS.
For most system exits, the component and load module name provides an indication of where the exit resides. The COMPONENT field of the z/OS System Exit Display (3.3) names the system component that each exit belongs to. The exit’s description is also displayed. For example, the z/OS System Exit Display can list combinations of DFP, JES2, z/OS, SMF, and TSO components. All SMF exits are usually found in SYS1.LPALIB or the LPA libraries. TSO exits are normally kept in the linklist libraries, except for IKJEFLD, which is in the LPA libraries. z/OS exits other than those in SYS1.NUCLEUS usually reside in the LPA libraries
Due to the architecture of JES3, CA Auditor cannot locate JES3 exits. JES3 exits are located in private storage that CA Auditor cannot access.
In addition, CA Auditor cannot report on exits that are specified as parameters in the logical Parmlib. These exits are site‑specific. See the Technical Reference Guide for a list of these exits.
| Copyright © 2009 CA. All rights reserved. | Tell Technical Publications how we can improve this information |