Previous Topic: RACF

Next Topic: Detecting Logic Bombs

Writing Your Own Security Module

For additional protection, regardless of your security software, you can install a security validation module to front‑end your IEBCOPY and linkage editor utilities. This module would verify the conditions that invoke the utility and journal utility control statements for audit review. It could even prompt TSO users for confirmation of library update intent. To discourage tampering with the security module, you could place protected utilities in the pageable link pack area (PLPA) that is read‑only virtual storage instead of the disk‑resident system libraries. However, PLPA modules must be reentrant and your access control software must permit program path control from LPA.