Coding Each AOF Rule Type › Security Rules › AOF Variables Available in an SEC Rule › OPAU Variables for OPSCMD and ADDRESS OPER Security Events

OPAU Variables for OPSCMD and ADDRESS OPER Security Events

The following variables are available for OPSCMD and ADDRESS OPER security events:

SEC.AUOCBULN

The command buffer length

Data Type: Integer, read-only

Sample Value: 6

SEC.AUOCCMBU

The command buffer string

Data Type: Character, read/write

Source: Command text from OPSCMD or ADDRESS OPER

Sample Value: P OPSS

Notes:

• Security rules can set this variable. The modified command text buffer then executes the actual command.
• CA OPS/MVS initially sets this variable from the command buffer that the user entered.
• Each rule triggered by the same security event can examine and reset this variable before passing it on to the next rule executed for this event.
• If multiple security rules set this variable, CA OPS/MVS uses the value set last.

SEC.AUOCCMLN

The current command verb length

Data Type: Integer, read-only

Source: The de-aliased verb string type

Sample Value: 7

SEC.AUOCCMSR

The current command verb

Data Type: Character, read-only

Source: The de-aliased command verb from OPSCMD or ADDRESS OPER

Sample Value: STOP

SEC.AUOCCNNM

Console name, or blank if no console name is specified

Data Type: Character, read-only

Source: The NAME or CONNAME keywords from OPSCMD or ADDRESS OPER

Sample Value: MASTER

SEC.AUOCDLTM

The delay time in seconds

Data Type: Integer, read-only

Source: The contents of the DELAY keyword on the OPSCMD or ADDRESS OPER command

Sample Value: 10

Note: The SEC.AUOCDLTM value will be a number between 1 and 300 seconds.

SEC.AUOCORSY

The MSFID of the system where the command originated

Data Type: Character, read-only

Sample Value: MFSSYSA

Notes:

• If the command originated in the local system, then this variable contains a null value (zero length).
• If the command was sent to this system through MSF as a result of the SYSTEM keyword of OPSCMD or ADDRESS OPER, or if the OPSCMD was imbedded in an OPSRMT command that was issued on another system, then this variable contains the name of the origin system.
• If OPSRMT is used to run a REXX EXEC on another system, and that EXEC uses ADDRESS OPER or OPSCMD, then the command is considered to have originated on the system where the OPSRMT was issued; hence this variable contains the name of the origin system.

SEC.AUOCRQTY

The type of command OPSCMD or ADDRESS OPER is processing

Data Type: Character, read-only

Source: OPSCMD or ADDRESS OPER determines the command type as follows:

• The command is an IMS command if the IMSID keyword was entered or if the command character matches the IMS command character
• If JES3 is running and the command starts with an asterisk (*) or the number eight, the command is a JES3 command
• The command is a VM command if it begins with #CP
• If the command meets none of the above criteria, it is treated as a z/OS command

Possible Values:

• M-MVS command entered
• 3-JES3 command entered
• V-VM command entered
• I-IMS command entered

Sample Value: M

SEC.AUOCSYID

The remote/local system ID string

Data Type: Character, read-only

Source: The value entered using the OPSCMD or ADDRESS OPER SYSID keyword

Sample Value: SYSA