Threats and Exposures › Address Space Security Bypass

Address Space Security Bypass

z/OS allows for the total bypass of data set security and is activated within the Program Properties Table. (Certain vendor programs also use this feature.) A system programmer can activate this feature for their job or TSO session, only if the tool or program resides in an accessible APF‑authorized library. Limit update access to APF libraries or to the volumes upon which they reside.