Keywords › LIBRARY Keyword—Specify Privileged Program Library

LIBRARY Keyword—Specify Privileged Program Library

Valid on z/OS.

Use the LIBRARY keyword to specify libraries or library prefixes in which a privileged program must reside. LIBRARY is only valid when specified with the permission of DSNAMEs.

If PRIVPGM is not specified with LIBRARY, then the executing program must come from a link listed library or the link pack area (LPA). The program cannot be loaded from a JOBLIB, STEPLIB, or TASKLIB.

If PRIVPGM is specified with LIBRARY, then the executing program must come from the library specified in the PERMIT command function.

Although no specific authority is required, DSNAME(XAUTH) authority to specify LIBRARY for data sets that are owned.

This keyword is used with the PERMIT command.

This keyword has the following format:

TSS PERMIT(acid) DSNAME(p‑fix)
                 PRIVPGM(p‑fix)
                 LIBRARY(p‑fix)

Prefix length

Two to 44 characters

Capacity of list

One to three prefixes or names per CA Top Secret command

The library specified in the command must be one of the following types:

• Job library as referenced via the //JOBLIB DD statement
• Step library as referenced via the //STEPLIB DD statement
• Task library such as that used with TSO CALL

Example: LIBRARY keyword

This example permits use of production data sets, but only if program PN077 is used for access and the program comes from a specific library:

TSS PERMIT(HTEE4) DSNAME(PROD)
                  PRIVPGM(PN077)
                  LIBRARY('PROD.DLIB')

When a program resides in both the LINKLIST and the TASKLIB and both are referenced by a job, two PERMITs are necessary.

This example PERMITs the use of data sets when program PN077 is in the LINKLIST and in a TASK LIBRARY named PROD.DLIB:

TSS PERMIT(user) DSNAME('PROD')
                 ACCESS(READ)
                 PRIVPGM(PN077)

TSS PERMIT(user) DSNAME('PROD')
                 ACCESS(READ)
                 PRIVPGM(PN077)
                 LIBRARY('PROD.DLIB')