Previous Topic: Example: USS user limitsNext Topic: Logging USS Security Calls


z/OS ServerPac upgrade

Prior to restoring the HFS, ensure that the proper authority is given to the user ID that submits the dialog jobs.

For z/OS 1.7 and above, the user ID must be a superuser with UID(0) or have access to the BPX.SUPERUSER resource in the FACILITY.

For previous releases of z/OS, the user ID must be a superuser (UID=0). Having access to the BPX.SUPERUSER facility class is not sufficient because the PAX utility that unloads the serverpac HFS does not yet use the BPX.SUPERUSER facility class to establish superuser identification.

To authorize the ACID to run the PAX utility

  1. Enter:
    TSS ADD(SYSPROG) UID(0)
    

    ACID SYSPROG1 is defined as a superuser.

  2. Enter:
    TSS ADD(SYSPROG) GROUP(OMVSGRP)
                     DFLTGRP(OMVSGRP)
    

    SYSPROG1 is defined as a member of a group.

  3. Enter:
    TSS PERMIT(SYSPROG) IBMFAC(BPX.FILEATTR.APF)
                        ACC(READ)
    
    TSS PERMIT(SYSPROG) IBMFAC(BPX.FILEATTR.PROGCTL)
                        ACC(READ)
    

    or

    TSS PERMIT(SYSPROG) IBMFAC(BPX.FILEATTR.)
                        ACC(READ)
    

    The IBMFACs are authorized.