Implementing Security for CA Roscoe › Customizing the Interface › Combining the Interface With the BEXEXIT Module

Combining the Interface With the BEXEXIT Module

If your site wants to change the ACID name from the one derived by CA Top Secret (from the CA‑Roscoe key), use the following procedure:

• Write a CSECT that is part of BEXEXIT
• Conventions for the BEXEXIT are:
  • It is not reentrant.
  • It must adhere to standard OS linkage conventions.
  • Register 1 contains the address of a two full word parameter list where the first full word contains the address of the CA‑Roscoe BEXDSECT and the second full word contains the address of an eight‑character field that contains the CA Top Secret derived ACID.
  • Change the ACID name by replacing the area in storage addressed by the second full word. Return with Register 15 equal to zero to continue the authorization check, or not equal to zero to fail the authorization check.
  • Sample source code that can be used with BEXEXIT can be found on the distribution tape in the file named TSSROSCO of the member SAMPBEX.

The JCL to link‑edit user‑written code with CA Top Secret‑supplied code into a load module can be found on the distribution tape in the file named TSSROSCO of the member INSTALL2.