Implementing Security for CA Roscoe › Customizing the Interface › Combining the Interface With the CMDEXIT Module

Combining the Interface With the CMDEXIT Module

Note: With CA‑Roscoe 6.0, the CMDEXIT is not required unless you have defined LCF rules for protecting CA‑Roscoe commands and monitors or if you are implementing the CA Top Secret automatic terminal lock facility.

The CA Top Secret command interface, CMDEXIT, must be called if command limiting (LCF) or terminal locking is to be used. The user‑written code is front‑ended to the CA Top Secret‑supplied code. The name of the CSECT is your choice, and the code must be reentrant.

• To incorporate the CA Top Secret interface, place the following instructions in your CMDEXIT module at the required locations:
• At the start of your module, you must save the incoming parameter list address:

  ST     R1,$PLIST
  

• At the end of your module, call the CA Top Secret interface:

  LR     R2,R15           SAVE YOUR RETURN CODE
  LA     R13,savearea     18 FULL WORD SAVE AREA
  L      R1,›PLIST        RESTORE P‑LIST ADDRESS
  CALL	   TSSRXCMD         INVOKE CA Top Secret
  CH     R15,=H'8'        TSS SAYS FAIL THE REQUEST?
  BNL    *+6              BR YES.USE TSS RETURN CODE
  LR     R15,R2           RESTORE YOUR RETURN CODE
  

Sample source code that can be used with your CMDEXIT can also be found on the distribution tape in the file named TSSROSCO of the member SAMPCMD.

The JCL to link‑edit user‑written code with CA Top Secret‑supplied code into a load module can be found on the distribution tape in the file named TSSROSCO of the member INSTALL2.