Resource DIAGNOSE protects VM diagnose codes with the following TSS command function:
TSS PERMIT(USERA) DIAG(84)
In this example, USERA has access to the “84” diagnose code. When you list the information for that ACID, you see the code in its full four-character format: 0084.
Like some CP commands, certain diagnose codes have privileged and non-privileged classes. For example:
TSS PER(USER01) DIAGNOSE(A0)
Allows USER01 access to the class 'G' form of the diagnose.
TSS PER(USER02) DIAGNOSE(A0) ACTION(VMPRIV)
Allows USER02 access to the privileged class of the diagnose.
There are several diagnose codes that are used extensively by CMS. Access to these diagnose codes is assumed unless specifically restricted. One example is diagnose code 8 (execute CP command). If that diagnose code is owned, anyone without a permit would still be allowed to execute that diagnose unless his or her ACID has been denied:
TSS PERMIT(useracid) DIAGNOSE(8) ACTION(DENY)
Below is the list of diagnose codes that are processed in the same way:
00, 08, 0C, 10, 18, 20, 24, 40, 54, 58, 5C, 60, 68, 70, 8C, A4, A8, B0, C8, 210, 218, 250, 260, 270
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|