Rules Facility Guide › Security with the Rules Facility › Controlling CP Commands

Controlling CP Commands

The Rules Facility enables you to control access the CP commands ATTACH, AUTOLOG, COUPLE, DIAL, FOR, LOGON, LINK, SPOOL, STORE HOST, TAG, TRANSFER, TRSOURCE, and XAUTOLOG.

ATTACH Control Using an RDEVCTRL Rule

The CP ATTACH command can be controlled by the Rules Facility, but only at the system override and system default levels. The ATTACH command is not directly controlled. Instead the ability to access a real device is allowed by an RDEVCTRL rule. For example, if you are an authorized system administrator and need to allow tape drives at addresses 0300 to 0310 to be attached to the LINUXTST server, add the following rule to the system rules file:

ACCEPT LINUXTST RDEVCTRL 0300-0310

The RDEVCTRL rules also control an ATTACH action that is specified as a DEDICATE statement in a CP Directory entry. The following Directory statement and CP command are equivalent:

DEDICATE 400 300

ATTACH 300 TO LINUXTST AS 400

An RDEVCTRL rule controls either of these in the same way.