Rules Facility Guide › Security with the Rules Facility › Additional Security Processing

Additional Security Processing

To perform additional security processing, use the POSTRULE user exit to accept or reject the results of rules evaluation or to perform additional processing. Use the POSTRULE user exit to introduce an additional customized level of security to your CA VM:Secure system. The SYSWORD command is provided to communicate current system information to the POSTRULE user exit.

The SYSWORD command is controlled by SYSWORD authorization in the AUTHORIZ CONFIG file. All parameters of a SYSWORD command are available for authorization checking, so authorization can be general (SYSWORD) or specific (SYSWORD QUERY), whichever you choose.

Note: For more information about creating authorizations, see the Administration Guide.

During CA VM:Secure installation, a file named VMXEXITF XASSEMBL was loaded to the product materials sample disk (usually the 2C2). You can use this file as a prototype for coding a POSTRULE user exit that meets your site’s needs.

Note: For more information about how to code the POSTRULE exit file and implement the POSTRULE user exit, see POSTRULE User Exit in the chapter "User Exit Reference" in the Reference Guide.