Implementing Security with IBM RACF › RACF Requirements › Resource Class Descriptor Table - ICHRRCDE › ICHERCDE Macro

ICHERCDE Macro

ICHERCDE, the IBM supplied Class Descriptor macro, located in SYS1.MODGEN, defines installation required resource classes under RACF. Once updated, the source is assembled and link edited as module ICHRRCDE and resides in SYS1.LINKLIB. This module can reside in any link listed library, however, verify that a copy of this module does not exist in a library anywhere above the new module in the linklist libraries concatenation.

Note: For more information about the ICHRRCDE module and the ICHERCDE macro parameters, see the IBM guide Security Server RACF System Programmer's Guide.

The following entries must be added to the table for CA WA CA 7 Edition.

The resource classes required by CA WA CA 7 Edition are PA@EL and SU@MIT. See the following example:

PA@EL    ICHERCDE CLASS=PA@EL,                                   +
               id=xxx,             available resource number     +
               MAXLNTH=8,                                        +
               FIRST=ALPHANUM,                                   +
               OTHER=ANY,                                        +
               POSIT=xx,           bit position in bitstring     +
               OPER=NO,                                          +
               RACLIST=ALLOWED,                                  +
               GENLIST=ALLOWED
SU@MIT   ICHERCDE CLASS=SU@MIT,                                  +
               id=xxx,             available resource number     +
               MAXLNTH=8,                                        +
               FIRST=ALPHANUM,                                   +
               OTHER=ANY,                                        +
               POSIT=xx,           bit position in bitstring     +
               OPER=NO,                                          +
               RACLIST=ALLOWED,                                  +
               GENLIST=ALLOWED
         ICHERCDE

Note: The last entry must be the ICHERCDE macro with no parameters.

If the CALENDAR option is specified in the EXTERNAL keyword of the SECURITY statement in the initialization file, the resource class of CA@ENDAR is needed. Also, if the RCLASS keyword is used, include the specified value here as a resource class. The CAS9SAFC module probably needs updating to include these classes.

Note: For more information about customizing this module, see the CA Common Services for z/OS Getting Started.