Alan, As you surmised, you cannot use aliases or symbolics in PROGRAM class profile ADDMEM library entries. You'll have to specify the fully-qualified actual name.
In setting up PROGRAM profiles in support of Unix and BPX.DAEMON, you probably created a catchall profile of * or **. Just add the library to this profile. There is no need to create another profile. Regards, Bob Robert S. Hansel Lead RACF Specialist 617-969-8211 www.linkedin.com/in/roberthansel RSH Consulting, Inc. www.rshconsulting.com --------------------------------------------------------------------- 2010 RACF Training > Securing z/OS Unix - WebEx - JUL 13-15 > Intro & Basic Admin - Boston - OCT 5-7 > Audit for Results - Boston - OCT 26-28 Visit our website for registration & details --------------------------------------------------------------------- -----Original Message----- Date: Mon, 12 Jul 2010 15:52:29 -0700 From: "Starr, Alan" <[email protected]> Subject: RACF PROGRAM ADDMEM and SYMBOLICRELATE Hi list, I just added an FTP exit to a user loadlib that has a DSN (VTOC entry) of SYS2.LINKLIB.Z19. This dataset is assigned a SYMBOLICRELATE alias of SYS2.LINKLIB to facilitate z/OS-release-independent accesses. FTP Server requires access to the FACILITY called BPX.DAEMON which, in turn, requires that its exits reside in a "controlled" dataset. I therefore want to RDEFINE PROGRAM FT* ADDMEM(dataset-name//PADCHK) I strongly suspect (but have not tested) that specifying the alias name of SYS2.LINKLIB is not going to produce the desired effect because the OPENed DSN (in LNKLST) is SYS2.LINKLIB.Z19 (i.e. the alias was resolved by OPEN and then forgotten). I have tried specifying a static system symbol (&MVSDSNQ = .Z19) as part of the DSN - ADDMEM('SYS2.LINKLIB&MVSDSNQ'//PADCHK) - but RACF didn't accept that. Am I stuck having to specify a full-qualified "truename" and change the MEMBER segments of all PROGRAM resources every time I upgrade? Cheers, Alan ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
