>OI    DEBFLGS1,DEBAPFIN  TURN ON APF LIBRARY BIT

If you have enough control over your system not to have to worry about 
this blatant system integrity exposure, then why would you not just make 
the data set APF authorized?

>ADRNAPF

Regarding ADNAPF(64), yes they exist. And if you don't know exactly what 
you are doing you will almost certainly be introducing a system integrity 
exposure. To a large extent, they are intended for loading 
(non-executable) data.

>Job 5: RC=0

It is extremely unlikely that syncsort does anything funky. The odds are 
really good that this job, for whatever reason, results in no fetches that 
are satisfied only from joblib/steplib.  Does it matter, for the purpose 
of this discussion, that if the module exists both in (unauthorized) 
joblib/steplib and the lnklst, the fetch will succeed? For LNKAUTH=LNKLST, 
the only time you get the 306 is when the module exists only in an 
unauthorized concatenation.

Peter Relson
z/OS Core Technology Design

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to