On Sun, 15 Mar 2015 09:03:56 -0700 Charles Mills <[email protected]> wrote:

:>Thanks. In my case the called program is a pre-existing utility that is
:>shipped AC=0 in an APF library.

:>To confirm: there is no integrity issue introduced here, right? The called
:>program will run non-authorized, correct?

Unless action is taken it will run authorized. Since it is placed in an APF
library, the installation (or IBM) has declared that it will not create an
exposure.

:>-----Original Message-----
:>From: IBM Mainframe Discussion List [mailto:[email protected]] On
:>Behalf Of Binyamin Dissen
:>Sent: Sunday, March 15, 2015 8:57 AM
:>To: [email protected]
:>Subject: Re: APF-authorized calling non-authorized
:>
:>On Sun, 15 Mar 2015 06:38:37 -0700 Charles Mills <[email protected]> wrote:
:>
:>:>Am I RTFM correctly? An APF-authorized program may successfully call a
:>:>non-APF-authorized program, provided the called program resides in an
:>:>APF-authorized library?
:>
:>:>The called program need not be AC=0, but its containing load library must
:>be :>in the APF library list. Is that correct?
:>
:>That is the standard way. Only the main program should be marked AC=1 - the
:>subroutines AC=0.
:>
:>----------------------------------------------------------------------
:>For IBM-MAIN subscribe / signoff / archive access instructions,
:>send email to [email protected] with the message: INFO IBM-MAIN

--
Binyamin Dissen <[email protected]>
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to