OSTEPLIB — Build a list of files

Format

OSTEPLIB pathname

Description

Use the OSTEPLIB command to build a list of files that are sanctioned by your installation as valid step libraries for programs that have the set-user-ID or set-group-ID bit set. This permission setting allows a program to have temporary access to files that are not normally accessible to other users. Step libraries have many uses; for example, selected users can test new versions of runtime libraries before the new versions are made generally available.

You must have superuser authority to issue OSTEPLIB.

The sanctioned list is valid if it conforms to the following rules:
  • You can include comment lines in the list. Each comment line must start with /* and end with */.
  • You must follow standard MVS™ data set naming conventions in naming the files in the list.
  • Each data set name must be fully qualified and cannot be enclosed in quotation marks.
  • Each data set name must be on a line by itself, with no comments.
  • You can put blanks before and after each data set name. Entirely blank lines in the list are ignored.
  • You can use the * character to specify multiple files that begin with the same characters. For example, if you list SYS1.*, you are sanctioning any file that begins with SYS1. as a step library.
Following is an example of a file that contains a correctly formatted list of sanctioned step libraries:
   /*****************************************************************/
   /*                                                               */
   /*Name: Sample Sanctioned List for set-user-ID and set-group-ID  */
   /*      files                                                    */
   /*                                                               */
   /*Updated by:   May only be updated by OSTEPLIB TSO/E command    */
   /*                                                               */
   /*Description:  Contains a list of data set names that may       */
   /*              be used as STEPLIB libraries for SETUID          */
   /*              programs                                         */
   /*                                                               */
   /*              Wild cards may be used to specify multiple       */
   /*              data set names that have the same prefix         */
   /*              characters.                                      */
   /*                                                               */
   /*****************************************************************/

   /*****************************************************************/
   /*Sanction all data set names beginning with SYS1.CEE            */
   /*****************************************************************/
   SYS1.CEE*

   /*****************************************************************/
   /*Sanction data set containing vers. 2 of the C run time library */
   /*****************************************************************/
   ADMIN.CEE.RTLV2

Parameters

pathname
Specifies the path name of the file to contain the list of sanctioned step libraries. The path name can be absolute or relative to the root. Avoid using the space character or single quotation mark (apostrophe) within the path name. The path name cannot be enclosed in single quotes.

If you omit the path name operand, the new sanctioned list file is created with the same file name as the old one and replaces it when it has been validated.