Security Update Program listing

The security update program generates a listing of the control statement modifications that you complete. The following topics help you to interpret the security update program listing with explanations of the four constituent parts: the header, the control statement listing, the security file listing, and the security update program trace. With the LIST control statement, you can produce another listing that includes all of the security information.

The header

The security update program listing contains the following information in the header:

Data set name where the load module is located
Module name of the security table (OICMDccc)
OMEGAMON for IMS Classic version number (nnn) in the format VnnnCOM
Messages indicating successful completion of the job or error conditions, such as a failure to open the SYSLIB data set or read the security table

The control statement listing

The Security Update Program Report contains a listing of the control statements that you edited. Except for previous passwords, the listing shows the previous contents and the new contents.

If you specified UPDATE=YES, OMEGAMON for IMS Classic reports the date and time of the previous update.

Figure 1 shows a typical control statement listing:

Figure 1. The control statement listing

OBSECUP 1.2--OMEGAMON SECURITY UPDATE PROGRAM--(c) CANDLE CORPORATION--  01/02/97 16:41
 
                  ***  CONTROL STATEMENT EDIT ***
 
      AUTHLIB=rhilevRKOIPROC,VOL=NOVOLUME
              PREVIOUS CONTENTS =
              NEW CONTENTS      = rhilev.RKOIPROC            NOVOLUME
 
*     CHANGE THE PASSWORD FOR LEVEL 3 COMMAND ACCESS
      PASSWORD=CANDLE3,LEVEL=3
              PREVIOUS CONTENTS = ********    NEW CONTENTS = CANDLE3
 
* DISPLAY SECURITY INFORMATION FOR THE PEEK COMMAND
  COMMAND=PEEK
              PREVIOUS CONTENTS = 3 B         NEW CONTENTS = 3 B
 
* DISPLAY SECURITY INFORMATION FOR MINOR JOBS
      MINOR=JOBS
              PREVIOUS CONTENTS = 0EW         NEW CONTENTS = 0EW
 
* PROTECT MZAP COMMAND
      COMMAND=MZAP,LEVEL=3
              PREVIOUS CONTENTS = 0           NEW CONTENTS = 3
 
* DISABLE CONS COMMAND
      COMMAND=CONS,LEVEL=DISABLE,AUDIT=BOTH
    PREVIOUS CONTENTS = 0           NEW CONTENTS = * B

*** END OF CONTROL STATEMENT INPUT ***

The codes for the PREVIOUS CONTENTS and NEW CONTENTS of commands are positional.

There are three positional codes:

1

The first position shows the number of the internal security levels or an asterisk (*) if the command is DISABLED.

2

The second position shows the external security option:

E: Use external security for this command.
b: Blank specifies no external security.

3

The third position shows the auditing option:

W: Audit this command by using WTO.
S: Audit this command by using SMF.
B: Audit this command by using WTO and SMF.
b: Blank indicates no auditing.

The security file listing

If you specify LIST=YES anywhere in the input stream, the security update program generates a complete listing of the security information as follows:

The name of the authorized screen library and its volume serial number
The name of the external security user exit module
The SMF record number
All of the commands along with their security information

If LIST=YES is the only parameter that is specified in KOMSUPDI, the listing does not show the internal security passwords.

Figure 2 shows a typical security file listing without the internal security passwords:

Figure 2. The security file listing

OBSECUP 1.2--OMEGAMON SECURITY UPDATE PROGRAM--(c) CANDLE CORPORATION--  01/02/97 16:41
 
         * * *    S E C U R I T Y    F I L E    L I S T I N G    * * *
 
           AUTHLIB=:rhilev.RKOIPROC         VOLUME=NOVOLUME
 
           LEVEL1=********  LEVEL2=********  LEVEL3=********
           SMFNUM=233
           MODULE=MYSECURE
 
COMMAND= /A      0           TYPE=S    (ALIAS)
COMMAND= /ABORT  0           TYPE=S
    .

    .
COMMAND= /AUP    0           TYPE= S
    .
    .
COMMAND= .AUP
COMMAND= .DSA
COMMAND= .SCC
   .
    .
.*COMMAND= DEV     0           TYPE= C
.*   DADR 1EW  DALC 0    DIO  0    DIOQ 0    DOPN 0   DRES 0
.*   DSTA 0    DTYP 0    DUSR *    DVMP 0    DVOL 0
.*    .
COMMAND= OCMD    3EB         TYPE= I
    .
    .
SECURITY TABLE LAST UPDATED ON 01/02/97 06:00:10

TYPE specifies the following types of OMEGAMON for IMS Classic commands:

C: Major
I: Immediate
S: Slash (INFO-line)

The security level follows the command. An asterisk (*) indicates that a command is disabled. Minor commands are listed after their corresponding majors.

The security update program trace

The last part of the Security Update Program listing indicates whether an update successfully completed.

Figure 3 shows a typical Security Update Program trace:

Figure 3. The Security Update Program trace

OBSECUP 1.2--OMEGAMON SECURITY UPDATE PROGRAM--(c) CANDLE CORPORATION--  01/02/97 16:41
 
      OB9145 OBSELW00 CALLED TO WRITE cccccccc.
      OB9148 SYSLIB DCB CLOSED SUCCESSFULLY
      OB9147 LOAD MODULE TEXT SUCCESSFULLY UPDATED
      OB9150 SYSLIB DCB CLOSED
      OB9269 OBSECUP ENDED