Troubleshooting MVS operator commands issued with the OMEGAMON OCMD or RCMD commands

If you are authorized to issue the OMEGAMON® OCMD or RCMD commands, you can issue any MVS™ command. If you need further granularity to control specific MVS commands, customize the KOMRACFX security exit that you are using.

Procedure

  1. Specify EXTERNAL=YES in your KOMSUPD job for the OCMD command.
  2. In the section of the KOMRACFX exit that is called Phase 4, add code to check whether the issued command is OCMD or RCMD. Review the command that is issued to determine whether you want to allow it to run.
    The external security routine, KOMRACFX, has addressability to the entire command line and not only the four-character OMEGAMON command. You can interpret the command line and extend control over the use of authorized commands. For example, you might have a routine that allows access to issue operator display commands, and checks with external security for all other operator commands. The address of the OMEGAMON command line is at +04C into the $UCHECK data area, with a label of U#CMDBUF.