Setting the shared library attribute

The BPX.FILEATTR.SHARELIB resource in the FACILITY class controls who can set the shared library extended attribute. You need to have at least READ access before you can set the shared library extended attribute.

Example: The following example shows the RACF® command that was used to give READ access to user Ralph Smorg with user ID SMORG:

RDEFINE FACILITY BPX.FILEATTR.SHARELIB UACC(NONE)
PERMIT BPX.FILEATTR.SHARELIB CLASS(FACILITY) ID(SMORG) ACCESS(READ)
SETROPTS RACLIST(FACILITY) REFRESH

To set the shared library attribute, issue the extattr command with the +l option.

Example: In the following example, progdll is the name of the file.

extattr +l  /user/sbin/progdll

Note: Once the ST_SHARELIB bit has been set for a module, any program, whether or not it has read access to the BPX.FILEATTR.SHARELIB FACILITY, will be able to load modules into the system shared library and use those that are already loaded.