Callable services descriptions

This topic describes the RACF® callable services. The services appear in alphabetic order. Table 1 lists each callable service's intended users.

Table 1. Intended use of RACF callable services
Callable service For use by
ck_access (IRRSKA00): Check access z/OS® UNIX file system or z/OS UNIX servers
ck_file_owner (IRRSKF00): Check file owner z/OS UNIX file system or z/OS UNIX servers
ck_IPC_access (IRRSKI00): Check IPC access MVS BCP or z/OS UNIX task-level processes
ck_owner_two_files (IRRSC200): Check owner of two files z/OS UNIX file system and z/OS UNIX servers.
ck_priv (IRRSKP00): Check privilege z/OS UNIX file system, MVS BCP, or z/OS UNIX servers
ck_process_owner (IRRSKO00): Check process owner MVS BCP or z/OS UNIX task-level processes
clear_setid (IRRSCS00): Clear set ID z/OS UNIX file system or z/OS UNIX servers
deleteUSP (IRRSDU00): Delete USP MVS BCP or z/OS UNIX servers
getGMAP (IRRSGM00): Get GID-to-Group-Name mapping MVS BCP
get_uid_gid_supgrps (IRRSGE00): Get UIDs, GIDs, and supplemental groups z/OS UNIX file system
getUMAP (IRRSUM00): Get UID-to-User-ID mapping MVS BCP
initACEE (IRRSIA00): Initialize ACEE z/OS kernel on behalf of servers that use pthread_security_np servers or __login, or MVS servers that do not use z/OS UNIX services
initUSP (IRRSIU00): Initialize USP MVS BCP or z/OS UNIX servers
makeFSP (IRRSMF00): Make IFSP z/OS UNIX file system or z/OS UNIX servers
makeISP (IRRSMI00): Make IISP MVS BCP or z/OS UNIX task-level processes
make_root_FSP (IRRSMR00): Make root IFSP DFSMS/MVS or z/OS UNIX servers
query_file_security_options (IRRSQF00): Query file security options z/OS UNIX file system
query_system_security_options (IRRSQS00): Query system security options MVS BCP
R_admin (IRRSEQ00): RACF administration API LDAP (ITDS) or General purpose
R_audit (IRRSAU00): Provide an audit interface z/OS UNIX file system, MVS BCP, or z/OS UNIX servers
R_auditx (IRRSAX00 or IRRSAX64): Audit a security-related event Enterprise identity mapping
R_cacheserv (IRRSCH00): Cache services Policy Director
R_chaudit (IRRSCA00): Change audit options z/OS UNIX file system or z/OS UNIX servers
R_chmod (IRRSCF00): Change file mode z/OS UNIX file system or z/OS UNIX servers
R_chown (IRRSCO00): Change owner and group z/OS UNIX file system or z/OS UNIX servers
R_datalib (IRRSDL00 or IRRSDL64): Certificate Data Library MVS BCP or z/OS UNIX servers
R_dceauth (IRRSDA00): Check a user's authority MVS BCP
R_dceinfo (IRRSDI00): Retrieve or set user fields MVS BCP
R_dcekey (IRRSDK00): Retrieve or set a non-RACF password MVS BCP
R_dceruid (IRRSUD00): Determine the ID of a client z/OS UNIX servers or MVS BCP
R_exec (IRRSEX00): Set effective and saved UIDs/GIDs MVS BCP or z/OS UNIX task-level processes
R_fork (IRRSFK00): Fork a process MVS BCP or z/OS UNIX task-level processes
R_GenSec (IRRSGS00 or IRRSGS64): Generic security API interface MVS BCP
R_getgroups (IRRSGG00): Get/Set supplemental groups MVS BCP or z/OS UNIX servers
R_getgroupsbyname (IRRSUG00): Get groups by name MVS BCP
R_GetInfo (IRRSGI00): Get security server fields Enterprise identity mapping
R_IPC_ctl (IRRSCI00): Perform IPC control MVS BCP or z/OS UNIX task-level processes
R_kerbinfo (IRRSMK00): Retrieve or set security server network authentication service fields For use by the z/OS Network Authentication Service
R_PgmSignVer (IRRSPS00): Program Sign and Verify The z/OS program binder and the z/OS loader
R_PKIServ (IRRSPX00 or IRRSPX64): Request public key infrastructure (PKI) services PKI Services
R_proxyserv (IRRSPY00): LDAP interface Policy Director
R_ptrace (IRRSPT00): Ptrace authority check MVS BCP or z/OS UNIX task-level processes
R_SecMgtOper (IRRSMO00): Security Management Operations General Purpose
R_setegid (IRRSEG00): Set effective GID, set all GIDs MVS BCP
R_seteuid (IRRSEU00): Set effective UID, set all UIDs MVS BCP
R_setfacl (IRRSCL00):Unix access control lists z/OS UNIX file system or z/OS UNIX servers
R_setfsecl (IRRSSB00): Security label MVS BCP or z/OS UNIX servers
R_setgid (IRRSSG00): Set group name MVS BCP
R_setuid (IRRSSU00): Set z/OS UNIX user identifier (UID) MVS BCP
R_ticketserv (IRRSPK00): Parse or extract Parse or extract
R_umask (IRRSMM00): Set file mode creation mask MVS BCP or z/OS UNIX servers
R_usermap (IRRSIM00): Map application user z/OS application servers
R_writepriv (IRRSWP00): Write-down privilege MVS BCP
Note: In a server environment, work can be processed for more than one user in an address space. Callable services marked for use by z/OS UNIX servers provide task-level support for server applications. Callable services marked as having support for task-level processes use task-level support when z/OS UNIX has indicated in the task's ACEE that this is a task-level process. All other callable services assume that there is only one user per address space and provide only address-space-level support.