DIAGNOSE Codes
Programs running in the virtual machine may request services from CP using the DIAGNOSE instruction. The following table discusses the security relevant DIAGNOSE codes.
| DIAGNOSE | Subcode | VMXEVENT Member | Class |  CC-Secure |
CC-Secure with
LSM |
|||
|---|---|---|---|---|---|---|---|---|
| Audit | DAC | Audit | DAC | MAC | ||||
| X'04' | DIAG004 | E | optional | no | optional | no | no | |
| X'08' | DIAG008 | avoid | no | avoid | no | no | ||
| X'14'¹ | 0,2C | DIAG014 | optional | no | optional | no | R/O | |
| X'14' | 4,8,FFE,FFF | DIAG014 | optional | no | optional | no | R/O | |
| X'34'¹ | DIAG034 | optional | no | optional | no | R/O | ||
| X'4C' | DIAG04C | optional | no | optional | no | no | ||
| X'64'² | 0,4,C,10,18 | DIAG064 | optional | mandatory | optional | mandatory | R/O or R/W | |
| X'68' | 2,3,4,5,7,A | DIAG068 | optional | no | optional | no | R/O, W/O or R/W | |
| X'74' | DIAG074 | A,B,C,E | optional | no | optional | no | no | |
| X'7C'³ | DIAG07C | optional | no | optional | no | no | ||
| X'84' | DIAG084 | optional | no | optional | no | no | ||
| X'88' | DIAG088 | optional | optional | optional | optional | no | ||
| X'90' | DIAG090 | E | optional | no | optional | no | no | |
| X'94' with the TO option | DIAG094, TRANSFER.G | optional | optional | optional | optional | no | ||
| X'98' | DIAG098 | optional | no | optional | no | no | ||
| X'A0' | 30,34,4⁴ | DIAG0A0 | optional | optional | optional | optional | no | |
| X'B8'¹ | DIAG0B8 | optional | no | optional | no | R/O or W/O | ||
| X'BC' | DIAG0BC | optional | no | optional | no | R/O | ||
| X'CC' | DIAG0CC | optional | no | optional | no | no | ||
| X'D4' | DIAG0D4 | optional | optional | optional | optional | access | ||
| X'E0'¹ | DIAG0E0 | optional | no | optional | no | R/O | ||
| X'E4' | DIAG0E4 | optional | optional | optional | optional | no | ||
| X'FC' | DIAG0FC | optional | no | optional | no | no | ||
| X'23C' | 3 | DIAG23C | optional | no | optional | no | R/O or R/W | |
|
Note:
¹ This DIAGNOSE calls the spool file open routine (as for system functions SPF_OPEN or SDF-OPEN). ² This only applies to restricted members. ³ If logging on from a device that was created with DIAGNOSE X'7C' a R/W MAC will be made to ensure that SECLABEL of the creator of the device and the SECLABEL of the person logging on are equal. ⁴ User authentication is performed, including password checking, if necessary. |
||||||||