Establishing program control in HFS

You can mark programs and dynamically loaded libraries (DLLs) in the hierarchical file system (HFS) as being controlled ("trusted"). To do so, you must turn on the program-controlled extended attribute for the HFS file that contains the program or DLL. To turn on this extended attribute, issue the following z/OS UNIX shell command:

extattr +p filename

The OCSF dynamic link libraries and the files that comprise the OCEP service provider modules must have the program-controlled extended attribute. To check if a file has the program-controlled extended attribute, issue the shell command ls with the -E option. In the following example, this command is issued to verify that the program-controlled attribute is set for an OCEP file called ibmoceptp.so:

$ cd /usr/lpp/ocsf/addins
$ ls -E ibmoceptp.so
-rwxr-xr-x -ps 2 ROOT   SYS1    737280 Nov 3 22:07 ibmoceptp.so