OA43202: NEW FUNCTION - Enhancement option to prevent DFSMShsm users from issuing generic LIST DSN command if enabled.

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION
  

Local fix

• NEW FUNCTION
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of z/OS V1R12 or higher who use    *
  *                 the DFSMShsm LIST/HLIST DSN command without  *
  *                 data set name specified.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: Option to prevent DFSMShsm users from   *
  *                      issuing generic LIST DSN commands.      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Option to prevent DFSMShsm users from issuing a generic LIST
  DSN command.
  

Problem conclusion

Temporary fix

Comments

• DFSMShsm was modified to prohibit LIST/HLIST DSN command via a
  PATCH command.
  
  
  Source: DFSMShsm++HOLD DOC
  z/OS DFSMShsm Data Areas SRL:GC521083XX
  z/OS V2R1.0 DFSMShsm Data Areas SRL:GC14-7504-00
  Add a new flag to the MCVT -
  Management Communication Vector Table:
  
  Offsets:  646  (286)
  
  - Add the following flag:
  
  Type:  .... ..1.
  Name:  MCVTF_PROHIBIT_LIST_DSN
  Description:
  When set to 1, LIST/HLIST DSN commands are prohibited.
  
  
  - Add the new flag MCVTF_PROHIBIT_LIST_DSN to the MCVT
  Data Area Cross-Reference
  
  The DFSMShsm Implementation and Customization Guide SRL:
  SC35-0418-11, SC35-0418-12 and SC23-6869-00
  
  This publication should be changed to insert the new PATCH
  command to the 2.5.1 section "Tuning patches supported by
  DFSMShsm" in the following way:
  
  2.5.1.55 Prohibiting LIST DSN command
  Currently, the LIST DSN with no other
  parameters will list all data sets that are migrated
  by DFSMShsm. The listing will be output to SYSOUT
  class A and can cause an abend722 if the number
  of output lines exceeds the SYSOUT limit
  established by DFSMShsm.
  The HLIST DSN with no other parameters is executed in a
  slightly different way. It will not list all migrated
  data sets but it will list migrated data sets with high
  level qualifier equal to the UID of TSO user which issued
  this HLIST DSN command. The listing will be output to
  the TERMINAL. The listing can be interrupted by the TSO
  Attention key. However, if the HLIST DSN SYSOUT is
  issued the resulting list will be output to SYSOUT
  class A and can cause a JES SPOOL overflow and/or
  performance degradation if the number of migrated
  data sets is relatively large. If you want DFSMShsm
  to prevent the extremely large output which can be
  generated by the LIST DSN command without a data set
  name specified then you can issue the following
  patch command:
  
     PATCH .ARCCVT.+286 BITS(......1.)
  
  When this bit is off (0), the LIST DSN command is
  executed in the original manner where excessive output
  can occur. When the ARCCVT +286  bit is on (1), the
  execution of the LIST DSN and HLIST DSN SYSOUT
  commands with no data set name specified  will be
  prohibited. The message ARC0814I LIST DATA SETS
  PROCESSING TERMINATING EARLY, RC='RETCODE' with the
  new retcode of 22 will be issued in this case.
  
  If parameters MCDS, BCDS or BOTH are specified for the
  LIST DSN and HLIST DSN SYSOUT commands, the
  execution of the command will be also prohibited
  if data set name is not specified and the
  PATCH .ARCCVT.+286 BITS(......1.) is enabled.
  
  If the ODS(odsname) parameter is specified for the
  LIST DSN and HLIST DSN commands, the execution of
  the command will be also prohibited if data set name
  is not specified and the PATCH .ARCCVT.+286 BITS(......1.)
  is enabled.
  If the TERM parameter is specified for the LIST
  DSN command without the data set name
  specified the execution of this command will be
  prohibited if the  PATCH .ARCCVT.+286 BITS(......1.)
  is enabled.
  
  If the TERM parameter is specified for the HLIST
  DSN command without data set name specified the
  execution of this command will not be prohibited
  if the  PATCH .ARCCVT.+286 BITS(......1.) is enabled
  because output can be terminated by the TSO Attention key.
  
  If the SUMMARY parameter is specified the LIST/HLIST DSN
  execution will not be prohibited regardless of the
  PATCH .ARCCVT.+286 BITS(......1.) command because output
  can not be extremely large.
  
  
  
  z/OS V1R12.0 MVS System Messages,Vol 2( ARC-ASA)SRL:SA22-7632-20
  z/OS V1R13.0 MVS System Messages,Vol 2 (ARC-ASA)SRL:SA22-7632-21
  z/OS V2R1 MVS System Messages, Vol 2 (ARC-ASA)SRL:SA38-0669-00
  The description of message ARC0814I should be changed to insert
  a new Retcode 22 in the following way:
  
  ARC0814I LIST  USER | TTOC | DATA SETS | VOLUME | BACKUPVOLUME |
            PRIMARYVOLUME | DUMP VOLUMES | DUMP CLASSES |
            AGGREGATE | COPYPOOL} PROCESSING TERMINATING
            EARLY, RC=retcode
  
  Explanation:
  A LIST or HLIST command ended before normal completion of
  the requested function. The LIST command was issued with
  one of the following parameters: USER, TTOC
  (tape table of contents), DATASETNAME (migrated data sets
  or backed up data sets), VOLUME (migration and primary volumes),
  BACKUPVOLUME, PRIMARYVOLUME, DUMPVOLUME, DUMPCLASS,
  AGGREGATE, or COPYPOOL.
  
  The reason for an early end is explained as determined by the
  retcode.
  The values for retcode are:
  
  Retcode Meaning
  ....
  
  22
       A LIST DSN or HLIST DSN command was issued without
  specifying a data set name and SUMMARY parameter.
  This can result in an extremely large amount of output
  and is prohibited.
  
  ....
  
  The Application programmer responses for retcode are:
  ....
  
  22
      Specify data set name or level name or SUMMARY parameter.
  
  ....
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UA72247 UA72259 UA72260

Modules/Macros

• ARCCBS   ARCCPLMC ARCCPLM2
  

Fix information

• Fixed component name

  DFSMSHSM, ISMF

• Fixed component ID

  5695DF170

Applicable component levels

• RC10 PSY UA72247

     UP14/02/25 P F402

• RD10 PSY UA72259

     UP14/02/25 P F402

• R210 PSY UA72260

     UP14/02/25 P F402

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.