PK45314: IMPROVED SECURITY FOR CLIENTS WHO DO NOT ALLOW READ ACCESS TO DATASETS THAT ARE IN THE MVS LINKLIST.

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• When clients do not allow access to datasets in the MVS
  linklist. Explicit attempts to access SYS1.LINKLIB will cause an
  abend913.This change will ensure programs don't explicitly
  reference SYS1.LINKLIB, but use the implicit form of the call
  instead.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: IMS Database Repair Facility for z/OS        *
  *                 Version 1 Release 2                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: DB Repair references SYS1.LINKLIB to    *
  *                      execute system utilities.  RACF         *
  *                      protection on SYS1.LINKLIB may cause    *
  *                      DBRF to fail Abend 913.                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  System utilities such as IDCAMS and IEHLIST are executed
  in DBRF using the TSO command "CALL 'SYS1.LINKLIB(name)' ".
  This method works only if the SYS1.LINKLIB data set is
  accessible to the user with READ access.  When the RACF
  accesss is EXECUTE, this command form will fail.
  

Problem conclusion

Temporary fix

Comments

• Changed all system utility references to use the TSO
  command form "CALL *(name) " requesting the utilities to be
  loaded from the standard z/OS library sequence.  RACF
  authority of EXECUTE is sufficient for this method.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK28265

Modules/Macros

• FABZDATA FABZMAIN
  

Fix information

• Fixed component name

  IMS DATABASE RE

• Fixed component ID

  5655E0300

Applicable component levels

• R120 PSY UK28265

     UP07/08/17 P F708

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.