SECTABLE

Purpose

Use the SECTABLE utility to associate a line of installation-defined text with a RACF®-defined security label (SECLABEL). When a system printer is started with a particular security label, the associated line of text will be printed on the header and trailer page of each file printed on that printer. Security labels are assigned only when multilevel security (MLS) is active.

Operands

STORE

alters the human-readable text associated with each SECLABEL listed in the file SECTABLE FILE. The first copy of SECTABLE FILE found in the CMS file search order will be used.

To use the STORE operand, you must have READ access to the DIAG0A0.HRTSTORE profile in the VMCMD class. If protection for DIAGNOSE X'A0' has been turned off, then you must have class A or B privilege.

If you omit the STORE operand, no special privileges are required as the file will only be checked for correct syntax.

Usage Notes

1. By default, the SECTABLE utility is located on the system tools disk (MAINT 193).
2. SECTABLE FILE is a variable-format (RECFM V) file with a logical record length between 10 and 141 bytes. The size of the file cannot exceed 65,536 bytes (64 KB). The format of SECTABLE FILE is:

   Table 1. Record format for SECTABLE FILE

   Column	Content
   1 - 8	SECLABEL character string
   9	Required blank space
   10 - 141	Human-readable label (1 to 132 characters long)

   Ensure that only authorized administrators have write access to the minidisk containing SECTABLE FILE.

3. SECTABLE STORE must be run each time the system is IPLed. Alter the PROFILE EXEC for AUTOLOG2 to issue the SECTABLE STORE command before any other service machines or system printers are started.
4. A system printer has a default security label of NONE and will not print until SECTABLE STORE has been issued and a valid SECLABEL has been specified on the CP START command. The SECLABEL must be listed in SECTABLE FILE.
5. For more information on RACF authorization for DIAG0A0.HRTSTORE, see Protecting the DIAGNOSE X'A0' Subcodes in z/VM: RACF Security Server Security Administrator's Guide.

Messages

• HCP8601I All SECTABLE file records were found to be valid.
• HCP8602I SECLABEL/HRL correlation table has been successfully stored. [RC=0]
• HCP8603E Invalid operand specification on SECTABLE invocation. [RC=2]
• HCP8604E Error from CMS macro macro with return code retcode. [RC=4]
• HCP8605E SECTABLE FILE must have LRECL not < 10, LRECL not > 141, and RECFM = V. [RC=6]
• HCP8606E SECTABLE FILE is too large - CP virtual buffer will be > 64K bytes. [RC=8]
• HCP8607E Record n causes CP virtual buffer to overflow 64K bytes.
• HCP8608E The following represent invalid SECTABLE FILE records:
• HCP8609E A total of n records were found to be invalid. [RC=10]
• HCP8610E Condition code of condcode upon return from DIAGNOSE X'A0' subcode X'34' processing. [RC=12]
• HCP8611E Severe error occurred during DIAGNOSE X'A0' subcode X'34' processing.

To find the description of a message, see z/VM: CP Messages and Codes.