Using SYS1.PARMLIB member IKJTSOxx
To use IKJTSOxx, do the following:
- If you have not already done so, copy sample member IKJTSO00 from SYS1.SAMPLIB to SYS1.PARMLIB. You might have already copied IKJTSO00 to define other installation defaults.
- You can create alternative members in SYS1.PARMLIB using the IKJTSOxx naming convention.
- Edit the member in SYS1.PARMLIB to contain the names of appropriate commands and programs for your installation.
Entries in IKJTSOxx must be command or program names up to eight
characters in length, separated from other entries by one or more
blanks, and enclosed in parentheses after one of the following parameters:
- AUTHCMD NAMES
- to specify authorized TSO/E commands.
- AUTHPGM NAMES
- to specify programs that are authorized when invoked via the CALL command.
- AUTHTSF NAMES
- to specify programs that are authorized when invoked
through the TSO/E service facility and
in most cases are not in AUTHPGM. These programs are primarily those
which expect more complex parameter lists than that of the CALL command
and use parameter 7 of the IKJEFTSR parmlist to supply parameters
for the invoked program. As a general rule, programs in this list
should not accept parameters that are pointers to code what is to
be executed (such as exit routines) as this might introduce an integrity
exposure.Note: Do not place programs from any IBM® products in this table unless specifically instructed to do so by the owning product documentation. For example, do not put IDCAMS in AUTHTSF.
- NOTBKGND NAMES
- to specify commands not supported in the background.
The following example shows required entries in the list of authorized
commands distributed in IKJTSOxx. In this and other lists, you can
add your own entries. The entries can contain comments and must use
continuation symbols when the list continues on the following line.
AUTHCMD NAMES( /* AUTHORIZED COMMANDS */ +
RECEIVE /* */ +
TRANSMIT XMIT /* */ +
LISTB LISTBC /* */ +
SE SEND /* */ +
RACONVRT /* */ +
CONSPROF /* */ +
SYNC /* */ +
TESTAUTH TESTA /* */ +
PARMLIB) /* */
The following example shows required entries in the list of programs
to be authorized when called through the TSO/E service facility.
AUTHTSF NAMES( /* PROGRAMS TO BE AUTHORIZED */ +
/* WHEN CALLED THROUGH THE TSO */ +
/* SERVICE FACILITY. */ +
IKJEFF76) /* */
The following example shows required entries in the list of commands
not supported in the background.
NOTBKGND NAMES( /* COMMANDS WHICH MAY NOT BE */ +
/* ISSUED IN THE BACKGROUND. */ +
OPER OPERATOR /* */ +
TERM TERMINAL) /* */