Providing Security for JES XCF

The JESXCF address space accesses system resources as part of its normal operation. In order to satisfy security requirements when accessing these resources, an installation must define the JESXCF address space as trusted. The member name/procedure name and jobname associated with the JESXCF address space is JESXCF.

To properly define JES XCF using the RACF started procedures table ICHRIN03 (at RACF 1.9.2 or lower), add an entry such as the following to your started procedures table.

        DC    CL8'JESXCF'     PROCEDURE NAME
        DC    CL8'userid'     USERID
        DC    CL8'grpname'    GROUP NAME
        DC    XL1'40'         ATTRIBUTE BYTE
        DC    XL7'00'         RESERVED

Beginning with RACF 2.1, you can create a profile in the STARTED class with member name JESXCF and jobname JESXCF. Be certain to specify the TRUSTED(YES) keyword. Refer to z/OS Security Server RACF Security Administrator's Guide for further information on defining a component to the RACF started procedures table or using the STARTED class.