Milestone 3: Preparing for Configuration
Related topics
This milestone contains tasks that help establish security procedures and prepare for configuration of Code Coverage for both a new install and an upgrade.
This milestone requires the z/OS Security Administrator.
Task 3.1: Provide users access to product runtime libraries and files
You must allow user access to the libraries listed in the following table:
Code Coverage Library Security Requirements
Library | Type | Access required by users |
|---|---|---|
INSTALL | Installation library | NO ACCESS |
SLXVLOAD | Load library | READ/EXECUTE |
SLXVCLIB | CLIST library | READ |
SLXVMENU | Messages library | READ |
SLXVPENU | Panel library | READ |
SLXVSENU | Skeleton library | READ |
SLXVTABL | Tables library | READ |
SLXVMJPN | Messages library | READ (if installing double-byte character support) |
SLXVPJPN | Panels library | READ (if installing double-byte character support) |
Task 3.2: Allow access for the Code Coverage installer
- The Code Coverage installer requires UPDATE access to the following Components:
- Your BMC PARMLIB
- Code Coverage installation library SLXVINST.
- The Code Coverage installer also requires READ access to the following components:
- For an upgrade, run-time libraries from prior release of Code Coverage
- Code Coverage SMP/E controlled libraries
- Output of the executing BMC AMI Common Mainframe Services Controller(CMSC) started task.
Task 3.3: Enable use with CA ACF2
If you do not use CA ACF2, go to Milestone 4.
Code Coverage module XVTTARIO issues a STATUS=ACCESS RACROUTE call before deleting a Repository member. IBM standards do not require APF authorization for STATUS=ACCESS, nor do RACF or CA Top Secret. However, by default, CA ACF2 requires any module issuing a RACROUTE call to be APF authorized. As a result, when XVTTARIO issues a STATUS=ACCESS RACROUTE call, CA ACF2 abends the task with a S047.
- CA ACF2 lets you define the specific calls for which the authorization check for STATUS=ACCESS will be bypassed. See to the CA ACF2 documentation and code the necessary SAFDEF record to enable Code Coverage use with CA ACF2.
- SAFDEF requires the name of the program (not the sub-module). So although XVTTARIO does the access, it is called by programs XVTTADEL, XVTTAEXP, XVTTASDL, and CXASINIT.