Skip to content
CA Top Secret® for z/OS - 16.0
Documentation powered by DocOps

LIBRARY Keyword—Specify Privileged Program Library

Last update March 23, 2015

Valid on z/OS.

Use the LIBRARY keyword to specify libraries or library prefixes in which a privileged program must reside. LIBRARY is only valid when specified with the permission of DSNAMEs.

If PRIVPGM is not specified with LIBRARY, then the executing program must come from a link listed library or the link pack area (LPA). The program cannot be loaded from a JOBLIB, STEPLIB, or TASKLIB.

If PRIVPGM is specified with LIBRARY, then the executing program must come from the library specified in the PERMIT command function.

Although no specific authority is required, DSNAME(XAUTH) authority to specify LIBRARY for data sets that are owned.

This keyword is used with the PERMIT command.

This keyword has the following format:

TSS PERMIT(acid) DSNAME(p-fix)
                 PRIVPGM(p-fix)
                 LIBRARY(p-fix)
  • Prefix length
    Two to 44 characters
  • Capacity of list
    One to three prefixes or names per CA Top Secret command

The library specified in the command must be one of the following types:

  • Job library as referenced via the //JOBLIB DD statement
  • Step library as referenced via the //STEPLIB DD statement
  • Task library such as that used with TSO CALL

Example: LIBRARY Keyword

This example permits use of production data sets, but only if program PN077 is used for access and the program comes from a specific library:

TSS PERMIT(HTEE4) DSNAME(PROD)
                  PRIVPGM(PN077)
                  LIBRARY('PROD.DLIB')

When a program resides in both the LINKLIST and the TASKLIB and both are referenced by a job, two PERMITs are necessary.

This example PERMITs the use of data sets when program PN077 is in the LINKLIST and in a TASK LIBRARY named PROD.DLIB:

TSS PERMIT(user) DSNAME('PROD')
                 ACCESS(READ)
                 PRIVPGM(PN077)
TSS PERMIT(user) DSNAME('PROD')
                 ACCESS(READ)
                 PRIVPGM(PN077)
                 LIBRARY('PROD.DLIB')
Was this helpful?

Please log in to post comments.

  1. JOSEF THALER
    2017-08-08 11:45

    Hello CA - Kris, can "LIBRARY(p-fix)" also be specified as "LIBRARY(p-masked-dsnname-pattern)" e.g. LIBRARY(PROD.V+++++.LOAD) Thanks! Josef

    1. Flanagan, Amy C
      2017-08-09 11:44

      Hi Josef,

      I shared your questions with our development team and received the following response:

      The prefix specified as part of a LIBRARY(p-fix) object should not contain any masking characters because they will not be translated according to masking rules, as they are for a resource prefix.  When LIBRARY is used, the length of each prefix is used to perform an executed compare against the library name associated with the privileged program.


      If we can be of further assistance, please let us know.

      Regards,

       

      Amy


  2. Flanagan, Amy C
    2017-08-08 12:40

    Hi Josef,

    I'm covering for Kris and have emailed a couple of our Top Secret developers with your question. I'll post a response for you as soon as I hear back. 

    Regards, 

     

    Amy