z/OS System REXX Security.

Document ID : KB000019496
Last Modified Date : 14/02/2018
Show Technical Document Details


Why is acid *BYPASS* assigned to AXR STC when programs IEEPRWI2 or IEEVSTAR are in control?


Module IEEPRWI2 is the Started Task Control routine.

This module is attached by Region Control Task (rct) and first of all executes a RACROUTE macro with some special attributes.

These attributes identifies the address space as a 'system address space'.

A system address space should use a powerful acid that has full access to everything and the security product CA-Top Secret. It builds a dummy acid and ANY accesses done by this Acid should be allowed without any rule validation. This is why the BYPASS Acid appears in TSSUTIL when IEEPRWI2 is in control.