z/OS System REXX Security.

Document ID : KB000019496
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

Why is acid *BYPASS* assigned to AXR STC when programs IEEPRWI2 or IEEVSTAR are in control?

Solution:

Module IEEPRWI2 is the Started Task Control routine.

This module is attached by Region Control Task (rct) and first of all executes a RACROUTE macro with some special attributes.

These attributes identifies the address space as a 'system address space'.

A system address space should use a powerful acid that has full access to everything and the security product CA-Top Secret. It builds a dummy acid and ANY accesses done by this Acid should be allowed without any rule validation. This is why the BYPASS Acid appears in TSSUTIL when IEEPRWI2 is in control.