A fix is available
APAR status
Closed as new function.
Error description
RSM updates in support of Data Privacy for Diagnostics (DPfD).
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: * * All users running z/OS V2R3 and above * **************************************************************** * PROBLEM DESCRIPTION: * * RSM updates in support of * * Data Privacy for Diagnostics (DPfD). * **************************************************************** * RECOMMENDATION: * **************************************************************** This APAR provides support for tagging 64-bit memory objects for data privacy. A new SENSITIVE keyword will be introduced in the IARCP64, IARST64 and IARV64 services to support this tagging.
Problem conclusion
The IARCP64, IARST64 and IARV64 services are enhanced to support data privacy tagging of 64-bit memory objects through the new SENSITIVE keyword. To determine if your system supports this new function, check the Rce_SensitiveSupportApplied bit prior to invoking the above services. Additional Search Keywords: E8561/K DPFD/K The following documentation describes this new function: In z/OS MVS Programming: Assembler Services Guide, there is a new section under 'IARV64 services' under 'Using the 64-bit address space': | Tagging 64-bit memory objects for data privacy | To control the distribution of sensitive data in | 64-bit memory objects, the creating program can use | the SENSITIVE parameter on IARV64. SENSITIVE=YES | indicates that the memory object contains sensitive | data. Tagged sensitive data in dumps can be secured | and redacted when post processed by Data Privacy | for Diagnostics (DPfD). | | For more information on Data Privacy for Diagnostics | (DPfD), see z/OS MVS Diagnosis: Tools and Service Aids. | | Consider tagging memory objects as SENSITIVE=YES | when they contain data of a personal or confidential | nature that can cause harm to the individual or | business if not safeguarded. For example, regulated | data as defined by GDPR, HIPAA, etc. | | Consider tagging memory objects as SENSITIVE=NO | when they do not contain data of a personal or | confidential nature. | | Consider tagging memory objects as SENSITIVE=UNKNOWN | (which is the default) when you are unsure of the | sensitive nature of the data. In addition, the 'Creating memory objects' section will be updated as follows: Creating memory objects : : Other parameters further define the memory object: - FPROT=YES gives it fetch protection. | - SENSITIVE=YES indicates that it | contains sensitive data. : : z/OS MVS Programming: Extended Addressability Guide will have similar updates in the following sections: - 'IARV64 macro services' under 'Using the 64-bit address space' - 'GETSTOR request' under 'Creating private memory objects' - 'GETSHARED request' under 'Creating shared memory objects' - 'GETCOMMON request' under 'Creating common memory objects' In z/OS MVS Programming: Assembler Services Reference IAR-XCT, the following sections will be updated: IARCP64 - 64-bit cell pool services > Syntax Syntax Description | ,SENSITIVE=UNKNOWN | ,SENSITIVE=YES | ,SENSITIVE=NO IARCP64 - 64-bit cell pool services > Parameters > Parameters for REQUEST=BUILD | ,SENSITIVE=UNKNOWN | ,SENSITIVE=YES | ,SENSITIVE=NO | An optional keyword input that specifies | whether the pool will contain data | that is potentially sensitive. | The default is UNKNOWN. | | ,SENSITIVE=UNKNOWN | Specifies that the sensitivity of this data | is not known. It may or may not contain | sensitive data. | | ,SENSITIVE=YES | Specifies that the pool contains | sensitive data. | | ,SENSITIVE=NO | Specifies that the pool does not | contain sensitive data. IARST64 - 64-bit storage services > Syntax Syntax Description | ,SENSITIVE=UNKNOWN | ,SENSITIVE=YES | ,SENSITIVE=NO IARST64 - 64-bit storage services > Parameters | ,SENSITIVE=UNKNOWN | ,SENSITIVE=YES | ,SENSITIVE=NO | When REQUEST=GET is specified, | an optional keyword input that specifies | whether the memory will contain data | that is potentially sensitive. | The default is UNKNOWN. | | ,SENSITIVE=UNKNOWN | Specifies that the sensitivity of this data | is not known. It may or may not contain | sensitive data. | | ,SENSITIVE=YES | Specifies that the memory contains | sensitive data. | | ,SENSITIVE=NO | Specifies that the memory does not | contain sensitive data. IARV64 - 64-bit virtual storage allocation > REQUEST=GETSTOR option of IARV64 > Syntax Syntax Description REQUEST=GETSTOR | ,SENSITIVE=UNKNOWN | ,SENSITIVE=YES | ,SENSITIVE=NO IARV64 - 64-bit virtual storage allocation > REQUEST=GETSTOR option of IARV64 > Parameters | ,SENSITIVE=UNKNOWN | ,SENSITIVE=YES | ,SENSITIVE=NO | An optional keyword input that specifies | whether the memory object will contain data | that is potentially sensitive. | The default is UNKNOWN. | | ,SENSITIVE=UNKNOWN | Specifies that the sensitivity of this data | is not known. It may or may not contain | sensitive data. | | ,SENSITIVE=YES | Specifies that the memory object contains | sensitive data. | | ,SENSITIVE=NO | Specifies that the memory object does not | contain sensitive data. z/OS MVS Programming: Authorized Services Reference EDT-IXG will have similar updates in the following sections: - 'Syntax' under 'IARCP64 - 64-bit cell pool services' - 'Parameters for REQUEST=BUILD' under 'Parameters' under 'IARCP64 - 64-bit cell pool services' - 'Syntax' under 'IARST64 - 64-bit storage services' - 'Parameters' under 'IARST64 - 64-bit storage services' - 'Syntax' under 'REQUEST=GETSTOR option of IARV64' under 'IARV64 - 64-bit virtual storage allocations' - 'Parameters' under 'REQUEST=GETSTOR option of IARV64' under 'IARV64 - 64-bit virtual storage allocations' - 'Syntax' under 'REQUEST=GETSHARED option of IARV64' under 'IARV64 - 64-bit virtual storage allocations' - 'Parameters' under 'REQUEST=GETSHARED option of IARV64' under 'IARV64 - 64-bit virtual storage allocations' - 'Syntax' under 'REQUEST=GETCOMMON option of IARV64' under 'IARV64 - 64-bit virtual storage allocations' - 'Parameters' under 'REQUEST=GETCOMMON option of IARV64' under 'IARV64 - 64-bit virtual storage allocations' z/OS MVS Diagnosis: Reference has been updated to describe the enhancements to the 'RSMDATA HIGHVIRTUAL subcommand output' section under 'Real Storage Manager (RSM)' under 'Component Reference': The numbers in the top section of the report are hexadecimal. The totals at the bottom of the report are decimal. R S M H I G H V I R T U A L P A G E R E P O R T : : Summary of Memory Objects: | START VSA END VSA S K F X C M V ... | ----------------- ----------------- - - - - - - - ... | 00000048_00000000 00000048_004FFFFF N 0 Y Y U Y U ... : : The fields in the diagnostic data are as follows: : : M An indication as to whether the memory object should be included in an SVC dump when region is requested. Y The virtual storage in the memory object should be captured when SDATA=RGN is specified on the SVC dump request. N The virtual storage of the memory object is not included in the dump when SDATA=RGN is specified on the SVC dump request if not specifically requested. | V | An indication of the sensitive state of | the data in the memory object. | | Y | The data has been tagged as sensitive and | will be redacted when post processed by | Data Privacy for Diagnostics (DPfD). | N | The data has been tagged as non-sensitive | and will not be redacted when post | processed by Data Privacy for Diagnostics | (DPfD). | U | sensitive state cannot be determined from | the dump. The following data areas have been updated in support of this new function: z/OS MVS Data Areas Volume 2 (IAX - ISG) > MVS Data Areas (IAX - ISG) > IAXHP1 information > IAXHP1 heading information Common name: RSM Heap Pool Level 1 block Macro ID: IAXHP1 DSECT name: HP1 Owning component: REAL STORAGE MANAGER (SC1CR) Eye-catcher ID: HP1 Offset: 0 Length: 6 bytes Storage attributes: Virtual Storage: YES | Subpool: 245 (ESQA) or 233 (ELSQA) Key: 0 Data Space: NO | Residency: Below 2G Size: ??? bytes | Created by: IAXCY Pointed to by: ECVTHP1 FIELD OF THE ECVT DATA AREA STCBHP1 FIELD OF THE STCB DATA AREA | Hp1a_Hp1@ field of the HP1A data area Serialization: CSG to set a pointer in the HP1. Loser | frees the HP1A that it would have pointed to. Function: The HP1 contains an array of anchors | to Heap Pool 1A blocks. Each entry in the HP1 represents a set of storage characteristics: Fetch protected or Not Fetch protected System Key 0-7 for common HP1, Key 0-15 for private HP1 Type - pagable, DREF, Fixed Note that FIXED TYPE is now supported in key 0 to 7 Also DREF TYPE was and still supported in key 0 to 7 IAXHP1 information > IAXHP1 mapping Table 24: Structure HP1. Offset Offset Type Len Name(Dim) - Description Dec Hex 8 (8) UNSIGNED 1 HP1ENTRIES - Number of | entries in the Hp1_Hp1a@ array. | 16 (10) ADDRESS 8 HP1_HP1A@(*) - Array of | pointers to HP1As Serialization: CSG used to set each pointer in | Hp1_Hp1a@ HP1 when attribute set is first used. Table 25: Constants for IAXHP1. Len Type Value Name - Description 4 DECIMAL 47 HP1#CATTRHI - Highest index into | HP1_HP1A@ for the common HP1. 4 DECIMAL 63 HP1#PATTRHI - Highest index into | HP1_HP1A@ for private HP1s. IAXHP2 information > IAXHP2 heading information Common name: RSM Heap Pool Level 2 block Macro ID: IAXHP2 DSECT name: HP2 Owning component: REAL STORAGE MANAGER (SC1CR) Eye-catcher ID: HP2 Offset: 0 Length: 6 bytes Storage attributes: Virtual Storage: YES Key: 0 Data Space: NO | Residency: Below 2G Size: ??? bytes Created by: IARCYSTE Pointed to by: | Hp1a_Hp2@ field of the HP1A data area Serialization: CSG to set a pointer in the HP2. Loser frees the HP2 that it would have pointed to. Function: The HP2 contains an array of anchors to Heap Pool Header blocks. Each entry in the HP2 represents a pool of storage cells of a fixed size. Range 64 bytes to 128K in multiples of 2. IAXHP2 information > IAXHP2 mapping Table 26: Structure HP2. Offset Offset Type Len Name(Dim) - Description Dec Hex | 8 (8) ADDRESS 8 HP2_HP1A@ - Address of | HP1A which owns this HP2. IAXV64C information > IAXV64C mapping Table 52q Structure . Offset Type Len Name(Dim) - Description Dec Hex | 0 (0) BITSTRING 0 IARV64AbendRsnPLSensitiveNotGet - | "X'00200200'" Meaning: The | parameter list passed to the | IARV64 service specified the | SENSITIVE keyword with a request | other than GETSTOR, GETSHARED or | GETCOMMON. Action: If the MODIFY | form of the IARV64 service was | used to build the parameter list, | check to see if the SENSITIVE | keyword was specified with a | request other than GETSTOR, | GETSHARED or GETCOMMON. If not, | check for a possible storage | overlay of the parameter list. Table 53: Cross Reference for IAXV64C. Name Offset Hex Tag | IARV64AbendRsnPLSensitiveNotGet 0 200200 z/OS MVS Data Areas Volume 3 (ITK - RQE) > MVS Data Areas (ITK - RQE) > RCE information RCE programming interface information ONLY the following fields are part of the programming interface information: | Rce_SensitiveSupportApplied RCE mapping Table 809: Structure RCE. Offset Type Len Name(Dim) - Description Dec Hex 333 (14D) CHARACTER 1 RCEFLAGS2 | .... ..1. Rce_SensitiveSupportApplied | "X'02'" IARV64, IARCP64, IARST64 | SENSITIVE keyword is supported | on this system | .... ...1 Rce_ChangeAttributeApplied | "X'01'" REQUEST=CHANGEATTRIBUTE | is supported on this system Table 810: Cross Reference for RCE. Name Offset Hex Tag | Rce_ChangeAttributeApplied 14D 1 | Rce_SensitiveSupportApplied 14D 2
Temporary fix
Comments
APAR Information
APAR number
OA57633
Reported component name
RSM - REAL STOR
Reported component ID
5752SC1CR
Reported release
7B0
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2019-05-23
Closed date
2019-09-05
Last modified date
2020-02-19
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ00688 UJ00699
Modules/Macros
IAXVU IAXRG IAXVS IARV64 IAXZHP2 IAXZTRID IAXVM IAXVJ IAXVH IEAVETFD IAXZLCOM IAXVD IAXZXHP1 IAXZGPQP IHAPVT IARCP64 IAXDI IAXHHV00 IAXZRACV IAXZLSHR IAXSV IAXRA IAXZHP1 IAXV9 IAXSY IAXV7 IAXV6 IAXMJ IAXCY IARMN IAXMP IAXV64C IAXMR IAXXX IAXSERVC IARRCE IAXZGPW2 IAXCJ IAXCH IAXCG IAXHHV30 IAXIPCSP IAXZHP1A IARST64 IAXZTXTC IAXZSTK2 IAXZVLVS IAXWS IAXIS
GA320904XX | GA320936XX | GA320937XX | SA231368XX | SA231370XX |
SA231373XX | SA231394XX |
Fix information
Fixed component name
RSM - REAL STOR
Fixed component ID
5752SC1CR
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7B0","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":null,"label":null},"Product":{"code":"SG19O","label":"APARs - MVS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7B0","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
27 March 2020