If the APF list is not explicitly defined (via the APF system parameter,
the default IEAAPF00 parmlib member, or APF statements within PROGxx via
the PROG system parameter), then only SYS1.LINKLIB and SYS1.SVCLIB is
APF-authorized during the IPL. Additionally, if the default for the
LNKAUTH system parameter is taken (LNKAUTH=LNKLST) or is specified
in IEASYSxx or by the operator, libraries
in the LNKLST concatenation are also authorized when accessed as part
of the LNKLST concatenation.
Note: - When LNKAUTH=APFTAB is specified, the system considers SYS1.MIGLIB,
SYS1.CSSLIB, SYS1.SIEALNKE and SYS1.SIEAMIGE to be APF-authorized
when they are accessed as part of the concatenation (even when they
are not included in the APF list).
- In addition, any module in the link pack area (pageable LPA, modified
LPA, fixed LPA, or dynamic LPA) is treated by the system as though
it came from an APF-authorized library. Ensure that you have properly protected
SYS1.LPALIB and any other library that contributes modules to the
link pack area to avoid system security and integrity exposures, just
as you would protect any APF-authorized library.