CSVH0957E   Problem(s) were found with data sets in the APF list.

Explanation

Check CSV_APF_EXISTS found a problem in the APF list.

CSVH0955I has been placed in the message buffer to describe the APF list entry error and condition that caused the exception.

A potential system integrity risk exists when a data set cannot be allocated using the criteria specified in the system APF list. If this data set were created it would be considered APF-authorized.

The error is one of the following conditions:
DS is alias
The data set name is an alias of another data set.

An APF list entry that has the alias of a data set rather than the real data set does not APF-authorize the data set.

DS is migrated
The data set is migrated. APF-authorized data sets should not be migrated because they might not be restored to the same volume.
DS is SMS-managed
The data set is SMS-managed, but the APF list entry specified a volume.

If the APF list entry represents a SMS-managed data set but has specified the volume parameter, the data set would not be authorized if it were moved to a different volume. In order for DFSMShsm to verify APF-authorization properly, the APF list entry must indicate that the data set is SMS-managed.

DS not SMS-managed
The data set is not SMS-managed, but the APF list entry specified a SMS-managed data set.

This entry does not result in the cataloged data set being APF-authorized. The APF list entry must identify the volume that contains the data set when a data set is not SMS-managed.

Volume not found
The specified volume could not be found.
DS not found
Indicates that either the data set was not on the volume specified in the APF list entry or the data set name is an alias.

When the APF list entry indicates a *SMS* volume, the catalog entry for the data set is in error. If this data set were to be created it would be considered APF-authorized.

Allocation failure
The data set could not be allocated.

System action

This check is performed against the current APF list. The system continues processing.

Operator response

Report this problem to the system programmer.

System programmer response

Correct the error for each APF list entry reported by CSVH0955I in the message buffer.

Problem determination

See CSVH0955I in the message buffer which lists the APF list entries that are in error.

To see additional messages that describe an allocation failure, use the MODIFY hzsproc command to request debug mode and run the check again. There might be a temporary problem such as the data set's being in use by another job.

You can use the following commands:

F hzsproc,UPDATE,CHECK(IBMCSV,CSV_APF_EXISTS),DEBUG=ON
F hzsproc,RUN,CHECK(IBMCSV,CSV_APF_EXISTS)

Look in he message buffer to see diagnostic messages, like HZS1093I, that describe an allocation failure.

Module

CSVHCGL2

Source

Contents supervision (CSV)

Reference Documentation

For additional information about APF-authorization see:

"Protecting the System" in z/OS MVS Programming: Authorized Assembler Services Guide

"Managing system security -- APF-authorized library list" in z/OS MVS Initialization and Tuning Reference

"PROGxx Using the APF statement" in z/OS MVS Initialization and Tuning Reference

"SETPROG command Updating the APF list" in z/OS MVS System Commands

"Displaying Entries in the List of APF-Authorized Libraries" in z/OS MVS System Commands

"Syntax and Parameters for HZSPRMxx and MODIFY hzsproc command" in IBM Health Checker for z/OS User's Guide

For information about how to view messages in the message buffer, see Working With Check Output in IBM Health Checker for z/OS User's Guide.

Automation

N/A

Routing Code

See note 35.

Descriptor Code

12 is the default set by this check. See note 1.