IBM-supplied default for IEAAPFxx

If the APF list is not explicitly defined (via the APF system parameter, the default IEAAPF00 parmlib member, or APF statements within PROGxx via the PROG system parameter), then only SYS1.LINKLIB and SYS1.SVCLIB is APF-authorized during the IPL. Additionally, if the default for the LNKAUTH system parameter is taken (LNKAUTH=LNKLST) or is specified in IEASYSxx or by the operator, libraries in the LNKLST concatenation are also authorized when accessed as part of the LNKLST concatenation.

Note:
  1. When LNKAUTH=APFTAB is specified, the system considers SYS1.MIGLIB, SYS1.CSSLIB, SYS1.SIEALNKE and SYS1.SIEAMIGE to be APF-authorized when they are accessed as part of the concatenation (even when they are not included in the APF list).
  2. In addition, any module in the link pack area (pageable LPA, modified LPA, fixed LPA, or dynamic LPA) is treated by the system as though it came from an APF-authorized library. Ensure that you have properly protected SYS1.LPALIB and any other library that contributes modules to the link pack area to avoid system security and integrity exposures, just as you would protect any APF-authorized library.
Parent topic: IEAAPFxx (authorized program facility list)