Define the RACF definitions to enable the GPMSERVE Started Task for Authorization Code zero (AC=0)

Description

Starting with z/OS V2R1, the RMF GPMSERVE Started Task runs as a module linked with Authorization Code zero (AC=0).

Table 1 provides more details about this migration action. Use this information to plan your changes to the system.

Table 1. Information about this migration action
Element or feature:	RMF
When change was introduced:	z/OS V2R1.
Applies to migration from:	z/OS V1R13.
Timing:	Before the first IPL of z/OS V2R2.
Is the migration action required?	Yes
Target system hardware requirements:	None.
Target system software requirements:	None.
Other system (coexistence or fallback) requirements:	None.
Restrictions:	None.
System impacts:	None.
Related IBM Health Checker for z/OS check:	None.

Steps to take

Follow these steps:

Define READ Access to the BPX.SERVER Facility for the GPMSERVE userid:
```
PERMIT BPX.SERVER CLASS(FACILITY) ID(GPMSERVE) ACCESS(READ)
```

Ensure that all programs loaded by GPMSERVE are defined to PROGRAM CONTROL:

RDEFINE PROGRAM GPM* ADDMEM(’SYS1.SERBLINK’//NOPADCHK) UACC(READ)
RDEFINE PROGRAM ERB* ADDMEM(’SYS1.SERBLINK’//NOPADCHK) UACC(READ)
RDEFINE PROGRAM CEEBINIT ADDMEM(’CEE.SCEERUN’//NOPADCHK) UACC(READ)
RDEFINE PROGRAM IEEMB878 ADDMEM(’SYS1.LINKLIB’//NOPADCHK) UACC(READ)
RDEFINE PROGRAM CELHV003 ADDMEM(’SYS1.SCEERUN2’//NOPADCHK) UACC(READ)
RDEFINE PROGRAM C128 ADDMEM(’SYS1.SCEERUN2’//NOPADCHK) UACC(READ)
RDEFINE PROGRAM CELHDCPP ADDMEM(’SYS1.SCEERUN2’//NOPADCHK) UACC(READ)
SETROPTS WHEN(PROGRAM) REFRESH

This action is only needed when GPMSERVE is not already defined to PROGRAM CONTROL. In previous RMF Releases this was recommended but not required since the GPMSERVE module was linked with Authorization Code one (AC=1).

Define READ access to the BPX.STOR.SWAP FACILITY class profile for the GPMSERVE userid.
```
PERMIT BPX.STOR.SWAP CLASS(FACILITY) ID(GPMSERVE) ACCESS(READ)
```

Reference information

For more information, see z/OS RMF User's Guide.