Hazardous Files

The RESTRICT (Set Restrictions) system command is intended to aid control of the importation of potentially hazardous files. System files, compilers, backup files, and code files can, by their nature, compromise the security of the computer system, and so are considered potentially hazardous. Specifically, a file is potentially hazardous if the value of its FILEKIND attribute is 63 (code file) or less.

The HOSTSRESTRICTED system security option places restrictions on the importation from foreign hosts of system files, compilers, backup files, and code files, and on the exportation to foreign hosts of program dump files. When the HOSTSRESTRICTED option is TRUE, all remote hosts are treated as restricted hosts. Only a user with security-administrator status can open hazardous files from a restricted host.

For information about restricted files, see “RESTRICT (Set Restrictions) Command” in Controlling File Access. For information about the HOSTSRESTRICTED option, see Controlling System Security.

Potentially hazardous files, along with their mnemonic values for FILEKIND, are as follows.

Number

Mnemonic

Number

Mnemonic

3

CATALOG

31

MCPCODEFILE

4

BACKUPPRINTER or BACKUPDISK

32

ALGOLCODE

6

SYSTEMDIRFILE

33

COBOLCODE

7

JOBDESCFILE

34

FORTRANCODE

8

ARCHIVELOG

35

XALGOLCODE

9

BOOTCODE

36

PLICODE

10

BACKUPVSID

37

JOVIALCODE

11

DASDLDATA

39

ESPOLCODE

14

RESTRICTEDFILE

40

DCALGOLCODE

15

XDISKFILE

41

BASICCODE

16

KEYSFILE

42

XFORTRANCODE

17

BACKUPPUNCH

43

JOBCODE

18

REMOTEBACKUP

44

DMALGOLCODE

19

REMOTEAUDIT

45

NEWPCODE

20

COMPILERCODEFILE

46

SANSCODE

21

CHECKPOINTFILE

48

RPGCODE

22

CPJOBFILE

50

FORTRAN77CODE

23

DCPCODE

53

SORTCODE

24

NDLCODE

54

COBOL74CODE

25

NDLIICODE

55

CCCODE

26

RECOVERYFILE

57

COBOL85CODE

27

SCHEDULEFILE

58

CPPCODE

28

INFOFILE

59

PASCAL83CODE

29

LIBRARYCODE

62

BOUNDCODE

30

INTRINSICFILE

63

CODEFILE