z/VM: CP Commands and Utilities Reference - z/VM - IBM

DEFINE COMMAND / CMD
AFTer_logon
tells CP that the command version you are defining will only be issued by users
after they log onto the system. Most CP commands fall into this category. The
default is AFTER_LOGON.
BEFore_logon
tells CP that the command you are defining will only be issued by users before
they log onto the system. For example, the CP DIAL command can only be
used before logon.
Note: If you specify BEFORE_LOGON, you must specify PRIVCLASSANY
because CP cannot check privilege classes before a user logs on. Thus,
you cannot specify BEFORE_LOGON with the PRIVCLASSES or
IBMCLASS operands.
ANYTime
tells CP that the command version you are defining can be issued by users
both before and after they log onto the system. For example, many systems let
users issue the CP MESSAGE or MSG commands before and after logon.
Note: If you specify ANYTIME, you must specify PRIVCLASSANY because CP
cannot check privilege classes before a user logs on. Thus, you cannot
specify ANYTIME with the PRIVCLASSES or IBMCLASS operands.
AUDIT
tells the external security manager (ESM) to audit the command that you are
defining. When you audit a command, the ESM logs each attempt by users to
issue this command.
DISAble
tells CP not to call the entry points and external symbols associated with this
CP command until you enable it. (For more information about enabling CP
commands, see Usage Note 4.) If omitted, DISABLE is the default.
ENable
tells CP to immediately start calling the entry points and external symbols
associated with this CP command.
EPName name
tells CP the name of the entry point that contains the code to process the
command. The variable name must be a 1- to 8-character string. The first
character must be alphabetic or one of the following special characters: dollar
sign ($), number sign (#), underscore (_), or at sign (@). The rest of the string
can be alphanumeric characters, the 4 special characters ($, #, _, and @), or
any combination thereof.
Note: If you are defining a new command, you must specify EPNAME. If you
are defining a new version of an existing command, specifying EPNAME
is optional. This is because CP only allows one entry point per
command, regardless of how many versions that command has. So,
when you define a new version of an existing command, CP already
knows the entry point name.
The QUERY and SET commands are the only exceptions, because they have
subcommands. Note that CP only allows one entry point per subcommand,
regardless of how many versions that subcommand has.
MAC
tells CP to enable mandatory access control (MAC) for the command that you
are defining. When MAC is enabled for your command, the external security
Chapter 2. CP Commands 135