CROSSREF User Program

CROSSREF is a tool used to display symbol reference information. CROSSREF is used on source code files, unlike BINDER, which produces cross-reference information from object files (entry points and common data blocks only).

CROSSREF produces a cross-reference listing of selected identifiers in source code files. It can be used with C, COBOL85, FORTRAN, Pascal, SCOBOL, and TAL.

CROSSREF uses the compiler to scan the source file and gather information about the identifiers, which it then combines, and sorts into a single, alphabetized cross-reference listing. Each entry includes information about:

Identifier name

Identifier type (label, variable, and so forth)

Identifier reference type (for example, a read or write reference)

Identifier location (source file and line number).

The components of CROSSREF are:

CROSSREF

SYMSERV

CROSSREF

Interactive program used to obtain cross-reference data from source files.

RISK CROSSREF is a reporting utility only, with no destructive commands; it poses minimal risk.

AP-ADVICE-CROSSREF-01 CROSSREF is usually used as a development tool, and may be secured more strictly on a secure system.

SYMSERV

The Compiler-dependent form of CROSSREF, SYMSERV cannot be invoked directly by users.

Securing CROSSREF

BP-FILE-CROSSREF-01 CROSSREF should be secured "UUNU".

BP-OPSYS-OWNER-02 CROSSREF should be owned by SUPER.SUPER.

BP-OPSYS-FILELOC-02 CROSSREF must reside in $SYSTEM.SYSTEM.

BP-FILE-CROSSREF-02 SYMSERV should be secured "UUNU".

BP-OPSYS-OWNER-02 SYMSERV should be owned by SUPER.SUPER.

BP-OPSYS-FILELOC-02 SYMSERV must reside in $SYSTEM.SYSTEM.

If available, use Safeguard software or a third party object security product to grant access to CROSSREF only to users who require access in order to perform their jobs.

BP-SAFE-CROSSREF-01 Add a Safeguard Protection Record to grant appropriate access to the CROSSREF object file.

	Discovery Questions	Look here:
OPSYS-OWNER-02	Who owns the CROSSREF object file?	Fileinfo
OPSYS-OWNER-02	Who owns the SYMSERV object file?	Fileinfo
FILE-POLICY	Who is allowed to execute CROSSREF on the system?	Policy
FILE-CROSSREF-01 SAFE-CROSSREF-01	Is the CROSSREF object file correctly secured with the Guardian or Safeguard system?	Fileinfo Safecom
FILE-CROSSREF-02	Is the SYMSERV object file secured correctly?	Fileinfo

Related Topics

Securing Applications

BINDER