On Jun 17, 2010, at 11:59, Tony Harminc wrote: > > > Have you looked at the UNIX services like fork() and spawn() ? You can > certainly use them to run an authorized program in another address > space even if your invoker is not authorized. > I regularly run a Rexx EXEC under UNIX which uses the "address TSO" available since ca. z/OS 1.4 to start a TSO address space in which I can CALL authorized programs. A bit tedious, since I must ALLOCATE all needed DDNAMEs anew. And the TSO address space doesn't inherit descriptors from the caller. (Previously, I used a "magic" SVC; glad to be able to get legitimate.)
-- gil
