In <45d79eacefba9b428e3d400e924d36b902deb...@iwdubcormsg007.sci.local>, on
12/15/2009
at 11:21 AM, "Thompson, Steve" <[email protected]> said:
>Now, let's assume that you do not have permission to that file. BUT, you
>know that if you build a "long name" that uses your userid as the HLQ and
>prepend that to the DSN, you will cause SAF to be passed the LONG name,
>not the real name,
How? Where will SAF get the alias name, and why?
>Without a tape system, this is a back door into reading tape data that
>is not yours, if the tape label is 17 characters long.
If you're talking tape then how can the name be held in the VTOC, which
exists only for DASD volumes? If you drop that assumption and really do
mean tape, the 17 character truncation is just as much an issue for 44
character names as it would be for long alias names.
--
Shmuel (Seymour J.) Metz, SysProg and JOAT
ISO position; see <http://patriot.net/~shmuel/resume/brief.html>
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
