Are you talking about the install jobs themselves or the various tasks that are part of a running system.
The user submitting the install jobs (actually the USER= associated with the job) does not need UID(0) but they must have BPX.SUPERUSER. The jobs themselves will issue an SU as needed. Quite a few releases ago this was not true and the USER= had to be UID(0), not sure when this went away but it was many years ago. The various tasks that make up a working system each has their own need for UID(0) documented if it is needed. -----Original Message----- Hal Merritt Sent: Tuesday, October 26, 2010 3:09 PM To: IBM-MAIN@bama.ua.edu Subject: [IBM-MAIN] Necessity of UID zero. Cross posed to MVS. Sorry, I don't have an account in the UNIX list. I am in the crossfire between auditors insisting that nothing needs UID 0 and sysprogs insiting that everything in their serverpac jobs must have UID zero as coded. Any suggestions? Thanks. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
