> -----Original Message-----
> From: IBM Mainframe Discussion List
> [mailto:[email protected]] On Behalf Of Frank Swarbrick
> Sent: Friday, October 29, 2010 10:21 AM
> To: [email protected]
> Subject: Re: USS filename completion et al.
>
> Seems a strange thing to be controlled by security. Among
> other things. I wonder why this is.
>
Would you want any and all users to be able to specify their own UNIX shell?
I'd say, "No". Why? Because you might have a case where you want them to be
restricted in what they can do in a UNIX shell-like environment. There is an
"rsh" shell which is "restricted" as stated:
<quote>
-r
Invokes a restricted shell. (You can also invoke a restricted shell by
using the name rsh). In a restricted shell, you cannot do the following:
* Use the cd command
* Change the values of the variables ENV, PATH, or SHELL
* Use > or >> to redirect output; or specify command names containing /
These restrictions do not apply during execution of your profile files.
</quote>
Or perhaps what you have is a UNIX based program which does some function(s).
You want people to be able to use that, perhaps even via TSO OMVS. But you
don't want them to have general access to a UNIX shell. But if they could
control their own shell, then they could read the books and just do an ALU to
change it. Granted, these "restricted" uses are few, but better to have a
function than not. Also, given how often users muck up their Windows
environment, I'd sooner that they not muck up their z/OS environment as well.
It would be similar to allowing them to use whatever TSO proc they want instead
of the one they are assigned.
--
John McKown
Systems Engineer IV
IT
Administrative Services Group
HealthMarkets(r)
9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * (817)-691-6183 cell
[email protected] * www.HealthMarkets.com
Confidentiality Notice: This e-mail message may contain confidential or
proprietary information. If you are not the intended recipient, please contact
the sender by reply e-mail and destroy all copies of the original message.
HealthMarkets(r) is the brand name for products underwritten and issued by the
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The
MEGA Life and Health Insurance Company.SM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
