A more common example (and well documented within the product) is
Java.  The installer must have those attributes if they aren't running
as UID(0). 

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS       
mailto:[email protected]                                          
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/


On Mon, 1 Nov 2010 16:11:34 -0500, Doug Henry <[email protected]> wrote:

>If you do not have UID(0) then you also need read access to
>BPX.FILEATTR.PROGCTL BPX.FILEATTR.APF and BPX.FILEATTR.SHARELIB.
>
>These are particulary nasty ones because SMP/E will finish with a 0 return
>code but you will break the product and you will not have a clue of what's
>wrong. An example product that needs these is z/OSMF.
>
>Doug
>
>On Tue, 26 Oct 2010 15:18:02 -0400, Ken Porowski
><[email protected]> wrote:
>
>>
>>The user submitting the install jobs (actually the USER= associated with
>>the job) does not need UID(0) but they must have BPX.SUPERUSER.  The
>>jobs themselves will issue an SU as needed.
>>
>>Quite a few releases ago this was not true and the USER= had to be
>>UID(0), not sure when this went away but it was many years ago.
>>
>>The various tasks that make up a working system each has their own need
>>for UID(0) documented if it is needed.
>>
>> I am in the crossfire between auditors insisting that nothing needs UID
>>0 and sysprogs insiting that everything in their serverpac jobs must
>>have UID zero as coded.
>>
>
>----------------------------------------------------------------------
>For IBM-MAIN subscribe / signoff / archive access instructions,
>send email to [email protected] with the message: GET IBM-MAIN INFO
>Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to