I have to question why you would be doing file stuff while in key zero. It seems to me that you would not only run into the security issues that Walt noted, but also run a higher risk to the system should something go wrong in your program.
I'm not questioning your need to be in key zero for your business mission, but I would wonder why you wouldn't want to stay out of key zero until you actually need to be there. You switch, do the sacred function, then switch back. I once worked with an application that needed to be in key zero for something and just stayed there the whole time. I seem to recall this ended up being a PITA. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Andy Coburn Sent: Thursday, June 23, 2011 10:02 AM To: [email protected] Subject: Re: Obtaining System Information from a COBOL program ..snip Note: VSAM OPEN routines bypass RACF security checking if the program issuing OPEN is in supervisor state or protection key 0." </quote> I call your attention to the last paragraph. I have been hoping that IBM will find a way to eliminate this restriction so I won't have to do my own RACROUTE REQUEST=AUTH for every VSAM data set I open when I'm in supervisor state or key zero. I would imagine that not very many COBOL programs run in supervisor state or key zero, but Walt Farrell put on his security hat (his words) so I thought it might be proper to continue his line of thought. I apologize in advance if I am out of line here. Andy Coburn NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
