We have our own-developed programs, which upgrade themselves automatically
from our ftp server. (z/OS 1.4 with RACF).
Each program has its own userid (due to security and local storage
management reasons) with ftp access.
Each program has its own HFS mounted under /usr/lpp/, eg.
/usr/lpp/fejlsws/
It works well, but due to unix file access rights (eg. others: r-x)
and RACF UACC read, users can read much more files than they should.
So I want to restrict each user to access contents under it's home
directory only. eg. /usr/lpp/fejlsws/.
Not more, no access to / or other directories just under
/usr/lpp/fejlsws/.
--
Üdvözlettel/Best regards: FEJOS Tamas (TMS)
z/OS Systems Programmer, http://www.ferrinfo.hu
gpg --keyserver hkp://pgp.mit.edu --recv-keys CDC7F2D3
_______________________________________________________________________
Build a computer that even a fool can use, and only a fool will use it.
FEJOS Tamas wrote:
> Thank you!
>
> Is there any easier method?
IMHO it depends on what you exactly need.
It can be done using chmod + RESTRICTED attribute + some RACF commands.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
