On Feb 17, 2006, at 9:55 PM, Joel C. Ewing wrote:
--------SNIP-------------------------
I haven't seen anyone mention only allowing RACF "EXECUTE"
permission to the COBOL compiler loadlib and disallowing READ
access. That rules out casual IEBCOPY duplication of the library
and renaming the compiler. I think that should then insure that
the SYSID-specific PROGRAM access is effective.
Joel,
That may work for the compiler (will have to double check) but it
still has issues with "coblib" (ie LE runtime & Subroutines). You
*HAVE to give out read to that library for the binder.
Ed
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
