> -----Original Message-----
> From: IBM Mainframe Discussion List On Behalf Of Ed Gould
>
> On Feb 17, 2006, at 9:55 PM, Joel C. Ewing wrote:
> --------SNIP-------------------------
>
> > I haven't seen anyone mention only allowing RACF "EXECUTE"
> > permission to the COBOL compiler loadlib and disallowing READ access.
> > That rules out casual IEBCOPY duplication of the library and renaming
> > the compiler. I think that should then insure that the SYSID-specific
> > PROGRAM access is effective.
>
> That may work for the compiler (will have to double check)
> but it still has issues with "coblib" (ie LE runtime &
> Subroutines). You *HAVE to give out read to that library for
> the binder.
So?? LE is no longer a "program product"; it's an integral part of z/OS.
Besides, LE doesn't compile anything.
-jc-
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
