> -----Original Message----- > From: IBM Mainframe Discussion List > [mailto:[EMAIL PROTECTED] On Behalf Of Steve Horein > Sent: Thursday, March 16, 2006 1:36 PM > To: IBM-MAIN@BAMA.UA.EDU > Subject: UID(0) and concurrent processes > > > Hello listers, > While installing an upgrade to a product, the instructions indicate to > assign UID(0) to an ID. The product in question involves > running a Java > server, and the webserver task supporting the Java server > likewise has this > requirement. When questioning Support for the product, it was > mentioned that > in Topic 5.4.1 of z/OS V1R6.0 UNIX System Services Planning, bullet 3 > explains the reason: > > "5.4.1 What can superusers do? > > Superusers can do the following: > * Pass all security checks so that the superuser can > access any file in > the file system. > * Manage processes > * Have an unlimited number of processes running > concurrently. For a > started procedure, this is true only if it has a UID of 0. It > is not true > for a trusted or privileged process with a different UID. > * Change identity from one UID to another. > * Use setrlimit() to increase any of the system limits > for a process. > > The parent process propagates its UID and TRUSTED or > PRIVILEGED attribute to > a forked child process. Thus, a UID of 0 is propagated to a > forked child." > > Does this mean that a non UID(0) ID cannot have concurrently running > processes? I am not yet at z/OS 1.6, and the command D > OMVS,A=ALL from my > system shows a number of processes from IDs that do not have > a UID assigned > at all! Most do have a UID assigned, and most that have > concurrent processed > do have UID(0). My goal is to have more unique IDs, and utilize either > UNIXPRIV or BPX.SUPERUSER. Will I get bit when I move to z/OS 1.6?! > > Thanks, > Steve Horein
I am running on z/OS 1.6. I have many concurrent processes running with my ID, which has a UID of 1009. The maximum per UID is set in BPXPRMxx member with the MAXPROCSYS(nnnn) parameter. That sets the maximum number of concurrent processes for a single UID. What the bullet you mentioned means is that UID(0) is not limited by MAXPROCSYS, but can have an "unlimited" number of processes running, regardless of the setting in MAXPROCSYS. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
