Farley, Peter x23353 wrote:
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Chase, John
<Snipped>
-----Original Message-----
From: IBM Mainframe Discussion List On Behalf Of Mark Jacobs
<Snipped>
If you are at zOS 1.7 or above this command seems to work;
D CEE,CEEDOPT
CEE3745I 13.03.12 DISPLAY CEEDOPT
CEE=(00)
Doesn't work if you haven't migrated to using the PARMLIB member
CEEPRMxx.
Also doesn't work if you don't have OPERATOR authority (like me and many
others on the list).
I never understood the auditor/sysprog paranoia about letting "normal" users
have access to the operator "Display" commands, but I also understand that
sufficiently fine-grained definitions of authority that permit "Display" and
nothing else (and "$D" for JES2) haven't been available.
Good point. However THIS IS NOT TRUE.
There are commands, which *cannot* be protected using OPERCMDS profiles.
If you have DB2 then you can stop it, even with FORCE without asking any
RACF profile.
Simply try -DSN1 STOP DB2 (command prefix can be different).
It's not MVS command, but can be issued from any MVS console, i.e. like
JES2 commands.
So, you can protect who can display what, very fine-grained control, but
you cannot protect DB2 against "accidental shutdowns".
In fact, the quilty is DB2, because DB2 should ask RACF before command
is accepted.
--
Radoslaw Skorupka
Lodz, Poland
--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl
Sąd Rejonowy dla m. st. Warszawy
XII Wydział Gospodarczy Krajowego Rejestru Sądowego,
nr rejestru przedsiębiorców KRS 0000025237
NIP: 526-021-50-88
Według stanu na dzień 01.01.2007 r. kapitał zakładowy BRE Banku SA (w całości
opłacony) wynosi 118.064.140 zł. W związku z realizacją warunkowego
podwyższenia kapitału zakładowego, na podstawie uchwał XVI WZ z dnia 21.05.2003
r., kapitał zakładowy BRE Banku SA może ulec podwyższeniu do kwoty 118.760.528
zł. Akcje w podwyższonym kapitale zakładowym będą w całości opłacone.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
