Clark Morris wrote on 2007-07-01 18:58:35:

> >FDRDSF can print any track on a volume, by cylinder and head (or range)
> Of course this facility should be highly restricted since this
> probably bypasses all dataset access checking.  This comment would
> apply to the other programs mentioned as well.

Indicting FDR on the basis of a "probably bypasses" premise is not fair.
If the program does not do that gratuitously, restricting access can
diminish productivity in your installation.

There is no reason to apply restrictions to SPZAP.  It makes no attempt to
circumvent normal restrictions that apply to the data sets referenced by
its SYSLIB ddname.

Blindly restricting access to a few programs is false security.

Bob Wright - MVS Service Aids

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to