On Mon, 12 Jan 2009 10:39:17 +0100, Barbara Nitz <[email protected]> wrote:
>Working with active storage only gives you a view of the storage that your
address space sees: All 64bit that *you* own, including the common storage
that you can access if you're authorized. IPCS was never designed to 'look
into' the active *private* storage of another address space.
>
>Now, addresses above 4GB are viewable even in another address space *if*
you have READ access to the FACILITY class profile BLSACTV.ADDRSPAC. There
may have been other changes with 1.10, my 1.8 book only talks about this
profile.
<quote from z/OS R10 IPCS Commands>
With read authority to facility class BLSACTV.SYSTEM, IPCS can look at the
following storage (in addition to those storage areas it can access with no
special authority) :
* The ABSOLUTE storage
* Other ASIDs
* The data spaces owned by other ASIDs
BLSACTV.SYSTEM support was added in z/OS V1R9.
</quote>
--
Walt Farrell, CISSP
IBM STSM, z/OS Security Design
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
