Anyone running a program called EDVPARM? A consultant is trying to convince us to install this program to an authorized library with AC(1). Looking at the source concerns me. It appears that you can pass it a program name and parameter list and the program will ATTACHX it. This seems like a big hole to me. What if you pass it IRXJCL for example? Or?
---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
