This version must be pretty old then. I see now in the source that the idfind call is scanning the ckidlist before issuing the racroute macro. I found the ckidlist and put myself in it but I have not found the idfind code to relink the ckidlist into it. This "backdoor" seems like a juicy item for any auditors who might stumble upon it and I might be accused of security violations if I do not reveal it's existence to my manager. All that is probably a good justification for purchasing a product that adheres to ITIL best practices. Please send me any promotional material you have for me to present to management when I advise them to get your product. The down side is that the only purpose I have seen so far for this program is to issue the vary off and vary on of a volser in the process of cloning a res pack. We use ASG's ZAKK for automation.
Ken Klein Sr. Systems Programmer Kentucky Farm Bureau Insurance - Louisville [email protected] 502-495-5000 x7011 -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Brian Westerman Sent: Friday, July 03, 2009 10:13 PM To: [email protected] Subject: Re: Command program from the cbt Which version of command are you using? There were two versions taht used to be on CBT, one that I had updated a bit but was actually Food Lion's code and another one that we stopped putting there (same name) after 2005 or so that we completely re-wrote and added 36 special commands and IF/THEN/ELSE coding capabilities to the command scripts and now market as SyzCMDZ. The version (originally from Food Lion) does check the Facility class, and our version used to check both the facility class and had a table that could be used to allow finer tuning than just a simple class check. We later changed it so that the "fine tuning" was included into RACF (or ACF2/TSS) instead so that people didn't have to relink the module every time they wanted to add the capability for someone (or some job) to issue a display command. If you have one of our older versions, you can either have them give you access to the Facility class (classname) or add you to the table. We provided the ability to move the table call before the RACF call, and also to ignore what happened in the RACF call and just use the table, so it's possible that they took one of those avenues. Needless to say, (but I'll say it anyway), if you are running a version that is that old, you might want to think about upgrading to the newest version with all of the special bells and whistles, the normal $5k price is discounted 50% for people who are members of IBMMAIN. Brian Westerman ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
