Of course, there would be some sort of exposure if I were still authorized. The question I have is can I remove this authorization temporarily or run this code outside of authorization. At first I thought separate JSTCB but attaching something without AC(1) still gives me authorized code. I figured there would be a separate JSCB but so far I have not been able to explore this to success. I fear there is no mix of authorized and unauthorized code possible but there are other places in the list that allude to the fact that one can 'remove authorization'. Not sure it could be regained.
I recall having worked at a company that was multitasking TSO inside an authorized address space. I do not recall details but I am fairly certain there were tasks loading code from unauthorized libraries but I would not swear by it. I should know, I was pretty deep into this code but it was a long time ago. /re On Thu, Jul 9, 2009 at 2:23 PM, Jim Mulder <[email protected]> wrote: > IBM Mainframe Discussion List <[email protected]> wrote on 07/09/2009 > 02:59:07 PM: > > > I need to have a subtask run without APF authorization in an address > space > > with many other tasks which require authorization. This is to attach a > USS > > command (Bpx1atx) which will not work if you are authorized. I do not > have > > the option of changing the authorization of the called program (It's a > REXX > > EXEC). > > > > Do I have to spawn a separate address space for this? Seems like a > > roundabout way to accomplish something so simple. > > Would you not worry about the security exposures of having > untrusted code running in an APF authorized adddress space? > > Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
