On Thu, 30 Jul 2009 10:28:16 -0500, Wayne Driscoll wrote:
>
>However, I will STRONGLY advise that ONLY programs designed to be run as
>job step tasks (ie main programs) should be linked with AC=1 because if a
>module that is designed to run as a subprogram gets linked with AC=1 it
>could be possible that running this program as a job step task could
>compromise system integrity.
>
There's some rationale here for:

o Placing authorized libraries ahead of unauthorized libraries in the
  search order.

o Specifying AUTHTAB.

o RACF protecting authorized libraries so users can't update them
  with Binder, IEBCOPY, PDS86, AMASPZAP, etc.

(But you knew that.)

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to