It would be very difficult and have a lot of overhead to have IOS (not iOS) check every CCW chain for "suspect" CCWs. It is given as one of the reasons why RACF does not implement PDS member security. It's too easy to update a PDS member via TTR without any member name anywhere in sight.
-- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets® 9151 Boulevard 26 • N. Richland Hills • TX 76010 (817) 255-3225 phone • [email protected] • www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets® is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. –The Chesapeake Life Insurance Company®, Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] > On Behalf Of Paul Gilmartin > Sent: Wednesday, October 03, 2012 9:09 AM > To: [email protected] > Subject: Re: How to get a tape's DSCB > > On Wed, 3 Oct 2012 07:55:44 -0500, McKown, John wrote: > > >And, just to be complete, you are assuming that your customers will be > using IBM standard tape labels. Granted, who doesn't? But it is an > assumption. Also, remember that in many shops, use of BLP to read the > tape labels can be protected via the tape management system, or even > with RACF now-a-days. Does not apply if you use EXCP to REW the tape, > of course. > > > Inconsistency. Either the REW CCW or EXCP itself should be likewise > RACF protected or protected by the tape management system. The > unprivileged user should have no opportunity to overwrite labels of > library tapes. > > I suppose a virtual tape might have a virtual label, and any attempt > to invalidate the label should fail or be ineffective. > > -- gil > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
