On Tue, 27 Apr 2021 15:32:12 +0300, Itschak Mugzach wrote:

>Have a look at getpwent. If I am not allowing a user to list RACF users,
>why are they allowed to list it via this command using syscalls?
> 
How much information could be gleaned by

    ls -li /u

???  Is it feasible and desirable to make /u (probably an automount
directory) searchable but not readable?

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to