Tried that with non auth user and it work בתאריך יום ד׳, 28 באפר׳ 2021 ב-16:40 מאת David Crayford <[email protected] >:
> getpwent requires SAF access or super user. > > > On 28 Apr 2021, at 9:24 pm, Itschak Mugzach < > [email protected]> wrote: > > > > getpwent But what about ? > > > > בתאריך יום ד׳, 28 באפר׳ 2021 ב-16:22 מאת Paul Gilmartin < > > [email protected]>: > > > >>> On Tue, 27 Apr 2021 15:32:12 +0300, Itschak Mugzach wrote: > >>> > >>> Have a look at getpwent. If I am not allowing a user to list RACF > users, > >>> why are they allowed to list it via this command using syscalls? > >>> > >> How much information could be gleaned by > >> > >> ls -li /u > >> > >> ??? Is it feasible and desirable to make /u (probably an automount > >> directory) searchable but not readable? > >> > >> -- gil > >> > >> ---------------------------------------------------------------------- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to [email protected] with the message: INFO IBM-MAIN > >> > > -- > > > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere > > Platform* *|* *Information Security Continuous Monitoring for Z/OS, > zLinux > > and IBM I **| * > > > > *|* *Email**: [email protected] **|* *Mob**: +972 522 986404 > **|* > > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux and IBM I **| * *|* *Email**: [email protected] **|* *Mob**: +972 522 986404 **|* *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
