The funny thing is that IBM only hides the reason. I am able to identify ptfs that are SECINT programmatically, but I would like to get the CVE factors. Another issue is that IBM does disclose such information on IBM I (AS/400).
ITschak *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux and IBM I **| * *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* On Thu, Jan 19, 2023 at 5:47 PM Seymour J Metz <sme...@gmu.edu> wrote: > ideally there would be holds for both PE and SECINT classes, each with the > APAR number in the REASON. That way even if you don't have access to SECENT > you can tell that there is an error. My question was whether the public > HOLDDATA included PE for any PTF with SECINT. > > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > ________________________________________ > From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf > of Tom Marchant [0000000a2a8c2020-dmarc-requ...@listserv.ua.edu] > Sent: Thursday, January 19, 2023 10:34 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: How to determine if Enhanced HOLDDATA received? > > Wouldn't a hold with CLASS(SECINT) be an ERROR hold? > > -- > Tom Marchant > > On Thu, 19 Jan 2023 14:30:38 +0000, Seymour J Metz <sme...@gmu.edu> wrote: > > >Doesn't the process for security/integrity violations include creating an > APAR? If so, shouldn't any PTF with hold class SECINT also have an ERROR > hold with the relevant APAR number? > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
