If you want to prevent certain users from being able to access z/OS UNIX services, define an OMVS segment with no UID for those users. This prevents their user IDs from being automatically assigned a UID. When they attempt to use a z/OS UNIX service, the dub will fail, and a daemon will be unable to switch to these user IDs. *Example*: ALTUSER TSOADM1 OMVS(NOUID)
On Sat, Mar 11, 2023 at 12:09 PM Colin Paice <[email protected]> wrote: > I'm looking into pthread_security_np to change my userid to become another > id. > > During my tests, I had a userid without an OMVS segment - and could get the > right return code. > If I then logon the userid, I get an OMVS segment allocated because my > system is set up for this. > > Is there any way of saying do *not *allocate an OMVS segment for these > (a,b,c,d) userids, but do so for every other userid? > > For my testing I think I'll just have to have some userids I never logon > to. > I can always delete the OMVS segment (and access to OMVSAPPL in APPL class) > so it is not a big issue. > > Colin > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
