One question that's hung around in the back of my mind for some time:  I'm all 
for more granular control in OMVS - more granular than ID(0) gives you, I mean 
- but is UNIXPRIV more granular?  Or does it just do the same thing?  Because 
if the goal is to stop giving ID(0) to all these IDs that don't need it, how is 
UNIXPRIV any improvement on the situation?

It's been a while since I looked at the various replacement controls, and I 
only vaguely remember that some of them do indeed give more granular control.  
But one of them, at least, seems to fit my complaint.  I just don't remember 
which one.  I guess I'm just saying that if we replace ID(0) with a 
RACF/whatever rule that accomplishes the same thing, then what we're dealing 
with is a religious objection, so to speak, instead of addressing the practical 
problem.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* You do not really understand something unless you can explain it to your 
grandmother.  -Albert Einstein */

-----Original Message-----
From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of 
Jack Zukt
Sent: Friday, April 14, 2023 12:17

Using the UNIXPRIV class and the BPX profiles in the FACILITY class has enabled 
me to avoid giving a lot of must-have-UID(0) over the years. It may take a 
little longer that giving UID(0), as you will have to work through a few (or a 
lot) of ICH408I, but it is doable.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to