Well that's a good point, Charles. A relatively minor risk, compared to 
external attackers, but I suppose they could come in via the sandbox/test 
system, too.

Definitely a "Swiss cheese attack"!

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
Charles Mills
Sent: Friday, April 12, 2024 4:06 PM
To: [email protected]
Subject: Re: IBM key management products

Dataset encryption also guards against the situation in which a sandbox or test 
LPAR (1) has very permissive RACF definitions and (2) inadvertently has shared 
access to production DASD.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to