"Isolated Environment" for authorized TSO command/programs means that the work 
is dispatched under the parallel TSO TMP task that runs authorized. All other 
TCBs in the same TSO address space are stopped using the "STATUS STOP" service.

Rob Scott
Rocket Software
________________________________
From: IBM Mainframe Discussion List <[email protected]> on behalf of 
Paul Gilmartin <[email protected]>
Sent: 28 July 2025 3:56 AM
To: [email protected] <[email protected]>
Subject: Re: IKJEFTSR anomaly

EXTERNAL EMAIL




On Sun, 27 Jul 2025 21:14:15 -0400, Joseph Reichman wrote:
>
>I have a program that is unauthorized that I assembled (from the CBT TAPE)
>that is using IKJEFTSR to call an authorized program
>
I haven't used IKJEFTSR, but I read:
<https://www.ibm.com/docs/en/zos/3.1.0?topic=facility-program-authorization-isolation<https://www.ibm.com/docs/en/zos/3.1.0?topic=facility-program-authorization-isolation>>:
IKJEFTSR specifically allows you to invoke authorized functions from an
unauthorized application program. It maintains system security by running
an invoked authorized function in its own isolated environment.

I'm curious. Does "isolated environment" mean:
o A separate address space (best)?
o With other tasks non-dispatchable (TSO call)?
o Other (specify)?

--
gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

================================
Rocket Software, Inc. and subsidiaries ? 77 Fourth Avenue, Waltham MA 02451 ? 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
http://www.rocketsoftware.com/manage-your-email-preferences
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy
================================

This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to