On Wed, 18 Mar 2015 07:06:46 -0500, John McKown wrote: >encapsulating the APF code inside a dynamically created PC (Walt's >suggestion?) and then just turning off APF entirely. This latter reeks >of the "magic SVC" approach of the past, but it is not quite as >dangerous.
There is a big difference between providing a PC routine to perform a specific set of authorized functions (with good validity checking) and a "magic SVC" that puts any program into supervisor state so that it can do whatever it wants. Of course, the code that runs that PC routine must be loaded into system key storage. -- Tom Marchant ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
