On Fri, 21 Aug 2015 13:04:47 -0500, Mark Zelden wrote:

>>
>>(And long ago, MVS-OE mentioned "charcase lower" as a preventive.)
>> 
I believe this was not in the original design, but provided at a later release
in order to forestall the DoS exposure.

>>Suppose you have "/u/mzelden".  While it's unmounted I do "cd /u/MZelden".
>>Automount issues (something like) an ENQ EXC on MZELDEN.TPLEX.ZFS.
>>While that's in effect you can't mount "/u/mzelden".  Not a DoS of your
>>entire system, just of your HOME.  (At least this applied to HFS; zFS
>>might be different.)
>
>So, OMVS / ZFS address spaces have the access and it gets mounted 
>in a microsecond on my very fast z13 with flash disk.   :-) 
> 
Not for only a microsecond, but for at least as long as it takes to time
out and dismount.  And if I can "cd /u/MZelden", for as long as I tarry
there.  But that requires that I have at least search authority on the
directory.

>But seriously, where's the exposure?
>
I believe IBM covered it because they perceived it.  Can you try "cd /u/MZelden"
and observe the result?

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to