On Thu, 8 Dec 2016 09:52:09 -0500, Steve <[email protected]> wrote:

>When a system is IPL'g, several SYSTEM level tasks are started before the ACP.
> 
>The auditors are pushing to give CONSOLE, CATALOG, SMS, their own STCID's. 

Yes, there are address spaces that start before security services are 
available. They come in two flavors:
(1) Those to which you can never assign a user ID, nor control accesses.

(2) Those which start as "limited function" address spaces, but which 
transition to "full function" after security services become available. Those 
you can assign a user ID to (if you want), and control their accesses (if you 
want a less robust system).

I've been away from IBM long enough that I don't remember for sure whether the 
ones you listed are in category 1 or 2, for sure, but I would not be surprised 
if at least two of them were in category 1.

-- 
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to