https://en.wikipedia.org/wiki/Trusted_Computer_System_Evaluation_Criteria#B_–_Mandatory_protection
 

Charles


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of scott Ford
Sent: Sunday, December 3, 2017 8:31 AM
To: [email protected]
Subject: Re: Passing data from step-to-step in single job using memory??

I don't think we or IBM should be close minded to passing job step data in 
memory.
I agree with Peter , we deal with security all the time. I haven't heard of B1, 
Peter could you share a link? I don't want leave any system open to hacking or 
whatever the current buzzword is in our vocabulary. But I also see a level of 
ignorance and over-reaction , because of a perceived .

Scott

On Dec 3, 2017, 11:20 AM -0500, J R <[email protected]>, wrote:
> "z/OS Unix" as opposed to "Normal MVS"
>
> I like that clarification!
>
> > On Dec 3, 2017, at 10:20, Peter Relson <[email protected]> wrote:
> >
> > Given that an unauthorized user has access only to unauthorized 
> > subpools and that all unauthorized subpools are freed between steps, 
> > some less direct approach would be necessary, involving authorized 
> > code putting the data into some other kind of storage (be that an 
> > authorized subpool, common storage, shared storage, etc) and 
> > providing some means by which the new step could access that. 
> > Perhaps z/OS Unix does so. "Normal" MVS would likely never do that 
> > as it could be considered a violation of B1 security (to the extent 
> > that anyone still cares about B1 security), at least for the case 
> > where the subsequent step might be started in a different address space, 
> > such as in a restart scenario.
> >
> > Peter Relson
> > z/OS Core Technology Design
> >
> >
> > --------------------------------------------------------------------
> > -- For IBM-MAIN subscribe / signoff / archive access instructions, 
> > send email to [email protected] with the message: INFO 
> > IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to