I do not understand -- How can a second authorized program running concurrently 
to an already-running authorized program provide opportunity for an integrity 
threat?  Or am I just not clever (or evil) enough to conceive of a way to 
violate integrity in such a scenario?  Don't all the normal authorized 
integrity rules and fences still hold for concurrent programs?

Peter

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Paul Gilmartin
Sent: Friday, March 16, 2018 3:24 PM
To: [email protected]
Subject: Re: z/OS "interactive computing" - AKA TSO/ISPF or UNIX shell

On Fri, 16 Mar 2018 13:35:40 -0500, John McKown wrote:
>
>The only deficit that I see in the OMVS command is that it is what I think
>of as "native" TSO 3270 whereas it should be, like SDSF, use ISPF display
>services when used when they are available. I've more or less gotten used
>to the "half duplex" use of the 3270 in TSO. What might be nice would be a
>way, in TSO, to "background" a TSO command like you can a UNIX command. Of
>course, I must remember that TSO was designed in the days of OS/MVT and is
>still more concerned with "resource consumption" rather that "user
>productivity".
> 
TSO's single address space design invites integrity threats if authorized 
programs
run concurrently.  Would you propose forking background programs into separate
address spaces?  Would BPX1EXM be a solution?

--


This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to