Of course, any "magic SVC" is ghastly and needs to be replaced by a more modern 
design.

Authorised services should be provided by trusted service providers with any 
appropriate SAF checks. Typically this is going to surface as a PC routine and 
the software providing this service is going to need a STC to own the 
associated tables that declare the PC to the system.

As developers we know there is extra sysprog action required to install STCs 
but we are trying to maintain system integrity. It never ceases to surprise me 
how often the requirement for a server address space is met with push-back from 
some customers.

Rob Scott
Rocket Software.

On 18 Oct 2018 16:40, Jesse 1 Robinson <[email protected]> wrote:
The SDSF SVC had some 'integrity checks' that would complicate any spoofing 
effort, but it was always a bad idea. Good riddance. Woe be to any similar 
attempt at the quick-and-dirty solution to an APF problem.

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office ⇐=== NEW
[email protected]


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Dana Mitchell
Sent: Thursday, October 18, 2018 8:26 AM
To: [email protected]
Subject: (External):Re: get ECSA key 7 storage under CICS

On Thu, 18 Oct 2018 14:08:33 +0000, Barkow, Eileen <[email protected]> 
wrote:

>In order to call the SVC a programmer would have to know about it first
>as well as have a need for it; neither of which applied to any CICS 
>application programmers.
>

Someone breaking into your systems would always have a need for something handy 
like that... ;)

Didn't SDSF include something similar a long time ago?  back when you used to 
get source for SDSF.  Although IIRC it had a rudimentry check for the 
eyecatcher of the caller to make sure the caller was 'authorized'  to use it.

Dana


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

================================
Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
http://www.rocketsoftware.com/manage-your-email-preferences
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy
================================

This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to