On 1/23/07, Phil Smith III <[EMAIL PROTECTED]> wrote:

You could also use dummy deferred LINKs, I suspect:

However, your security administrator may not like it. When you have an
ESM and audit invalid link attempts, your users may not know what
they're accused of. If you're not suspicious yet, read on.. ;-)

Someone I know thought to be smart and reversed the meaning of it -
the disk had UACC(READ) but the &deity user was on the access list to
deny access. It turned out the program did not check return codes very
well. So having a tape unit attached on a nearby address would also
make the link fail (because of the non-shared control unit thing - not
sure that still would work) and fool the program in thinking I was
authorized .

Rob

Reply via email to