The CP Planning and Administration manual states that the 05 accounting
records, should you care to enable them, will record links to minidisks
belonging to others except for those with a password of ALL. Even those
are recorded if an ESM grants access without going through the CP
password check.

 

I think that the problem here is that there is confusion about the
Journal facility and Accounting records. The Journal facility will cut
Accounting records for failed attempts at linking; it also sends
messages to OPERATOR. It is not even involved in successful links. 

 

Regards, 
Richard Schuh 

 

________________________________

From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of David Boyes
Sent: Tuesday, June 12, 2007 1:15 PM
To: [email protected]
Subject: Re: cp link security

 

I'm not completely sure (offsite w/o manuals), but the CP journaling
facility can at least catch failed links. I don't think it will report
on successful links, or allow you to control who can perform a command -
you need an ESM for that, and all of those are 3rd party (and expensive,
either in cash (any of the CA products) or annoyance value (RACF)). 

 

Is there a way to monitor when/if a vm guest links to a minidisk other
than their own?
I need native built-in methods only - no 3rd party products.

Reply via email to