On Wednesday, 08/22/2007 at 04:15 EDT, David Boyes <[EMAIL PROTECTED]> 
wrote:
> > USER VMTEST xxxxxx  64M 64M    ABG
> 
> Eek! 1st level class A privs for a test id? That'll last as long as it
> takes for you to type CP SHUTDOWN to the wrong level of CP...8-)
> 
> BG or BCEG should be more than sufficient, and there are very good
> arguments to make test ids like this class G only and do anything
> privileged (ATTACH, DETACH, etc) from another id or DEDICATEs in the CP
> directory entry.

Eeek! x 2  A non-adminstrator virtual machine with anything other than 
class G (or less)?!?  Someone PLEASE bring me my pills!!

There is no reason for a virtual machine that is not responsible for 
first-level system administration to have anything other than class G.  If 
you need to attach a disk or tape, logon to an authorized id and ATTACH it 
(if it can't be DEDICATEd).

Btw, z/VM 5.3 allows to to place privileged commands into the directory 
entry of any user without having to give the user the needed CP privilege!

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to