I thought it was for Locking/Unlocking pages, but I'm not sure.

Schuh, Richard wrote:
True enough; however, I fear trusting anyone enough to include class A
in their directory privileges. We have very few Class C users. While on
the subject of privilege classes, why does TCPIP hqve class A?

Regards, Richard Schuh

-----Original Message-----
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Alan Altmark
Sent: Thursday, August 23, 2007 3:07 PM
To: [email protected]
Subject: Re: Ops privs (was Re: MAINTENANCE)

If you have class C, then you have all classes at your disposal, regardless of what's in the directory. If, however, you define your userid with the maximum privs and then *take away* privs you do not normally require (see prior post), then you do not need class C.

When you decide you need class A, just SET PRIV * +A.  When done, SET
PRIV * -A.

The concept of "least privilege" should be applied.

Alan Altmark
z/VM Development
IBM Endicott


Reply via email to