Here we go again! IBM has told us and told us that query responses are NOT an API. And what do they give us?
Mike Harding EDS VM National Capability 134 El Portal Place Clayton, Ca. USA 94517-1742 * phone: +01-925-672-4403 * Fax: +01-925-672-4403 * mailto:[EMAIL PROTECTED] * <mailto:[EMAIL PROTECTED]> (personal) Note: For 2007, I am off on Fridays with even Julian dates and Mondays with odd ones. -----Original Message----- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Saturday, September 29, 2007 9:01 PM To: [email protected] Subject: Re: z/vm security advise requested On Saturday, 09/29/2007 at 05:31 EDT, David Boyes <[EMAIL PROTECTED]> wrote: > > And, natch, my PROFILE GCS in RSCS and my :exit. in SYSTEM DTCPARMS > for > > TCPIP would run a DIAG A0 program to look for the ESM, failing to > start if > > not present. > > That would seem to be a good argument for supplying a DIAGA0 MODULE > somewhere like the default MAINT 190...8-). RC=0 if ESM installed and > enabled, RC=28 if not installed/enabled. > > Requirement? Yes, but are you sure that's what you want? Why not a CP QUERY ESM? It's just a yes or no question; RC=0 means yes, non-zero means no. The text returned by the QUERY is irrelevant. With a sufficiently advanced QUERY, a vendor-dependent string could be returned. E.g. the name of the ESM (as defined by the vendor) along with level information. CP QUERY ESM HCP9999E An External Security Manager is not installed Ready(9999); CP QUERY ESM RACF Security Server feature FL530 Ready; Alan Altmark z/VM Development IBM Endicott
