In particular, DEVMAINT allows you to issue the DEF MDISK command.. which allows you to create a minidisk, specifying it's extents, on any volume attached to the system. It also gives R/W access to the minidisk it creates.
DEF MDISK is an extremely helpful command- especially for dealing with 2nd level systems - but it can easily be used to subvert security policy. (e.g. Being able to do a DEF MDISK to a minidisk that RACF would not allow you link). Scott On Wed, May 13, 2009 at 9:41 AM, Wandschneider, Scott < [email protected]> wrote: > Please excuse my ignorance but I am hoping to get clarification on > something I read on this list over the last couple of days. Some of you > were very adamant about specifying the option DEVMAINT, especially to > operators. Could someone please explain what the option does and who > should have it? I went through our VM directories and that option is > specified to a handful of users on each of our systems. I would like to > get an understanding of the option before I start removing it. > > Thank you, > Scott R Wandschneider > [email protected] > > > Confidentiality Note: This e-mail, including any attachment to it, may > contain material that is confidential, proprietary, privileged and/or > "Protected Health Information," within the meaning of the regulations under > the Health Insurance Portability & Accountability Act as amended. If it is > not clear that you are the intended recipient, you are hereby notified that > you have received this transmittal in error, and any review, dissemination, > distribution or copying of this e-mail, including any attachment to it, is > strictly prohibited. If you have received this e-mail in error, please > immediately return it to the sender and delete it from your system. Thank > you. >
