On Monday, 11/16/2009 at 01:03 EST, Kris Buelens <[email protected]> wrote: > No, he won't. But, with CP class A, he can issue SET PRIVCLASS * +S.
Only a class C user can escalate a user's privilege beyond what is in their directory entry. USER OPERATOR ****** ABDEFGS COMMAND SET PRIVCLASS -S Then the operator can SET PRIVCLASS +S in order to issue the SHUTDOWN or FORCE command. Needless to say, I am miserly with class C. It should be reserved only to the most trusted of individuals, typically being those who are authorized to update the directory, to diagnose CP problems, or a trusted automation program. Alan Altmark z/VM Development IBM Endicott
