And then only if the set privclass feature is enabled in SYSTEM CONFIG

Scott

On Mon, Nov 16, 2009 at 12:04 PM, Alan Altmark <[email protected]>wrote:

> On Monday, 11/16/2009 at 01:03 EST, Kris Buelens <[email protected]>
> wrote:
> > No, he won't.  But, with CP class A, he can issue SET PRIVCLASS * +S.
>
> Only a class C user can escalate a user's privilege beyond what is in
> their directory entry.
>
> USER OPERATOR ****** ABDEFGS
> COMMAND SET PRIVCLASS -S
>
> Then the operator can SET PRIVCLASS +S in order to issue the SHUTDOWN or
> FORCE command.
>
> Needless to say, I am miserly with class C.  It should be reserved only to
> the most trusted of individuals, typically being those who are authorized
> to update the directory, to diagnose CP problems, or a trusted automation
> program.
>
> Alan Altmark
> z/VM Development
> IBM Endicott
>

Reply via email to