On Monday, 01/03/2011 at 01:57 EST, Sergio Lima <[email protected]> 
wrote:
> We wrote a sample ASSEMBLER Program  here under CMS, that will submit a 
JOB to 
> VSE Machine, using the CP SPOOL PUNCH command.
> Sorry, if you understand that here is not the good place to put this 
question.
> The people ask to me, if is possible the name of CMS MACHINE not appear 
on the 
> MODULE.

Why?  It does nothing to improve security.  After all, TRACE SVC CA RUN 
CMD D T0.50;base1 will happily show me everything I need to know.  If I'm 
smart enough to disassemble the program or display memory, I'm smart 
enough to know (or learn) how to TRACE it.

Needless to say, I detest wasting precious resources making programs 
needlessly complicated. Your VSELAB machine should reject jobs from 
virtual machines it doesn't recognize and who do not otherwise 
authenticate via appropriate userid/password on a JOB card.  Also, your 
z/VM external security manager product can control who can SPOOL to a 
particular id.

Alan Altmark

z/VM and Linux on System z Consultant
IBM System Lab Services and Training 
ibm.com/systems/services/labservices 
office: 607.429.3323
[email protected]
IBM Endicott

Reply via email to