>I mean, does the sysprog *really* want to be involved in every "guest A
can't ping guest B" quandry?

Umm.   We always are. If not us, then who else?  The Linux sysadmin?
The network admin?  Those would be us too.  We may not *want* to, but
that's what we do for a living :)


Marcy Cortes 
 
"This message may contain confidential and/or privileged information. If
you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein. If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message. Thank you for your cooperation."


-----Original Message-----
From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of
Alan Altmark
Sent: Tuesday, January 08, 2008 12:25 PM
To: [email protected]
Subject: Re: [LINUX-390] Extracting user IDs and IP addresses from QUERY
VSWITCHDETAILS

On Tuesday, 01/08/2008 at 03:09 EST, Pieter Harder
<[EMAIL PROTECTED]> wrote:
> I would even say this is a security exposure. A class G user can find
out what
> another user's macid is on a layer2 switch, and then play all kind of
mischief
> with it.

We are aware of the requirement to prevent two users on the same VSWITCH
from talking to each other.

Restricting the details of the VSWITCH simply makes it more difficult
for the guest to be configured correctly.  I mean, does the sysprog
*really* want to be involved in every "guest A can't ping guest B"
quandry?

And if I wanted to, I'd just start ARPing for different IP addys and see
what responses I get.  Not have the QUERY output would slow me down for
a few minutes.

Alan Altmark
z/VM Development
IBM Endicott

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit http://www.marist.edu/htbin/wlvindex?LINUX-390

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to