The problem is that not everyone wants to purchase an external security manager simply to get this feature. We have no need for an ESM, as, if one of our four users get out of line, we can just walk over to their cube and whack them with a board. I'm not buying an ESM to un-secure a single entity in an already closed box. That makes no sense at all.
No humans use the box directly, and we grant the vSwitch to just short of every virtual machine that uses the box. To have to go through the grant process, no matter if it is in the CP directory, in System Config, or in Autolog1, for every new machine that gets created, and to open the door for human error by forgetting to grant this resource, which needs to be available for everyone on the system, seems at best to be an oversight on IBM's part. ESMs are not the solution to this problem. Sorry. -- Robert P. Nix Mayo Foundation .~. RO-OE-5-55 200 First Street SW /V\ 507-284-0844 Rochester, MN 55905 /( )\ ----- ^^-^^ "In theory, theory and practice are the same, but in practice, theory and practice are different." On 4/17/09 12:20 AM, "Alan Altmark" <[email protected]> wrote: > On Thursday, 04/16/2009 at 04:15 EDT, Marcy Cortes > <[email protected]> wrote: > >> Apparently its *someone*'s requirement, but I agree, and optional open >> Vswitch would be handy indeed. > > I should probably get the requirement answered "Available". As Rob > mentioned, your ESM is capable of doing this. With RACF, RALTER VMLAN > SYSTEM.VSWITCH1 UACC(READ). > > I have no plan (or much willingness) to spend money to duplicate in CP > what can be done with an ESM. > > Alan Altmark > z/VM Development > IBM Endicott > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
