David,

Please be aware that if you do not have an external security manager in your
z/VM system, CP will provide access to other minidisks based on the minidisk
passwords in the CP directory.
When you define all for instance all your Linux swap disks as:
  MDISK 203 FB-512 V-DISK 409600  MR READ WRITE MULTIPLE

That means that anyone who knows the passwords (and that is now the whole
community), can, when they have access to your system, do a "CP LINK
other_userid 0203 FFFF MW PASS=MULTIPLE" and get the ability to read/write
the swap disk of "other_userid".

So I would advise to only add minidisk passwords where and when you need
them.  For instance the "ALL" as read password allows any user-id to link
the disk in read mode.

A second word of caution, Linux does not like to get a disk in read/only
mode when it does not expect so.
The linkmode "MR" gives you the disk in read/write mode, unless someone has
the disk already linked in write mode, you get the disk then linked in
read/only mode.
The linkmode you want for Linux guests is "M".  That links you the disk in
read/write mode, unless someone already has the disk linked read/write, in
that case the link fails, something that even Linux user-land tools notice.

Ronald van der Laan

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Reply via email to