On 11.05.2015 22:08, Alan Altmark wrote: > On Monday, 05/11/2015 at 02:57 EDT, "Nix, Robert P." <[email protected]> > wrote: >> Plus, even if you could find out if other zVM guests had access to the >> LUN, that would not tell you what other systems, outside of this zVM > (I.E. >> On other zVM¹s, or on Intel or PowerPC systems, Linux or Windows, or > even >> Solaris or AIX?) had access to the LUN. > > Same issue as ECKD. An OS cannot tell what other OSes/LPARs have access > to an ECKD dasd volume.
Well, it can to an extent [1][2]: Query Host Access is a new DS8000 function that reports all LPARs that have established a Path Group Id on a volume, whether in the grouped state or not. z/VM now offers support to query the CPU Serial Number and LPAR ID associated with all LPARs that have established a Path Group Id to a volume, allowing one to determine all LPARs with access to a volume. [1] http://www-01.ibm.com/support/docview.wss?uid=isg1VM65322 [2] http://www-01.ibm.com/support/docview.wss?uid=isg1OA40720 > We simply ignore the issue and put the burden on > the "hardware people" to limit access. We're lucky in that we generally > trust the accessing systems. A naive trust, perhaps, but still.... > > My issue is that I don't understand the job of the SAN storage > administrator well enough to judge how hard is is to implement strict > zoning and LUN masking rules. They have orders of magnitude more devices > to deal with. > > Alan Altmark > > Senior Managing z/VM and Linux Consultant > Lab Services System z Delivery Practice > IBM Systems & Technology Group > ibm.com/systems/services/labservices > office: 607.429.3323 > mobile; 607.321.7556 > [email protected] > IBM Endicott Regards, Peter Oberparleiter -- Peter Oberparleiter Linux on z Systems Development - IBM Germany ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
