On Tue, 5 Jan 2016 14:48:17 -0500 Alan Altmark <[email protected]> wrote:
> On Tuesday, 01/05/2016 at 06:31 GMT, Mark Post <[email protected]> wrote: > > > > > For z/VM, the guest virtual machine must be class B. For LPAR, > > > on the HMC or SE security menu of the LPAR activation profile, > > > select the Global performance data control checkbox. > > > > For z/VM guests, that is CP privilege class B. For systems running in an > LPAR > > (PR/SM), use the HMC Customize/Delete Activation Profiles function to > ensure > > the Global performance data control checkbox is checked. This can be > found in > > the Image profile, under the Security heading. > > What class B CP commands or DIAGNOSE instructions does the virtual machine > use? Those functions should be copied to locally-defined privilege class. > Do not give class B to virtual machines that aren't in the business of > performing real device management. We use diag 2fc. Should we say something like: For z/VM, the guest virtual machine must have privilege class B or, preferably, a locally-defined privilege class that contains diagnose 2fc. Regards, Michael ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
