Linux on 390 Port <[email protected]> wrote on 01/07/2016 08:28:52 AM:
> From: Michael Holzheu <[email protected]> > To: [email protected] > Date: 01/07/2016 08:28 AM > Subject: Re: hyptop question > Sent by: Linux on 390 Port <[email protected]> > > On Tue, 5 Jan 2016 14:48:17 -0500 > Alan Altmark <[email protected]> wrote: > > > On Tuesday, 01/05/2016 at 06:31 GMT, Mark Post <[email protected]> wrote: > > > > > > > For z/VM, the guest virtual machine must be class B. For LPAR, > > > > on the HMC or SE security menu of the LPAR activation profile, > > > > select the Global performance data control checkbox. > > > > > > For z/VM guests, that is CP privilege class B. For systems running in an > > LPAR > > > (PR/SM), use the HMC Customize/Delete Activation Profiles function to > > ensure > > > the Global performance data control checkbox is checked. This can be > > found in > > > the Image profile, under the Security heading. > > > > What class B CP commands or DIAGNOSE instructions does the virtual machine > > use? Those functions should be copied to locally-defined privilege class. > > Do not give class B to virtual machines that aren't in the business of > > performing real device management. > > We use diag 2fc. > > Should we say something like: > > For z/VM, the guest virtual machine must have privilege class B > or, preferably, a locally-defined privilege class that contains > diagnose 2fc. How does one do this? Don't like giving my linux guests access to CLASS B so I would like to make my own class and give that to the user. ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
