On Friday, 05/20/2016 at 11:02 GMT, Ingo Adlung <[email protected]> wrote:
> I guess the challenge with DIAG 2FC is that not every issuer is 
necessarily
> supposed to see guest information beyond themselves. So while I agree 
with
> your assessment I see reasoning in the approach taken ...

Hi, Ingo.  I see the reasoning, too, but the command and DIAGNOSE handlers 
in CP aren't supposed to be checking the user's privilege class.  That's 
all supposed to be handled prior to starting the handler. 

DIAGNOSE 0x26C suffers a similar issue, though the impact is far less 
since CP QUERY commands can be used instead if it becomes an issue.

Alan Altmark

Senior Managing z/VM and Linux Consultant
Lab Services System z Delivery Practice
IBM Systems & Technology Group
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
[email protected]
IBM Endicott

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Reply via email to