Re: How to remove an empty USS file shipped with z/OS

2023-04-21 Thread Rick Troth

Yes. I wondered the same thing: who is asking, and WHY?

/etc/security is increasingly common on POSIX systems. If something "out 
there" in your enterprise is getting tripped-up by it, methinks that 
something needs fixing.


-- R; <><


On 4/18/23 14:48, Marna WALLE wrote:

Hi Lizette,
/etc/security has been set up as 755 by z/OS itself (in BPXMKDIR), for many releases 
now.  When you say "I have been asked to update the permissions different that 
what is shipped
or to remove this directory path (it is empty) " ...may I wonder who is asking 
this and why?

Thanks.
-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How to remove an empty USS file shipped with z/OS

2023-04-19 Thread Dave Jousma
On Mon, 17 Apr 2023 09:01:21 -0700, Lizette Koehler  
wrote:

>List -
>
>
>
>I am being asked to take one of two actions on a USS file that is part of
>Server Pac
>
>the /etc/security seems to be part of Server pac
>
>
>

So, I don’t know about you, but the /etc that comes from serverpac is not 
mounted, and I treat as guidelines on what needs to be changed/updated in my 
/etc/ that is actually mounted and in use.   So, unless you are actually using 
Serverpac provided /etc you should be free to do with as you see fit.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How to remove an empty USS file shipped with z/OS

2023-04-18 Thread Keith Gooding
Lizette.

Isn’t the /etc provided by Serverpac just a sample which you may merge with 
your ‘real’ /etc ?. If you are running in a sysplex /etc is a link to 
//etc. I place the Serverpac ETC file system on the sysres pack and 
only mount it (at a temporary mount point) to merge its files with the 
operational ETC file system for a specific system. If Serverpac changes /etc 
for a new release I compare its files with those of the operational /etc and 
adjust the new operational /etc if appropriate.

Keith Gooding

Sent from my iPad

> On 18 Apr 2023, at 19:48, Marna WALLE  wrote:
> 
> Hi Lizette,
> /etc/security has been set up as 755 by z/OS itself (in BPXMKDIR), for many 
> releases now.  When you say "I have been asked to update the permissions 
> different that what is shipped
> or to remove this directory path (it is empty) " ...may I wonder who is 
> asking this and why?
> 
> Thanks.
> -Marna WALLE
> z/OS System Install and Upgrade
> IBM Poughkeepsie
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How to remove an empty USS file shipped with z/OS

2023-04-18 Thread Paul Gilmartin
On Mon, 17 Apr 2023 09:01:21 -0700, Lizette Koehler wrote:
>
>the /etc/security seems to be part of Server pac
>
>I have been asked to update the permissions different that what is shipped
>or to remove this directory path (it is empty)
>
What problem is this causing the requesters?


>USS is not a strong skill set, so I am not sure the best way to proceed
>
Why are the requesters entitled to  ask you to do this but not to do it 
themselves?

("security" is kind of a red flag word.)

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How to remove an empty USS file shipped with z/OS

2023-04-18 Thread Marna WALLE
Hi Lizette,
/etc/security has been set up as 755 by z/OS itself (in BPXMKDIR), for many 
releases now.  When you say "I have been asked to update the permissions 
different that what is shipped
or to remove this directory path (it is empty) " ...may I wonder who is asking 
this and why?

Thanks.
-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: EXTERNAL EMAIL: How to remove an empty USS file shipped with z/OS

2023-04-18 Thread Jerry Whitteridge
I would not delete a serverpac provided dataset. Changing the permissions would 
then be something you would need to add to your System installation doc for 
each new system.

Jerry Whitteridge
jerry.whitteri...@albertsons.com
Sr. Manager Managed Services
Albertsons Companies

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Lizette Koehler
Sent: Monday, April 17, 2023 9:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: EXTERNAL EMAIL: How to remove an empty USS file shipped with z/OS

List -



I am being asked to take one of two actions on a USS file that is part of
Server Pac

the /etc/security seems to be part of Server pac



I have been asked to update the permissions different that what is shipped
or to remove this directory path (it is empty)



I can do either



What I cannot do is to prevent this file from being altered on the next
Serverpac.  As that is controlled by IBM



Any recommendations that do not rely on me having a note for Server pack
process.  z/OSMF process or other manual function?



Is there a way in batch when I build the sysres that could be inserted to do
either actions?



USS is not a strong skill set, so I am not sure the best way to proceed



Thanks for any guidance



Lizette




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 Warning: All e-mail sent to this address will be received by the corporate 
e-mail system, and is subject to archival and review by someone other than the 
recipient. This e-mail may contain proprietary information and is intended only 
for the use of the intended recipient(s). If the reader of this message is not 
the intended recipient(s), you are notified that you have received this message 
in error and that any review, dissemination, distribution or copying of this 
message is strictly prohibited. If you have received this message in error, 
please notify the sender immediately.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How to remove an empty USS file shipped with z/OS

2023-04-17 Thread Brian Westerman
/etc/security and /iked.conf are both part of Internet Key Exchange 
Daemon(IKED), which was changed in z/OS 2.2, and 2.3, I don't think there were 
changes in 2.4 or 2.5

Even though it's int he etc directory, you probably should not delete it.  
Unless you are sure you won't need IKED.

Brian

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


How to remove an empty USS file shipped with z/OS

2023-04-17 Thread Lizette Koehler
List -

 

I am being asked to take one of two actions on a USS file that is part of
Server Pac

the /etc/security seems to be part of Server pac



I have been asked to update the permissions different that what is shipped
or to remove this directory path (it is empty)

 

I can do either

 

What I cannot do is to prevent this file from being altered on the next
Serverpac.  As that is controlled by IBM

 

Any recommendations that do not rely on me having a note for Server pack
process.  z/OSMF process or other manual function?

 

Is there a way in batch when I build the sysres that could be inserted to do
either actions?

 

USS is not a strong skill set, so I am not sure the best way to proceed

 

Thanks for any guidance

 

Lizette

 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN