getpwent requires SAF access or super user. 

> On 28 Apr 2021, at 9:24 pm, Itschak Mugzach 
> <[email protected]> wrote:
> 
> getpwent But what about ?
> 
> בתאריך יום ד׳, 28 באפר׳ 2021 ב-16:22 מאת Paul Gilmartin <
> [email protected]>:
> 
>>> On Tue, 27 Apr 2021 15:32:12 +0300, Itschak Mugzach wrote:
>>> 
>>> Have a look at getpwent. If I am not allowing a user to list RACF users,
>>> why are they allowed to list it via this command using syscalls?
>>> 
>> How much information could be gleaned by
>> 
>>    ls -li /u
>> 
>> ???  Is it feasible and desirable to make /u (probably an automount
>> directory) searchable but not readable?
>> 
>> -- gil
>> 
>> ----------------------------------------------------------------------
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to [email protected] with the message: INFO IBM-MAIN
>> 
> -- 
> 
> *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere
> Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux
> and IBM I **|  *
> 
> *|* *Email**: [email protected] **|* *Mob**: +972 522 986404 **|*
> *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il  **|*
> 
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to