There's nothing wrong with teaching someone how to turn on JSCBAUTH from code 
that is already supervisor mode or key 0-7.

-- 
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
עַם יִשְׂרָאֵל חַי
נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר



________________________________________
From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> on behalf of 
Steve Beaver <0000050e0c375a14-dmarc-requ...@listserv.ua.edu>
Sent: Monday, November 18, 2024 5:12 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Program Authorization: Unauthorized programs calling Authorized

External Message: Use Caution


Seymour I didn’t disagree however teaching anyone how to turn on the JSCBAUTH 
bit is stupid



Sent from my iPhone

No one said I could type with one thumb

> On Nov 18, 2024, at 15:51, Seymour J Metz <sme...@gmu.edu> wrote:
>
> AC(1) is only relevant when an authorized program does an ATTACH RSAPF=YES.
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
> עַם יִשְׂרָאֵל חַי
> נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר
>
>
>
> ________________________________________
> From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> on behalf of 
> Richard Zierdt <richard.zie...@freschesolutions.com>
> Sent: Monday, November 18, 2024 12:02 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Program Authorization: Unauthorized programs calling Authorized
>
> External Message: Use Caution
>
>
> I wrote an authorized program that displays the contents of control registers 
> using the STCTG instruction.   Linked AC(1) and stored in an APF library.   
> Substantive instructions are:
>
>         MODESET MODE=SUP          For STCTG instruction
>         STCTG 0,15,CRREGS         Store (copy) Control Registers
>         MODESET MODE=PROB
>
> When called using LINK from an unauthorized program (linked AC(0) to the same 
> APF authorized library), an S047 abend occurs at the first MODESET macro 
> (which generates an SVC 107).
>
> When the unauthorized program is linked authorized (AC(1)), the call (LINK) 
> works.
>
> I thought unauthorized programs can call (LINK) authorized programs, but 
> authorized programs cannot call unauthorized programs, or, if they do, they 
> lose authorization.
>
> Yes, the program with MODESET MODE=SUP could be made into a PC, but it would 
> be easier to avoid that method.
>
> Any elucidation appreciated — Thanks
> Richard Zierdt
>
> Confidentiality Warning/Avertissement de confidentialité:
>
> This message is intended only for the named recipients. This message may 
> contain information that is privileged or confidential. If you are not the 
> named recipient, its employee or its agent, please notify us immediately and 
> permanently destroy this message and any copies you may have. Ce message est 
> destiné uniquement aux destinataires dûment nommés. Il peut contenir de 
> l'information privilégiée ou confidentielle. Si vous n'êtes pas le 
> destinataire dûment nommé, son employé ou son mandataire, veuillez nous 
> aviser sans tarder et supprimer ce message ainsi que toute copie qui peut en 
> avoir été faite.
>
> ----------------------------------------------------------------------
> For IB

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to