In <[email protected]>, on
11/11/2013
at 01:13 PM, DASDBILL2 <[email protected]> said:
>Any process today which can programmatically submit an operator
>command with the proper authority for that particular command can
>submit an operator command to add a library name to the APF list,
Just because it is authorized to issue some commands doesn't mean that
it is authorized to issue all commands. E.g., you might have users
authorized to issue DISPLAY but nothing else. OTOH, it is certainly
true that a process authorized to issue, e.g., SETPROG, must be
tightly controlled.
--
Shmuel (Seymour J.) Metz, SysProg and JOAT
ISO position; see <http://patriot.net/~shmuel/resume/brief.html>
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
