Awesome! Yes, who would think to check the Z/OS (jes) log for a failure in USS (I did check the /var/logs but since the REXX was being invoked via batch I should have looked!
There was a glowing message that bpxroot was revoked. Unrevoked it and the seteuid now works :-) Thanks!! -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Mark Zelden Sent: Thursday, April 21, 2016 1:11 PM To: [email protected] Subject: Re: New to RACF On Thu, 21 Apr 2016 16:50:20 +0000, Tracy Adams <[email protected]> wrote: > Yes, I am allowed to su with no complaints Ok. And I saw in another post you confirmed the Reason code (errnojrs) that is being displayed back to you (although it doesn't look correct). Did you check syslog at the time of the error to see if there are any hints there? If it were me, I'd probably copy "copytree" and turn on some rexx tracing also. I have used copytree, but I also use this exec (typically in batch) to copy from one file system (or dir) to another. It has the "from" and "to" directories hard coded. Mostly I used this when migrating everything from HFS to zFS years ago. I assume it would have the same error, but maybe adding a TRACE I or TRACE R would confirm you are getting the same reason code as displayed in copytree. /* rexx */ /*=================================*/ fromdir = '/etc/' todir = '/service/' /*=================================*/ call syscalls 'ON' address syscall 'geteuid' uidval = retval say 'Current UID = 'uidval if uidval <> 0 then do say 'Attempting to set to UID=0' address syscall 'setreuid 0 0' /* address syscall 'seteuid 0' */ uidval2 = retval if uidval2 <> 0 then do say 'Unable to set to UID=0' exit 12 end Else say 'New UID = 'uidval2 end address syscall 'chdir' fromdir say 'Copying files from' fromdir 'to' todir call bpxwunix 'pax -rwvCMX -p eW . ' todir Best regards, Mark -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 Foundation Certified mailto:[email protected] Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html Systems Programming expert at http://search390.techtarget.com/ateExperts/ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
