Thanks Walt
 
 
Steve Beaver
[email protected]

--------------------------------------------------------------------------------

This electronic mail (including any attachments) may contain information that 
is privileged, confidential, and/or otherwise protected from disclosure to 
anyone other than its intended recipient(s). Any dissemination or use of this 
electronic email or its contents (including any attachments) by persons other 
than the intended recipient(s) is strictly prohibited. If you have received 
this message in error, please notify us immediately by reply email so that we 
may correct our internal records. Please then delete the original message 
(including any attachments) in its entirety. Thank you


-----Original Message-----
From: "Walt Farrell" <[email protected]>
Sent: Thursday, December 8, 2016 10:27am
To: [email protected]
Subject: Re: zOS and USERID's



On Thu, 8 Dec 2016 09:52:09 -0500, Steve <[email protected]> wrote:

>When a system is IPL'g, several SYSTEM level tasks are started before the ACP.
> 
>The auditors are pushing to give CONSOLE, CATALOG, SMS, their own STCID's. 

Yes, there are address spaces that start before security services are 
available. They come in two flavors:
(1) Those to which you can never assign a user ID, nor control accesses.

(2) Those which start as "limited function" address spaces, but which 
transition to "full function" after security services become available. Those 
you can assign a user ID to (if you want), and control their accesses (if you 
want a less robust system).

I've been away from IBM long enough that I don't remember for sure whether the 
ones you listed are in category 1 or 2, for sure, but I would not be surprised 
if at least two of them were in category 1.

-- 
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to