You are right, IBM doesn’t tell us, nor do I really need them too.  My only 
wish was that if a PTF is flagged for SECINT, and I click on the associated 
APAR link, that I'd get some kind of APAR information, not just "document 
cannot be found".

_________________________________________________________________
Dave Jousma
Manager Mainframe Engineering, Assistant Vice President
[email protected]
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Elardus Engelbrecht
Sent: Wednesday, January 03, 2018 8:47 AM
To: [email protected]
Subject: Re: Security PTFS

**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

Gadi wrote:

>Does IBM publish a list of PTFs that are related to security,

Sort of, but you got good replies, especially from J Eels who kindly posted an 
URL for you.

You can also subscribe to "Red Alerts" and you will get emails in case there is 
an "Red Alert". 

If I remember correctly, even things like "heart bleed" for OpenSSL (Ported 
Tools) and so on were covered in those "Red Alert".

Of course, IBM will not tell you exactly what type of errors/problems are fixed 
or how it was discovered in the first place. They usually just say this: "Here 
is a fix, apply it.".

>especially preventing unauthorized access from outside the mainframe.

What access do you want to prevent? There are several layers of protection 
available starting at firewalls in your enterprise, then firewalls and correct 
TCP/IP settings (SSL, lockup of ports, etc.) on your mainframe. RACF and 
application security are other layers.

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN **CAUTION EXTERNAL 
EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to