Jim, You said:
On any currently supported release of z/OS, in DIAGxx, you can specify ALLOWUSERKEYCADS(NO) I don't see that in Init & Tuning? Is this an undocumented option? _________________________________________________________________ Dave Jousma Manager Mainframe Engineering, Assistant Vice President [email protected] 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Jim Mulder Sent: Wednesday, May 16, 2018 4:33 PM To: [email protected] Subject: Re: [EXTERNAL] Re: IBMVSM,ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** On any currently supported release of z/OS, in DIAGxx, you can specify ALLOWUSERKEYCADS(NO) This will cause a 01D-xx0015xx abend when an attempt is made to obtain a user key (8-15) SCOPE=COMMON data space. On z/OS 2.3 (but not on lower releases), in DIAGxx, you can specify NUCLABEL ENABLE(IARXLUK2) This will cause a 08F-1C abend when an attempt is made to use CHANGKEY to change subpool 247 or 248 common storage to a user key (8-15). I will look into getting this documentation added to APAR OA53355. Jim Mulder z/OS Diagnosis, Design, Development, Test IBM Corp. Poughkeepsie NY >From: Tom Conley <[email protected]> >Reply-To: IBM Mainframe Discussion List <[email protected]> >Date: Fri, 6 Apr 2018 12:54:20 -0400 >IBM messed this up in at least three ways. ..... >2. The new user key common exploits WERE NOT given DIAGxx traps to >prevent their exploitation. You can apparently stop them with SLIP >TRAPs that create unsightly abends. ........ >Deal with any or all three of these. We'll likely have to submit RFE's >to get DIAG traps that should have been GA with the APAR. >Regards, >Tom Conley ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
