I did a general GOOGLE search on OA54807. Some 3rd party vendors were recommending their customers delay implementation for now. I am not one of their customers - so could not get more inform
But, it might be an interesting process by googling this and seeing what might catch your interest Lizette > -----Original Message----- > From: IBM Mainframe Discussion List <[email protected]> On Behalf Of > Jousma, David > Sent: Monday, September 10, 2018 11:39 AM > To: [email protected] > Subject: Re: Spectre/Meltdown APAR - OA54807 > > OK, so I opened a Q&A PMR with IBM on this topic. Mostly about > implementation with regards to software remediation if accessing PSASTAK. > My question was whether or not OSPROTECT=SYSTEM (lowest setting) would cause > these apps to fail, or if the next level would be where the problem would > surface.... Reason why question is important to me, at the lowest setting, > backing out means regressing z/OS maint, and IPLing vs just changing the > OSPROTECT setting, and IPLing....a huge difference. I get the cloak of > secrecy with regards to vulnerabilities, but c'mon IBM, help me come up with > a viable implementation plan.....I guess in the absence of more concrete > information, I'll have to prepare for having everything remediated before the > PTF goes on z/OS and have an extended burn-in period as we migrate this out. > > My response from IBM was: > > "As much as I would be happy to address new questions, they touch on > important and not disclosed details regarding the OSPROTECT > implementation. It is very regrettable but we may not provide more > information on the new option than what may be found in the downloadable > Documentation Updates for APAR OA54807." > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Jousma, David > Sent: Friday, September 07, 2018 12:54 PM > To: [email protected] > Subject: Re: Spectre/Meltdown APAR - OA54807 > > **CAUTION EXTERNAL EMAIL** > > **DO NOT open attachments or click on links from unknown senders or > unexpected emails** > > I am holding off for now, so that we can call all of our software vendors as > well as get the preq MCL's installed on our z14s. From what I have read, > there is no way to install the fixes, and continue to run with it fully off > while we make those vendor calls. I suspect we'll tackle this early next > year and run an extended maintenance cycle in our non-prod environments to > allow for plenty of burn-in. the other part of this is that it is an IPL to > turn on OSPROTECT=1 and another IPL to turn it back off (SYSTEM mode) if > problems are encountered. > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Phillips, Thomas > Sent: Thursday, September 06, 2018 3:38 PM > To: [email protected] > Subject: Spectre/Meltdown APAR - OA54807 > > **CAUTION EXTERNAL EMAIL** > > **DO NOT open attachments or click on links from unknown senders or > unexpected emails** > > Has anyone installed OA54807? If so, did you see any performance impacts? > Any other gotchas that you'd like to share? > > Has anyone implemented OSPROTECT=1? > > Thanks, > Tom Phillips > Principal Financial Group > > > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
