>A hypothetical IT department wants all tape systems, including
>z/OS, to turn on WORM (Write Once Read Many) so that the tapes
>are immutable. The reason is for prevention of ransomware attaches
>from altering backup data.
>My question is: how does this help? If an attacker has the access and
>aut
Well, IBM documentation says:
Almost all types of data sets are EAS-eligible, including the following:
• SMS and non-SMS-managed VSAM data sets (all types), including:
– BCS and VVDS catalog data sets.
– VSAM data sets inherited from prior physical migrations or copies.
– VSAM temporary data sets.
>From Microsoft Bing:
To list dynamic exits using the ipcs command in a Unix-like operating system,
you can use the following command:
ipcs -d
This command will display information about dynamic exits, including their
identifiers, owners, and other relevant details. If you need more specific
i
W dniu 08.04.2025 o 21:11, Schmitt, Michael pisze:
A hypothetical IT department wants all tape systems, including z/OS, to turn on
WORM (Write Once Read Many) so that the tapes are immutable. The reason is for
prevention of ransomware attaches from altering backup data.
My question is: how doe
... and a DSNRLI IDENTIFY is issued against the Group Attach Name, what is the
rule which indicates which member it will be assigned to?
--
Binyamin Dissen
http://www.dissensoftware.com
Director, Dissen Software, Bar & Grill - Israel
-
I think you're right potentially there's nothing that would prevent an attacker
from altering the tape catalog.
That's why you should keep your meta-data close to the data itself in an
immutable storage.
For example, with BMC AMI Cloud Vault you can backup your data to an immutable
object stora
You also have an alternative to DFSMShsm to perform your data management tasks,
BMC AMI Cloud Data (fka Model9) provide full data management suite for z/OS.
It leverages cloud object storage technology to storage the outputs of the
backup/archive activities.
More information could be found here
I have no special knowledge, but, if I were asked to implement this, I'd
want to combine write once with some kind of monitoring of usual change
patterns, and some kind of test 'restore' that checks the sanity of data.
That should improve the odds.
I *do* know of cases where corrupted data was al
A hypothetical IT department wants all tape systems, including z/OS, to turn on
WORM (Write Once Read Many) so that the tapes are immutable. The reason is for
prevention of ransomware attaches from altering backup data.
My question is: how does this help? If an attacker has the access and
autho
Thanks.
On Tue, 8 Apr 2025 18:53:55 + James Mulder wrote:
:> In SYS1.SBLSCLI0 I see compiled Rexx execs named CSVDYNXI and CSVLNKLS.
They are undocumented and unsupported.
:>
:>Jim Mulder
:>
:>-Original Message-
:>From: IBM Mainframe Discussion List On Behalf Of
Binyamin Disse
In SYS1.SBLSCLI0 I see compiled Rexx execs named CSVDYNXI and CSVLNKLS.
They are undocumented and unsupported.
Jim Mulder
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Binyamin Dissen
Sent: Tuesday, April 8, 2025 2:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject:
With proper credit to Ed Jaffe's recent SHARE Bit Bucket presentation, doing an
IEAVHELP shows a bunch of undocumented and unsupported REXX execs. IEAVHELP
lists both of the ones that Jim mentioned.
===
Adam Johanson
Broadcom Mainframe Software Division
-
That is what I thought.
"Confidentially doc, I am the wabbit."
Bugs Bunny
Sent with Proton Mail secure email.
On Tuesday, April 8th, 2025 at 2:51 PM, Binyamin Dissen
<0662573e2c3a-dmarc-requ...@listserv.ua.edu> wrote:
> Referring to zOS IPCS, a completely different animal.
>
> On Tue,
Referring to zOS IPCS, a completely different animal.
On Tue, 8 Apr 2025 18:10:47 + "Williams, George T (CTR)"
<07d2a7d27269-dmarc-requ...@listserv.ua.edu> wrote:
:>From Microsoft Bing:
:>To list dynamic exits using the ipcs command in a Unix-like operating system,
you can use the follo
I guess I might need to hunt down the control blocks.
--
Binyamin Dissen
http://www.dissensoftware.com
Director, Dissen Software, Bar & Grill - Israel
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send emai
There was a pre-session that started at 10am ET.
It was not easy to find, and they had issues broadcasting it as well.
Thankfully they would seem to have it figured out, and you can go back to
see recordings of it now too.
On Tue, Apr 8, 2025 at 9:35 AM Phil Smith III wrote:
> Well, I just got
That is what I would have thought, but it does not always appear that way.
I was wondering if this is documented somewhere.
On Tue, 8 Apr 2025 18:57:28 +0200 salva wrote:
:> I guess it's the first one on the IEFSSN/SSVT list.
:>El mar, 8 abr 2025 a las 17:59, Binyamin Dissen (<
:>0662573e2
David, have you changed your Dataclass to extended format?
Non-extended PS & VS will be allocated on track-managed space (cyl < 65520)
on EAV vols.
Regards, salva.
El vie, 4 abr 2025 a las 16:20, Jousma, David (<
01a0403c5dc1-dmarc-requ...@listserv.ua.edu>) escribió:
> So, we are finally bi
Hi Radoslaw,
RMM no longer recommends using REJECT commands for this purpose.
In the Implementation and Customization Guide, in Chapter 8, you can find the
replacement functionality through OPENRULE and PRTITION statements
Here is an excerpt from the book:
Note: While the REJECT command is stil
Just for completeness, we understand now what happened:
1. Jun/2022 - the delivery servers IP addresses changed to the ones
described in
https://www.ibm.com/support/pages/ibm-software-electronic-delivery-servers-change
2. Nov/2023 - the 129.35.xxx.xxx IP addresses changed as described in
https://w
Well, I just got email saying it's in 30 minutes, so...
Timezones are hard. /s
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Pommier, Rex
Sent: Tuesday, April 8, 2025 9:32 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), M
Classification: Confidential
Most likely resource-link.
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Binyamin Dissen
Sent: Tuesday, April 8, 2025 3:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More
[CAUTION:
Thanks for this! Worth looking into. I was hoping the pixie dust wouldn’t
cost extra, but I shouldn’t be surprised.
Dave Jousma
Vice President | Director, Technology Engineering
From: IBM Mainframe Discussion List on behalf of
rpinion865 <042a019916dd-dmarc-requ...@listserv.ua.edu>
Classification: Confidential
You pays me now or you pays me later... But you still pay.
You pays you money and takes your choice.
Perhaps an incremental approach.
Create a set of "small" eavs" and have some pain.
Later create a set of "medium eavs" and have a little more paint.
Create a set of "
To clarify: ftp is not an option.
Regarding security issues - I'm allowed to read the data on both systems
and I am the RACF guy on both. Last, but not least, it is not production
data. While data security is quite interesting topic, it is not an issue
here.
--
Radoslaw Skorupka
Lodz, Poland
In the past, PoPs was available at General Availability (GA). For the z17 GA is
on 18th June 2025.
From: IBM Mainframe Discussion List on behalf of
Binyamin Dissen <0662573e2c3a-dmarc-requ...@listserv.ua.edu>
Sent: 08 April 2025 09:52
To: IBM-MAIN@LISTSERV
Here are the many IBM Z-related announcement letters…
https://www.ibm.com/docs/en/announcements/z17-makes-more-possible
https://www.ibm.com/docs/en/announcements/preview-zos-32
https://www.ibm.com/docs/en/announcements/technology-transition-offerings-z17-offer-price-performance-advantages
https
However I noticed every tape volume I read was automatically added to
RMM database, which I don't want.
Q: How to prevent it?
>>Don’t read the tapes directly, FTP the contents from one environment to the
>>other. Separately, Doing what you did is likely a security exposure if you
>>are not s
The following scenario:
VTS shared among several z/OS monoplex systems. Each system has it's own
set of tape categories in DEVSUPxx.
I had to read multiple tape volumes from other system.
So I temporarily added the volumes to the VOLCAT, disabled "REJECT
ANYUSE(*)" in EDGRMMxx and I read the ta
I'm sure you know that this announcement is for the large version of the z17.
If things go the way they've gone in the past, we'll have to wait for about a
year for the small version.
From: IBM Mainframe Discussion List on behalf of Jay
Maynard <05997213d6c
Thanks Alex.
The only problem is that we do not select the servers where we download
maintenance from.
We select an IBM server to place the order (either eccgw01.boulder.ibm.com
or eccgw02.rochester.ibm.com), then you order is automatically placed in
one of the download servers (the ones in IBM So
W dniu 07.04.2025 o 21:54, Mike Schwab pisze:
Total number of extents is limited to ?253? over multiple volumes.
No, it isn't.
It *was* for VSAM datasets (123 per volume, 255 total ...minus 4), but
it is no longer true for VSAM with proper DC parameter.
And it was never true for PS, basic, la
Binyamin Dissen asks:
> Where might I find the new POPs?
Not posted yet AFAIK, but I don't think that's unusual. The IBM z17
documentation library should appear in due course here:
https://www.ibm.com/docs/en/systems-hardware/zsystems
I assume the new Principles of Operation book will be IBM Pu
Yay!
We've been working to specify a shiny new z16-AGZ to replace our z14 ZR1,
which, due to our purchasing process, would arrive about the beginning of
September. Now we get to deep dive into this to see if we want to get a z17
instead, or if we even can.
On Mon, Apr 7, 2025 at 11:01 PM Timothy S
I’m hosting a 60 minute Webcast at 11:00 AM Singapore Time (03:00 UTC) on
Friday, April 25, 2025, called “Protecting z/OS with Validated Boot and Linux
with Secure Boot.” Dave Surman, an IBM Distinguished Engineer in z/OS operating
system development, is the main speaker and presenter. If you’d
Where might I find the new POPs?
On Tue, 8 Apr 2025 03:59:52 + Timothy Sipples wrote:
:>Here are the many IBM Z-related announcement letters
:>
:>https://www.ibm.com/docs/en/announcements/z17-makes-more-possible
:>
:>https://www.ibm.com/docs/en/announcements/preview-zos-32
:>
:>https://www.
For those who want technical details of the z17, these can be found in the
Redbooks:
https://www.redbooks.ibm.com/feature/z17
From: IBM Mainframe Discussion List on behalf of
Timothy Sipples
Sent: 08 April 2025 04:59
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: IB
Hello fellas,
We have a strange behavior when attempting to download maintenance use SMPE
Receive Order.
As indicated here (
https://www.ibm.com/support/pages/ibm-software-electronic-delivery-servers-change),
our firewall has been opened for:
deliverycb-mul.dhe.ibm.com - 129.35.224.118
deliverycb
38 matches
Mail list logo