On Wed, Apr 21, 2010 at 9:54 AM, Binyamin Dissen <bdis...@dissensoftware.com > wrote:
> On Wed, 21 Apr 2010 08:24:19 +0100 Sam Siegel <s...@pscsi.net> wrote: > > :>On Wed, Apr 21, 2010 at 12:46 AM, Tony Harminc <t...@harminc.net> wrote: > > :>> On 20 April 2010 19:09, Sam Siegel <s...@pscsi.net> wrote: > > :>> > With all of the discussion about APF and loading programs from > various > :>> types > :>> > of libraries, I'm hoping someone can provide some clarification for > :>> > me regarding the ADRNAPF of the load macro. > > :>> > The doc indicates that a module can be loaded from a non-apf library > :>> > when ADRNAPF is used from an authorized program in supervisor state. > The > :>> > doc further states that the it is the loading programs responsibility > to > :>> > ensure that program loaded from the non-apf library receives control > in > :>> > problem state. > > :>> > Please confirm that when the non-apf program receives control in > problem > :>> > state, it cannot change to supervisor state, discounting the > possibility > :>> of > :>> > using a magic svc, etc. > > :>> How do you propose to pass control to your newly loaded code in > :>> problem state? If you just MODESET to problem state and BALR, then > :>> presumably the called program could issue a MODESET back to supervisor > :>> state, just like any other code running in an APF authorized job step. > :>> If not, then one must assume that the jobstep has lost APF > :>> authorization, and that seems most unlikely in this context. > > :>> If you use SYNCH or ATTACH with JSTCB=YES, then you're in a whole > :>> different world, but System Integrity is still very much your > :>> responsibility. > > :>I was going to use SYNCH(X). ATTACH(X) does not make sense for this > design. > > Then you are using the same JSCB as the authorized caller. Thus the caller > must make sure that APF is turned off before invoking the routine. All > previous comments about storage still apply. > Thanks again for the sage advice. Very easy to follow and worked perfectly. Synched to problem program abended with S047 when issuing MODESET. JSCB bits adjusted prior to Synch. > > -- > Binyamin Dissen <bdis...@dissensoftware.com> > http://www.dissensoftware.com > > Director, Dissen Software, Bar & Grill - Israel > > > Should you use the mailblocks package and expect a response from me, > you should preauthorize the dissensoftware.com domain. > > I very rarely bother responding to challenge/response systems, > especially those from irresponsible companies. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
