Hi - It looks like my first post didn't get through to the list - My apologies
if this
appears to be a duplicate -
We are looking for ways of ensuring proper data isolation when they reside in
coupling facilities' cache structures (although it is not clear as to which
threats
data are exposed to by cohabiting with other data, all of them contained in
different structures, in the same coupling facility).
We are assuming here that access control to the structures is provided by
RACF IXLSTR profiles and enforced by the connecting applications.
Reasoning at the nuts and bolts level, it looks like the CFRM preference list
is
providing what we are looking for in that structures containing highly
sensitive
data could be stored in their own dedicated CF (translating this into
applications development and deployment rules will probably be another
story )
Anyway, the books that I read are clearly stating that "The system will not
allocate a structure in any coupling facility that is not listed in the
structure’s
preference list", however I wanted to check with sysplex literates that I did
not
miss fine prints that would explain that it could be overriden in such and such
specific case ...
Thanks in advance
Patrick Kappeler
pkappe...@wanadoo.fr
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
