On Tue, 2 Nov 2010 10:27:37 +0100, R.S. <r.skoru...@bremultibank.com.pl> wrote:

>Mark Zelden pisze:
>> A more common example (and well documented within the product) is
>> Java.  The installer must have those attributes if they aren't running
>> as UID(0).
>>
>
>AFAIR the BPX.FILEATTR.yyyyy profiles are independent from UID(0). In
>other words even UID(0) cannot use extattr.
>
>That's quite reasonable: due to UNIX compatibility UID(0) is very
>powerful, but extattr is not part of common UNIX root authorities. In
>that case IBM (wisely IMHO) does not extend UID(0) authorities, rather
>provides another check liek the profiles.
>
>--
On Tue, 2 Nov 2010 09:56:08 +0100, Hunkeler Peter (KIUP 4)
<peter.hunke...@credit-suisse.com> wrote:

>>If you do not have UID(0) then you also need
>>read access to BPX.FILEATTR.PROGCTL BPX.FILEATTR.APF
>>and BPX.FILEATTR.SHARELIB.
>
>You need those even if you're running uid=0.
>
>To change these extended attributes, you need
>READ on the corresponding BPX.FILEATTR profile
>*and* you either need to run uid=0 or be the onwer
>of the file.
>

Both correct.    Thanks for the correction / clarification.

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS       
mailto:mzel...@flash.net                                          
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to