> -----Original Message----- > From: IBM Mainframe Discussion List > [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Paul Gilmartin > Sent: Monday, March 28, 2011 10:22 AM > To: IBM-MAIN@bama.ua.edu > Subject: Re: zIIPs and zAAPs > > On Mon, 28 Mar 2011 16:42:49 +0200, Binyamin Dissen wrote: > > > >The security issue is allowing application programmers to > write SRB code > >(which implies the ability to update APF datasets). > > > I thought that zAAPs are for Java. Does this mean that applications > programmers shouldn't write Java? Or that application Java is to be > kept separate from system Java? Must the jars reside in APF > data sets? > Or is the JVM trustworthy enough that it is relied on to police the > behavior of Java byte code. > > -- gil
zIIPs require special SRB enclave coding, as I understand it. zAAPs run java byte code. There is an option to run zAAP java byte code on zIIP engines in some case that I forget all the details of. Java is no more dangerous than COBOL. And no less dangerous. It can't do anything that COBOL can't in terms of security. Java code does not require APF authorization and likely shouldn't have it. Any more than COBOL code should. There is nothing "special" about the java byte code as far as security is concerned. Java byte code is just another, rather high level, set of assembler instructions. But there are no Java byte code instructions which are likeunto "priviliged" or "semi-priviliged" instructions on the z. They are more like normal "general instructions". Just like the COBOL compiler does not generater any priviliged instructions. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
