On 2/4/2022 7:04 AM, Farley, Peter x23353 wrote:
I see the rule but I do not understand the rationale. Limiting UPDATE and ALTER access to systems programmers is logical and reasonable. Limiting READ access is not unless there are parameters in PARMLIB not available anywhere else that can be used to gain an elevation of authority.
The z/OS STIG is often wrong. I laugh when it protects SYS1.PARMLIB since all of our specifications are in SYS2.PARMLIB! LOL
Considering PARMLIB in general, there used to be some passwords in the clear that would appear there (e.g., NJE). I have no idea if that's still true today.
FWIW, there is absolutely nothing in our PARMLIB that we try to hide from end users. We might be naive...
-- Phoenix Software International Edward E. Jaffe 831 Parkview Drive North El Segundo, CA 90245 https://www.phoenixsoftware.com/ -------------------------------------------------------------------------------- This e-mail message, including any attachments, appended messages and the information contained therein, is for the sole use of the intended recipient(s). If you are not an intended recipient or have otherwise received this email message in error, any use, dissemination, distribution, review, storage or copying of this e-mail message and the information contained therein is strictly prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of this email message and do not otherwise utilize or retain this email message or any or all of the information contained therein. Although this email message and any attachments or appended messages are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by the sender for any loss or damage arising in any way from its opening or use. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
