Classification: UNCLASSIFIED
Caveats: NONE

Thanks Gerhard, this is another consideration of which I was unaware.

It is certainly significant but I believe that this function would also permit 
access to live datasets. Hence, the issue is not specific to "ERASE".

Regards,
Alan





-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Gerhard Postpischil
Sent: Wednesday, April 09, 2014 10:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Accessing DASD areas that have no DSCB (UNCLASSIFIED)

On 4/9/2014 10:27 AM, Storr, Lon A CTR USARMY HRC (US) wrote:
> Can someone please identify the flaw in my logic? Can a non-authorized
> user gain access to these "scratched" areas of DASD?

I'd add 4) - many modern control units have diagnostic capability that allows 
unrestricted hardware access to the drives. If yours do, you'll need physical 
access controls.

I first ran into this when we got our first string of Hitachi 3380s. The C.E. 
wanted a telephone line so he could service the units remotely; I had to 
educate management that that would allow uncontrolled access to customer data.

Gerhard Postpischil
Bradford, Vermont

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Classification: UNCLASSIFIED
Caveats: NONE

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to