Subspace groups are not secure. A program can freely reset their subspace group.
If you play nicely, the subspace groups help. On Wed, 14 May 2014 08:09:02 -0500 John McKown <john.archie.mck...@gmail.com> wrote: :>On Wed, May 14, 2014 at 7:47 AM, Shane Ginnane <ibm-m...@tpg.com.au> wrote: :> :>> On Wed, 14 May 2014 06:50:09 -0500, John McKown wrote: :>> :>> >I've never heard of "Sub Address Space" storage. I can't figure out what :>> >you mean. :>> :>> Try subspace group. :>> :> :> :>I have some minimal knowledge of that, thanks to CICS using them. But I :>don't see where that has much to do with STORAGE OBTAIN, other than :>complicating things when storage needs to be shared between an key 8 and a :>key 9 program. :> :>I think that IBM is missing out on a possibility, due to TSO being :>moribund, of using a subspace group the way that CICS does in order to more :>securely separate the non-APF TSO commands from the APF authorized :>commands. Run them in separate subspace groups. I wonder what perversions I :>can get UNIX to perform using them? :> :> :>> :>> Shane ... :>> :>> ---------------------------------------------------------------------- :>> For IBM-MAIN subscribe / signoff / archive access instructions, :>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN :>> -- Binyamin Dissen <bdis...@dissensoftware.com> http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN