It is a security APAR and details are available only through the Security Portal.
And yes, if you are grumbling, you are not alone. Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Rob Schramm Sent: Monday, September 10, 2018 12:48 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Spectre/Meltdown APAR - OA54807 Is is something IBM can do verbally via meeting that they are unwilling to detail in the issue(s)? Seems to me there have been some things like this in the past that the only information was provided in closed meetings? But then again.. maybe that was a movie.. need to clean the cobwebs out of the brain today! Rob Schramm On Mon, Sep 10, 2018 at 3:10 PM Lizette Koehler <stars...@mindspring.com> wrote: > I did a general GOOGLE search on OA54807. Some 3rd party vendors were > recommending their customers delay implementation for now. I am not one of > their customers - so could not get more inform > > But, it might be an interesting process by googling this and seeing what > might > catch your interest > > Lizette > > > > -----Original Message----- > > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > Behalf Of > > Jousma, David > > Sent: Monday, September 10, 2018 11:39 AM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: Spectre/Meltdown APAR - OA54807 > > > > OK, so I opened a Q&A PMR with IBM on this topic. Mostly about > > implementation with regards to software remediation if accessing PSASTAK. > > My question was whether or not OSPROTECT=SYSTEM (lowest setting) would > cause > > these apps to fail, or if the next level would be where the problem would > > surface.... Reason why question is important to me, at the lowest > setting, > > backing out means regressing z/OS maint, and IPLing vs just changing the > > OSPROTECT setting, and IPLing....a huge difference. I get the cloak of > > secrecy with regards to vulnerabilities, but c'mon IBM, help me come up > with > > a viable implementation plan.....I guess in the absence of more concrete > > information, I'll have to prepare for having everything remediated > before the > > PTF goes on z/OS and have an extended burn-in period as we migrate this > out. > > > > My response from IBM was: > > > > "As much as I would be happy to address new questions, they touch on > > important and not disclosed details regarding the OSPROTECT > > implementation. It is very regrettable but we may not provide more > > information on the new option than what may be found in the downloadable > > Documentation Updates for APAR OA54807." > > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > > Behalf Of Jousma, David > > Sent: Friday, September 07, 2018 12:54 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: Spectre/Meltdown APAR - OA54807 > > > > **CAUTION EXTERNAL EMAIL** > > > > **DO NOT open attachments or click on links from unknown senders or > > unexpected emails** > > > > I am holding off for now, so that we can call all of our software > vendors as > > well as get the preq MCL's installed on our z14s. From what I have > read, > > there is no way to install the fixes, and continue to run with it fully > off > > while we make those vendor calls. I suspect we'll tackle this early next > > year and run an extended maintenance cycle in our non-prod environments > to > > allow for plenty of burn-in. the other part of this is that it is an > IPL to > > turn on OSPROTECT=1 and another IPL to turn it back off (SYSTEM mode) if > > problems are encountered. > > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > > Behalf Of Phillips, Thomas > > Sent: Thursday, September 06, 2018 3:38 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Spectre/Meltdown APAR - OA54807 > > > > **CAUTION EXTERNAL EMAIL** > > > > **DO NOT open attachments or click on links from unknown senders or > > unexpected emails** > > > > Has anyone installed OA54807? If so, did you see any performance > impacts? > > Any other gotchas that you'd like to share? > > > > Has anyone implemented OSPROTECT=1? > > > > Thanks, > > Tom Phillips > > Principal Financial Group > > > > > > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Rob Schramm ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
