Obviously, if you have a lot of spare time, I am sure you can figure it out. IBM wouldn't be so tight-lipped about it if there wasn't an issue.
Rob Schramm On Mon, Sep 10, 2018 at 3:53 PM Charles Mills <charl...@mcn.org> wrote: > It is a security APAR and details are available only through the Security > Portal. > > And yes, if you are grumbling, you are not alone. > > Charles > > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Rob Schramm > Sent: Monday, September 10, 2018 12:48 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Spectre/Meltdown APAR - OA54807 > > Is is something IBM can do verbally via meeting that they are unwilling to > detail in the issue(s)? > > Seems to me there have been some things like this in the past that the only > information was provided in closed meetings? > But then again.. maybe that was a movie.. need to clean the cobwebs out of > the brain today! > > Rob Schramm > > On Mon, Sep 10, 2018 at 3:10 PM Lizette Koehler <stars...@mindspring.com> > wrote: > > > I did a general GOOGLE search on OA54807. Some 3rd party vendors were > > recommending their customers delay implementation for now. I am not one > of > > their customers - so could not get more inform > > > > But, it might be an interesting process by googling this and seeing what > > might > > catch your interest > > > > Lizette > > > > > > > -----Original Message----- > > > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > > Behalf Of > > > Jousma, David > > > Sent: Monday, September 10, 2018 11:39 AM > > > To: IBM-MAIN@LISTSERV.UA.EDU > > > Subject: Re: Spectre/Meltdown APAR - OA54807 > > > > > > OK, so I opened a Q&A PMR with IBM on this topic. Mostly about > > > implementation with regards to software remediation if accessing > PSASTAK. > > > My question was whether or not OSPROTECT=SYSTEM (lowest setting) would > > cause > > > these apps to fail, or if the next level would be where the problem > would > > > surface.... Reason why question is important to me, at the lowest > > setting, > > > backing out means regressing z/OS maint, and IPLing vs just changing > the > > > OSPROTECT setting, and IPLing....a huge difference. I get the cloak of > > > secrecy with regards to vulnerabilities, but c'mon IBM, help me come up > > with > > > a viable implementation plan.....I guess in the absence of more > concrete > > > information, I'll have to prepare for having everything remediated > > before the > > > PTF goes on z/OS and have an extended burn-in period as we migrate this > > out. > > > > > > My response from IBM was: > > > > > > "As much as I would be happy to address new questions, they touch on > > > important and not disclosed details regarding the OSPROTECT > > > implementation. It is very regrettable but we may not provide more > > > information on the new option than what may be found in the > downloadable > > > Documentation Updates for APAR OA54807." > > > > > > -----Original Message----- > > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On > > > Behalf Of Jousma, David > > > Sent: Friday, September 07, 2018 12:54 PM > > > To: IBM-MAIN@LISTSERV.UA.EDU > > > Subject: Re: Spectre/Meltdown APAR - OA54807 > > > > > > **CAUTION EXTERNAL EMAIL** > > > > > > **DO NOT open attachments or click on links from unknown senders or > > > unexpected emails** > > > > > > I am holding off for now, so that we can call all of our software > > vendors as > > > well as get the preq MCL's installed on our z14s. From what I have > > read, > > > there is no way to install the fixes, and continue to run with it fully > > off > > > while we make those vendor calls. I suspect we'll tackle this early > next > > > year and run an extended maintenance cycle in our non-prod environments > > to > > > allow for plenty of burn-in. the other part of this is that it is an > > IPL to > > > turn on OSPROTECT=1 and another IPL to turn it back off (SYSTEM mode) > if > > > problems are encountered. > > > > > > -----Original Message----- > > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On > > > Behalf Of Phillips, Thomas > > > Sent: Thursday, September 06, 2018 3:38 PM > > > To: IBM-MAIN@LISTSERV.UA.EDU > > > Subject: Spectre/Meltdown APAR - OA54807 > > > > > > **CAUTION EXTERNAL EMAIL** > > > > > > **DO NOT open attachments or click on links from unknown senders or > > > unexpected emails** > > > > > > Has anyone installed OA54807? If so, did you see any performance > > impacts? > > > Any other gotchas that you'd like to share? > > > > > > Has anyone implemented OSPROTECT=1? > > > > > > Thanks, > > > Tom Phillips > > > Principal Financial Group > > > > > > > > > > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > -- > > Rob Schramm > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Rob Schramm ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
