> In order to call the SVC a programmer would have to know about it first as > well as have a need for it;
There's a difference between "have a need' and "have a legitimate need". IMHO the use of "magic" SVC routines should have ended decades ago, and it's not terribly difficult to reverse engineer them. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 ________________________________________ From: IBM Mainframe Discussion List <IBM-MAIN@listserv.ua.edu> on behalf of Barkow, Eileen <ebar...@doitt.nyc.gov> Sent: Thursday, October 18, 2018 10:08 AM To: IBM-MAIN@listserv.ua.edu Subject: Re: get ECSA key 7 storage under CICS LRS used to provide source code for various VPS modules and I found it in one of their libs. It was not meant to be distributed. In order to call the SVC a programmer would have to know about it first as well as have a need for it; neither of which applied to any CICS application programmers. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jousma, David Sent: Thursday, October 18, 2018 10:02 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: get ECSA key 7 storage under CICS I'm glad to hear you don't run it. It's not the few nano seconds, it's the idea that anyone could call it, passing any address to any routine, and be in supervisor state. Are you sure LRS would have distributed this? It would seem hard to believe, honestly. I'd implore you to NOT give this to anyone if they ask for it. -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Barkow, Eileen Sent: Thursday, October 18, 2018 9:55 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: get ECSA key 7 storage under CICS **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** The SVC code just sets the JSCBAUTH bit on for a few nanoseconds while the user code runs and then sets if off in response to another SVC call to do so. I do not run it any more but it really came in handy and did not cause any problems. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jousma, David Sent: Thursday, October 18, 2018 9:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: get ECSA key 7 storage under CICS Eileen, that code sounds suspiciously like a huge security vulnerability? Am I missing something? -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Barkow, Eileen Sent: Thursday, October 18, 2018 9:46 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: get ECSA key 7 storage under CICS **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** I actually have run a few CICS programs in supervisor state using an old SVC routine that LRS used to provide - You just pass it the address of the code to run and it sets the JSCBAUTH bit on so that the code runs in supervisor state/key 0. I needed this in order to issue MVS commands directly from CICS, like VTAM commands to vary devices INACT and START commands for various things. I still have the SVC code if anyone wants it. The problem with CICS has always been that it sets the JSCBAUTH bit off after initialization so that APF authorized programs cannot run. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Binyamin Dissen Sent: Thursday, October 18, 2018 7:13 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: get ECSA key 7 storage under CICS You need to be supervisor state to do this. Using CICS just because it is easier is a wrong decision. But if you are sold on using CICS, you would need to write a SVC routine to actually do the work and have your transaction supply a CICS area as a buffer and the SVC routine will do the IFI work and return the record. On Thu, 18 Oct 2018 05:08:36 -0500 Wang Rong <wang_r...@csbucn.com> wrote: :>Hi Binyamin, :> :> Many thanks to your quick replay. :> I'm trying to capture/send DB2 log record using IFI call. The storage requirement is ECSA key 7 storage: "The return area for monitor programs that issue IFCID 0306 requests must reside either in ECSA key 7 storage or in the 64-bit common key 7 storage area above the 2-GB bar" (from IBM book). :> I prefer to use CICS because it's easy programming. :> :> -- Binyamin Dissen <bdis...@dissensoftware.com> http://secure-web.cisco.com/1dm6Ax3GJVvfvtO6PrMDnj8tveoznSJUcjarYu9m6hfe_nVsnMDMe1b4BSWPXtw6m61Um7ljjB5NL8a1OiF8lOzUoxzvbzkoCLngCOVWzxPQEVN1IRz2Akc1Bpv2KKSF52okJUbd7TyKmt-Au8uwYA-b7ZLc0tlax7PnHfM9X2m3erRLbmuyuIxPOsj2n52D8t1nupDU9Qwf9aMNSh92muBMlSoyrM8mG9Kr9ynucOeHxwxLS8iY_sAEg5m2vVbgVE7iw8aNP0amyq8O_ZTzlvLli2XrhmtFZoN7tBqBgqHBoTSAxvCw8-Wc12lBKmTwOY77RuOrD6Qgmai36l0vinFz_gywf13HFMFa9wBINOvdOhALQEm1TpUrBXzUhS0FJqjnk2DojtALMONzG-nIk_vdUthuwv-xaGIX6R3ipbmrZXNCNA6SgWN2iKRZdMrpK/http%3A%2F%2Fwww.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ________________________________ This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
