Building on the idea, ANY virtual device would do. Could be a SPECIAL device, virtual printer, reader, etc. Use "CP Q V vdev" instead of the "CP LINK * vdev".
Mark Wheeler, 3M Company
Rob van der Heij
<[EMAIL PROTECTED]
m> To
Sent by: The IBM IBMVM@LISTSERV.UARK.EDU
z/VM Operating cc
System
<[EMAIL PROTECTED] Subject
ARK.EDU> Re: A z/VM idea.
01/23/2007 01:26
PM
Please respond to
The IBM z/VM
Operating System
<[EMAIL PROTECTED]
ARK.EDU>
On 1/23/07, Phil Smith III <[EMAIL PROTECTED]> wrote:
> You could also use dummy deferred LINKs, I suspect:
However, your security administrator may not like it. When you have an
ESM and audit invalid link attempts, your users may not know what
they're accused of. If you're not suspicious yet, read on.. ;-)
Someone I know thought to be smart and reversed the meaning of it -
the disk had UACC(READ) but the &deity user was on the access list to
deny access. It turned out the program did not check return codes very
well. So having a tape unit attached on a nearby address would also
make the link fail (because of the non-shared control unit thing - not
sure that still would work) and fool the program in thinking I was
authorized .
Rob
