Scot On Wed, May 13, 2009 at 6:05 PM, Scott Rohling <scott.rohl...@gmail.com>wrote:
> In particular, DEVMAINT allows you to issue the DEF MDISK command.. which > allows you to create a minidisk, specifying it's extents, on any volume > attached to the system. It also gives R/W access to the minidisk it > creates. > > DEF MDISK is an extremely helpful command- especially for dealing with 2nd > level systems - but it can easily be used to subvert security policy. > (e.g. Being able to do a DEF MDISK to a minidisk that RACF would not allow > you link). > But so would the RMDISK suboption of the Diagnose 84. And that just requires CP class B, something you would normally give an operator (at least when they are supposed to do something useful themselves, other than just call you in the middle of the night). Ronald van der Laan
