The simplest mode of recovering data from a T-disk in CMS requires only that 
the starting cylinder be the same as it was for the previous user. If you are 
in a shop that does not have Clear_Tdisk enabled, simply ACCESS the disk when 
you define it. If the ACCESS works, you are in, you have access to the previous 
user's data. If your disk is at least as large as the former disk, you have 
full access; else, only partial. Requiring the person who defines the T-disk to 
format it is a nice rule that can easily be broken, either inadvertently or on 
purpose.

If you use a shared space to store sensitive data, you should take the 
responsibility for insuring that it cannot be recovered by the next person who 
uses that space. Having CP do it is a secondary line of defense; there is 
always the possibility, maybe very low probability, that conditions may change 
in a way that thwarts CP's protection. Do not assume that you are safe.

On the other hand, protection when using V-disk is absolute. The first time you 
reference a page, you are given one that has been cleared to zeros. There is no 
possibility of retrieving someone else's data from it.
 

Regards, 
Richard Schuh 

 

> -----Original Message-----
> From: The IBM z/VM Operating System 
> [mailto:ib...@listserv.uark.edu] On Behalf Of Tom Rae
> Sent: Thursday, September 17, 2009 12:05 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: TDISK and SYSTEM CONFIG question.
> 
> Without CLEAR_Tdisk enabled, whatever data the last user 
> stored in T-DISK space is still present when it is allocated 
> to the next user. To successfully use the space with CMS you 
> will most likely have to format it, unless the boundaries of 
> your TDISK allocation exactly overlay the previous user's 
> allocation, but there is nothing forcing you to use CMS to 
> access the space. A utility such as DDR would be quite happy 
> to copy the contents of T-DISK to a permanent location, from 
> which you could use other utilities to recover the data, 
> track by track, without relying on CMS.
> 
> Gentry, Stephen wrote:
> > I guess I should have read Richard's response closer.  So, 
> I'll echo Dennis's question as well.
> > What security problem?
> > We do not have CLEAR_TDisk enabled.  Every time we define a 
> t-disk, it HAS to be formatted, no exceptions.
> > Steve
> 

Reply via email to