Just did a quick test on a test VM system.  CLEAR_TDisk is enabled. With
a T-DISK size of 1300 cylinders, clearing/formatting it isn't noticed,
speed wise.  Would have thought I would have gotten a message, during
IPL, that clearing was being done, but no big deal.
Steve

-----Original Message-----
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Schuh, Richard
Sent: Thursday, September 17, 2009 4:08 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: TDISK and SYSTEM CONFIG question.

The simplest mode of recovering data from a T-disk in CMS requires only
that the starting cylinder be the same as it was for the previous user.
If you are in a shop that does not have Clear_Tdisk enabled, simply
ACCESS the disk when you define it. If the ACCESS works, you are in, you
have access to the previous user's data. If your disk is at least as
large as the former disk, you have full access; else, only partial.
Requiring the person who defines the T-disk to format it is a nice rule
that can easily be broken, either inadvertently or on purpose.

If you use a shared space to store sensitive data, you should take the
responsibility for insuring that it cannot be recovered by the next
person who uses that space. Having CP do it is a secondary line of
defense; there is always the possibility, maybe very low probability,
that conditions may change in a way that thwarts CP's protection. Do not
assume that you are safe.

On the other hand, protection when using V-disk is absolute. The first
time you reference a page, you are given one that has been cleared to
zeros. There is no possibility of retrieving someone else's data from
it.
 

Regards, 
Richard Schuh 

 

> -----Original Message-----
> From: The IBM z/VM Operating System 
> [mailto:ib...@listserv.uark.edu] On Behalf Of Tom Rae
> Sent: Thursday, September 17, 2009 12:05 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: TDISK and SYSTEM CONFIG question.
> 
> Without CLEAR_Tdisk enabled, whatever data the last user 
> stored in T-DISK space is still present when it is allocated 
> to the next user. To successfully use the space with CMS you 
> will most likely have to format it, unless the boundaries of 
> your TDISK allocation exactly overlay the previous user's 
> allocation, but there is nothing forcing you to use CMS to 
> access the space. A utility such as DDR would be quite happy 
> to copy the contents of T-DISK to a permanent location, from 
> which you could use other utilities to recover the data, 
> track by track, without relying on CMS.
> 
> Gentry, Stephen wrote:
> > I guess I should have read Richard's response closer.  So, 
> I'll echo Dennis's question as well.
> > What security problem?
> > We do not have CLEAR_TDisk enabled.  Every time we define a 
> t-disk, it HAS to be formatted, no exceptions.
> > Steve
> 

Reply via email to