> > > With care, as an idle terminal does not imply an idle virtual > machine. > > > > Indeed, although I suspect his auditor is whining about terminals > left > > unattended. > > Back in 1970 we had no other solution. Things have progressed somewhat > since then and a properly mandated and managed end station screen lock > will suffice.
Depends on the auditor. For some, it will. For others, it won't. YMMV. > I say "somewhat" since I think that the 3270 datastream is ripe for the > host to be able send an "enable/disable/query screen lock" to the > emulator, independent of any OS-level locks, and potentially > appropriate > to the specific application. (Some apps access more sensitive data > than > others.) I don't remember -- is the state of the key lock reported? If so, you could probably overload the screen lock state onto that 3270 state without having to reengineer stuff.
