I doubt David's auditors will be able to raise a valid objection to
running an out-of-support Linux, when they apparently haven't objected
to running VM/ESA 2.2.

I knew Multiprises were old, but I didn't know that they were old enough
to be museum exhibits.

                                                       Dennis

We are Borg of America.  You will be assimilated.  Resistance is futile.

-----Original Message-----
From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
Tom Duerbusch
Sent: Tuesday, January 13, 2009 10:45
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Encryption on a 7060

There are not many holes, but things to consider.  We had a MP3000 H30
also.

1.  It doesn't perform Linux stuff as well as other mainframes.  There
is a CPU instruction added in newer systems, that made Linux performance
much better.  So, don't take poor performance on the MP3000 as an
indication of performance on new boxes.  But if you lave the CPU time
available, it works.

2.  You have to run SLES 7 or SLES8 (in 31 bit mode).  As these are
older distros, they may run out of support.  That may affect how
auditors view the setup.

3.  As 31 bit code disappears, you may not be able to keep up with the
Jones with respect on where you are sending the files.  I don't know how
backleveled encryption software goes.  You might be limited to 128 bit
encryption instead of 2k encryption keys.

4.  I have a GPG server which encripts files for our VSE systems.  It
runs in 96 MBs, with vdisk for swapping.  You shouldn't have problems
getting that much real memory carved out.

Tom Duerbusch
THD Consulting

>>> "David L. Craig" <d...@radix.net> 1/13/2009 12:00 PM >>>
I curate a museum which includes a uni-CP Multiprise 3000
(7060-H30) with 2 GB in basic mode running VM/ESA 2.2 and
hosting VSE/ESA 2.2 in V=R.  We may be required by auditors
to encrypt files for transmission to other hosts.  I'm
saying it's feasible to install a Linux distribution into
a V=V virtual machine and perform the encryption there,
either with gpg or by using openssl.  We're currently
averaging about 20% CPU utilization.  Can anyone see any
holes in this?  Do current distros still support this
platform or will I need something older, and if so, will
current encryption software work on the older distro?

--

May the LORD God bless you exceedingly abundantly!

Dave Craig

-  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -
"'So the universe is not quite as you thought it was.
 You'd better rearrange your beliefs, then.
 Because you certainly can't rearrange the universe.'"

--from _Nightfall_  by Asimov/Silverberg

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to