Re: How to remove an empty USS file shipped with z/OS
Yes. I wondered the same thing: who is asking, and WHY? /etc/security is increasingly common on POSIX systems. If something "out there" in your enterprise is getting tripped-up by it, methinks that something needs fixing. -- R; <>< On 4/18/23 14:48, Marna WALLE wrote: Hi Lizette, /etc/security has been set up as 755 by z/OS itself (in BPXMKDIR), for many releases now. When you say "I have been asked to update the permissions different that what is shipped or to remove this directory path (it is empty) " ...may I wonder who is asking this and why? Thanks. -Marna WALLE z/OS System Install and Upgrade IBM Poughkeepsie -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to remove an empty USS file shipped with z/OS
On Mon, 17 Apr 2023 09:01:21 -0700, Lizette Koehler wrote: >List - > > > >I am being asked to take one of two actions on a USS file that is part of >Server Pac > >the /etc/security seems to be part of Server pac > > > So, I don’t know about you, but the /etc that comes from serverpac is not mounted, and I treat as guidelines on what needs to be changed/updated in my /etc/ that is actually mounted and in use. So, unless you are actually using Serverpac provided /etc you should be free to do with as you see fit. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to remove an empty USS file shipped with z/OS
Lizette. Isn’t the /etc provided by Serverpac just a sample which you may merge with your ‘real’ /etc ?. If you are running in a sysplex /etc is a link to /&SYSNAME/etc. I place the Serverpac ETC file system on the sysres pack and only mount it (at a temporary mount point) to merge its files with the operational ETC file system for a specific system. If Serverpac changes /etc for a new release I compare its files with those of the operational /etc and adjust the new operational /etc if appropriate. Keith Gooding Sent from my iPad > On 18 Apr 2023, at 19:48, Marna WALLE wrote: > > Hi Lizette, > /etc/security has been set up as 755 by z/OS itself (in BPXMKDIR), for many > releases now. When you say "I have been asked to update the permissions > different that what is shipped > or to remove this directory path (it is empty) " ...may I wonder who is > asking this and why? > > Thanks. > -Marna WALLE > z/OS System Install and Upgrade > IBM Poughkeepsie > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to remove an empty USS file shipped with z/OS
On Mon, 17 Apr 2023 09:01:21 -0700, Lizette Koehler wrote:
>
>the /etc/security seems to be part of Server pac
>
>I have been asked to update the permissions different that what is shipped
>or to remove this directory path (it is empty)
>
What problem is this causing the requesters?
>USS is not a strong skill set, so I am not sure the best way to proceed
>
Why are the requesters entitled to ask you to do this but not to do it
themselves?
("security" is kind of a red flag word.)
--
gil
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to remove an empty USS file shipped with z/OS
Hi Lizette, /etc/security has been set up as 755 by z/OS itself (in BPXMKDIR), for many releases now. When you say "I have been asked to update the permissions different that what is shipped or to remove this directory path (it is empty) " ...may I wonder who is asking this and why? Thanks. -Marna WALLE z/OS System Install and Upgrade IBM Poughkeepsie -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: EXTERNAL EMAIL: How to remove an empty USS file shipped with z/OS
I would not delete a serverpac provided dataset. Changing the permissions would then be something you would need to add to your System installation doc for each new system. Jerry Whitteridge jerry.whitteri...@albertsons.com Sr. Manager Managed Services Albertsons Companies -Original Message- From: IBM Mainframe Discussion List On Behalf Of Lizette Koehler Sent: Monday, April 17, 2023 9:01 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: EXTERNAL EMAIL: How to remove an empty USS file shipped with z/OS List - I am being asked to take one of two actions on a USS file that is part of Server Pac the /etc/security seems to be part of Server pac I have been asked to update the permissions different that what is shipped or to remove this directory path (it is empty) I can do either What I cannot do is to prevent this file from being altered on the next Serverpac. As that is controlled by IBM Any recommendations that do not rely on me having a note for Server pack process. z/OSMF process or other manual function? Is there a way in batch when I build the sysres that could be inserted to do either actions? USS is not a strong skill set, so I am not sure the best way to proceed Thanks for any guidance Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to remove an empty USS file shipped with z/OS
/etc/security and /iked.conf are both part of Internet Key Exchange Daemon(IKED), which was changed in z/OS 2.2, and 2.3, I don't think there were changes in 2.4 or 2.5 Even though it's int he etc directory, you probably should not delete it. Unless you are sure you won't need IKED. Brian -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
How to remove an empty USS file shipped with z/OS
List - I am being asked to take one of two actions on a USS file that is part of Server Pac the /etc/security seems to be part of Server pac I have been asked to update the permissions different that what is shipped or to remove this directory path (it is empty) I can do either What I cannot do is to prevent this file from being altered on the next Serverpac. As that is controlled by IBM Any recommendations that do not rely on me having a note for Server pack process. z/OSMF process or other manual function? Is there a way in batch when I build the sysres that could be inserted to do either actions? USS is not a strong skill set, so I am not sure the best way to proceed Thanks for any guidance Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
