On Wed, 8 Jul 2009 14:12:43 -0500, Mark Zelden wrote:
>On Wed, 8 Jul 2009 10:01:55 -0700, Natarajan Mohan wrote:
>
>>... I am curious why IND$FILE is allowed and not FTP.
>>
>
>FUD!
Not necessarily. In a previous job, there was a period of time that we had
a test system that was created by a sna
On Wed, 8 Jul 2009 10:01:55 -0700, Natarajan Mohan wrote:
>Mark,
>
>From his note I believe it is done to prevent wrong data being offloaded
via automated batch process to feed other ETL processes outside that LPAR.
>If that is not the case, I am curious why IND$FILE is allowed and not FTP.
>
FU
>Securing via ACF2 would be a harder solution to implement since the ACF2
>database also gets cloned.
Unless things have changed, ACF2 can protect by SYSID.
I don't know if it's an exit, being a user of ACF2, but we had programmes (and
other resources) protected by SYSID over 20 years ago, at a
Natarajan is correct. We do not want to 'accidentally' ftp to other servers
from this cloned system. Securing via ACF2 would be a harder solution to
implement since the ACF2 database also gets cloned. Yes, any programmer
can find our backdoor, but if they are smart enough to find it, they ar
Mark,
>From his note I believe it is done to prevent wrong data being offloaded via
>automated batch process to feed other ETL processes outside that LPAR.
If that is not the case, I am curious why IND$FILE is allowed and not FTP.
Natarajan
>>> Mark Zelden 7/8/2009 9:41 AM >>>
On Wed, 8 Jul
On Wed, 8 Jul 2009 11:10:00 -0500, Todd Last wrote:
>Regarding the FTP alias... We have another lpar which is a clone of the
>production lpar. We do not want users (or automated batch jobs!!) to
>accidentally FTP in or out of the lpar. On the cloned system, we code
>dummy modules in front of
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Mark Zelden
Sent: Wednesday, July 08, 2009 11:39 AM
To: IBM-MAIN@bama.ua.edu
Subject: Required LMOD aliases (was Re: SMPE usermod sample)
Just curious for the last 2 posters that have a requirement to add an
ALIAS
to FTP a
Regarding the FTP alias... We have another lpar which is a clone of the
production lpar. We do not want users (or automated batch jobs!!) to
accidentally FTP in or out of the lpar. On the cloned system, we code
dummy modules in front of SYS1.TCPIP.SEZALOAD to prevent the FTP.
However, us s
Just curious for the last 2 posters that have a requirement to add an ALIAS
to FTP and IEBCOPY.
Why? Is there that much JCL to change that you want to support doing this
forever? Or is there another reason?
Regards,
Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
9 matches
Mail list logo
