Does anyone know of a documented case of VM being penetrated by hackers?

2007-04-27 Thread Anne Lynn Wheeler
The following message is a courtesy copy of an article that has been posted to bit.listserv.vmesa-l,alt.folklore.computers as well. George Haddad wrote: The last major hole I can recall was in the late 80s or early 90s IIRC, where it was discovered that when sending an SMSG to an SVM (I think

Security on Linux/VM

2007-04-27 Thread achang
Good morning, We are planning to make z/VM Linux production with RACF on VM, I would like to know what is best practices for handling security under Linux/VM and how other shops handing security for Linux. Thanks, Ann Chang (212) 578 - 8297(O) (212) 578 - 9877(Fax) The information

Re: Security on Linux/VM

2007-04-27 Thread Jim Elliott [EMAIL PROTECTED]
We are planning to make z/VM Linux production with RACF on VM, I would like to know what is best practices for handling security under Linux/VM and how other shops handing security for Linux. Anne: Check out http://www.vm.ibm.com/security/ (look for the papers at the bottom of that web

Re: another service question

2007-04-27 Thread Kris Buelens
I think that the message meansif you would have created more than one GCS system, what means you created your own GCS load list, you need to build these other GCSes with vmfbld ppf zvm {gcs|gcssfs} myExtraGcsBldlist (all 2007/4/27, Anne Crabtree [EMAIL PROTECTED]: I am working on service and

Re: another service question

2007-04-27 Thread Anne Crabtree
Gotcha! Since I barely know what I'm doing, I certainly didn't create anything more. Thanks for the help. Anne D. Crabtree System Programmer WV Dept of Administration - OT 304-558-5914 ext 8885 Fax 304-558-1351 [EMAIL PROTECTED] 4/27/2007 9:43 AM I think that the message meansif you would

Re: Security on Linux/VM

2007-04-27 Thread achang
Jim, Thanks, I read about that article, What are the other alternatives ? We may not upgrade to z/VM 5.3 until 2008. Thanks, Ann Chang (212) 578 - 8297(O) (212) 578 - 9877(Fax) Jim Elliott [EMAIL PROTECTED] Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 04/27/2007

Re: Security on Linux/VM

2007-04-27 Thread David Kreuter
We use VM RACF to secure all our z/VM LPARs with a total of 200+ linux servers. VM RACF protects, of course, logon passwords (extended with a local exit), rules based permissions for mdisk, vswitch, vlans, rdrs, ftp. Although RACF VM is an z/OS based product, it gets the job done admirably

Re: DOOM and Halo on System z?

2007-04-27 Thread Mike Walter
Phil Smith (phsiii) wrote: * zOOP: z Object Oriented Processor. My made-up name for whatever comes next -- I like zIIP, zAAP, zOOP! as a marketing slogan... Personally, since zIIP specialty engine processor was announced, I'm been suggesting the next one be called the zOWE. That would make

Beware.... They are still out there !

2007-04-27 Thread Rich Greenberg
As seen on ibm-main: http://www.youtube.com/watch?v=F63tYLhiqZ8 -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only.VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians

Re: Service 2nd level

2007-04-27 Thread Shimon Lebowitz
I seem to remember that if you want a disk to survive VMFSETUP, it must be accessed as C. (But I havent done any service in ages) Shimon P.S. Dave, why do you have a Reply-to header in your email? It overrode the default of 'reply to list', and I almost sent this directly to you, until I

Re: DOOM and Halo on System z?

2007-04-27 Thread David Boyes
(OK, this makes almost no sense; the only way I can make it remotely do so is if it means that they're using Cell BE as the underlying chip, microprogrammed to do z/Architecture. Maybe as the zIIP or zAAP or zOOP* engines?) Oh, it makes lots of sense, actually. Many risk analysis algorithms

Re: Service 2nd level

2007-04-27 Thread Edward M. Martin
Hello Ann, I would suggest doing the VMSETUP first. Find the highest mode available and use that as your 500 drive. But (IIRC) I made 500 my A and made my 191 the next available highest. That way I kept all the files and things created during the service on 500. Ed Martin

Re: Service 2nd level

2007-04-27 Thread Anne Crabtree
I did do vmfsetup first, but it redid it automatically in the vmfins install... so it wasn't there. I finally made 500 A and that worked. Anne D. Crabtree System Programmer WV Dept of Administration - OT 304-558-5914 ext 8885 Fax 304-558-1351 [EMAIL PROTECTED] 4/27/2007 1:53 PM Hello Ann,

Re: Service 2nd level

2007-04-27 Thread George Haddad
Don't know if it's still there, but VMFINS used to have a NOSETUP option (according to my z310 reference). That preceded by the previously suggested VMFSETUP ... (RETAIN , or alternately creating a PPF override with a :RETAIN tag, would probably get you what you need. Anne Crabtree wrote: I

FYI APAR HIPER flag change (cross posted)

2007-04-27 Thread Kurt Acker
Greetings, If you follow HIPER APAR's, please do not be alarmed. This note explains some changes that caused us to review all active APAR's, and change the HIPER flag when needed. System z, z/VM APAR HIPER and RSU process changes: IBM's current service guidelines requires all APARs that

Re: FYI APAR HIPER flag change (cross posted)

2007-04-27 Thread Mike Walter
Why do I suddenly feel like a little duck, slowly traveling along the top edge of a piece of plywood? Sorry about that last post, one click too quick. I'll take a shot answering that question... because many VM sysprogs really CARE about VMn and want it to grow. The non-pervasive highly