My recommendation for any commercial system do without LOOK till someone
upgrades it.

There are many alternatives that do not require compromise of z/OS integrity.

IPCS and free MXI come to mind immediately as do the commercial z/OS monitors
SYSVIEW, MAINVIEW, OMEGAMON, TMON.

Setting ALLOWUSERKEYCSA(YES) is flagged by the Health Checker for z/OS

The ALLOWUSERKEYCSA DIAGxx option has been set to (YES)

  Explanation:  ALLOWERUSERKEYCSA(YES) has been specified in the active
    DIAGxx parmlib member. IBM recommends that you specify
    ALLOWUSERKEYCSA(NO) in order to prevent user key CSA from being
    obtained. User key CSA creates a security risk because any
    unauthorized program can modify it. However, specifying
    ALLOWUSERKEYCSA(NO) may cause programs obtaining this storage to
    fail.


If no one chooses to upgrade LOOK then it is old code and just needs to die off
and be abandoned.

        Best Regards,

                Sam Knutson, GEICO
                System z Performance and Availability Management
                mailto:sknutson@...
                (office)  301.986.3574     
        
"Think big, act bold, start simple, grow fast..."
________________________________________
From: cbt-tape@yahoogroups.com [mailto:cbt-tape@yahoogroups.com] On Behalf Of
Sam Golob
Sent: Sunday, June 01, 2008 2:10 PM
To: cbt-tape@yahoogroups.com; IBM-MAIN@...
Subject: [cbt-tape] For users of the LOOK command on z/OS 1.9

Hi Folks,

If you are a user of the LOOK TSO command to browse active storage,
from CBT Tape File 264 (www.cbttape.org - see Updates page), you have to
be informed of the following development:

Important note, for the LOOK command to work:
--------- ---- --- --- ---- ------- -- ----
Note from Sam Golob: The LOOK program needs
a PARMLIB setting in the active DIAGxx member:
****
>>>>>>>> VSM ALLOWUSERKEYCSA(YES) <<<<<<<<

This was the default until z/OS 1.8, but in
z/OS 1.9, VSM ALLOWUSERKEYCSA(NO) is the
default. It now has to be specifically set to
VSM ALLOWUSERKEYCSA(YES), or LOOK will abend
with a SB0A, reason code 5C.
-------------------------------------------------

This is one of the "gotchas" that get you when you go to a new z/OS
release. Better to be informed, than not informed. The solution was
discovered, when I looked up the SB0A, reason code 5C abend in the z/OS
1.9 System Codes book. Since a lot of people use the LOOK command (or
at least they SHOULD), I figured I'd spread the word around.

All the best of everything to y'all........

Sam

====================
This email/fax message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution of this
email/fax is prohibited. If you are not the intended recipient, please
destroy all paper and electronic copies of the original message.