Search the web
Sign In
New User? Sign Up
os390andmvs · OS390 and MVS - For z/OS, OS/390 and MVS System Programmers
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Want your group to be featured on the Yahoo! Groups website? Add a group photo to Flickr.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
USS and appropriate privileges   Message List  
Reply | Forward Message #628 of 637 |
Re: USS and appropriate privileges

I believe you can assign a user specific superuser functions using
RACF UNIXPRIV class.

Regards.

Marco

--- In os390andmvs@yahoogroups.com, David.L.Hansen@... wrote:
>
>
> Dear Group,
>
> We are running z/OS V1R8. In the *NIX world may things require
root access. The easy path was just make everybody a UID of 0. We
are trying not
> to do that with my userid.
> However without being a superuser all I see from my ps -ef is
this:
>
> SY4019:/SYSTEM/etc: >ps -ef
> UID PID PPID C STIME TTY TIME CMD
> SY4019 50331802 1 - 13:04:13 ? 0:03 OMVS
> SY4019 83886258 50331802 - 16:07:53 ttyp0000 0:03 -sh
> SY4019 67109053 83886258 - 17:42:48 ttyp0000 0:00 ps -ef
> SY4019:/SYSTEM/etc: >
>
> I read the System Services Command Reference about ps and it
says I will only see those processes "the user" has approriate
privileges to access.
> It goes on to say it will support a list of users with the -U
option. I did not see an /etc/shadow file on the system that would
have alist of all
> users. I typed in sudo, but got: "sudo: FSUM7351 not found".
>
> Q). What solutions have the rest of you come up with to use a non-
superuser ID in Openedition and still be able to get anything done?
>
>
> Thank you, Dave H.
>
> Disclaimer: Information in this message or an attachment may be
government data and thereby subject to the Minnesota Government Data
Practices Act, Minnesota Statutes, Chapter 13, may be subject to
attorney-client or work product privilege, may be confidential,
privileged, proprietary, or otherwise protected, and the unauthorized
review, copying, retransmission, or other use or disclosure of the
information is strictly prohibited. If you are not the intended
recipient of this message, please immediately notify the sender of
the transmission error and then promptly delete this message from
your computer system.
>





Mon Sep 15, 2008 2:00 pm

swiss_tikier
Offline Offline

Forward
Message #628 of 637 |
Expand Messages Author Sort by Date

Dear Group, We are running z/OS V1R8. In the *NIX world may things require root access. The easy path was just make everybody a UID of 0. We are trying not ...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 15, 2008
1:56 pm

I believe you can assign a user specific superuser functions using RACF UNIXPRIV class. Regards. Marco ... root access. The easy path was just make everybody...
swiss_tikier
Offline
Sep 15, 2008
2:01 pm

Hello David, well z/OS Unix is not other Unixes. IBM has put in great effords to avoid the superuser privileges. For your specific question you might look at...
Wolfgang
wolfg60
Offline Send Email
Sep 28, 2008
11:46 am

You might also try the IBM-MAIN or MVS OE newsgroup for this question. What is your security product? RACF, ACF2, Top Secret? For each one you need to setup...
Lizette Koehler
starsoul@...
Send Email
Sep 28, 2008
1:59 pm

Lizette, Thank you for your reply. I will look into the MVS OE newsgroup. We are using RACF. If I ask enough I do get some authority, they just don't want...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 28, 2008
8:31 pm

Wolfgang, Thank you for your response. I will ask our security group about the 'su' command. Thanks again, Dave H. Wolfgang <wolfg60@...> Sent by:...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 28, 2008
8:30 pm
Advanced

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help