Search the web
Sign In
New User? Sign Up
os390andmvs · OS390 and MVS - For z/OS, OS/390 and MVS System Programmers
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Want your group to be featured on the Yahoo! Groups website? Add a group photo to Flickr.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
USS and appropriate privileges   Message List  
Reply | Forward Message #629 of 637 |
AW: [OS390 and MVS] USS and appropriate privileges

Hello David,
well z/OS Unix is not other Unixes. IBM has put in great effords to avoid the superuser privileges. For your specific question you might look at "su" command which allows you to change the euid of your process to 0. This is controlled by the RACF FACILITY class profile BPX.SUPERUSER. But there is more: with RACF UNIXPRIV class you are able to give selective superuser priviliges to individual tasks. The best documentation about this can be found in IBM's "z/OS Unix System Services Planning" manual.
 
Cheers,
Wolfgang

--- David.L.Hansen@... <David.L.Hansen@...> schrieb am Fr, 12.9.2008:
Von: David.L.Hansen@... <David.L.Hansen@...>
Betreff: [OS390 and MVS] USS and appropriate privileges
An: os390andmvs@yahoogroups.com
Datum: Freitag, 12. September 2008, 19:54


Dear Group,

We are running z/OS V1R8. In the *NIX world may things require root access. The easy path was just make everybody a UID of 0. We are trying not
to do that with my userid.
However without being a superuser all I see from my ps -ef is this:

SY4019:/SYSTEM/ etc: >ps -ef
UID PID PPID C STIME TTY TIME CMD
SY4019 50331802 1 - 13:04:13 ? 0:03 OMVS
SY4019 83886258 50331802 - 16:07:53 ttyp0000 0:03 -sh
SY4019 67109053 83886258 - 17:42:48 ttyp0000 0:00 ps -ef
SY4019:/SYSTEM/ etc: >

I read the System Services Command Reference about ps and it says I will only see those processes "the user" has approriate privileges to access.
It goes on to say it will support a list of users with the -U option. I did not see an /etc/shadow file on the system that would have alist of all
users. I typed in sudo, but got: "sudo: FSUM7351 not found".

Q). What solutions have the rest of you come up with to use a non-superuser ID in Openedition and still be able to get anything done?

Thank you, Dave H.

Disclaimer: Information in this message or an attachment may be government data and thereby subject to the Minnesota Government Data Practices Act, Minnesota Statutes, Chapter 13, may be subject to attorney-client or work product privilege, may be confidential, privileged, proprietary, or otherwise protected, and the unauthorized review, copying, retransmission, or other use or disclosure of the information is strictly prohibited. If you are not the intended recipient of this message, please immediately notify the sender of the transmission error and then promptly delete this message from your computer system.

__________________________________________________
Do You Yahoo!?
Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen Massenmails.
http://mail.yahoo.com

Mon Sep 15, 2008 9:49 pm

wolfg60
Offline Offline
Send Email Send Email

Forward
Message #629 of 637 |
Expand Messages Author Sort by Date

Dear Group, We are running z/OS V1R8. In the *NIX world may things require root access. The easy path was just make everybody a UID of 0. We are trying not ...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 15, 2008
1:56 pm

I believe you can assign a user specific superuser functions using RACF UNIXPRIV class. Regards. Marco ... root access. The easy path was just make everybody...
swiss_tikier
Offline
Sep 15, 2008
2:01 pm

Hello David, well z/OS Unix is not other Unixes. IBM has put in great effords to avoid the superuser privileges. For your specific question you might look at...
Wolfgang
wolfg60
Offline Send Email
Sep 28, 2008
11:46 am

You might also try the IBM-MAIN or MVS OE newsgroup for this question. What is your security product? RACF, ACF2, Top Secret? For each one you need to setup...
Lizette Koehler
starsoul@...
Send Email
Sep 28, 2008
1:59 pm

Lizette, Thank you for your reply. I will look into the MVS OE newsgroup. We are using RACF. If I ask enough I do get some authority, they just don't want...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 28, 2008
8:31 pm

Wolfgang, Thank you for your response. I will ask our security group about the 'su' command. Thanks again, Dave H. Wolfgang <wolfg60@...> Sent by:...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 28, 2008
8:30 pm
Advanced

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help