Search the web
Sign In
New User? Sign Up
os390andmvs · OS390 and MVS - For z/OS, OS/390 and MVS System Programmers
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Message search is now enhanced, find messages faster. Take it for a spin.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
USS and appropriate privileges   Message List  
Reply | Forward Message #631 of 637 |
Re: AW: [OS390 and MVS] USS and appropriate privileges


Wolfgang,

Thank you for your response. I will ask our security group about the 'su'
command.


Thanks again, Dave H.






Wolfgang <wolfg60@...>
Sent by: os390andmvs@yahoogroups.com

To

os390andmvs@yahoogroups.com
09/28/2008 06:46 AM
cc


Subject
Please respond to AW: [OS390
and MVS] USS and appropriate privileges
os390andmvs@yahoogroups.com

















Hello David,


well z/OS Unix is not other Unixes. IBM has put in great effords to avoid the
superuser privileges. For your specific question you might look at "su" command
which allows you to change the euid of your process to 0. This is controlled by
the RACF FACILITY class profile BPX.SUPERUSER. But there is more: with RACF
UNIXPRIV class you are able to give selective superuser priviliges to
individual
tasks. The best documentation about this can be found in IBM's "z/OS Unix
System
Services Planning" manual.

Cheers,
Wolfgang

--- David.L.Hansen@... <David.L.Hansen@...> schrieb
am
Fr, 12.9.2008:
Von: David.L.Hansen@... <David.L.Hansen@...>
Betreff: [OS390 and MVS] USS and appropriate privileges
An: os390andmvs@yahoogroups.com
Datum: Freitag, 12. September 2008, 19:54


Dear Group,

We are running z/OS V1R8. In the *NIX world may things require root
access.
The easy path was just make everybody a UID of 0. We are trying not
to do that with my userid.
However without being a superuser all I see from my ps -ef is this:

SY4019:/SYSTEM/ etc: >ps -ef
UID PID PPID C STIME TTY TIME CMD
SY4019 50331802 1 - 13:04:13 ? 0:03 OMVS
SY4019 83886258 50331802 - 16:07:53 ttyp0000 0:03 -sh
SY4019 67109053 83886258 - 17:42:48 ttyp0000 0:00 ps -ef
SY4019:/SYSTEM/ etc: >

I read the System Services Command Reference about ps and it says I will
only see those processes "the user" has approriate privileges to access.
It goes on to say it will support a list of users with the -U option. I
did
not see an /etc/shadow file on the system that would have alist of all
users. I typed in sudo, but got: "sudo: FSUM7351 not found".

Q). What solutions have the rest of you come up with to use a
non-superuser
ID in Openedition and still be able to get anything done?

Thank you, Dave H.

Disclaimer: Information in this message or an attachment may be
government
data and thereby subject to the Minnesota Government Data Practices Act,
Minnesota Statutes, Chapter 13, may be subject to attorney-client or work
product privilege, may be confidential, privileged, proprietary, or
otherwise protected, and the unauthorized review, copying,
retransmission,
or other use or disclosure of the information is strictly prohibited. If
you
are not the intended recipient of this message, please immediately notify
the sender of the transmission error and then promptly delete this
message
from your computer system.

__________________________________________________
Do You Yahoo!?
Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen
Massenmails.
http://mail.yahoo.com


Disclaimer: Information in this message or an attachment may be government data
and thereby subject to the Minnesota Government Data Practices Act, Minnesota
Statutes, Chapter 13, may be subject to attorney-client or work product
privilege, may be confidential, privileged, proprietary, or otherwise protected,
and the unauthorized review, copying, retransmission, or other use or disclosure
of the information is strictly prohibited. If you are not the intended recipient
of this message, please immediately notify the sender of the transmission error
and then promptly delete this message from your computer system.

Sun Sep 28, 2008 5:52 pm

hennepin_county
Offline Offline
Send Email Send Email

Attachment
pic05537.gif
Type:
image/gif
Attachment
pic21538.gif
Type:
image/gif
Forward
Message #631 of 637 |
Expand Messages Author Sort by Date

Dear Group, We are running z/OS V1R8. In the *NIX world may things require root access. The easy path was just make everybody a UID of 0. We are trying not ...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 15, 2008
1:56 pm

I believe you can assign a user specific superuser functions using RACF UNIXPRIV class. Regards. Marco ... root access. The easy path was just make everybody...
swiss_tikier
Offline
Sep 15, 2008
2:01 pm

Hello David, well z/OS Unix is not other Unixes. IBM has put in great effords to avoid the superuser privileges. For your specific question you might look at...
Wolfgang
wolfg60
Offline Send Email
Sep 28, 2008
11:46 am

You might also try the IBM-MAIN or MVS OE newsgroup for this question. What is your security product? RACF, ACF2, Top Secret? For each one you need to setup...
Lizette Koehler
starsoul@...
Send Email
Sep 28, 2008
1:59 pm

Lizette, Thank you for your reply. I will look into the MVS OE newsgroup. We are using RACF. If I ask enough I do get some authority, they just don't want...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 28, 2008
8:31 pm

Wolfgang, Thank you for your response. I will ask our security group about the 'su' command. Thanks again, Dave H. Wolfgang <wolfg60@...> Sent by:...
David.L.Hansen@...
hennepin_county
Offline Send Email
Sep 28, 2008
8:30 pm
Advanced

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help