Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.


Share this Page URL
Help

Security for operations in z/OS UNIX > BPX.SAFFASTPATH - Pg. 173

Note: UPDATE access is needed if the user needs to mount , chmount , or unmount file sys- tems with the setuid option; otherwise, READ access is sufficient. UNIXPRIV authorization is invoked by creating the needed resources in the UNIXPRIV class and then giving users READ authority to it, as follows: SETROPTS CLASSACT(UNIXPRIV) SETROPTS RACLIST(UNIXPRIV) RDEFINE UNIXPRIV SUPERUSER.FILESYS.PFSCTL UACC(NONE) PERMIT SUPERUSER.FILESYS.PFSCTL CLASS(UNIXPRIV) ID(ROGERS) ACCESS(READ) SUPERUSER.FILESYS.VREGISTER This profile allows a server to use the vreg() callable service to register as a VFS file server. Only READ access is required. SUPERUSER.IPC.RMID This profile allows a user to issue the ipcrm command to release IPC resources. Only READ access is required. SUPERUSER.PROCESS.GETPSENT This profile allows a user to use the w_getpsent() callable service to receive data for any process. Only READ access is required. SUPERUSER.PROCESS.KILL This profile allows a user to use the kill() callable service to send signals to any process. Only READ access is required.