🚀 go-pugleaf

In a message dated 9/5/2005 9:49:46 A.M. Central Daylight Time,
essteam@juno.com writes:

>I have a client who would like me to develop a presentation on an
Authorizing Address Space.
>I suggested simply writting an SVC that  switches Authorizations instead of
and address space.
>That Suggestion  was fround upon.  They are building this facility to alow
 Vendor Products and As well As
>IBM products to issues Authorized  Services where I the Vendor does not
usually/easily permit it.
>The  customer would like to develop a cross memory environment; issue  a
Program Call Instruction form a vendor product address space  to
>thecustomers Authorizing  Server Address Space and allow the  caller to be
in Supervisor State key xx or APF Authorized.

>I  believe an SVC could be developed to accomplished this, but I suspect
theres  more to this that what they are telling  me.

>My first  question  is when the Cross Memory Program is executed, it would
Sets  the  APF Authorization bit
>and return.  WHo IS in the APF  state, The entire Calling Address Space or
only  the invoking  TCB?

>Can anyone on the list speak to the pros vs cons of developing  an
Authorizing SVC against an Authorizing Address Space.

>I also  suspect that Some Security Checking would be done in this Address
Space, since  that was the first concept they had me explore.

>paul  d'angelo


Judging from your questions, the background of the situation, and some  of
the replies, I believe you are in way over your head  on this project.  You need
to subcontract this work, or at  least the design phase, to an MVS-z/OS
security expert who knows all  about SVCs, PCs, APF, etc. or else tell your client
that you respectfully  decline to work any more on this project.  I also
believe your client is  in way over their head.  If you continue on this project,
you should  purchase a large amount of product liability insurance for
yourself.  At  the very least, much more research is needed before you begin creating
your  presentation.

Bill Fairchild