eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

OpenEdition MVS / UNIX System Services SupportCHOWN UNRESTRICTED (Control Option)A new eTrust CA-Top Secret control option (CHOWNURS) exists to allow usersto use the CHOWN function to change file ownership for files that they own.This control option can be set using a TSS MODIFY command. To determine thecurrent active setting of CHOWNURS, issue a TSS MODIFY STATUS(BASE)command. This control option can be set to ON or OFF.ON—Allows users to use the chown function to change file ownership for theirfiles.OFF—User cannot change file ownership unless he is a superuser or is givenaccess to UNIXPRIV class SUPERUSER.FILESYS.CHOWN. This is the defaultsetting.z/OS and OS/390 UNIX System Services: User LimitsWith this support, you can control the amount of resources that are consumed byindividual z/OS or OS/390 UNIX users. Prior to OS/390 V2R8, the BPXPRMxxmember of the PARMLIB determined resource limits for most z/OS or OS/390UNIX users. At OS/390 V2R8 and above, you can now override, at the user level,the parmlib setting defined in BPXPRMxx. The following table defines the newresources and what access is allowed by the resource.TSS Resource Range Member inBPXPRMxxDescriptionOECPUTMASSIZE7 to2,147,483,64710,485,760 to2,147,483,647MaxcputimeMaxassizeMaximum time (seconds) a process isallowed to use.Maximum address space region sizeallowed per process created via rlogin ortelnet.OEFILEP 3 to 65,535 Maxfileproc Maximum number of files that a singleprocess can have active or openconcurrently.PROCUSER 3 to 32,767 Maxprocuser Maximum number of processes a user canhave open at the same time.THREADS 0 to 100,000 Maxthreads Maximum number of pthread_createdthreads, including those running, queued,and exited but not detached, that a singleprocess can have concurrently active.MMAPAREA 1 to 16,777,216 Maxmmaparea Maximum amount of dataspace storage(pages) that can be allocated for memorymapping of HFS files.1–18 Cookbook