27.12.2012 Views

z/VM: CP Commands and Utilities Reference - z/VM - IBM

z/VM: CP Commands and Utilities Reference - z/VM - IBM

z/VM: CP Commands and Utilities Reference - z/VM - IBM

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

SET D8ONECMD<br />

SET D8ONECMD<br />

►►<br />

Set<br />

Notes:<br />

Authorization<br />

Purpose<br />

D8ONECMD<br />

Oper<strong>and</strong>s<br />

*<br />

userid<br />

(1)<br />

FAIL<br />

LOG<br />

OFF<br />

1 The oper<strong>and</strong>s can be specified in any order.<br />

Privilege Class: A, G<br />

1234 z/<strong>VM</strong>: <strong>CP</strong> <strong>Comm<strong>and</strong>s</strong> <strong>and</strong> <strong>Utilities</strong> <strong>Reference</strong><br />

LOCK<br />

UNLOCK<br />

Use SET D8ONECMD to change the D8ONECMD settings for your own virtual<br />

machine or another user’s virtual machine. D8ONECMD settings determine whether<br />

<strong>CP</strong> accepts multiple <strong>CP</strong> comm<strong>and</strong>s imbedded in a single <strong>CP</strong> comm<strong>and</strong> issued<br />

through DIAGNOSE code X'08'.<br />

When a user uses a general <strong>VM</strong>CF-capable program to send a request that<br />

contains imbedded X'15' characters to a service user ID, the service user ID<br />

assumes the request was issued with the <strong>CP</strong> SMSG facility. The <strong>CP</strong> SMSG facility<br />

is trusted because <strong>CP</strong> ensures the service user ID does not receive any imbedded<br />

X'15' characters. When the service user ID uses DIAGNOSE code X'08' to issue a<br />

<strong>CP</strong> comm<strong>and</strong> that contains the request, <strong>CP</strong> interprets the X'15' characters as<br />

comm<strong>and</strong> separators <strong>and</strong> breaks what the service user ID thought was a single<br />

comm<strong>and</strong> into several comm<strong>and</strong>s.<br />

SET D8ONECMD lets you to prevent the execution of “Trojan Horse” comm<strong>and</strong>s<br />

(comm<strong>and</strong>s hiding inside legitimate requests) <strong>and</strong> records any attempt to process<br />

such comm<strong>and</strong>s.<br />

For information on how to display the D8ONECMD settings of your virtual machine<br />

or another user’s virtual machine, see “QUERY D8ONECMD” on page 764.<br />

userid<br />

indicates that you wish to change another virtual machine’s D8ONECMD<br />

settings. If you are a class G user, you can specify only your own user ID.<br />

* indicates that you wish to change your own virtual machine’s D8ONECMD<br />

settings.<br />

FAIL<br />

tells <strong>CP</strong> to reject any attempt to process a DIAGNOSE code X'08' containing<br />

multiple <strong>CP</strong> comm<strong>and</strong>s <strong>and</strong> send a message to operations personnel. If you<br />

specify FAIL, you cannot specify LOG or OFF.<br />

LOG<br />

tells <strong>CP</strong> to send a message to operations personnel every time the specified<br />

user tries to process a DIAGNOSE code X'08' containing multiple <strong>CP</strong><br />

comm<strong>and</strong>s. If you specify LOG, you cannot specify FAIL or OFF.<br />

►◄

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!