hi all!

well, this is certainly curious.  i just finished applying
6.0pp2 *reactive* patches to one of my systems.  all seemed
to go well.....  so i go to do the final
reboot...blahblahblah...the operator is logged on and
executes a very simple logon udc -- to stream a job called
startjob.jobs.  this job has been around for a long time and
the operator typically streams it upon reboot.  here's what
shows up....

:stream startup.jobs
SECURITY VIOLATION  (FSERR 93)
Couldn't open input redirection file, command failed. (CIERR
9427)
Variable name encountered, but variable is not defined.
(CIERR 9805)
-------------------
say what???  well, here's the security matrix....

:listfile startup.jobs,3
********************
FILE: STARTUP.JOBS.SYS

FILE CODE : 0                   FOPTIONS:
ASCII,FIXED,NOCCTL,STD
BLK FACTOR: 3                   CREATOR : **
REC SIZE: 80(BYTES)             LOCKWORD: **
BLK SIZE: 240(BYTES)            SECURITY--READ    : ANY
EXT SIZE: 19(SECT)                        WRITE   : ANY
NUM REC: 54                               APPEND  : ANY
NUM SEC: 32                               LOCK    : ANY
NUM EXT: 1                                EXECUTE : ANY
MAX REC: 54                             **SECURITY IS ON
MAX EXT: 1                      FLAGS   : NO ACCESSORS
NUM LABELS: 0                   CREATED : THU, AUG 10,
2000,  4:23 PM
MAX LABELS: 0                   MODIFIED: THU, AUG 10,
2000,  4:24 PM
DISC DEV #: 12                  ACCESSED: THU, AUG 10,
2000,  4:24 PM
SEC OFFSET: 0                   LABEL ADDR: **
VOLCLASS  : MPEXL_SYSTEM_VOLUME_SET:DISC

:listfile startup.jobs,acd
ACCOUNT=  SYS         GROUP=  JOBS

FILENAME        ------------ACD ENTRIES--------------

STARTUP             NO ACDS
-------------------

the access to this job group are gu for everything *except*
execute -- that's set to any.  there's no udc for stream.
jobsecurity is low, passexempt is max (and has been....).
as manager.sys, i can stream the job.

curiously, operator can't stream anything out of the jobs
group -- but prior to today's escapade streamed many jobs
out of this group.  i made a little dummy job in the
operator's logon group and (as the operator) stream it.
curiously, i got:
Job file "testj" streamed in default "HPSYSJQ" job queue.
(and a job number)

any thoughts?            - d

--
Donna Garverick     Sr. System Programmer
925-210-6631        [log in to unmask]

>>>MY opinions, not Longs Drug Stores'<<<