IBM's DITTO Can Access Unauthorized VSAM Datasets

Products

• Top Secret - VSE

Issue/Introduction

DITTO can access unauthorized VSAM data sets.

If IBM VSAM Utility IDCAMS is used, the unauthorized user gets a Top Secret security violation.

 

 

 

Environment

Release:
Component: TSSVSE

Resolution

IBM's DITTO program is a powerful dataset utility.

DITTO uses physical I/O to the DASD.

The DITTO program and DITTO functions can be secured with Top Secret to control unauthorized use.