Specify privilege classes C and G for the z/VM agent.
Business Value:
Ensuring that the privilege classes for the agent are not higher than needed helps to preserve the integrity of the z/VM system.
Additional Considerations:
When configuring the user directory for the z/VM agent, specify privilege classes that are appropriate. Class G permits the agent to issue general user commands. Class C permits the agent to issue commands on behalf of other users and the SIGNAL command to shut down Linux guests. The client products can also require certain privilege classes. After the agent is active for a period, review the commands that are issued through the agent. Verify that the specified privilege classes are appropriate.
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|