General permission for IUCV connections from a terminal server

Use the IUCV ANY statement if you want to permit the terminal server to connect to any target system.

You might consider the z/VM® guest virtual machine of your terminal server as a trusted system. If so, you can permit it to connect to all other z/VM guest virtual machines on the z/VM instance.

Use this statement in the z/VM user directory entry for the z/VM guest virtual machine of the terminal server:

IUCV ANY

With this statement, a user on the terminal server can connect to all z/VM guest virtual machines on the same z/VM instance, including all target systems.

This general permission for the terminal server relieves you from updating the z/VM directory each time a new target system is added. The disadvantage is that general users on the terminal server can establish IUCV connections to all other z/VM guest virtual machines, not just target systems.

These concerns are addressed by a special shell that limits user actions on the terminal server, see ts-shell.