Restricting target system connections for ts-shell

By default, ts-shell is permitted to connect to all target systems.

Before you begin

Skip this task if you do not want to restrict ts-shell permissions to specific target systems.

Procedure

  1. Use your preferred editor to open /etc/iucvterm/ts-shell.conf.
  2. Find this line:
    ts-systems = /etc/iucvterm/unrestricted.conf
    Change the line to:
    ts-systems = /etc/iucvterm/ts-systems.conf
  3. Use your preferred editor to open /etc/iucvterm/ts-systems.conf.
  4. List the z/VM® user IDs, each on a separate line, of all target systems to which you want to permit connections.
    Example: A file to permit connections to LXGUEST1, LXGUEST3, LXGUEST5, LXGUEST7, and LXGUEST9 might read:
    LXGUEST1
    LXGUEST3
    LXGUEST5
    LXGUEST7
    LXGUEST9
    Tips:
    • Lists of z/VM user IDs can be extensive. If you have access to the z/VM user directory, you can use the vmur, grep, and cut commands to create a list from the z/VM user directory.
    • You can permit connections to any target system by keeping the default configuration file unrestricted.conf or with a single entry, [*ALL*] in ts-systems.conf.
  5. Save and close the configuration file.