View previous topic :: View next topic
|
Author |
Message |
prahalad
New User
Joined: 14 Sep 2010 Posts: 18 Location: Pune
|
|
|
|
I want to convert Rexx program into object code/load module.
It will help to protect the Rexx code from other people from making unauthorized changes to the programs.
I will distribute the Rexx program in the form of object code/load module. So other people are not able to change the code. |
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10873 Location: italy
|
|
Back to top |
|
|
daveporcelan
Active Member
Joined: 01 Dec 2006 Posts: 792 Location: Pennsylvania
|
|
|
|
What I do to protect the Rexx code is to place it in a Library that the user community has read only access to.
Only authorized people have update access. This allows easy access to changes when necessary.
This library either needs to be allocated in the general logon proc, or be able to altlib to, or do an alter of their syspproc dd.
Just another option to consider. |
|
Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006 Posts: 6250 Location: Mumbai, India
|
|
|
|
At one of my shop, we were able to compile REXX using ChangeMan and then it was distributed to the libraries. Check if your CM-tools are modified to have this capability. |
|
Back to top |
|
|
prahalad
New User
Joined: 14 Sep 2010 Posts: 18 Location: Pune
|
|
|
|
Thanks for your help.
enrico-sorichetti:
I gone through the link provided by you. But it seems to me, first of all my shop need to purchase REXX compiler. Can you please let me know without purchasing it, can I complie it?
Anuj Dhawan:
At my shop, changeman is not present. |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19244 Location: Inside the Matrix
|
|
|
|
Hello,
Quote: |
I gone through the link provided by you. But it seems to me, first of all my shop need to purchase REXX compiler. Can you please let me know without purchasing it, can I complie it? |
Hard to believe this has been asked. . .
If you have no compiler, how might you compile . . . |
|
Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006 Posts: 6250 Location: Mumbai, India
|
|
|
|
prahalad wrote: |
At my shop, changeman is not present. |
Well, I just gave you a hint - that does not mean you'll necessarily look for only Change Man. What CM-Tool do you use - enquire if the compilation of REXX code is supported in that? And as Dick says, how do you compile your COBOL-programs at first place? |
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10873 Location: italy
|
|
|
|
Quote: |
Can you please let me know without purchasing it, can I complie it? |
|
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10873 Location: italy
|
|
|
|
what is that You want to protect? the code, the process, the resources !
in any case Your approach will face lot of effort with little success!
the code/process is already protected inside/outside Your organization by the current IP/copyright regulations
the resources accessed can/should be protected using the security product in place
if there is enough <return> anybody with the proper authorizations can rewrite a modified process
(without the need to look at Your precious code)
hiding/compiling the code will simply make the task a bit more difficult
reverse engineering REXX compiled code is difficult, but not that much!
( will not get an out of the box source, but close enough ) |
|
Back to top |
|
|
Kjeld
Active User
Joined: 15 Dec 2009 Posts: 365 Location: Denmark
|
|
|
|
If you want to protect the source code from being inspected or copied by external customers, use a compiled language instead, preferably one for which you already have the neccessary development environment infrastructure in place. |
|
Back to top |
|
|
superk
Global Moderator
Joined: 26 Apr 2004 Posts: 4652 Location: Raleigh, NC, USA
|
|
|
|
Kjeld wrote: |
If you want to protect the source code from being inspected or copied by external customers, use a compiled language instead, preferably one for which you already have the neccessary development environment infrastructure in place. |
What he said! |
|
Back to top |
|
|
daveporcelan
Active Member
Joined: 01 Dec 2006 Posts: 792 Location: Pennsylvania
|
|
|
|
One of the reasons I like to code in Rexx is that it does not need to be compiled.
I like the instant gratification of change a line of code and see the result.
In all my years of coding Rexx, I rarely felt the need to compile the code.
When I have, it was not for protection reasons, but for performance.
With those cases, I chose to write the application in Cobol instead. |
|
Back to top |
|
|
don.leahy
Active Member
Joined: 06 Jul 2010 Posts: 765 Location: Whitby, ON, Canada
|
|
|
|
Well, I suppose you could encrypt the Rexx source and decrypt it at execution time, but that's just dumb.
On the contrary, Rexx users should be encouraged to experiment with the source code. As long as they cannot update the production version, they should have the freedom to do what they wish (short of stealing the code and selling it, of course). |
|
Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006 Posts: 6250 Location: Mumbai, India
|
|
|
|
prahalad wrote: |
I want to convert Rexx program into object code/load module.
It will help to protect the Rexx code from other people from making unauthorized changes to the programs.
I will distribute the Rexx program in the form of object code/load module. So other people are not able to change the code. |
Okay, when I re-read your request, two things come to mind:
1. Are you writing some REXX for your own use?
2. Are you writing some REXX, to be used by a user community?
If first is the case, why not create them in a PDS having your RACF-IS as HLQ?
If second is the case, you and your team needs to some to an agreement where your code is some common library and everyone can access to it. However, if it is for the user-community - it will be installed/distributed to general logon proc -- so why such a question at first place? |
|
Back to top |
|
|
Pedro
Global Moderator
Joined: 01 Sep 2006 Posts: 2547 Location: Silicon Valley
|
|
|
|
If you are writing code for commercial distribution, consider actually purchasing the rexx compiler.
==============
I recall my peers on VM having something called 'oneline'. I was a program that took a rexx exec and removed comments and blank lines, and also concatentated all of the rexx instructions, separated by semi-colons, into a single line. I think it was intended to help with performance, but might also be used to hide somewhat the workings of the exec. |
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10873 Location: italy
|
|
|
|
Quote: |
I recall my peers on VM having something called 'oneline'. I was a program that took a rexx exec and removed comments and blank lines, and also concatentated all of the rexx instructions, separated by semi-colons, into a single line. I think it was intended to help with performance, but might also be used to hide somewhat the workings of the exec. |
it wouldn ' t take that long to do reverse,
not even have to write a single line of code
there are a lot of REXX reformatters around! |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19244 Location: Inside the Matrix
|
|
|
|
Hi Pedro,
Quote: |
but might also be used to hide somewhat the workings of the exec. |
Or to make it inconvenient to "play with" the code. . .
d |
|
Back to top |
|
|
|