Re: Lvl 20 to 40

Matthias Oertli wrote:
> 
> To change security levels from 20 to 40 I assume it is safer to take it
> in steps, first to 30, then to 40.
> Would anyone have any hints or tips about going from 20 to 30? Are
> there any traps to avoid?
> The security reference is a bit vague on the subject.
> Thanks,
> Matthias
> 
>------------------------------------------------------------------------------------------------
> Matthias Oertli, Sydney, Australia
> 

It's been awhile but the biggy from 20 to 30 is the removal of "ALL OBJ" 
authority from virtually all uses except QSECOFR. There is a way to
setup
a journal that audits security. You set it to monitor as if the system
was
at 30. See what it catches and fix that. Next you could set it to
monitor
for level 40 security hits, or just initially monitor at 40. Fix those. 
Now in theory you could go from 20 to 40 in 1 step. 

Is there a reason for 40? 30 is fine for a lot of sites.


-- 
Kirk Goins
Gresham, Oregon
EMAIL kgoins@ix.netcom.com              
      kirk_goins@compuserve.com
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---