Re: Change to security level 40

Jeff,

At 02:31 PM 1/9/98 -0500, you wrote:
>Now that Abstract/Probe+ is security level 40 compliant, I want to
>change my system from level 30 to level 40.
>
>Some time back someone posted a message stating what to look for in the
>security auditing journal that "passed" under level 30 but would "fail"
>under level 40.  I'm thinking they were "AF-Authority Failure" and
>"PF-Program Failure" entries.  Am I right?


Correct, you need to turn on both *AUTFAIL & *PGMFAIL in QAUDLVL and then
comb the security audit journal for AF's and PF's.  

One area that trips people up is JOBD's with user profiles attached.  Under
level 30 you can submit a job to run under another person's profile if you
have *USE to the JOBD.  Under level 40 you must also have *USE to the USRPRF
to submit the same job.

Topic 2.4.9 - Changing to Security Level 40 - in the OS/400 Security
Reference V3R7 (QBJALC01), covers this subject in greater detail.


jte

(Just finished off the last of the Halloween candy.  Mmmmm!)
--

John Earl       Lighthouse Software Inc.
8514 71st NW    Gig Harbor, WA 98335
253-858-7388    johnearl@lns400.com

Without Lighthouse Network Security/400, your AS/400 is wide open.

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---