RE: VIRUS Alert for the LIST - FLAME ON!

[Eric Kempter <eric.kempter@xxxxxxxxxxxxxxxxx>]

John,

     You've had enough eggnog, you need to stop now.  <g>

> -----Original Message-----
> From: John Earl [SMTP:johnearl@400security.com]
> Sent: Tuesday, December 28, 1999 10:28 AM
> To:   MIDRANGE-L@midrange.com
> Subject:      Re: VIRUS Alert for the LIST - FLAME ON!
> 
> John,
> 
> John Earl wrote:
> > 
> <snip>
> 
> > Sure.  Trojan Horses on the PC are really easy because there is
> > nothing that prevents a PC program from being modified and or
> > replaced.  I'm sure that the folks in Rochester would argue that this
> > is not an AS/400 virus because it is actually implemented on the
> > desktop (but for you and I the results are the same).  This just makes
> > it that much more important to to have control of what get's
> > introduced to the /400.  Admittedly AS/400 Library security is not as
> > tight as we'd like (because a user only needs *USE authority to place
> > new objects into a library), 
> 
> You BONEHEAD!   Of course even you know that a person needs *USE +
> *ADD authority to a library in order to place objects in that library,
> just *USE won't do it.   Now it's true that most AS/400's default
> library create authority (SYSVAL QCRTAUT) is set to *CHANGE, so
> *PUBLIC can do what you said, but they need more than *USE.
> 
> You must of been thinking of the ability to delete objects from a
> library with only *USE authority to the library (still requires
> *OBJEXT to the object itself).
> 
> Get it straight next time Buddy!
> 
> 
> jte (Hey, it's OK to flame yourself!)
> 
> 
> 
> --
> John Earl                                          
> johnearl@powertechgroup.com
> The PowerTech Group                        206-575-0711
> PowerLock Network Security              www.400security.com
> The 400 School                                www.400school.com
> --
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---