Re: Security Level 40

Deb,

No. Sorry that you were a recipient o my first (incomplete)
response.  You are apparantly auditing many different events on
your system.  Run your DSPJRN command again and ask for only CODE
'T' and ENTTYP 'AF'.  Then drill down into all of those entries
and look for te first byte of data equal to an B,C,D,R,J, or S. 
These are tre transaction types that would be blocked at Level 40.



"Turner, Deb" wrote:
> 
> John, I set the audit level and then did dspjrn qaudjrn only to find lots of
> this type of thing...
> 
> Do all of these T codes mean I have a big 30-40 problem?
> 
>          13177   T     CD                           QPADEV0005  11:45:06
>          13178   T     CD                           QPADEV0005  11:45:06
CD is a command audit.  You've turned on auditing for this user. 
Not a security problem, but will definetly add to journal size.


>          13179   T     JS                           QPADEV000Z  11:45:36
>          13180   T     JS                           QPADEV0002  11:49:53
>          13181   T     JS                           DSP03       11:56:39

JS is a job start.  Someone started a new job (yawn)
>          13182   T     PW                           QINTER      11:56:43

PW is (I think) a password failure.  Someone typed in the wrong
password (yawn... if it happens only once)
>          13183   T     JS                           DSP03       11:56:47
>          13184   T     JS                           SCHUTMDIS   11:56:52
>          13185   T     JS                           QPADEV000X  11:57:08
>          13186   T     SV                           DSP03       11:57:50
>          13187   T     SV                           DSP03       11:57:50
SV is a Save operation.  Someone saved something.

None of these events will prevent you from going to QSECURITY
level 40.


jte
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---