Re: Security level 50

Jim Franz wrote on 12/15/2005 01:04:09 PM:

> Ed - any progress at getting IBM Partners to get their code compatible
with
> 50?

All I can do is give you my opinion. I think most of them are already
compatible with level 50. After all by working at security level 50 they
have a better chance to sell their products. Unfortunately, I believe a few
have done this by modifying their programs to run in system state. (Of
course if they do this without adding the right type of parameter
validation then they are actually reducing the security/integrity of their
customers systems that would normally be provided at security level 40 and
50.)

Each release I see new APIs and exit points that should help the remaining
few applications run completely in user state. I really have no idea how
many applications still need to run in system state.

Ed Fishel,
edfishel@xxxxxxxxxx