RE: Installing running applications as QSECOFR ( was RE: Anti-virusfor i5OS )

Joe typed: "In those rare cases where it might be required, what I'd
like to see is something like su in Linux, where you would have to key
in the QSECOFR profile to execute a particular function."

Ask and ye shall receive. Our Authority Broker product does just this,
but adds auditing, alerting, and workflow capability so that you can
stay compliant with security regulations.

jte


--

John Earl, VP and Chief Technology Officer
PowerTech: 253-872-7788
Direct: 253-479-1408
Mobile: 206-669-3336
John.Earl@xxxxxxxxxxxxx




Email is an excellent way to communicate material that is not time
sensitive. If your communication is of a more urgent nature, please
call.

===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Joe Pluta
Sent: Tuesday, April 01, 2008 1:32 PM
To: Midrange Systems Technical Discussion
Subject: Re: Installing running applications as QSECOFR ( was
RE: Anti-virusfor i5OS )

David Gibbs wrote:

FWIW: Some applications really do need QSECOFR authority to be
installed. Specifically those that have code that needs to adopt
QSECOFR authority. Change Management products come to mind
immediately (for obvious reasons).

I would argue that you don't need QSECOFR for most
operations. If the product is required to adopt authority of
profiles, it would be just as easy to grant *USE authority to
those profiles which it needs to adopt.
There is rarely a need to have QSECOFR rights.

In those rare cases where it might be required, what I'd like
to see is something like su in Linux, where you would have to
key in the QSECOFR profile to execute a particular function.

Joe
--
This is the Midrange Systems Technical Discussion
(MIDRANGE-L) mailing list To post a message email:
MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change
list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting,
please take a moment to review the archives at
http://archive.midrange.com/midrange-l.