×
The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.
On 12-Apr-2012 12:28 , rob@xxxxxxxxx wrote:
<<SNIP>>
One item of extreme concern is:
Security implications of using SSH on iSeries
http://archive.midrange.com/security400/200609/msg00048.html
<<SNIP>> Should I be concerned as I am? Or is this FUD? The one
reply to the email leads me to NOT believe it is FUD but a rather
valid concern.
With regard to some of the comments in the message at the given link,
consider the following as a response: "A system which is not secured
using object-level security and [that same system] to which an
individual is granted the capability to access via a User Profile and
Password, irrespective of any direct access to a command line, is open
to the potential for that user to perform every action that the user
profile is authorized to perform. That such a user can perform work for
which the[ir] user profile is authorized, is little more than an
indication that the [object-level security of the] system would be
working as designed." See also the second portion of the response
[find\position-to the non-delimited string: "No exit point"] by Patrick in:
http://archive.midrange.com/midrange-l/200609/msg00964.html
Regards, Chuck
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
