RE: QSYSOPR Security issue for Backups.

I just tested CMD('clrtmp') via QSH
Fails because of an authority issue with QPGMR
QSTRUP runs as QPGMR, so we need determine what authority is needed by QPGMR to clear all the files in tmp.
Because it runs in QSH, not as easy to see the authority issues.

Paul


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Scott Klement
Sent: Wednesday, June 18, 2014 1:25 PM
To: Midrange Systems Technical Discussion
Subject: Re: QSYSOPR Security issue for Backups.

Paul & Rob,

clrtmp is a QShell command. You should not run QShell tools with the CALL command or a *CMD object. These tools are meant to run inside QShell, and could potentially need the services of the shell to work properly.

So while calling it from the CL environment may wotk today, it has the potential to break at any time when you update the software. And there may be things that 'seem' to work, but don't really work under the covers.

So, please consider running this from QShell as it is meant to run.

QSH CMD('clrtmp')


On 6/18/2014 12:04 PM, rob@xxxxxxxxx wrote:

If you want a command, it's really quite simple.
EDTF FILE(ROUTINES/QCMDSRC) MBR(DUMMY)
..+....2....+....3....+....4....+....5....+.
************Beginning of data************** CMD PROMPT('Dummy source
no parm commands')
************End of Data********************

CRTCMD CMD(QGPL/CLRTMP) PGM(QSHELL/CLRTMP)
SRCFILE(ROUTINES/QCMDSRC) SRCMBR(DUMMY)


Rob Berendt

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.