Re: Subsystem ODP exploit (was setsppfp bug)

["Phil Hall" <hallp@xxxxxxxx>]

> >Move to seclvl 50.

>   Simple?!?!? What's so simple about that?
> Why don't I let *you* tell them!  What, just CHGSYSVAL
> QSECURITY and re-IPL?
> That's it?  Nothing else to do?  No other changes?  WPF!
>
> Let me move to another state, first.

Dan,

OK, so it's not a quick flip of the switch - but for most sites it's
basically just turn on security auditing, watch the journal entries for a
couple of weeks to detect if there will be any issues. In most instances
there won't be any issues. Issues tend to occur from older third-party
software that uses short cuts (most of which are now supported via API's) to
perform function.

But as there is a PTF on the way for this, the rush to seclvl 50 can be
eased a little. I'd recommend (for what my views are worth to anyone) to
enable security auditing and find out for themselves if seclvl 50 is an
option for them, if it is then take that option !

--phil

+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---