Re: Security level

[John Earl <johnearl@xxxxxxxxx>]

At 10:20 AM 4/18/97 +0200, Maurice wrote:
>We wanna go from security level 30 to 40, any suggestions where we have
>to think about. We already have some things to think about, but maybe I
>forget some things.


Maurice,

If you don't already have system level auditing on, turn it on (this is a
good idea even if you're not going to level 40 security).  The Security
Guide - Basic describes how to do this, but in a nutshell you have to create
a journal called QSYS/QAUDJRN, attach a journal receiever to it, and then
set system values QAUDCTL to *QAUDLVL.  Then choose the auditing levels you
want in the QAUDLVL system values.  If all your concerned about is the jump
to Level 40 you should be tracking *AUTFAIL & *PGMFAIL.  

One area that trips people up is JOBD's with user profiles attached.  Under
level 30 you can submit a job to run under another person's profile if you
have *USE to the JOBD.  Under level 40 you must also have *USE to the USRPRF
to submit the same job.

hth,

jte
*************************************************
* John Earl     Gig Harbor, Washington  U.S.    *
* Email:        johnearl@lns400.com             *
* http:         www.lns400.com                  *
* Phone:        206-858-7388                    *
*************************************************

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This is the Midrange System Mailing List!  To submit a new message,   *
* send your mail to "MIDRANGE-L@midrange.com".  To unsubscribe from     *
* this list send email to MAJORDOMO@midrange.com and specify            *
* 'unsubscribe MIDRANGE-L' in the body of your message.  Questions      *
* should be directed to the list owner / operator: david@midrange.com   *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *