Re: IBM-supplied user profile

[Neil Palmer <neil@xxxxxxxxxxxxxxxxxxxx>]

At security ;evel 10 (a misnomer, because security level 10 is NO 
security so it probably have been called level 0) the system will CREATE
a user profile with *ALLOBJ authority for ANYTHING you key into the User
Profile field on the signon display.  People who run/have run their systems
at level 10 will often find many user profiles with slight variations on
names etc., as if you made a typo when signing on it would just create
another profile with the incorrect User Id spelling.



On Sun, 13 Jul 1997, Matthias Oertli wrote:

> On Fri, 11 Jul 1997 14:15:49 -0400, Neil Palmer wrote:
> 
> >Matthias Oertli wrote:
> >> 
> >> Is Q0 an IBM-supplied user profile? (v305 or v310)
> >> 
> >
> >No.  If you have a profile of that name, then someone created it on your
> >system.  A possible security issue ??
> 
> I believe it got created when the CE logged in back when I first got the
> AS/400 (it came preset on security level 10).
> I've set it to *DISABLED and limited capabilities years ago, because I
> was never really sure where it came from. Then I guess I carried it from
> box to box, release to release....
> It popped up in my face again now that I'm cleaning up the machine in
> preparation for the RISC jump.
> Well, the security reference doesn't list it as IBM supplied, and it doesn't
> own any objects apart from it's message queue, so I finally deleted it.
> 
> Thanks for your help,
> Matthias
> 
>------------------------------------------------------------------------------------------------
> Matthias Oertli, Sydney, Australia 
> 
> root
> * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
> * This is the Midrange System Mailing List!  To submit a new message,   *
> * send your mail to "MIDRANGE-L@midrange.com".  To unsubscribe from     *
> * this list send email to MAJORDOMO@midrange.com and specify            *
> * 'unsubscribe MIDRANGE-L' in the body of your message.  Questions      *
> * should be directed to the list owner / operator: david@midrange.com   *
> * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
> 
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This is the Midrange System Mailing List!  To submit a new message,   *
* send your mail to "MIDRANGE-L@midrange.com".  To unsubscribe from     *
* this list send email to MAJORDOMO@midrange.com and specify            *
* 'unsubscribe MIDRANGE-L' in the body of your message.  Questions      *
* should be directed to the list owner / operator: david@midrange.com   *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *