Re: Security Level Change

[ekempter@xxxxxxxx]

This question has come up previously. 

Per Al Barso:
Yes, be sure that all of your applications are Level 40 compliant.
Also, turn on object auditing and run it for a month or so.  Analyze the
journal receiver for *PGMFAIL entries.  If you do not have any *PGMFAIL
entries after an extended period of time then you are ok.

Per John Earl:
Review the Security Guide - Basic on how to turn on auditing.  In a
nutshell you have to create a journal call QSYS/QAUDJRN, attach a
journal receiver to it, and then set system value QAUDCTL to *QAUDLVL.
Monitor the journal for *AUTFAIL and *PGMFAIL entries.  Watch for JOBDs
with user profiles attached to them.  Under level 30 you can submit a
job under another person's profile if you have *USE to the JOBD.  Under
level 40 you must also have *USE to the USRPRF to submit the same job.
Whibley,Dik wrote:
> 
> We currently run our AS/400's at Security Level 30.
> We are considering a move to Level 40.
> Has anyone got any tips, stories, or warnings about such a move.
> 
> TIA     Dik Whibley
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This is the Midrange System Mailing List!  To submit a new message,   *
* send your mail to "MIDRANGE-L@midrange.com".  To unsubscribe from     *
* this list send email to MAJORDOMO@midrange.com and specify            *
* 'unsubscribe MIDRANGE-L' in the body of your message.  Questions      *
* should be directed to the list owner / operator: david@midrange.com   *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *