Re: VIRUS Alert for the LIST - FLAME ON!

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

John,

John Earl wrote:
> 
<snip>

> Sure.  Trojan Horses on the PC are really easy because there is
> nothing that prevents a PC program from being modified and or
> replaced.  I'm sure that the folks in Rochester would argue that this
> is not an AS/400 virus because it is actually implemented on the
> desktop (but for you and I the results are the same).  This just makes
> it that much more important to to have control of what get's
> introduced to the /400.  Admittedly AS/400 Library security is not as
> tight as we'd like (because a user only needs *USE authority to place
> new objects into a library), 

You BONEHEAD!   Of course even you know that a person needs *USE +
*ADD authority to a library in order to place objects in that library,
just *USE won't do it.   Now it's true that most AS/400's default
library create authority (SYSVAL QCRTAUT) is set to *CHANGE, so
*PUBLIC can do what you said, but they need more than *USE.

You must of been thinking of the ability to delete objects from a
library with only *USE authority to the library (still requires
*OBJEXT to the object itself).

Get it straight next time Buddy!


jte (Hey, it's OK to flame yourself!)



--
John Earl                                          
johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---