Re: Adding a library to the system's library list

["Simon Coulter" <shc@xxxxxxxxxxxxxxxxx>]

M
Hello John,

That's not completely true.  Althought the CHGSYSLIBL command is shipped with 
*EXCLUDE authority, any 
*ALLOBJ user can change the public authority to a less restrictive value, or 
grant specific authority to a user.  

All that CHGSYSLIBL requires is *USE authority to the command, *USE authority 
to the library being added, 
and *EXECUTE authority to QSYS.

There are security considerations involved in relaxing the authority to this 
command.

Regards,
Simon Coulter.

«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
«» FlyByNight Software         AS/400 Technical Specialists       «»
«» Eclipse the competition - run your business on an IBM AS/400.  «»
«»                                                                «»
«» Phone: +61 3 9419 0175      Mobile: +61 0411 091 400           «»
«» Fax:   +61 3 9419 0175      mailto: shc@flybynight.com.au      «»
«»                                                                «»
«» Windoze should not be open at Warp speed.                      «»
«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
//--- forwarded letter -------------------------------------------------------
> X-Mailer: Mozilla 4.04 [en] (Win95; I)
> Date: Sun, 13 Feb 2000 11:00:53 -0800
> From: "John Earl" <johnearl@400security.com>
> To: MIDRANGE-L@midrange.com
> Reply-To: MIDRANGE-L@midrange.com
> Subject: Adding a library to the system's  library list

> 
> CHGSYSLIBL only changes the System Library list of the current job. 
> You would have to use this command for every user every time they
> signed on.
> 
> Also, in order to execute a CHGSYSLIBL you need *ALLOBJ authority.
> 
> jte

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---