Re: Adding a library to the system's library list

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Simon,

I just checked for myself and yes, you are correct.

Thanks!

jte

Simon Coulter wrote:
> 
> M
> Hello John,
> 
> That's not completely true.  Althought the CHGSYSLIBL command is shipped with 
>*EXCLUDE authority, any
> *ALLOBJ user can change the public authority to a less restrictive value, or 
>grant specific authority to a user.
> 
> All that CHGSYSLIBL requires is *USE authority to the command, *USE authority 
>to the library being added,
> and *EXECUTE authority to QSYS.
> 
> There are security considerations involved in relaxing the authority to this 
>command.
> 
> Regards,
> Simon Coulter.
> 
> «»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
> «» FlyByNight Software         AS/400 Technical Specialists       «»
> «» Eclipse the competition - run your business on an IBM AS/400.  «»
> «»                                                                «»
> «» Phone: +61 3 9419 0175      Mobile: +61 0411 091 400           «»
> «» Fax:   +61 3 9419 0175      mailto: shc@flybynight.com.au      «»
> «»                                                                «»
> «» Windoze should not be open at Warp speed.                      «»
> «»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
> //--- forwarded letter -------------------------------------------------------
> > X-Mailer: Mozilla 4.04 [en] (Win95; I)
> > Date: Sun, 13 Feb 2000 11:00:53 -0800
> > From: "John Earl" <johnearl@400security.com>
> > To: MIDRANGE-L@midrange.com
> > Reply-To: MIDRANGE-L@midrange.com
> > Subject: Adding a library to the system's  library list
> 
> >
> > CHGSYSLIBL only changes the System Library list of the current job.
> > You would have to use this command for every user every time they
> > signed on.
> >
> > Also, in order to execute a CHGSYSLIBL you need *ALLOBJ authority.
> >
> > jte
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

--
John Earl                                          
johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---