RE: ADDLIBLE at start up

["Alan Moulsdale" <alan.moulsdale@xxxxxxxxxx>]

> Our AS/400 start up script attempts to execute ADDLIBLE for
> library B732NET. This fails with CPF2182 - not authorised
> to library B732NET.
> What security set up should we have to avoid this?

The system startup program, specified by system value QSTRUPPGM, runs as
user profile QPGMR. So you have two obvious choices:

1/ Grant QPGMR authority to B732NET. You probably won't want to do this
because you probably want to keep B732NET secure.

2/ Make QSTRUPPGM run as QSECOFR (or another high powered user)

To do the second:
CHGOBJOWN yourpgmlib/yourpgm *PGM QSECOFR
CHGPGM yourpgmlib/yourpgm USRPRF(*OWNER)

But make sure you know what the commands in the program are doing and that
they are secure - otherwise you may open a security back door to your
system.

HTH

Alan

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---