Re: RMTCMD Anomaly????

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Robert,

Robert Brown wrote:

> If you believe that just try the downloads. Thats why there is a CA exit
> program to catch intruders. Again, this may have been addressed since the
> 1998 problem, but it was a REAL problem.

I have _some_ familiarity with exit programs <g>, and you're right that Exit
programs can stop file downloads from Client Access (and others).  But OS/400
security is not broken.  Rerun your tests, and pay particular attention to the
_object_ authority that the requester has to the file you're downloading.

jte



--
John Earl                               johnearl@400security.com
The PowerTech Group                     206-575-0711
PowerLock Network Security              www.400security.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---