Re: chgc0100 exit point. was Default for command without default value?

----- Original Message -----
From: Steve Richter <srichter@AutoCoder.com>
To: <MIDRANGE-L@midrange.com>
Sent: Thursday, August 02, 2001 10:16 AM
Subject: Re: chgc0100 exit point. was Default for command without
default value?


> >- Any library that is placed ahead of QSYS in the system part of
the
> >library list. Anyone that has authority to create a new program or
command
> >in this library has the ability to create a Trojan horse program or
> >command.

It is not advisable to give users the ability to put objects into any
library that is on the system portion of the library list.  Users need
*USE authority to libraries in the system portion of hte library list,
but not *USE + Data *ADD.  Data *ADD gives them the ability to place
new objects in the library.

Also, I don't know if this fits into the problem you are trying to
solve, but if you are at QSECURITY level 40 or 50, and you modify an
IBM command to point to your own program, you will get a Authorty
Failure with a state violation code.  If I'm not mistaken, one of the
reasons for the new Command Exit program was to allow us to affect the
behavior of IBM commands while at QSECURITY level 40 and above.

jte


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---