Re: Restricting RUNQRY interactive

I don't know if you are referring to the need to reapply any CHGCMDs when
upgrading the OS. But can you give a summary of the security problems?

TIA

At 02:20 PM 5/8/02 -0400, you wrote:

>Might I suggest changing the command itself to disallow *INTERACT, *IMOD
>and *IPGM from the ALLOW parameter.  Adding a validity checker can cause
>hassles with security.  I used to use that technique, and I have now gone
>away from it.
>
>Al
>
>Al Barsa, Jr.
>Barsa Consulting Group, LLC
>
>400>390
>
>914-251-1234
>914-251-9406 fax
>
>http://www.barsaconsulting.com
>http://www.taatool.com
>
>
>
>
>
>
>                     vhamberg@attbi.com
>                     Sent by:                  To:     midrange-l@midrange.com
>                     midrange-l-admin@mi       cc:
>                     drange.com                Subject:     Restricting
> RUNQRY interactive
>
>
>                     05/08/02 01:30 PM
>                     Please respond to
>                     midrange-l
>
>
>
>
>
>
>We have added a validity checker to RUNQRY. When RUNQRY
>is run from a command line, the VCP gets called. When
>you take option 9 from WRKQRY, it does NOT get called.
>Anyone know why?
>
>BTW, option 8 of WRKQRY (Run in batch) does call it.
>
>TIA
>
>Vern
>_______________________________________________
>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>To post a message email: MIDRANGE-L@midrange.com
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
>or email: MIDRANGE-L-request@midrange.com
>Before posting, please take a moment to review the archives
>at http://archive.midrange.com/midrange-l.
>
>
>
>
>
>_______________________________________________
>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>To post a message email: MIDRANGE-L@midrange.com
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
>or email: MIDRANGE-L-request@midrange.com
>Before posting, please take a moment to review the archives
>at http://archive.midrange.com/midrange-l.