RE: Security

[bdietz@xxxxxx]

Since most of the changes were to system values you can look thru the
histor log for MSGID CPF1806.

you should see stuff like :System value QTIME changed from 111043 to 111055

DSPLOG PERIOD((*AVAIL *BEGIN)) MSGID(CPF1806)



this gives you the before/after "image' of the system value.

the other things that get changed (at v5r2) are:
QSYS/CHGSECAUD QAUDCTL(*ALL) QAUDLVL(*DFTSET)
QSYS/CHGUSRPRF USRPRF(QSYSOPR) PASSWORD(*NONE)
QSYS/CHGUSRPRF USRPRF(QPGMR) PASSWORD(*NONE)
QSYS/CHGUSRPRF USRPRF(QUSER) PASSWORD(*NONE)
QSYS/CHGUSRPRF USRPRF(QSRV) PASSWORD(*NONE)
QSYS/CHGUSRPRF USRPRF(QSRVBAS) PASSWORD(*NONE)

Not sure how to put those back, except for RSTUSRPRF (ick!)



-------------------------
 Bryan Dietz
3X Corporation
614-410-9205




midrange-l-bounces@xxxxxxxxxxxx wrote on 06/17/2003 10:15:39 AM:

> I had got that far but it looks like this command makes a lot of
> changes..  Is there a way to restore the settings that it changed
> without having to go through each one...  I am not certain of what
> some of the system values were before the command was issued and so
> am not sure if they were changed...
>
> Keith
>
> -----Original Message-----
> From: bdietz@xxxxxx [mailto:bdietz@xxxxxx]
> Sent: 17 June 2003 14:47
> To: Midrange Systems Technical Discussion
> Subject: Re: Security
>
>
>
>
>
>
> Hey Keith,  Look at the CPP for the command CFGSYSSEC:
>
> Program  . . . . . . . :   QSECCFGS      Library  . . . . . . . :   QSYS
> Owner  . . . . . . . . :   QSYS
> Program attribute  . . :   CLP
> Program creation information:
>   Program creation date/time . . . . . . . . . . . :   02/21/02  09:35:20
>   Type of program  . . . . . . . . . . . . . . . . :   OPM
>   Source file  . . . . . . . . . . . . . . . . . . :   S000029312
>     Library  . . . . . . . . . . . . . . . . . . . :     $BLDSS1
>   Source member  . . . . . . . . . . . . . . . . . :   S000029312
>   Source file change date/time . . . . . . . . . . :   02/18/02  15:12:41
>   Observable information . . . . . . . . . . . . . :   *NONE
>   User profile . . . . . . . . . . . . . . . . . . :   *USER
>   Use adopted authority  . . . . . . . . . . . . . :   *YES
>   Log commands (CL program)  . . . . . . . . . . . :   *NO
>   Allow RTVCLSRC (CL program)  . . . . . . . . . . :   *YES<============
>   Fix decimal data . . . . . . . . . . . . . . . . :   *NO
>
>
> Why not just RTVCLSRC for the program and see what it changes.  Should be
> easy to "undo" the mess made.
>
> -------------------------
>  Bryan Dietz
> 3X Corporation
> 614-410-9205
>
>
>
>
> midrange-l-bounces@xxxxxxxxxxxx wrote on 06/17/2003 09:27:00 AM:
>
> > Hi all,
> >
> > One of our operators here just took the option to run CFGSYSSEC..
> > How do I reverse what this command does and get the system back to
> > its original state??
> >
> > TIA
> >
> > Keith
>