Re: security question

[Jerry <jdraper@xxxxxxxxxxxxx>]

I am in the process of implementing code I got from Bob Dietz via midrange-l
that adds a validity checking program to commands like hldjobq so I get a
message on the sysoperator msg q.

Here's the hldjobq example:

>
> Jerry here is a (real ugly) program I have used to do exactly what you
> want.
>
>
>
>  * CHGCMD CMD(HLDJOBQ) VLDCKR(*LIBL/HLDJOBQVC)
> IJQLIB       DS
> I                                        1   1 XX
> I                                        2  11 JOBQ
> I                                       12  21 LIB
> I           SDS
> I                                      244 253 JOB
> I                                      254 263 USER
> I                                      264 269 NBR
> I            DS
> I                                    P   1   85CMDLEN
> I              'SNDMSG MSG(''Jobq '  C         MSG1
> I              ' held by '           C         MSG2
> I              'TOUSR(*SYSOPR) '     C         MSG3
> C           *ENTRY    PLIST
> C                     PARM           JQLIB
> C                     PARM           SBS    10
>  *
> C           MSG1      CAT  JOBQ      FIN1   27
> C           FIN1      CAT  MSG2      FIN2   36
> C           FIN2      CAT  USER      FIN3   47
> C           FIN3      CAT  ''') '    FIN4   50
> C           FIN4      CAT  MSG3      FINAL  70
> C                     Z-ADD70        CMDLEN
> C                     CALL 'QCMDEXC'
> C                     PARM           FINAL
> C                     PARM           CMDLEN
>  *
> C                     SETON                     LR
>
>
>
>
> -------------------------
>  Bryan Dietz
> 3X Corporation
> 614-410-9205
>



Quoting "McBride, Catherine" <CMcbride@xxxxxxxxx>:

> Hi Midrange-L,
>      Is there a way to make certain actions (like deleting members from an
> OUTQ, or worse, CLROUTQ) show up on the system log?  Some operating systems
> on other platforms allow different levels of event logging, and allow you to
> tailor what events you want recorded on the system log.  Does OS400 security
> have a facility like this?  Of course, the reason for the question is that a
> major OUTQ mysteriously got cleared, and we can't see who did it without
> wading through tons of individual job logs.