RE: QFRCCVNRST

[CWilt@xxxxxxxxxxxx]

IIRC, there's been a change to OS/400.

Whereas during the CISC-RISC conversion programs needed to have
observability to be recompiled by the OS.  That is no longer the case.  In
other words, all programs can be recreated now by the system even after you
remove observability.  This was added at v5r1.

Digital signatures to OS/400 were added at the same time.

http://publib.boulder.ibm.com/iseries/v5r2/ic2924/index.htm?info/rzaj4/rzaj4
rzaj4v51whatsnewv5r1.htm

Basically, it all comes down to security and being able to insure that what
you think you are installing is really what you are installing.

HTH,
Charles

> -----Original Message-----
> From: James H H Lampert [mailto:jamesl@xxxxxxxxxxx]
> Sent: Thursday, February 26, 2004 5:00 PM
> To: midrange-l@xxxxxxxxxxxx
> Cc: rbruceh@xxxxxxxxxxxxx
> Subject: Re: QFRCCVNRST
> 
> 
> 
> Let's not be flippant.
> 
> 1. Yes, I see it did exist as far back as V3R7, maybe even 
> V3R6, but as a
> *SYSCTL, rather than *SEC, system value: it merely set the 
> default for the
> FRCOBJCVN parameter on RSTOBJ. The V5R2 version is a different animal
> entirely.
> 
> 2. Since QALWOBJRST values that prevent system-state programs 
> from being
> restored have been around since V2, much of this is redundant.
> 
> 3. Level 7 effectively excludes all commercial products from being
> installed on a system: after all, what sane commercial developer would
> knowingly distribute commercial products with their 
> observability intact?
> It's just begging somebody to disassemble them.
> 
> 
> Oh, and since when has it been possible to apply a digital 
> signature to
> OS/400 objects? <scratching head> I've heard of signing JAR files, but
> OS/400 objects?
> 
> --
> JHHL
> 
> 
> _______________________________________________
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>