Re: Locking out USRPRF with *ALLOBJ

> *ALLOBJ user can reset the QSECOFR SST profile password to the default
Carol Woodbury's new book OS/400 & i5/OS SECURITY has a series of
steps to still keep QSECOFR out. .
jim

----- Original Message ----- 
From: "Martin Rowe" <martin@xxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, June 22, 2004 3:45 PM
Subject: Re: Locking out USRPRF with *ALLOBJ


> On Tuesday 22 June 2004 20:24, Jim Franz wrote:
> > btw-It is possible to lock an *allobj out of Service Tools...
>
> At V5R1 (or was it new at V5R2) you need to log into SST with an SST
profile
> - The passwords can be different to the OS/400 profile. Mind you, an
> *ALLOBJ user can reset the QSECOFR SST profile password to the default,
but
> at least you'd know then that it had been bypassed.
>
> Regards, Martin
> -- 
> martin@xxxxxxxxxx  AIM/Gaim: DBG400dotNet  http://www.dbg400.net   /"\
> DBG/400 - AS/400 & iSeries Open Source/Free Software utilities     \ /
> Debian GNU/Linux | ASCII Ribbon Campaign against HTML mail & news   X
>                                                                    / \
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>