ALWLMTUSR

[Alberto Amigoni <a.amigoni@xxxxxxxxxxxx>]

Preparing for a security audit on our iSeries i set LMTCPB(*YES) for some 
users.

But i read, and ask for a confirm, that the user can't execute commands 
with ALWLMTUSR *YES, and
now i can't figure out  any method to retreive the list of command with
the parameter ALWLMTUSR *YES; is there any way to obtain such a list ?


And more, stated that the next paragraph is true:

"Security Warning: Don't rely on LMTCPB(*YES) to restrict command usage. 
IBM's distributed data management (DDM) architecture doesn't evaluate this 
attribute when an incoming Remote Command (RMTCMD) command is executed. 
So, users with LMTCPB(*YES) could still run commands using DDM's RMTCMD, 
which is simple to do when using Client Access Express."

is LMTCB really related to security ?


thank you 

ALBERT AMIGONI