Re: ALWLMTUSR

[rob@xxxxxxxxx]

Listing command with LMTCPB considerations.
DSPOBJD of all commands, in all libraries to an output file.  For each 
entry call the following:
http://publib.boulder.ibm.com/infocenter/iseries/v5r3/ic2924/info/apis/qcdrcmdi.htm

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





Alberto Amigoni <a.amigoni@xxxxxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
01/20/2005 04:34 AM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
midrange-l@xxxxxxxxxxxx
cc

Subject
ALWLMTUSR






Preparing for a security audit on our iSeries i set LMTCPB(*YES) for some 
users.

But i read, and ask for a confirm, that the user can't execute commands 
with ALWLMTUSR *YES, and
now i can't figure out  any method to retreive the list of command with
the parameter ALWLMTUSR *YES; is there any way to obtain such a list ?


And more, stated that the next paragraph is true:

"Security Warning: Don't rely on LMTCPB(*YES) to restrict command usage. 
IBM's distributed data management (DDM) architecture doesn't evaluate this 

attribute when an incoming Remote Command (RMTCMD) command is executed. 
So, users with LMTCPB(*YES) could still run commands using DDM's RMTCMD, 
which is simple to do when using Client Access Express."

is LMTCB really related to security ?


thank you 

ALBERT AMIGONI
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.