Re: Object Auditing

i think you need (or should need) a high level of authority to run this.
You are right it needs to be studied before implementing.
jim
----- Original Message ----- 
From: "Greg Wenzloff" <GWenzloff@xxxxxxxxxxx>
To: <midrange-l@xxxxxxxxxxxx>
Sent: Friday, May 13, 2005 1:37 PM
Subject: Re: Object Auditing


> I get that Eserver magazine but did not recall Ed Fishel's article.  So I
> retrieved it out of our library.  Seems that I was so intrigued by his
time
> lapse photo of the eagle that I turned the page and went right by the
> article.
>
> Anyway in reading his article he mentions the command CHGSYSSEC but warns
to
> retrieve the CL source and study it before using the command.  I was
curious
> and retrieved the source code.  WOW! Seems like a land mine waiting to go
> off.
>
> This command changes about 20-30 system values and 5 user profiles. Things
> like QSECURITY = 50; QSYSOPR password = *NONE. It also runs several
programs
> with no clue what they do. It looks to me like something a person would be
> tempted to run if they just got fired and were asked to leave.
>
> Why would IBM ship something so dangerous?
>
> Greg
>
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>