RE: CHGSYSSEC command (was Object Auditing)

["Ingvaldson, Scott" <SIngvaldson@xxxxxxxxxxxx>]

This is certainly a valid concern; I remember a friend at the support
center telling me of the fun evening he had guiding a customer through
undoing the effects of this command.  IIRC it was even a situation where
someone had run the command on their way out the door...

Regards,
 
Scott Ingvaldson
iSeries System Administrator
GuideOne Insurance Group

-----Original Message-----
date: Fri, 13 May 2005 13:37:24 -0400
from: Greg Wenzloff <GWenzloff@xxxxxxxxxxx>
subject: Re: Object Auditing 

I get that Eserver magazine but did not recall Ed Fishel's article.  So
I retrieved it out of our library.  Seems that I was so intrigued by his
time lapse photo of the eagle that I turned the page and went right by
the article.

Anyway in reading his article he mentions the command CHGSYSSEC but
warns to retrieve the CL source and study it before using the command.
I was curious and retrieved the source code.  WOW! Seems like a land
mine waiting to go off.  

This command changes about 20-30 system values and 5 user profiles.
Things like QSECURITY = 50; QSYSOPR password = *NONE. It also runs
several programs with no clue what they do. It looks to me like
something a person would be tempted to run if they just got fired and
were asked to leave.

Why would IBM ship something so dangerous?

Greg