RE: Cool i5/OS Security News!!!!!!!!!

midrange-l-request@xxxxxxxxxxxx wrote:

>   2. RE: Cool i5/OS Security News!!!!!!!!! (Patrick Botz)
>
>I was not aware of this.  I'll do some investigation to understand the
>details.  If there is a security issue here, I will try to rattle some
>cages...I can't promise any success though.  I am no longer directly
>responsible for i5/OS security;  however, I was at the time QSHELL and PASE
>were implemented.  If this is a security issue it got by me.

Patrick:

A workstation can be left in a Qshell session and that workstation will not be 
in DSPW status and therefore will not timeout due to inactivity. Meanwhile, 
pressing <F12> instead of <F3> will disconnect the Qshell session; the session 
is maintained though not active. Work can be done outside of Qshell while 
disconnected from the session. The session can then be re-entered by executing 
the STRQSH command; the Qshell session continues right from where it left off, 
very similar to DSCJOB and a later reconnect.

There might be no obvious visible evidence that the session was left and 
re-entered.

Not a very sophisticated example, but perhaps it illustrates the heart of the 
matter.

And of course, the i5 certification is excellent news. Congrats to those who 
made it happen.

Tom Liotta