Re: User profile question

["Shalom Carmel" <shalom@xxxxxxxxxx>]

> For Rob's sign-on scenario, why not modify the sign-on
> screen to hide or
> protect the menu and program fields?  That is not a hard
> change, and it
> takes this security risk away.
>

Unfortunately, under some circumstances, this change may be bypassed.
If the QRMTSIGN system value is not *FRCSIGNON or *REJECT,
then you can specify the initial program and menu on a telnet connection
for non-limited users, even though these parameters are not on the login
screen.

TELNET RMTSYS(AS400server) RMTUSER(shalomc) RMTPWD(mypwd)
RMTINLPGM(*none) RMTINLMNU(main)

If you use an exit program instead, check it very carefully to see if it
does not allow
such a circumvention in specific cases.

Shalom Carmel
----------------
www.venera.com - exposing iSeries insecurity