RE: [External]My nomination for the single most dangerous command on an IBM Midrange box

My nomination is:

SAVOBJ OBJ(*ALL) LIB(ANYLIB) DEV(*SAVF) SAVF(TEMPSAV) STG(*FREE)

*FREE
The storage occupied by the data portion of the specified
objects being saved is freed as part of the save operation. The
storage for all the objects in a library is freed only after all
the objects in that library are saved successfully.

Followed by:

DLTF TEMPSAV

If I have *SAVSYS special authority, I can use these two commands to essentially delete any object on the system... Even if I don't have authority to access the objects through other means, like WRKOBJ, DSPOBJ .

This is the main reason you have to be very careful who you give *SAVSYS special authority too.

-Kenneth

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of James H. H. Lampert
Sent: Friday, March 09, 2018 12:07 PM
To: Midrange Systems Technical Discussion
Subject: [External]My nomination for the single most dangerous command on an IBM Midrange box

DLTUSRPRF OWNOBJ(*DLT)

It can kill tens of thousands of objects silently with a single command.

In *nix systems there are hundreds, if not thousands of ways in which the OS gives a user enough rope to hang himself. That's why signing on as "root" is discouraged (where it's not prohibited outright).

In over two decades of working with IBM Midrange boxes, I've encountered exactly one place where the OS gives a user enough rope to hang himself.
DLTUSRPRF OWNOBJ(*DLT).

--
JHHL