RE: Limit user threat

I was anticipating a grand debate about changing the user profile, and I expected to need some damning evidence to make my case. It turned out to be an open-and-shut case.

Thanks guys



-----Original Message-----
From: Rob Berendt [mailto:rob@xxxxxxxxx]
Sent: Tuesday, August 07, 2018 8:08 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: Limit user threat

We weren't talking about trying to issue SBMJOB from a 5250 session. For example CRTUSRPRF USRPRF(DUMMY) PASSWORD() LMTCPB(*YES)

Run sql scripts
DISCONNECT ALL;
CONNECT RESET;
CONNECT TO GDISYS USER DUMMY USING 'DUMMY';
CL: SBMJOB CMD(DSPJOB OUTPUT(*PRINT));

Works fine.

I remember you said you used an exit point to control ftp and odbc but we suspect there are always others.


Rob Berendt