RE: Scanning IFS for the existence of a file.

Kendall,

This query found the known good file
select
QEZDIRIDX, -- The parent directory index
QEZOBJNAM, -- The object name
QEZOBJTYPE, -- The object type
QEZNONSAV, -- Object can be saved or not
QEZALCSIZE, -- Number of bytes allocated for the object
QEZDTASIZE, -- Size in bytes of the data in the object
QEZPCSYS, -- Object is a system file
QEZTMPOBJ, -- Object is temporary or not
QEZSYSRSSV, -- System restricts save or not
d.qezdirnam1
from routines.QAEZD0026O o,
lateral (select qezdirnam1 from routines.qaezd0026d where
qezdiridx=o.qezdiridx) as d (qezdirnam1)
where upper(qezobjnam) LIKE '%CCE_CORE%'
order by QEZDIRIDX asc
;

It did not find the files I'm looking for. But it did find some *guest*
objects in qsys.lib.

I'm really starting to wonder if the audit is flawed and assuming this
server is running Windows. And instead of searching for the files they
search for the function of the files and report those files as the
culprit. While searching for the function is probably better than
searching for the files, reporting it as the presence of the files gets me
going in the wrong direction.

Now perhaps I just need to search for the CVE and how IBM i (or Zend or
... ) addressed it.


Rob Berendt