IBM could keep their stuff updated. And not just patching but upgrading to newer open source versions.
For example, a scan showed we were using an older dns bind. And that the older dns bind could be open to (listed CVE's here).
IBM i people say they PTF'd each one of those CVE's into the older version of bind.
Didn't help us pass the audit one bit. Ended up removing DNS support from most partitions of IBM i because of this.
Tried to get IBM to unbundle the DNS tools like NSLOOKUP from DNS server but they shot me down on that. Now using a different platform for that.
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Richard Schoen
Sent: Friday, April 19, 2019 11:23 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: RE: Mono on IBM i - Porting Mono to AIX and IBM i
Hey Rob,
Any thoughts on how to make that better ?
I am curious how to better illuminate the PASE access stuff.
I suppose ports, thread and logs perhaps.
Regards,
Richard Schoen
Web:
http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx
Phn: (612) 315-1745
------------------------------
message: 3
date: Fri, 19 Apr 2019 11:21:50 +0000
from: Rob Berendt <rob@xxxxxxxxx>
subject: RE: Mono on IBM i - Porting Mono to AIX and IBM i
<snip>
I do believe PASE apps in general seem to present issues to the object security and monitoring teams.
</snip>
Amen to that brother!
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Richard Schoen
Sent: Thursday, April 18, 2019 4:24 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: RE: Mono on IBM i - Porting Mono to AIX and IBM i
Life in a secure environment ?
I do believe PASE apps in general seem to present issues to the object security and monitoring teams.
Regards,
Richard Schoen
Web:
http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx
Phn: (612) 315-1745
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
midrange.com
