Re: QSYS.LIB under IFS root -- MIDRANGE-L

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

What if the share is given only explicit authority (pgmr, admin, etc), a name that is not viewable via explorer (containing the $ character), and maximum users is set to 1. Would this still be an audit issue?

On 4/27/2020 7:28 AM, Rob Berendt wrote:

Do not modify the settings on QSYS.LIB
Immediately eliminate the share on the root. Just do it. To create a share on the root directory here will be accepted as your letter of resignation.

There may be some disruption as people now have to create shares specific to their needs but a share on the root should have never have been done in the first place. I would hope that you would fail an audit, if not your auditors are not worth spit.

A nice initial generic share could be on the /home directory. Most users should have their home directory set to something like this
User profile . . . . . . . . . . . . . . . : ROB
Home directory . . . . . . . . . . . . . . : /home/ROB

I could go on and on but it all boils down to you just need to stop the share on root without any delay. NOW!!!!!!
There has been a recent case on this list from someone who got hit with ransomeware and it attacked their IBM i because they had a share on the root directory.

Rob Berendt

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.