Re: Note: WRKLNK is not the same as a 'share'!

from: Rob Berendt <rob@xxxxxxxxx>
subject: Note: WRKLNK is not the same as a 'share'!

You do not use WRKLNK to set up shares. You use it to handle things in
the IFS. Sharing is done through other interfaces such as iACS or the
webby navigator for i. Or even GO NETS if you have that loaded.

The reason I bring this up is I was just on a webinar. Part of it was
discussing the evils of sharing the root on IBM i. Something I
wholeheartedly agree with.
You can use multiple interfaces such as WRKLNK, iACS, etc to define
security on a share. That is totally different than using interfaces other
than WRKLNK to define a share as update or read only.
Ok, now with this in mind, this happened on the chat:

Audience Question
Q: wrklnk '/' should have no write permission? Also qopensys/ibm?
A: Correct, never share the root

Well, if someone does this, and uses WRKLNK to change the authority on '/'
to read only they just made the system unusable to a bulk of people. They
should expect a large crowd of pitchforks and torches.
What they should have done is use one of the interfaces other than WRKLNK
to either remove any shares on '/', or to mark the share as read only.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com