RE: ifs security and qpwfserver autl change gotchas?

Agree with Justin, there's just nothing in QSYS.LIB file system that almost
any user would need to update via a share.

I update files in QSYS.LIB occasionally but it's usually to fix a host
table, DNS entry, or something with the TCP filters, Relational Database
entry, etc. so that requires *ALLOBJ first and substantial understanding
secondly. Not an every month event so they are one offs.

--
Jim Oberholtzer
Agile Technology Architects

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Justin
Taylor
Sent: Tuesday, June 1, 2021 10:23 AM
To: MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: ifs security and qpwfserver autl change gotchas?

Personally, I can't think of a legitimate reason to do it. I consider it a
hack.

Sharing the root is considered a huge security threat. Consider ransonware
that runs on a PC and encrypts then deletes files on SMB shares. The
encrypt will fail on native IBMi objects but the delete will succeed.



date: Fri, 28 May 2021 10:18:22 +0200

from: Patrik Schindler <poc@xxxxxxxxxx>
subject: Re: ifs security and qpwfserver autl change gotchas?

Hello Stefan,

Am 27.05.2021 um 22:23 schrieb stefan@xxxxxxxxxx:

Yes, but " By setting Public authority on the QPWFSERVER AUTL to

*EXCLUDE, the users are restricted from accessing QSYS.LIB file system
by these methods

Emphasizing my limited knowledge, is there any point in accessing
QSYS.LIB by "remote" means, like a network share? The objects there
are special, no stream files. I guess, there's nothing within Windows can

cope with.

:wq! PoC

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com