Re: QSECURITY Level 40

[Bryan Yates <srprog3@xxxxxxxxxxxxxxx>]

Ted Barry wrote:

> Is there a URL out there that shows step by step the requirements for
> changing from QSECURITY 30 to 40?  Pros/Cons?  Anyone who's gone
> through this?  Is it worth it?

I don't know about a URL but you can go to the AS/400 Security Refernce book
(SC41-5302) and look at chapter 2 "Using System Security (QSecurity) System
Values which details changing to level 40.  This book is available online at the
as400 site if you don't have it in your shop.  IBM also has a security advisor
wizard at http://www.as400.ibm.com/tstudio/secure1 that will give you security
change suggestions based on your system configuration

>
>
> I know this has been kicked around before on this list, but I'm thinking
> about turning it on this weekend.  Is there enough time to get ready
> (two/three days)?

Not a good idea.  You should change the QAUDLVL system values to journal 
*AUTFAIL
and *PGMFAIL errors.  Then monitor your journals for a while (we did it for 30
days) to see if there are objects that would cause hard failures under security
level 40.

Hope this helps
Bryan
begin:vcard 
n:Yates;Bryan
tel;fax:972-548-4494
tel;work:972-548-4584
x-mozilla-html:TRUE
url:www.co.collin.tx.us
org:Collin County Government;Information Services
adr:;;210 S. McDonald, Suite 510;McKinney;Texas;75069;United States
version:2.1
email;internet:srprog3@co.collin.tx.us
title:Senior Programmer/Analyst
fn:Bryan Yates
end:vcard