|
As far as your question goes, I can't think of any obvious security holes, unless your program allows the user to get access to a command line via QCMD. Once there, they would be entering commands according to the user ID of the job that has the tube allocated. Also, I can't recall if the system request or attention keys function... This feature is a throwback to the old days, certainly S/36, perhaps earlier. I experimented with it last in about '85, but never really had any kind of need for a 'ticker' app or information kiosk. Oh, if your program doesn't have the screen allocated, it will likely have a signon display. I suppose it depends on your shop standards whether or not signon displays would be allowed in an insecure, public area. You could certainly write a special routine to keep the device varied off until you wish to use it. Perhaps there are even some tubes that might function without a keyboard in the case where you are simply displaying information with no need for user input. Regards, Rich At 04:53 PM 12/18/00 -0800, you wrote: >Um.. uhh.. wow. This is intriguing. Tell me this then... > >Wouldn't it be possible to take a dumb tube and stick it out in an area >and not sign it on. Then have an RPG program that had the job do an >Override to this display file write to the screen without waiting for >a response. All this going on in a never ending batch job. So now I >have a green screen slide show going on to a device that is not really >secure, but it's not signed onto the system anyway, so no body can get >access that way? > >Or even better yet, have it wait for a response now and then. Or allow for >input into the display file. Then the program could change what it shows >or whatever depending on what the person enters. There is absolutely no way >the person can get into the system since it's not signed on. There is no >interactive session waiting to get a command line too. > >Or am I missing something? > >Regards, > >Jim Langston > >Peter Connell wrote: > > > > Dan, > > It just has to be sitting there with the signon display up so that it's not > > allocated. The issue here is that it must always be available for the batch > > job. However, the batch pgm still waits for a response when you do an EXFMT > > so you have to go to the device to press ENTER when the display format > > magically appears on the device without anyone having signed on. > > > > Cheers, Peter >+--- >| This is the RPG/400 Mailing List! >| To submit a new message, send your mail to RPG400-L@midrange.com. >| To subscribe to this list send email to RPG400-L-SUB@midrange.com. >| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com. >| Questions should be directed to the list owner/operator: david@midrange.com >+--- Regards, Rich +--- | This is the RPG/400 Mailing List! | To submit a new message, send your mail to RPG400-L@midrange.com. | To subscribe to this list send email to RPG400-L-SUB@midrange.com. | To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com. | Questions should be directed to the list owner/operator: david@midrange.com +---
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.