RE: Security Routines - bind by copy? (was RE: Questionabout serviceprograms)

["Wilt, Charles" <WiltC@xxxxxxxxxx>]

It would seem to me that if you have the authority to replace the security *SRVPGM in it's
entirely...then you'd probably have the authority to do whatever you want anyway.

Besides, couldn't the *MODULE object that get bound into programs be replaced just as easy?  Granted,
it'd only affect recompiled programs and not all existing.

Charles Wilt 
--
Software Engineer
CINTAS Corporation - IT 92B
513.701.1307

wiltc@xxxxxxxxxx


> -----Original Message-----
> From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx]
> On Behalf Of David Gibbs
> Sent: Friday, August 01, 2008 10:08 AM
> To: RPG programming on the AS400 / iSeries
> Subject: Re: Security Routines - bind by copy? (was RE: Questionabout
> serviceprograms)
>
> Wilt, Charles wrote:
> > However, can't you simply hard code the library of the security
> > routine *SRVPGM?
>
> Yes, but the service program can be replaced, in it's entirety, with a
> version that intercepts the procedure calls with it's own version.
>
> Not a trivial task, but not impossible.  All you have to do is match the
> binding signature and the approximate the procedure structure (to make the
> there are procedures available to call).
>
> david
>
> --
> IBM i on Power - For when you can't afford to be out of business
> --
> This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
> To post a message email: RPG400-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
> or email: RPG400-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/rpg400-l.



This e-mail transmission contains information that is intended to be confidential and privileged.  If you receive this e-mail and you are not a named addressee you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this communication without the consent of the sender and that doing so is prohibited and may be unlawful.  Please reply to the message immediately by informing the sender that the message was misdirected.  After replying, please delete and otherwise erase it and any attachments from your computer system.  Your assistance in correcting this error is appreciated.