Re: [Security400] FTP Change?

[qsrvbas@xxxxxxxxxxxx (Tom Liotta)]

David:

Guesswork on my part, but part of the answer might be that FTP/REXEC(RunRmtCmd) 
are common clients that are outside of IBM's control. IBM cannot provide an 
iSeries administrator with any tool to control the client side, therefore they 
created control on the server side.

iSeries Access is an IBM product and they have provided administrators with 
some ability to control what gets installed and/or enabled on the client side. 
If you don't want a user to use iSeries Access remote command/distributed 
program call for example, then don't allow it to run from the PC.

I realize this is not a wholly satisfactory answer because I don't know the 
answer. But in the absence of direct IBM response to your question, I guess 
this list will have to use some reasoning to work out the basic form of an 
answer -- if a pattern exists.

Tom Liotta


"David Morris" <David.Morris@xxxxxxxxxxxxx> wrote:

>Sent too soon. I see that it changed with V4R1. I am wondering why some
>of the other interfaces still allow direct command access.
>
>
>
>>>> David.Morris@xxxxxxxxxxxxx 8/4/2004 5:18:28 PM >>>
>I was under the impression that limited capability users could run any
>command from FTP but a recent test shows otherwise. I used quot rcmd
>somecmd. Did this change or am I running the remote command
>incorrectly?

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com


__________________________________________________________________
Switch to Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need.

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp