Re: STRSRVJOB and database journal entries -- SECURITY400

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

 You are also required to have at least *USE authority to the target job's
*USRPRF.  So, if the system in question has a gaping security hole
(allowing the user to debug the job in the first place), I wouldn't expect
IBM to log all changes to the journal, especially since those changes were
to memory, not yet in the database.

 -mark

Original Message:
-----------------
From: Hall, Philip phall@xxxxxxxx
Date: Wed, 28 Jun 2006 11:31:15 -0500
To: security400@xxxxxxxxxxxx
Subject: Re: [Security400] STRSRVJOB and database journal entries

I started a debug session for another job, using chgpgmvar I changed a
program variable that was due to be written to a database file and then I
looked at the journal.
There was no trace of the fact that the job that wrote the modified value
was interrupted in any way.
This looks like a problem, doesn't it?


Only if you put debug versions of your objects into production.


--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.