Hello, if AUDIT-Journal is running, have a look to AF entries of the Job, which is executing STRSVRJOB. Regards RObert -----Original Message----- Date: Wed, 28 Jun 2006 18:07:56 +0200 Subject: [Security400] STRSRVJOB and database journal entries From: shalom@xxxxxxxxxx To: security400@xxxxxxxxxxxx I started a debug session for another job, using chgpgmvar I changed a program variable that was due to be written to a database file and then I looked at the journal. There was no trace of the fact that the job that wrote the modified value was interrupted in any way. The journal record looked just the same. I expected to see some indication that the job was debugged in a service session. I can tell that someone started a service job by turning on auditing for strsrvjob, but I have no trace on what modifications were made to valid application data. This looks like a problem, doesn't it? _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.