Re: STRSRVJOB and database journal entries

   Hello,

   if AUDIT-Journal is running, have a look to AF entries of the Job, which
   is executing STRSVRJOB.

   Regards

   RObert

   -----Original Message-----
   Date: Wed, 28 Jun 2006 18:07:56 +0200
   Subject: [Security400] STRSRVJOB and database journal entries
   From: shalom@xxxxxxxxxx
   To: security400@xxxxxxxxxxxx

   I started a debug session for another job, using chgpgmvar I changed a
   program variable that was due to be written to a database file and then I
   looked at the journal.
   There was no trace of the fact that the job that wrote the modified value
   was interrupted in any way. The journal record looked just the same.  I
   expected to see some indication that the job was debugged in a service
   session. I can tell that someone started a service job by turning on
   auditing for strsrvjob, but I have no trace on what modifications were
   made to valid application data.
   This looks like a problem, doesn't it?

   _______________________________________________
   This is the Security Administration on the AS400 / iSeries (Security400)
   mailing list
   To post a message email: Security400@xxxxxxxxxxxx
   To subscribe, unsubscribe, or change list options,
   visit: http://lists.midrange.com/mailman/listinfo/security400
   or email: Security400-request@xxxxxxxxxxxx
   Before posting, please take a moment to review the archives
   at http://archive.midrange.com/security400.