Re: Security Level Change

["Al Barsa, Jr." <barsa2@xxxxxxx>]

At 03:51 AM 7/18/97 -0500, you wrote:
>We currently run our AS/400's at Security Level 30.
>We are considering a move to Level 40.
>Has anyone got any tips, stories, or warnings about such a move.
>


A good idea.

You need to turn on security auditing, specifying *PGMFAIL.  Then run your
system for a period of time until you feel that it is reasonable that all
programs have been executed.  You then need to check the audit journal for
potential program failures under L40.

Assuming that you don't write programs that would do this, you alternately
could contact all outside software vendors (assuming they are all around).
The is only one major vendor that I know of that is not level 40 compliant.

Al



Al Barsa, Jr. - Account for Midrange-L
Barsa Consulting, LLC.  
400 > 390

Phone:  914-251-9400
Fax:    914-251-9406





Private mail should be sent to barsa@ibm.net
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This is the Midrange System Mailing List!  To submit a new message,   *
* send your mail to "MIDRANGE-L@midrange.com".  To unsubscribe from     *
* this list send email to MAJORDOMO@midrange.com and specify            *
* 'unsubscribe MIDRANGE-L' in the body of your message.  Questions      *
* should be directed to the list owner / operator: david@midrange.com   *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *