Security 30 to 40, etc.

[Steve Glanstein <mic@xxxxxxxxx>]

At 03:51 AM 7/18/97 -0500, David Gibbs
>>We currently run our AS/400's at Security Level 30.
>>We are considering a move to Level 40.
>>Has anyone got any tips, stories, or warnings about such a move.

>Check with your software vendors.

>I was contemplating doing that once, but was advised against it... our
>application software (JBA) apparently could choke at 40.  Also, some
>utility software will run slower because it can't access API's directly.
>Hawkeye Pathfinder is a good example of that.  It has to use OUTFILES for
>everything... which is much slower.
>david

First, IBM has a ton of killer APIs and object descriptions can actually 
be displayed "faster" to a user space.  (See QUSLMBR, QDBLDBR, QUSLFLD, 
QUSLRCD, QUSLOBJ, QUSROBJD, et al.)

Second, I don't see any reason for a respectable vendor to 
use an unsupported interface unless they are attempting to perform an 
unsupported activity and haven't been able to get IBM to develop an API.

In any event, they should fully disclose the purpose of the interface and 
at least attempt to make a work-around.

I am looking for information on, "vendor created exposures".  For 
example, one vendor modified the Process Control Space in an unsupported 
manner.  When the space changed in a new release, the user's interactive 
session would die, big-time.  This was a problem on security 30, but not 
on 40.

Steve Glanstein
mic@aloha.com


* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This is the Midrange System Mailing List!  To submit a new message,   *
* send your mail to "MIDRANGE-L@midrange.com".  To unsubscribe from     *
* this list send email to MAJORDOMO@midrange.com and specify            *
* 'unsubscribe MIDRANGE-L' in the body of your message.  Questions      *
* should be directed to the list owner / operator: david@midrange.com   *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *