Re: Modify SYSVAL QSYSLIBL

["Greg Day" <greg_day@xxxxxxxxxxx>]

>Frank Kolmann wrote:
>I dont have a reason as such. One of our programmers
>modified a jobs *LIBL (system portion) with CHGSYSLIBL.
>Could not even do a SYS REQ cancel, or SIGNOFF.
>It is simply something that is very easy to do and
>I suspect will disable the AS400.
>IBM should prevent the backwards compatibility libs
>getting into the SYSLIBL.
>

Frank,
Your programmer didn't have a reason? That's not very logical.

Sounds like she/he also has *ALLOBJ authority if she/he has access to the
CHGSYSLIBL command (ships PUBLIC *EXCLUDE). Likewise, to change system value
QSYSLIBL you need special authority not normally recommended for a
programmer.

Do you know what other damage an *ALLOBJ user can do to your system if they
just try things for no reason. These a few commands that spring to mind (I
won't mention them here in case your programmer is watching :)) - all of
which are just too easy to use.

I think you are asking too much for IBM to prevent these sorts of programmer
actions.

Greg.






_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com