RE: Method to Remove *NOLIST Capability from IBM Signoff Command

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: William N. Harrell, Jr.
> 
> We would like to remove the *NOLIST capability on the Signoff Command
on
> our
> system to prevent users up to those having ALLOBJ from signing off
their
> interactive job without creating a job log.

The biggest problem is users with *ALLOBJ.  There should be at most one
or two profiles with this capability, with passwords locked safely away
in a drawer somewhere.  Someone with *ALLOBJ can do far too much
mischief.

Once you've gotten that straightened out, my guess would be to try to
write my own SIGNOFF command that didn't have a *NOLIST option and put
it higher on the system library list.

Joe