RE: iSeries buffer overflow immunity?

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

Well if my home grown application did a swap profile API after you logon.
If you know where the user profile handles are stored, you can change them
to something with more authority, if you can figure out what is what, then
execute the swap again to the profile with more authority.  Possible, yes,
probable, no.  Especially if the listening job hands off to a prestart job
after your logon and them clears the logon variables.  As far as using a
home grown security model is well a waste of time when OS400 provides so
many security features.
 

-----Original Message-----

Beside which, I'll we are talking about here is breaking your home-grown
application security.

Which IMHO, just makes for a better case to make use of OS/400's built-in
security instead of a home-grown model.