Re: Anti-virus for i5OS

[Buck <kc2hiz@xxxxxxxxx>]

Joe Pluta wrote:
> I'm not sure I understand this, Buck.  Are you talking about installing 
> software into the IFS from an i5/OS terminal, or copying something to 
> the IFS via mapped drive or FTP?  If the former, yes, you have to keep 
> all your safeguards in place.  But I contend that the latter can't cause 
> malware to execute on i5/OS.

Regular old native.  Imagine you are a naughty programmer at a major ERP 
vendor and you plopped a back door in a program that adopts QSECOFR 
authority.  The installation instructions say to sign on as QSECOFR to 
install the software.  Voila, malware running in green screen, installed 
in green screen, stored in QSYS.LIB.

Yes, it's a hole, but when you do a security sweep and find several of 
your ERP (or cross reference tool) programs adopting QSECOFR authority, 
what can you do?