Re: Anti-virus for i5OS

[Joe Pluta <joepluta@xxxxxxxxxxxxxxxxx>]

Buck wrote:
> Regular old native.  Imagine you are a naughty programmer at a major ERP 
> vendor and you plopped a back door in a program that adopts QSECOFR 
> authority.  The installation instructions say to sign on as QSECOFR to 
> install the software.  Voila, malware running in green screen, installed 
> in green screen, stored in QSYS.LIB.
>   
Which is why you don't install software as QSECOFR.

> Yes, it's a hole, but when you do a security sweep and find several of 
> your ERP (or cross reference tool) programs adopting QSECOFR authority, 
> what can you do?
>   
CHGPGM USRPRF(*USER) immediately and if anything fails, call the vendor.

Joe