Re: Installing running applications as QSECOFR ( was RE: Anti-virus for i5OS )

[Joe Pluta <joepluta@xxxxxxxxxxxxxxxxx>]

David Gibbs wrote:
> FWIW: Some applications really do need QSECOFR authority to be
> installed.  Specifically those that have code that needs to adopt
> QSECOFR authority.  Change Management products come to mind immediately
> (for obvious reasons).
>   
I would argue that you don't need QSECOFR for most operations.  If the 
product is required to adopt authority of profiles, it would be just as 
easy to grant *USE authority to those profiles which it needs to adopt.  
There is rarely a need to have QSECOFR rights.

In those rare cases where it might be required, what I'd like to see is 
something like su in Linux, where you would have to key in the QSECOFR 
profile to execute a particular function.

Joe