Re: QSECOFR was: Anti-virus for i5OS

[ALopez@xxxxxxxxxx]

> I also agree that one shouldn't blindly accept that but inquire as to 
the 
> details.  I've run into one vendor that had an adopted authority program 

> that had one line:
> CALL QCMD
> That way the users could do stuff on the phone with their support 
without 
> having to deal with the users pesky security department.

That inquiry into the details can be a pain.  I've found that a bunch of 
TAATOOLs help to profile loaded packages:  PRTPGMSEC, PRTOWNOBJ, 
DSPUSRAUT2.  Other tools help fix lousy security schemes. CHGLIBOWN is 
valuable for mass changing of a package from its installed owner to a new 
one.  Of course, they all either require or work best when run by QSECOFR. 
 Looking at the help for TAATOOL, there are around 89 programs that run as 
USRPRF(*OWNER) and must be owned by a user with special authority. 

I guess it's possible to install the package and have a profile other than 
QSECOFR own the objects.  If that profile still has to have *ALLOBJ, I 
fail to see the point.