RE: Installing running applications as QSECOFR ( was RE: Anti-virusfor i5OS )

["John Earl" <john.earl@xxxxxxxxxxxxx>]

Joe typed: "In those rare cases where it might be required, what I'd
like to see is something like su in Linux, where you would have to key
in the QSECOFR profile to execute a particular function."

Ask and ye shall receive.  Our Authority Broker product does just this,
but adds auditing, alerting, and workflow capability so that you can
stay compliant with security regulations.

jte


--
 
John Earl, VP and Chief Technology Officer
PowerTech:   253-872-7788
Direct:          253-479-1408
Mobile:          206-669-3336
John.Earl@xxxxxxxxxxxxx
 

 
 
Email is an excellent way to communicate material that is not time
sensitive.  If your communication is of a more urgent nature, please
call. 
 
===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.
 

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx 
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Joe Pluta
> Sent: Tuesday, April 01, 2008 1:32 PM
> To: Midrange Systems Technical Discussion
> Subject: Re: Installing running applications as QSECOFR ( was 
> RE: Anti-virusfor i5OS )
>
> David Gibbs wrote:
> > FWIW: Some applications really do need QSECOFR authority to be 
> > installed.  Specifically those that have code that needs to adopt 
> > QSECOFR authority.  Change Management products come to mind 
> > immediately (for obvious reasons).
> >   
> I would argue that you don't need QSECOFR for most 
> operations.  If the product is required to adopt authority of 
> profiles, it would be just as easy to grant *USE authority to 
> those profiles which it needs to adopt.  
> There is rarely a need to have QSECOFR rights.
>
> In those rare cases where it might be required, what I'd like 
> to see is something like su in Linux, where you would have to 
> key in the QSECOFR profile to execute a particular function.
>
> Joe
> --
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list To post a message email: 
> MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change 
> list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, 
> please take a moment to review the archives at 
> http://archive.midrange.com/midrange-l.