RE: AS400 Command Line Access -- MIDRANGE-L

Subject: RE: AS400 Command Line Access
From: "Dennis Lovelady" <iseries@xxxxxxxxxxxx>
Date: Tue, 28 Sep 2010 08:59:05 -0400
List-archive: <http://archive.midrange.com/midrange-l>
List-help: <mailto:midrange-l-request@midrange.com?subject=help>
List-id: Midrange Systems Technical Discussion <midrange-l.midrange.com>
List-post: <mailto:midrange-l@midrange.com>
List-subscribe: <http://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=subscribe>
List-unsubscribe: <http://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=unsubscribe>

Absolutely. He can run any IBM-supplied or user-written command that has
LMTCPB(*NO) specified. Adding fuel to the fire, if he has authority to
CRTCMD, he can create new commands that have LMTCPB(*NO) specified, and
within the CPP for those commands can do pretty much anything within his
authority limits.

Dennis Lovelady
http://www.linkedin.com/in/dennislovelady
--
He who laughs last, thinks slowest.

A user has command line access on AS400 but he does not have any
special authority on his profile.Is there any risk which the user can
pose to the system.Can he run any dangerous commands or any programs
which may do some activities.

As an Amazon Associate we earn from qualifying purchases.

Follow-Ups:

RE: AS400 Command Line Access , rob

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.