Re: IFS object ownership

[Ken Sims <mdrg8066@xxxxxxxxxxx>]

Hi James -

On Wed, 13 Oct 2010 08:43:23 -0700, "James H. H. Lampert"
<jamesl@xxxxxxxxxxxxxxxxx> wrote:

> But on closer examination, I found another problem with that 
> option: you can't swap to a disabled profile (but you *can* CHGOWN [and 
> presumably also chown() or fchown()] an object to it); the only profile 
> we create currently  for this application is a "maintenance and 
> troubleshooting" profile, and a number of our customers keep it disabled 
> when not in use.

Would enabled with password *NONE work in place of disabling it?  The
only issue that immediately comes to mind is that you can't just
enable it and have it at some standard password.

This does mean that it would have to be a profile swap *NOPWDCHK and
*USE authority.  A profile swap with no authority but giving the
password wouldn't work.

Ken
Opinions expressed are my own and do not necessarily represent the views 
of my employer or anyone in their right mind.