Re: reset authorities

yes, I wish I could remember/find what that was...
I first thought it was the option 60. Configure system security on the
Security menu... but I look at the CL it runs, and there is no CHGAUT
there...



On Tue, Mar 29, 2016 at 10:49 AM, Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

Pretty poor advice...

You can't remove *PUBLIC authority to the root without screwing up just
about everything.

In order to access anything in the IFS, a user needs not just authority to
the particular file and directory, but they need at least *RX to every
directory above including root.

Charles

On Tue, Mar 29, 2016 at 11:02 AM, Gerald Magnuson <
gmagqcy.midrange@xxxxxxxxx> wrote:

I remember running a security advisor from somebody.... I "thought" it

was

just an "advisor".... but it revoked public authority from the root...

it

left the rest of the IFS alone... I can't remember what that tool was...


On Thu, Mar 24, 2016 at 9:18 AM, Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

I'd call IBM...

But my bet is a reinstall is going to be the easiest fix.

The fact that they did it recursively means all the native QSYS objects

are

screwed up also...

But if you have support, call IBM. Perhaps there's an undocumented

tool

they can send you..

Good Luck!

Charles

On Thu, Mar 24, 2016 at 9:49 AM, Rob Berendt <rob@xxxxxxxxx> wrote:

It's not like object authority has commitment control and you could

run

ROLLBACK or RMVJRNCHG.

I think you're looking at a restore here. Bare metal.
Too bad that IBM doesn't restore many authorities on OS stuff from

your

last save and restores them to factory defaults. Especially those

with

authorization lists assigned to them.
If you're prepared for such stuff you have a version control program

you

can run which will reset the authority.



Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: tim <iseriesstuff@xxxxxxxxx>
To: Midrange Systems Technical Discussion <

midrange-l@xxxxxxxxxxxx

Date: 03/24/2016 09:19 AM
Subject: Re: reset authorities
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



problem with that is some authorities for public vary. so some

objects

are exclude where others are use and others are all...



On 3/24/2016 8:53 AM, Paul Nelson wrote:

You can use chgaut to reverse the process.

Paul Nelson
Cell 708-670-6978
Office 409-267-4027
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On

Behalf

Of

tim

Sent: Thursday, March 24, 2016 7:49 AM
To: Midrange Systems Technical Discussion
Subject: reset authorities

We have a test box where someone issued a chgaut command to /

revoking

public authority. Now, a bunch of things are not working. Is there

a

way

to "reset" authority to defaults or something? I hate to have to
reinstall OS is thats the only option.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.