Re: Security Routines - bind by copy? (was RE: Questionabout serviceprograms)

[David Gibbs <david@xxxxxxxxxxxx>]

Wilt, Charles wrote:
> It would seem to me that if you have the authority to replace the
> security *SRVPGM in it's entirely...then you'd probably have the
> authority to do whatever you want anyway.

Perhaps, but that's a different problem entirely.

Of course, hard coding a service program reference might have ramifications in itself ... especially if you are deploying code to multiple locations with differing configurations.  I would say that few service programs are fully qualified when they are bound in.

> Besides, couldn't the *MODULE object that get bound into programs be
> replaced just as easy?  Granted, it'd only affect recompiled programs
> and not all existing.

Which pretty much defeats the purpose.  The goal of someone who would do this is to substitute their own code at run time.  There's no reason at all for a module to be deployed to a production system.

david