Re: [Security400] Security Logging

[Julio_Domingo@xxxxxxxxxxxxx]

In reverse order.
      1.    Logging will not be noticed with the exception of a joblog.
      2.    What is the logging you are looking for?
            User job logging is done in the job and job description.  I
have found the following to be the best for me.

                   Message logging:
                     Level  . . . . . . . . . . . .   4             0-4,
*SAME
                     Severity . . . . . . . . . . .   00            0-99,
*SAME
                     Text . . . . . . . . . . . . .   *SECLVL       *SAME,
*MSG, *SECLVL, *NOLIST
                   Log CL program commands  . . . .   *YES          *SAME,
*YES, *NO

            You will need to ensure thet the defauld for the SIGNOFF
command is LOG(*LIST)

      3.    Security logging needs to be turned on in the following system
values and you will have to right your own            reports.


             QAUDCTL     *SEC     Auditing control
             QAUDENDACN  *SEC     Auditing end action
             QAUDFRCLVL  *SEC     Force auditing data
             QAUDLVL     *SEC     Security auditing level
             QCRTAUT     *SEC     Create default public authority
             QCRTOBJAUD  *SEC     Create object auditing

                                       
 Julio Domingo                         
                                       
 American General Financial Services   
                                       
 AS/400 SYSTEMS ANALYST                
                                       
 812-468-5435/812-468-5122             
                                       
 Julio_Domingo@xxxxxxxxxxxxx           
                                       







                                                                                
                               
                      "Wills, Mike N. (TC)"                                     
                               
                      <MNWills@xxxxxxxxxxxx        To:       "'Security 
Administration on the AS400 /          
                      om>                           iSeries'" 
<security400@xxxxxxxxxxxx>                       
                      Sent by:                     cc:                          
                               
                      security400-bounces@x        Subject:  [Security400] 
Security Logging                    
                      idrange.com                                               
                               
                                                                                
                               
                                                                                
                               
                      06/27/2003 10:03 AM                                       
                               
                      Please respond to                                         
                               
                      Security                                                  
                               
                      Administration on the                                     
                               
                      AS400 / iSeries                                           
                               
                                                                                
                               
                                                                                
                               





This was brought up in MIDRAGE-L, but I thought it would be more of a
security based question. How do I enable logging, would the users ever
notice that it is turned on?

Mike
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.