Re: STRSRVJOB and database journal entries

"[email protected]" <[email protected]>
Newsgroups gmane.comp.systems.as400.security
Message-ID <[email protected]>
   Hello,

   if AUDIT-Journal is running, have a look to AF entries of the Job, which
   is executing STRSVRJOB.

   Regards

   RObert

   -----Original Message-----
   Date: Wed, 28 Jun 2006 18:07:56 +0200
   Subject: [Security400] STRSRVJOB and database journal entries
   From: shalom-a/[email protected]
   To: security400-Zwy7GipZuJhWk0Htik3J/[email protected]

   I started a debug session for another job, using chgpgmvar I changed a
   program variable that was due to be written to a database file and then I
   looked at the journal.
   There was no trace of the fact that the job that wrote the modified value
   was interrupted in any way. The journal record looked just the same.  I
   expected to see some indication that the job was debugged in a service
   session. I can tell that someone started a service job by turning on
   auditing for strsrvjob, but I have no trace on what modifications were
   made to valid application data.
   This looks like a problem, doesn't it?

   _______________________________________________
   This is the Security Administration on the AS400 / iSeries (Security400)
   mailing list
   To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
   To subscribe, unsubscribe, or change list options,
   visit: http://lists.midrange.com/mailman/listinfo/security400
   or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
   Before posting, please take a moment to review the archives
   at http://archive.midrange.com/security400.
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.