Re: Commands for Limited Users
"John Earl" <john.earl-Ua2wos9bJ7y1Z/[email protected]>
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <[email protected]> |
>LMTCPB(*YES) minimizes command line usage. Not having a >command line available on your user screens gets rid of >this problem completely. A correction, if you please. Not having a command line on your user screens does not get rid of this problem completely. A LMTCPB(*YES) user can still run the afore mentioned commands through an ftp client (example: quote rcmd sndmsg helloworld qsysopr), and both limited and non limited capability users can still submit any command to the operating system using the RMTCMD feature of iSeries Access (example: rmtcmd crtlib inventory) and the sbmrmtcmd feature of DDM. In these last two cases, the only limitation is the users authority to the command itself (and most OS/400 commands are shipped with *PUBLIC *USE). Properly tuned and executed exit programs can allow you to monitor and prevent commands submitted trough interfaces such as ftp, ddm, and rmtcmd irrespective of the users LMTCPB parameter value. jte -- John Earl | Chief Technology Officer The PowerTech Group 19426 68th Ave. S Seattle, WA 98032 (253) 872-7788 ext. 302 john.earl-Ua2wos9bJ7y1Z/[email protected] www.powertech.com Celebrating our 10th Anniversary Year! This email message and any attachments are intended only for the use of the intended recipients and may contain information that is privileged and confidential. If you are not the intended recipient, any dissemination, distribution, or copying is strictly prohibited. If you received this email message in error, please immediately notify the sender by replying to this email message, or by telephone, and delete the message from your email system. -- _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.