Re: QTIVROOT user profile

Tom Liotta <[email protected]> Tue, 30 Sep 2008 17:05:50 -0700

Newsgroups	gmane.comp.systems.as400.security
Organization	midrange.com
Message-ID	<[email protected]>

Steve McKay wrote:

> QTIVROOT is labelled 'TIVOLI ALL OBJECT AUTHORITY PROFILE'.  It owns 2 
> objects on my system, QTMELCF/QLCFSWAP *SRVPGM and QUSRSYS/QTIVROOT *MSGQ. 
> If I'm not using Tivoli, can I remove all special authorities (specifically 
> *ALLOBJ authority) from the QTIVROOT user profile?

Looks like your question is covered okay. I just wanted to add a 
thought.

Since you're "not using Tivoli," make sure that Tivoli is where that 
profile came from. It's perfectly possible to create profiles with 
names and text descriptions that look just like legitimate profiles.

Just a thought.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
        253-479-1416
Fax    253-872-7904
http://www.powertech.com
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.