78 lines
8.3 KiB
HTML
78 lines
8.3 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Audit the relational database directory" />
|
||
|
|
<meta name="abstract" content="This topic discusses how to audit program access to the relational database directories." />
|
||
|
|
<meta name="description" content="This topic discusses how to audit program access to the relational database directories." />
|
||
|
|
<meta name="DC.subject" content="command, WRKRDBDIRE (Work with Relational Database Directory Entries), Work with Relational Database Directory Entries (WRKRDBDIRE), command, CL, Work with Relational Database Directory Entries (WRKRDBDIRE), RMVRDBDIRE (Remove Relational Database Directory Entry), Remove Relational Database Directory Entry (RMVRDBDIRE), command, CL, RMVRDBDIRE (Remove Relational Database Directory Entry), Remove Relational Database Directory Entry (RMVRDBDIRE), DSPRDBDIRE (Display Relational Database Directory Entry), Display Relational Database Directory Entry (DSPRDBDIRE), DSPRDBDIRE (Display Relational Database Directory Entry), Display Relational Database Directory Entry (DSPRDBDIRE), CHGRDBDIRE (Change Relational Database Directory Entry), Change Relational Database Directory Entry (CHGRDBDIRE), CHGRDBDIRE (Change Relational Database Directory Entry), Change Relational Database Directory Entry (CHGRDBDIRE), ADDRDBDIRE (Add Relational Database Directory Entry), Add Relational Database Directory Entry (ADDRDBDIRE), ADDRDBDIRE (Add Relational Database Directory Entry), Add Relational Database Directory Entry (ADDRDBDIRE), auditing, Change Relational Database Directory Entry (CHGRDBDIRE), D, isplay Relational Database Directory Entry (DSPRDBDIRE), Remove Relational Database Directory Entry (RMVRDBDIRE), WRKRDBDIRE (Work with Relational Database Directory Entries), Work with Relational Database Directory Entries (WRKRDBDIRE), QADBXRDBD, relational database directory, relational database directory, security, CHGOBJAUD (Change Object Auditing Value), Change Object Auditing Value (CHGOBJAUD), CHGOBJAUD (Change Object Auditing Value), object auditing value, changing" />
|
||
|
|
<meta name="keywords" content="command, WRKRDBDIRE (Work with Relational Database Directory Entries), Work with Relational Database Directory Entries (WRKRDBDIRE), command, CL, Work with Relational Database Directory Entries (WRKRDBDIRE), RMVRDBDIRE (Remove Relational Database Directory Entry), Remove Relational Database Directory Entry (RMVRDBDIRE), command, CL, RMVRDBDIRE (Remove Relational Database Directory Entry), Remove Relational Database Directory Entry (RMVRDBDIRE), DSPRDBDIRE (Display Relational Database Directory Entry), Display Relational Database Directory Entry (DSPRDBDIRE), DSPRDBDIRE (Display Relational Database Directory Entry), Display Relational Database Directory Entry (DSPRDBDIRE), CHGRDBDIRE (Change Relational Database Directory Entry), Change Relational Database Directory Entry (CHGRDBDIRE), CHGRDBDIRE (Change Relational Database Directory Entry), Change Relational Database Directory Entry (CHGRDBDIRE), ADDRDBDIRE (Add Relational Database Directory Entry), Add Relational Database Directory Entry (ADDRDBDIRE), ADDRDBDIRE (Add Relational Database Directory Entry), Add Relational Database Directory Entry (ADDRDBDIRE), auditing, Change Relational Database Directory Entry (CHGRDBDIRE), D, isplay Relational Database Directory Entry (DSPRDBDIRE), Remove Relational Database Directory Entry (RMVRDBDIRE), WRKRDBDIRE (Work with Relational Database Directory Entries), Work with Relational Database Directory Entries (WRKRDBDIRE), QADBXRDBD, relational database directory, relational database directory, security, CHGOBJAUD (Change Object Auditing Value), Change Object Auditing Value (CHGOBJAUD), CHGOBJAUD (Change Object Auditing Value), object auditing value, changing" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rbal1admin.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../cl/addrdbdire.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../cl/dsprdbdire.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../cl/chgrdbdire.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../cl/rmvrdbdire.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../cl/wrkrdbdire.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../cl/chgobjaud.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rbal1audit" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Audit the relational database directory</title>
|
||
|
|
</head>
|
||
|
|
<body id="rbal1audit"><a name="rbal1audit"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Audit the relational database directory</h1>
|
||
|
|
<div><p>This topic discusses how to audit program access to the relational
|
||
|
|
database directories.</p>
|
||
|
|
<p>Accesses to the relational database directory are recorded in the security
|
||
|
|
auditing journal when either one of the items listed here is true.</p>
|
||
|
|
<ul><li>The value of the system QAUDLVL is *SYSMGT.</li>
|
||
|
|
<li>The value of the user AUDLVL is *SYSMGT.</li>
|
||
|
|
</ul>
|
||
|
|
<p>With the *SYSMGT value, the server audits all accesses made with the following
|
||
|
|
commands: </p>
|
||
|
|
<ul><li><span class="cmdname">Add Relational Database Directory Entry (ADDRDBDIRE)</span> command</li>
|
||
|
|
<li><span class="cmdname">Change Relational Database Directory Entry (CHGRDBDIRE)</span> command</li>
|
||
|
|
<li><span class="cmdname">Display Relational Database Directory Entry (DSPRDBDIRE)</span> command</li>
|
||
|
|
<li><span class="cmdname">Remove Relational Database Directory Entry (RMVRDBDIRE)</span> command</li>
|
||
|
|
<li><span class="cmdname">Work with Relational Database Directory Entry (WRKRDBDIRE)</span> command</li>
|
||
|
|
</ul>
|
||
|
|
<p>The relational database directory is a database file (QSYS/QADBXRDBD) that
|
||
|
|
can be read directly without the directory entry commands. </p>
|
||
|
|
<p>Prior to V5R2, relational database (RDB) directory file QADBXRDBD in library
|
||
|
|
QSYS was built with operational authority granted to *PUBLIC. Beginning in
|
||
|
|
V5R2, that's no longer the case. Therefore, existing programs that access
|
||
|
|
the RDB directory using this file might no longer run correctly. Unless you
|
||
|
|
have *ALLOBJ special authority, you will have to access the logical file named
|
||
|
|
QADBXRMTNM, which is built over QADBXRDBD. To audit direct accesses to this
|
||
|
|
file, set auditing on with the <span class="cmdname">Change Object Auditing (CHGOBJAUD)</span> command.</p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rbal1admin.htm" title="As an administrator for a distributed relational database, you are responsible for work being done on several servers.">Administration</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relref"><strong>Related reference</strong><br />
|
||
|
|
<div><a href="../cl/addrdbdire.htm">Add Relational Database Directory Entry (ADDRDBDIRE) command</a></div>
|
||
|
|
<div><a href="../cl/dsprdbdire.htm">Display Relational Database Directory Entry (DSPRDBDIRE) command</a></div>
|
||
|
|
<div><a href="../cl/chgrdbdire.htm">Change Relational Database Directory Entry (CHGRDBDIRE) command</a></div>
|
||
|
|
<div><a href="../cl/rmvrdbdire.htm">Remove Relational Database Directory Entry (RMVRDBDIRE) command</a></div>
|
||
|
|
<div><a href="../cl/wrkrdbdire.htm">Work with Relational Database Directory Entry (WRKRDBDIRE) command</a></div>
|
||
|
|
<div><a href="../cl/chgobjaud.htm">Change Object Auditing (CHGOBJAUD) command</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|