This article describes how to monitor access to output and job queues, explains why it is important, and provides step-by-step instructions.
Sometimes a security administrator does a great job of protecting access to files and then forgets about what happens when the contents of a file are printed. Servers provide functions for you to protect sensitive output queues and job queues. You protect an output queue so that unauthorized users cannot, for example, view or copy confidential spooled files that are waiting to print. You protect job queues so that an unauthorized user cannot either redirect a confidential job to a nonconfidential output queue or cancel the job entirely.
You can use the following SECBATCH menu options to print the security settings for the job queues and output queues on your system: 24 to submit the job immediately and 63 to use the job scheduler. You also can use the Print Queue Authority (PRTQAUT) command to print the security settings for the job queues and output queues on your system. You can then evaluate printing jobs that print confidential information and ensure that they are going to output queues and job queues that are protected.
For more information on the PRTQAUT command, see Appendix A, and for output queues and job queues that you consider to be security-sensitive, you can compare your security settings with the required output queue and job queue function settings in the "Job Queue Commands" and "Output Queue Commands" tables in Appendix D of the iSeries™ Security Reference.