Use the Print System Security Attributes command (PRTSYSSECA)

Purpose

This example shows the output from the Print System Security Attributes (PRTSYSSECA) command. The report shows the settings for security-relevant system values and network attributes that are recommended for systems with normal security requirements. It also shows the current settings on your system.
Note: The Current Value column on the report shows the current setting on your system. Compare this value to the recommended value to see where you may have security exposures.

Sample System Security Attributes Report

System Security Attributes

System Value
Name				Current Value		Recommended Value
QALWOBJRST	*NONE 					*NONE
QALWUSRDMN	*ALL						QTEMP
QATNPGM			QEZMAIN QSYS			*NONE
QAUDENDACN	*NOTIFY					*NOTIFY
QAUDFRCLVL	*SYS						*SYS
QAUDCTL			*AUDLVL					*AUDLVL		*OBJAUD
QAUDLVL			*SECURITY				*AUTFAIL	*CREATE
												*DELETE		*SECURITY
												*SAVRST		*NOQTEMP

QAUTOCFG		0							0
QAUTORMT		1							0
QAUTOVRT		9999						0
QCMNRCYLMT	0 0						0 0
QCRTAUT			*CHANGE					Control at library level
QCRTOBJAUD	*NONE					Control at library level
QDEVRCYACN	*DSCMSG					*DSCMSG
QDSCJOBITV	120						120
QDSPSGNINF	1							1
QINACTITV		60							60
QINACTMSGQ	*ENDJOB					*ENDJOB
QLMTDEVSSN	0							1
QLMTSECOFR	0							1
QMAXSGNACN	2							3
QMAXSIGN		3							3

QPWDEXPITV	60							60
QPWDLMTAJC	1							1
QPWDLMTCHR	*NONE					AEIOU@$#
QPWDLMTREP	1							2
QPWDLVL			0						
QPWDMAXLEN	8							8
QPWDMINLEN	6							6
QPWDPOSDIF	1							1
QPWDRQDDGT	1							1
QPWDRQDDIF	0							1
QPWDVLDPGM	*NONE					*NONE
QRETSVRSEC	0							0
QRMTIPL			0							0
QRMTSIGN		*FRCSIGNON			*FRCSIGNON
QSECURITY		50							50
QSHRMEMCTL	1							0
QSRVDMP			*DMPUSRJOB			*NONE
QUSEADPAUT	*NONE					CRTAUTL AUTL(QUSEADPAUT) AUT(*EXCLUDE)
												CHGOBJOWN OBJ(QUSEADPAUT) OBJTYPE(*AUTL)
												CHGSYSVAL SYSVAL(QUSEADPAUT) VALUE(QUSEADPAUT)
QVFYOBJRST	1							3

Network Attribute
Name			Current Value			Recommended Value
DDMACC		*OBJAUT						*REJECT
JOBACN		*FILE						*REJECT
PCSACC		*OBJAUT						*REJECT