88 lines
6.3 KiB
HTML
88 lines
6.3 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="concept" />
|
|
<meta name="DC.Title" content="Monitor subsystem descriptions" />
|
|
<meta name="abstract" content="This article provides suggestions for reviewing the subsystem descriptions that currently exist on your system." />
|
|
<meta name="description" content="This article provides suggestions for reviewing the subsystem descriptions that currently exist on your system." />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvmonitorsec.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrevautostart.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrevworkstation.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrevjobqueue.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrevrouting.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrevcomm.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrevprestart.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrevjobdesc.htm" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="monsubsystem" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Monitor subsystem descriptions</title>
|
|
</head>
|
|
<body id="monsubsystem"><a name="monsubsystem"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Monitor subsystem descriptions</h1>
|
|
<div><p>This article provides suggestions for reviewing the subsystem descriptions
|
|
that currently exist on your system. </p>
|
|
<p>When you start a subsystem on a server, the system creates an environment
|
|
for work to enter the system and run. A subsystem description defines what
|
|
that environment looks like. Subsystem descriptions, therefore, can provide
|
|
an opportunity for devious users. A mischief-maker might use a subsystem description
|
|
to start a program automatically or to make it possible to sign on without
|
|
a user profile. </p>
|
|
<p>When you run the Revoke Public Authority (<span class="cmdname">RVKPUBAUT</span>)
|
|
command, the system sets public authority to subsystem description commands
|
|
to *EXCLUDE. This prevents users who are not specifically authorized (and
|
|
who do not have *ALLOBJ special authority) from changing or creating subsystem
|
|
descriptions. </p>
|
|
<p>You can use the Work with Subsystem Descriptions (<span class="cmdname">WRKSBSD</span>)
|
|
command to create a list of all the subsystem descriptions. When you select <span class="uicontrol">5 </span>(Display)
|
|
from the list, a menu displays for the system description that you selected.
|
|
It shows a list of the parts of a subsystem environment.</p>
|
|
<p>You select options to see details about the parts. Use the Change Subsystem
|
|
Description (<span class="cmdname">CHGSBSD</span>) command to change the first two items
|
|
on the menu. To change other items, use the appropriate add, remove, or change
|
|
command for the entry type. For example, to change a workstation entry, use
|
|
the Change Workstation Entry (<span class="cmdname">CHGWSE</span>) command. </p>
|
|
<p>For additional information about working with subsystem descriptions, including
|
|
lists of the shipped values for IBM-supplied subsystem descriptions, refer
|
|
to the topic: <a href="../rzaks/rzaks1.htm">Work
|
|
Management</a>.</p>
|
|
</div>
|
|
<div>
|
|
<ul class="ullinks">
|
|
<li class="ulchildlink"><strong><a href="rzamvrevautostart.htm">Review autostart job entries</a></strong><br />
|
|
Look at your autostart job entries and the associated job descriptions. Ensure that you understand the function of any program that runs automatically when a subsystem starts.</li>
|
|
<li class="ulchildlink"><strong><a href="rzamvrevworkstation.htm">Review workstation names and types</a></strong><br />
|
|
Look at your workstation entries and the associated job descriptions. Ensure that no one has added or updated any entries to run programs that you are not aware of.</li>
|
|
<li class="ulchildlink"><strong><a href="rzamvrevjobqueue.htm">Review job queue entries</a></strong><br />
|
|
You should periodically review the job queue entries in your subsystem descriptions to ensure that batch jobs are running where you expect them to run.</li>
|
|
<li class="ulchildlink"><strong><a href="rzamvrevrouting.htm">Review routing entries</a></strong><br />
|
|
Look at the routing entries and ensure that no one has added or updated any entries to run programs that you are not aware of.</li>
|
|
<li class="ulchildlink"><strong><a href="rzamvrevcomm.htm">Review communications entries and remote location names</a></strong><br />
|
|
Ensure that the communications entries are secure.</li>
|
|
<li class="ulchildlink"><strong><a href="rzamvrevprestart.htm">Review prestart job entries</a></strong><br />
|
|
You should make sure that prestart job entries perform only authorized, intended functions.</li>
|
|
<li class="ulchildlink"><strong><a href="rzamvrevjobdesc.htm">Review job descriptions</a></strong><br />
|
|
You should periodically review job descriptions to make sure that they do not run unintended programs. Use object authority to prevent changes to job descriptions.</li>
|
|
</ul>
|
|
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvmonitorsec.htm" title="This set of topics discuss various techniques for monitoring and auditing security on your system.">Monitor security</a></div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html> |