ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzamv_5.4.0.1/rzamvrestorelicprog.htm

67 lines
4.4 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Restore licensed programs" />
<meta name="abstract" content="The Restore Licensed Programs (RSTLICPGM) command is used to install IBM-supplied programs on your system. It can also be used to install non-IBM programs created using the SystemView* System Manager/400* licensed program." />
<meta name="description" content="The Restore Licensed Programs (RSTLICPGM) command is used to install IBM-supplied programs on your system. It can also be used to install non-IBM programs created using the SystemView* System Manager/400* licensed program." />
<meta name="DC.Relation" scheme="URI" content="rzamvrestoresecinfo.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="restorelicprog" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Restore licensed programs</title>
</head>
<body id="restorelicprog"><a name="restorelicprog"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Restore licensed programs</h1>
<div><p>The Restore Licensed Programs (RSTLICPGM) command is used to install
IBM-supplied programs on your system. It can also be used to install non-IBM
programs created using the SystemView* System Manager/400* licensed program.</p>
<p>When your system is shipped, only users with *ALLOBJ special authority
can use the RSTLICPGM command. The RSTLICPGM procedure calls an exit program
to install programs that are not supplied by IBM<sup>®</sup>. </p>
<p>To protect security on your system, the exit program should not run using
a profile with *ALLOBJ special authority. Use a program that adopts *ALLOBJ
special authority to run the RSTLICPGM command, instead of having a user with
*ALLOBJ authority run the command directly. </p>
<div class="p">Following is an example of this technique. The program to be installed
using the RSTLICPGM command is called CPAPP (Contracts and Pricing). <ol><li>Create a user profile with sufficient authority to successfully install
the application. Do not give this profile *ALLOBJ special authority. For the
example, the user profile is called OWNCP. </li>
<li>Write a program to install the application. For the example, the program
is called CPINST: PGM RSTLICPGM CPAPP ENDPGM </li>
<li>Create the CPINST program to adopt the authority of a user with *ALLOBJ
special authority, such as QSECOFR, and authorize OWNCP to the program: <pre>CRTCLPGM QGPL/CPINST USRPRF(*OWNER) +
AUT(*EXCLUDE) GRTOBJAUT OBJ(CPINST) OBJTYP(*PGM) +
USER(OWNCP) AUT(*USE) </pre>
</li>
<li>Sign on as OWNCP and call the CPINST program. When the CPINST program
runs the RSTLICPGM command, you are running under QSECOFR authority. When
the exit program runs to install the CPAPP programs, it drops adopted authority.
The programs called by the exit program run under the authority of OWNCP.</li>
</ol>
</div>
<p>For procedural steps, refer to.<a href="rzamvrestoreauthlist.htm#restoreauthlist">Restore
authorization lists</a>.</p>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvrestoresecinfo.htm" title="Recovering your system often requires restoring data and associated security information.">Restore security information</a></div>
</div>
</div>
</body>
</html>