================================================================== SEARCH400.COM | Security Tip Feb. 10, 2004 ================================================================== FROM OUR SPONSOR:
Someone Else's Problem? http://search400.com/r/0,,24326,00.htm?track=NL-236&bytware ================================================================== Essential explanations and tools to help secure the iSeries. More tips: http://search400.techtarget.com/tipsIndex/0,289482,sid3_tax2f8,00.html?track=NL-236 ================================================================== In today's technical advice roundup you'll find tips, expert answers and input from your peers to the following iSeries security questions and concerns: Today's Featured Security Tip: -- Time to review your *PUBLIC authority setups Answers to Other Technical Questions: - The danger of indiscriminately assigning special authorities - Preventing users from uploading data - Securing a library from adopting authority - The adopted authority problem Important Announcements and Links - Search400.com tips contest: January winners announced - Free on Search400.com: White Papers on iSeries security - Monthly Newsletter: Top Expert Advice - Best Web Links: iSeries security ___________________________________________________________________ *********************** SPONSORED BY Bytware, Inc. **************** Think virus outbreaks are someone else's problem? Think again. Many were surprised to learn that Mydoom was uncovered on the iSeries, but StandGuard Anti-Virus users were able to clean it right off. Could it still be sitting on your system? Get protected with StandGuard Anti-Virus, the "Product of the Year" in the Security category of the Search400.com 2003 Products of the Year awards. http://search400.com/r/0,,24326,00.htm?track=NL-236&bytware =================================================================== Today's Featured Tip =================================================================== Time to review your *PUBLIC authority setups by Rich Loeber OS/400's robust security architecture lets you specify security authorization at a variety of levels -- from the individual profile level to the group profile level and even supplemental group profile level. If, however, your system has default setups for *PUBLIC authority that are too broad in nature, all the little details at the other levels could easily be frustrated. It is important to understand how your *PUBLIC authorities are set and to review them periodically. >> CLICK here for the full tip: http://www.search400.com/tip/1,289483,sid3_gci949378,00.html?track=NL-236 =================================================================== Answers to Other Security Questions =================================================================== THE DANGER OF INDISCRIMINATELY ASSIGNING SPECIAL AUTHORITIES In this tip, security guru Dan Riehl explains the special authorities and points out the main exposures if they are not assigned judiciously. http://www.search400.com/tip/1,289483,sid3_gci865077,00.html?track=NL-236 PREVENTING USERS FROM UPLOADING DATA One user writes, "I'm in the process of implementing ODBC on my iSeries. How can I prevent users from uploading data back to the iSeries? I have no problem with my users downloading data; I don't want them uploading data. Also can security be placed at the library level?" Security expert Carol Woodbury offers some advice. http://search400.techtarget.com/ateQuestionNResponse/0,289625,sid3_cid566506_tax285220,00.html?track=NL-236 SECURING A LIBRARY FROM ADOPTING AUTHORITY "Benallgood" was trying to secure a library containing payroll information. He secured the library with an authorization list and set the public authority on both the library and authorization list to *exclude. However, when doing a WRKLIB or query on the library from a user profile not in the authorization list, he could still access it. Search400.com site expert John Brandt and "edfishel" were on hand to offer some advice. http://search400.discussions.techtarget.com/[EMAIL PROTECTED]@.ee84639/1581 THE ADOPTED AUTHORITY PROBLEM Objects, such as programs, on your iSeries can adopt authority from owners, from users, from other programs or even other systems. Is this a problem? Security guru Rich Loeber says it can be. It would be in your best interest to understand what programs have authority to bestow on those to whom it should not be granted. http://www.search400.com/tip/1,289483,sid3_gci918560,00.html?track=NL-236 ___________________________________________________________________ :::::::::: DON'T MISS THESE IMPORTANT MESSAGES AND LINKS ::::::::: =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= JANUARY WINNERS ANNOUNCED | Search400.com tips contest The results you've been waiting for are finally here.... The top winner for Search400.com's Tips Contest for January is Bob Abbott. Bob won a $50 Amazon gift certificate and was added to our Hall of Fame for his tip: iSeries pager messages http://www.search400.com/tip/1,289483,sid3_gci943691,00.html?track=NL-236 Congratulations also to our runner-up winners: Tiger Moodley, Andy Farmer and Richard Cranston. View all winning tips in Search400.com's Hall of Fame: http://search400.techtarget.com/tipsHallOfFame/0,289489,sid3_prz826588_cts826578,00.html?track=NL-236 NEW CONTEST FOR FEBRUARY: This month we're giving away a Logitech MX700 cordless optical mouse. You can win this awesome mouse by submitting the best tip in February. The fast RF cordless technology works within a six-foot range, has a rapid-charge base station and cruise control scrolling system for scrolling long documents or Web sites. Submit a tip in February and become eligible to win. >> SUBMIT a Tip: http://search400.techtarget.com/tipsSubmit/0,289485,sid3,00.html?track=NL-236 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- WHITE PAPERS ON ISERIES SECURITY | Free on Search400.com When it comes to securing your iSeries, the more advice and help you have the better. Browse Search400.com's white paper section to find informative white papers on security and several other iSeries topics. >> CLICK here to view the white papers: http://search400.techtarget.com/whitepapersByCategory/0,293837,sid3_tax292513_idx0_off10,00.html?track=NL-236 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- MONTHLY NEWSLETTER | Top Expert Advice newsletter The Top Expert Advice newsletter was designed to help iSeries professionals manage tasks they deal with regularly. Each month we will give you expert advice on such topics as security, backup and recovery, Web development and application development. To receive this newsletter, simply edit your member profile at http://search400.techtarget.com/editSummary/1,291026,sid3,00.html?track=NL-236 and check Top Expert Advice newsletter under the Tips section. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BEST WEB LINKS | Systems management - security These Best Web Links provide you with resources to help you make your system as secure as it can be. Don't waste your time scouring the Web; we've already done that for you. >> CLICK to view the security Best Web Links: http://search400.techtarget.com/bestWebLinks/0,289521,sid3_tax2c5,00.html?track=NL-236 _________________________________________________________________ :::::::::::::::::::::: SEARCH400 CONTACTS ::::::::::::::::::: TIP MAILBOX, (mailto:[EMAIL PROTECTED]) >> Send us feedback on tips and ideas for new tip content. ________________________________________________________________ MICHELLE DAVIDSON, site editor (mailto:[EMAIL PROTECTED]) >> Send us your story ideas and best practices. ________________________________________________________________ DEBRA TART, assistant site editor (mailto:[EMAIL PROTECTED]) >> Send us your tips and Best Web Links. ________________________________________________________________ GABRIELLE DERUSSY, director of site sales (mailto:[EMAIL PROTECTED]) >> Sponsor this or any other TechTarget newsletter. ::::::::::::::::::::: ABOUT THIS NEWSLETTER :::::::::::::::::::::: This e-newsletter is published by Search400.com, a targeted Web site from TechTarget, the most targeted IT media and events company. TechTarget offers magazines, Web sites, e-newsletters, Webcasts and conferences for enterprise IT professionals. Copyright 2004 TechTarget. All rights reserved. _____________________________________________________________________ To unsubscribe from "Security Tip": Go to unsubscribe: http://Search400.com/u?cid=476186&lid=460581&track=NL-236 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact us: Search400 Member Services 117 Kendrick Street, Suite 800 Needham, MA 02494
