Security Related Changes

Edit online

Release to release Security changes that should be considered

System security changes
Modified Validation List objects cannot be saved to previous release
List Object Security Protection
Service tools changes
SM (Systems Management Change) audit journal entry change
QASYSTJ5 model outfile incompatible changes in a future release
Authority other than *EXCLUDE required to display objects within '/home' directory
Authority requirements change for *AUTL interfaces
SQL Plan Cache snapshots and event monitor files *PUBLIC authority changed from *USE to *EXCLUDE
Change to authority required for registering Storage Extension and Tape exit programs
CRTJRN and CRTJRNRCV command changes
CHGRDBDIRE command authority requirements change
QWCLSCDE may return blank in "User profile of entry adder" field
Release to release API changes that should be considered
IBM Directory Server for IBM i (LDAP) changes
IBM Directory Server for IBM i (LDAP) changes that should be considered are listed below.
Change required for network attached printers using SNMPv1
QFileSvr.400 authentication error if Kerberos is not fully configured on server
DNS security changes
The following changes have been made on release IBM i 7.5 related to security in DNS support.
Changes to the event file EVFEVENT
QNTC Authentication changes
Socket applications that use a Unix address family
INZTAP, DUPTAP, and RMVTAPCTG command authority changes
INZOPT, DUPOPT, and CPYOPT command authority changes
STRQMQRY command changes
CRTQMQRY and CRTQMFORM command changes
*JOBCTL special authority is required to view Java jobs
QSYS2.GROUP_PTF_INFO view requires *USE authority
QSYS2.PTF_INFO view requires *USE authority
IBM-supplied user profiles deleted in a future release
QSYS2.AUTHORITY_COLLECTION views authority checks
RENAME (SQL) statement changed to require more authority
Add Physical File Trigger (ADDPFTRG) CL command *PUBLIC authority
QRECOVERY/QDBppnnnn *FILE -*PUBLIC authority
QRECOVERY/QADBERAP *FILE - *PUBLIC authority
Public authority changes for objects

Parent topic: IBM i operating system