CHKCPPQSYS Check CPP Use of QSYS

CHKCPPQSYS CHECK CPP USE OF QYSS TAASEDU
The Check CPP use of QSYS command checks all the commands on the system for non-system commands that use a CPP from QSYS. This helps ensure the integrity of your system. While there are legitimate reasons to create a command using a CPP in QSYS, it is possible to bypass some security checking in some situations and create integrity problems. A periodic review is generally worthwhile. You must have *ALLOBJ special authority to use CHKCPPQSYS. There are no parameters on the command. CHKCPPQSYS is a slow running command and would normally be submitted to batch. SBMJOB JOB(CHKCMD) CMD(CHKCPPQSYS) Two spooled files are output: ** CMDSUM contains a summary of the commands that exist by library. ** CMDEXCPT contains the exceptions found. The user profile QLPINSTALL creates some commands at the time the system is installed which refer to command processing programs in QSYS. Exceptions ---------- Some program product commands are created at the time of installation of a new release and use a system CPP. For example, you may see some commands created by the user QLPINSTALL that use the QLIDLOBJ CPP (generalized delete program). You may want to check the creation date of these commands (shown in the spooled file) to see if they occurred at the time your release was installed. The TAA Tools SBMJOB2 and SBMJOB3 are created to use the SBMJOB CPP from QSYS and will appear as exceptions. These commands are deemed safe if they were created on a TAASYS system. Command parameters *CMD ------------------ No parameter exist. Restrictions ------------ None. Prerequisites ------------- The following TAA Tools must be on your system: CHKALLOBJ Check all object EDTVAR Edit variable RTVCMDA Retrieve command attributes RTVSYSVAL3 Retrieve system value 3 SNDCOMPMSG Send completion message SNDESCMSG Send escape message SNDSTSMSG Send status message Implementation -------------- None, the tool is ready to use. Objects used by the tool ------------------------ Object Type Attribute Src member Src file ------ ---- --------- ---------- ---------- CHKCPPQSYS *CMD TAASEDU QATTCMD TAASEDUC *PGM CLP TAASEDUC QATTCL TAASEDUR *PGM RPG TAASEDUR QATTRPG


CHKCPPQSYS CHECK CPP USE OF QYSS TAASEDU
The Check CPP use of QSYS command checks all the commands on the system for non-system commands that use a CPP from QSYS. This helps ensure the integrity of your system. While there are legitimate reasons to create a command using a CPP in QSYS, it is possible to bypass some security checking in some situations and create integrity problems. A periodic review is generally worthwhile. You must have ALLOBJ special authority to use CHKCPPQSYS. There are no parameters on the command. CHKCPPQSYS is a slow running command and would normally be submitted to batch. SBMJOB JOB(CHKCMD) CMD(CHKCPPQSYS) Two spooled files are output: * CMDSUM contains a summary of the commands that exist by library. ** CMDEXCPT contains the exceptions found. The user profile QLPINSTALL creates some commands at the time the system is installed which refer to command processing programs in QSYS. Exceptions ---------- Some program product commands are created at the time of installation of a new release and use a system CPP. For example, you may see some commands created by the user QLPINSTALL that use the QLIDLOBJ CPP (generalized delete program). You may want to check the creation date of these commands (shown in the spooled file) to see if they occurred at the time your release was installed. The TAA Tools SBMJOB2 and SBMJOB3 are created to use the SBMJOB CPP from QSYS and will appear as exceptions. These commands are deemed safe if they were created on a TAASYS system. Command parameters CMD ------------------ No parameter exist. Restrictions ------------ None. Prerequisites ------------- The following TAA Tools must be on your system: CHKALLOBJ Check all object EDTVAR Edit variable RTVCMDA Retrieve command attributes RTVSYSVAL3 Retrieve system value 3 SNDCOMPMSG Send completion message SNDESCMSG Send escape message SNDSTSMSG Send status message Implementation -------------- None, the tool is ready to use. Objects used by the tool ------------------------ Object Type Attribute Src member Src file ------ ---- --------- ---------- ---------- CHKCPPQSYS CMD TAASEDU QATTCMD TAASEDUC PGM CLP TAASEDUC QATTCL TAASEDUR PGM RPG TAASEDUR QATTRPG

Added to TAA Productivity Tools August 1, 1997

Home Page

Last modified on July 15, 2010