iSee – Danger Lurking with Commands
-
Register
- Member - Free!
- Non-member - Free!
Is your library list a trusted friend or a sneaky saboteur?
Somewhere in your compiled programs, SQL is quietly running CL commands through QCMDEXC. If those commands aren't library-qualified, IBM i goes hunting for them through the library list. Anyone who slips a look-alike command in ahead of the real one wins.
In this episode of iSee, Scott and Tim turn Db2 for i into a security detective. With just a few lines of SQL against QSYS2.SYSPROGRAMSTMTSTAT, they sniff out the risky spots hiding in your *PGM, *SRVPGM, and *MODULE objects, with no source code required.
No extra tools. No installs. Just SQL, a little regex magic, and a list of things you'll probably wish you'd checked sooner.
Watch it before the bad guys do.
Tim Rowe
Business Architect Application Development & Systems Management for IBM i
Tim Rowe is the Business Architect for IBM i responsible for System Management and Application Development. He has a passion for modernization on IBM i and how we can continue to move IBM i into the world of 'Normal' . In his spare time he is a certified Soccer referee and enjoys refereeing games with his youngest son.
Scott Forstie
Db2 for i Business Architect
Scott Forstie is a Senior Technical Staff Member within IBM i development and spends most of his time working as the Db2 for i Business Architect. He has worked on IBM operating system development since joining IBM in 1989.
Scott is a frequently published author, speaker at industry events around the globe and can be found @Forstie_IBMi and [email protected]. Scott is an avid runner and enjoys cooking.
