How to encrypt spool files ?

20 pts.
Tags:
*SPLCTL
*SPLCTL special authority
Encryption
OUTQ
Spool files
If user have *SPLCTL special authority he can view spool files , using wrksplf outqname option 5 . how to restrict it
ASKED: January 10, 2011  4:51 AM
UPDATED: January 12, 2011  1:41 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

Hi,

If user having *SPLCTL authority you can’t restrict to use WRKSPLF command.

If you want to restrict user from WRKSPLF *PRINT or View, remove his authority.

I hope its ok….

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • tjgm88
    You might try restriction access to the OUTQ where these spool files reside, using the EDTOBJAUT command.
    980 pointsBadges:
    report
  • TomLiotta
    You might try restriction access to the OUTQ where these spool files reside,... You cannot restrict a *SPLCTL user from viewing spooled files. A special authority such as *SPLCTL will provide access to spooled files by means that bypass other authorities. That's a big part of why they're called "special" authorities. A *SPLCTL user doesn't need to reference the *OUTQ. How to encrypt spool files ? If you encrypt spooled files, you'll need to write a printer driver to decrypt them when they print. If you don't want a user to view spooled files, then stop giving them the authority to view any spooled file on the system. Take away *SPLCTL; it's not needed for users who don't need to view all spooled files. Tom
    125,585 pointsBadges:
    report
  • As400e
    then in bank environment , they generate and printed and seal the atm , net account password using as400, and even the QSECOFR is not able to see these spool files how is that possible
    20 pointsBadges:
    report
  • TomLiotta
    they generate and printed and seal the atm It's not clear what that means. What does "printed" mean, since it is separate from "generate"? And what is "atm"? If spooled output was "printed" in order to create a .PDF or other derivative object, then they are no longer spooled -- they've been printed. Once printed, the derived objects can be secured with any encryption you need. Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following