Managing Suspicious Objects

To manage suspicious objects, select 21. Work with Suspicious Objects from the Object Integrity Validation screen (STRAV> 62). The Remove Non-existent Objects window appears. Enter Y to remove information on objects that no longer exist, or N to retain the information, then press Enter. The Work with Suspicious Objects screen appears:

                        ​ Work with Suspicious Objects​                           
                                     ​
 Position to library . . .​                 
 Type options, press Enter.          ​ Omit confirmed objects  .​ *NO ​            
  ​
 1=Select  3=Confirm  4=Quarantine  5=Display  8=Recreate pgm  9=Unconfirm ​   
                                                                                
 Opt​ Library​   ​ Object ​    ​ Type​     ​ Owner​      ​ Violation​  Confirmed​          
     CT#0134O   CTCLRFR   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTCVTDATR ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTDELR    ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTDLTOSR  ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTENVMR   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTEXTND   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTFIXCTRT ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTFIXSR   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTFLDMPR  ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTFLDMR   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTFLDWR   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTGETFA   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTGETFS   ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
 ​
    CT#0134O   CTI       ​  *PGM    ​  QPGMR     ​  NOTTRANS  ​  ​ *NO       ​       
                                                                  ​
      More...​ 
 F3=Exit   F7=Subset   F15=Information​                                          
                                                                                
                                                                                

For each object, the screen shows the Library containing the object and the Object name (or, for objects in IFS, the pathname), the Type of object, its Owner, the Violation that caused it to be marked as suspicious, and whether it has been Confirmed as inoffensive.

Possible values for Violation include:

ALTERED

The object has been tampered with.

BADLIBUPDA

The library protection attribute is set incorrectly.

BADSIG

The object has a digital signature that is not valid.

DMN

The domain is not correct for the object type.

NOTCHECKED

The object could not be checked. At the time of the scan the debug mode was on, or the object was saved with its storage freed or was compressed.

NOTTRANS

The object has not been converted to RISC format.

OSIG

The object can be signed but does not have a digital signature.

PGMMOD

The runnable object has been tampered with.

SCANFSFAIL

The object has been scanned by a scan-related exit program. At the time of that last scan request, it failed the scan.

To see more information about the violation, enter 1 in the Opt field for the object. The Display Object Integrity Details screen appears, showing the date and time of the check that spotted the violation and a description of the violation type.

To see detailed information about the object, enter 5 in the Opt field for the object. The standard Display Program Information screen appears, containing several pages of information about the object.

To confirm that the object is inoffensive, enter 2 in the Opt field for the object. The Confirm Object as Inoffensive window appears. Enter information about the confirmation in the Description field in the window. The Confirmed field changes from *NO to *YES.

To remove the confirmation for an object, enter 9 in the Opt field for the object. The Confirmed field changes from *YES to *NO.

To quarantine an object, enter 4 in the Opt field for the object. The Quarantine Object window appears. Press Enter to confirm that you want to quarantine the object or the F12 key to cancel.

NOTE: To remove an object from quarantine, select 29. Work with Quarantined Objects from the Object Integrity Validation screen (STRAV> 61). The standard Work with Objects Using PDM screen appears, showing the objects in the SMZVQRN quarantine library.

To recreate a program of the Type *PGM that has a Violation of ALTERED, enter 8 into the Opt field for the object. The program is recompiled. The new version replaces the suspicious object.