Managing Suspicious Objects
To manage suspicious objects, select 21. Work with Suspicious Objects from the Object Integrity Validation screen (STRAV> 62). The Remove Non-existent Objects window appears. Enter Y to remove information on objects that no longer exist, or N to retain the information, then press Enter. The Work with Suspicious Objects screen appears:
Work with Suspicious Objects Position to library . . . Type options, press Enter. Omit confirmed objects . *NO 1=Select 3=Confirm 4=Quarantine 5=Display 8=Recreate pgm 9=Unconfirm Opt Library Object Type Owner Violation Confirmed CT#0134O CTCLRFR *PGM QPGMR NOTTRANS *NO CT#0134O CTCVTDATR *PGM QPGMR NOTTRANS *NO CT#0134O CTDELR *PGM QPGMR NOTTRANS *NO CT#0134O CTDLTOSR *PGM QPGMR NOTTRANS *NO CT#0134O CTENVMR *PGM QPGMR NOTTRANS *NO CT#0134O CTEXTND *PGM QPGMR NOTTRANS *NO CT#0134O CTFIXCTRT *PGM QPGMR NOTTRANS *NO CT#0134O CTFIXSR *PGM QPGMR NOTTRANS *NO CT#0134O CTFLDMPR *PGM QPGMR NOTTRANS *NO CT#0134O CTFLDMR *PGM QPGMR NOTTRANS *NO CT#0134O CTFLDWR *PGM QPGMR NOTTRANS *NO CT#0134O CTGETFA *PGM QPGMR NOTTRANS *NO CT#0134O CTGETFS *PGM QPGMR NOTTRANS *NO CT#0134O CTI *PGM QPGMR NOTTRANS *NO More... F3=Exit F7=Subset F15=Information |
For each object, the screen shows the Library containing the object and the Object name (or, for objects in IFS, the pathname), the Type of object, its Owner, the Violation that caused it to be marked as suspicious, and whether it has been Confirmed as inoffensive.
Possible values for Violation include:
ALTERED
The object has been tampered with.
BADLIBUPDA
The library protection attribute is set incorrectly.
BADSIG
The object has a digital signature that is not valid.
DMN
The domain is not correct for the object type.
NOTCHECKED
The object could not be checked. At the time of the scan the debug mode was on, or the object was saved with its storage freed or was compressed.
NOTTRANS
The object has not been converted to RISC format.
OSIG
The object can be signed but does not have a digital signature.
PGMMOD
The runnable object has been tampered with.
SCANFSFAIL
The object has been scanned by a scan-related exit program. At the time of that last scan request, it failed the scan.
To see more information about the violation, enter 1 in the Opt field for the object. The Display Object Integrity Details screen appears, showing the date and time of the check that spotted the violation and a description of the violation type.
To see detailed information about the object, enter 5 in the Opt field for the object. The standard Display Program Information screen appears, containing several pages of information about the object.
To confirm that the object is inoffensive, enter 2 in the Opt field for the object. The Confirm Object as Inoffensive window appears. Enter information about the confirmation in the Description field in the window. The Confirmed field changes from *NO to *YES.
To remove the confirmation for an object, enter 9 in the Opt field for the object. The Confirmed field changes from *YES to *NO.
To quarantine an object, enter 4 in the Opt field for the object. The Quarantine Object window appears. Press Enter to confirm that you want to quarantine the object or the F12 key to cancel.
NOTE: To remove an object from quarantine, select 29. Work with Quarantined Objects from the Object Integrity Validation screen (STRAV> 61). The standard Work with Objects Using PDM screen appears, showing the objects in the SMZVQRN quarantine library.
To recreate a program of the Type *PGM that has a Violation of ALTERED, enter 8 into the Opt field for the object. The program is recompiled. The new version replaces the suspicious object.