Modifying Firewall Rules for Programs

To modify rules for a program showing which users may run it, enter 1 in the Opt field for that program on the Work with Native AS/400 Program Security screen, as shown in Setting Firewall Rules for Programs (STRFW > 4 > 5).

The Modify Native AS/400 Program screen appears:

​                    ​ Modify Native AS/400 Program Security​                                                                                                         ​ Type information, press Enter.                                                ​                                                                                     ​ Program . . . . . .​ ​ PLONYPRG  ​                                                 ​ Library . . . . . .​ ​ TESTCMP   ​                                               ​  ​ Location Group ID .​ ​    ​        ​ 1-254​   ​ Access is restricted by location​                                                                                     ​ Define user authority, press Enter.​                                               ​ Y=Yes​                                                                          ​ User*, %Group​ ​ Location​  ​ Run​                                                   ​ Group profile​ ​ Group ID​  ​ Program​                                              ​  ​ *PUBLIC   ​     ​    ​     ​  ​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​         ​ PLONY     ​     ​    ​     ​ Y​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​         ​           ​     ​    ​     ​  ​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​         ​           ​     ​    ​     ​  ​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​         ​           ​     ​    ​     ​  ​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​         ​           ​     ​    ​     ​  ​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​         ​           ​     ​    ​     ​  ​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​         ​           ​     ​    ​     ​  ​       ​  ​       ​  ​       ​  ​       ​  ​       ​  ​                                                                         ​      More...​  ​ F3=Exit​  ​ F4=Prompt​   ​ F11=Enable locations ​    ​ F12=Cancel​                     ​                                                                                                                                                                  ​

The read-only Program and Library fields show the program and library to which these rules apply.

In the Location Group ID field, you can specify a numbered location group from 1 through 254, as shown in . Only members of that group may run that program.

In each line of the rest of the screen, you can indicate whether a specified user or group may run the program:

User*, %Group, Group profile

The name or generic name of a user or group for whom you are creating these settings. To see a list of possible users or groups, press the F4 key.

Location Group ID

If location groups are enabled, this rule may be restricted to a given numbered location group. To enable location groups, press the F11 key.

Run Program

If set to Y, the user or group may run the program.