Important Updates to Cybersecurity Software

HelpSystems is updating the names of our cybersecurity software, including the Powertech product line. Don’t worry—the functionality of your products won’t change.

See the new names here > New, Simpler Names for HelpSystems Security Software.

--------------------

A Template is used when defining your User Profile, Library and Object Authority and Directory Authority Policies. Templates allow you to create a custom policy that specifically addresses the configurations that are important to your organization. Templates are customizable, for example, you can look at User Profile Attributes, such as the password expiration interval or maximum days not used and ignore the initial program and other profile attributes.

*NOCHG Template Under the *USRPRF Category

The *NOCHG template allows you to specify users whose attributes shouldn't change between compliance checks. For example, you may want to specify '*ALL' and if an attribute of any profile on the system has been changed from the last compliance check, it will be identified as being out of compliance. Note: When a user changes their password, the profile will not be flagged as being out of compliance.

*DELETE Template Under the *USRPRF Category

The *DELETE template allows you to discover users that are inactive after a certain period of inactivity and then delete them by running the FixIt function on the *DELETE template. For more details on the using this template, see the Policy Manager for IBM i manual.

*ALLOBJ Template Under the *ADOPT Category

The *ALLOBJ template lists all of the programs and service programs that adopt authority and are owned by a profile with *ALLOBJ special authority.

Creating a Template for a Specific File

To create a template for a specific file, you must first create a template for the library in which it resides.

  1. Take option 1 from the Main menu, then choose option 5 next to the Library authority category.
  2. Press F6=Create to create a library template. If you do not care about any of the library's attributes, just name the library and leave the rest of the settings as the default values.
  3. When the Object template screen is displayed, press F6=Create to create the template. It is here that you specify the specific file and the attributes you want to monitor.

Sequence Numbers for on the Object Templates

Sequence numbers determine the order in which the templates are evaluated. This can be important if an object is included in more than one template and the template has conflicting values.

The object will be evaluated by the first template in which it's included and ignored by the rest. If you do not have objects that are in multiple object templates, you can ignore the sequence numbers.

Importing *LIBAUT Templates (Allow New Library *NO)

Only the policy is imported. You will end up with an unchecked template, the first check will then set the baseline.

This is true for *LIBAUT, *DIRAUT and *USRPRF templates whose only attribute specified is the "Allow new" attribute.

Not Seeing all of the Directories When Pressing F4 that are Seen When Running WRKLNK in *DIRAUT Templates

Pressing F4 on the pathname will only show *DIR and *FLR objects. Many objects that you see when running WRKLNK are symbolic links.

To see the attribute of the object, take option 8=Display attributes when on the Work with Links display. Other object types that may be displayed in WRKLNk but are not displayed in Policy Manager's list include *DDIR, *DFLR, *SYMLNK, *STMF, *SOCKET, *CHRSF, and *BLKSF.


Still have questions? We can help. Submit a case to Technical Support.

Last Modified On: April 03, 2019