Important Updates to Cybersecurity Software
HelpSystems is updating the names of our cybersecurity software, including the Powertech product line. Don’t worry—the functionality of your products won’t change.
See the new names here > New, Clearer Names for HelpSystems Security Software.
A Template is used when defining your User Profile, Library and Object Authority and Directory Authority Policies. Templates allow you to create a custom policy that specifically addresses the configurations that are important to your organization. Templates are customizable, for example, you can look at User Profile Attributes, such as the password expiration interval or maximum days not used and ignore the initial program and other profile attributes.
The *NOCHG template allows you to specify users whose attributes shouldn't change between compliance checks. For example, you may want to specify '*ALL' and if an attribute of any profile on the system has been changed from the last compliance check, it will be identified as being out of compliance. Note: When a user changes their password, the profile will not be flagged as being out of compliance.
The *DELETE template allows you to discover users that are inactive after a certain period of inactivity and then delete them by running the FixIt function on the *DELETE template. For more details on the using this template, see the Policy Minder for IBM i manual.
The *ALLOBJ template lists all of the programs and service programs that adopt authority and are owned by a profile with *ALLOBJ special authority.
To create a template for a specific file, you must first create a template for the library in which it resides.
Sequence numbers determine the order in which the templates are evaluated. This can be important if an object is included in more than one template and the template has conflicting values.
The object will be evaluated by the first template in which it's included and ignored by the rest. If you do not have objects that are in multiple object templates, you can ignore the sequence numbers.
Only the policy is imported. You will end up with an unchecked template, the first check will then set the baseline.
This is true for *LIBAUT, *DIRAUT and *USRPRF templates whose only attribute specified is the "Allow new" attribute.
Pressing F4 on the pathname will only show *DIR and *FLR objects. Many objects that you see when running WRKLNK are symbolic links.
To see the attribute of the object, take option 8=Display attributes when on the Work with Links display. Other object types that may be displayed in WRKLNk but are not displayed in Policy Minder's list include *DDIR, *DFLR, *SYMLNK, *STMF, *SOCKET, *CHRSF, and *BLKSF.
Still have questions? We can help. Submit a case to Technical Support.