LAWSON SECURITY - APPS REPORTING

 5 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
doreenraia
New Member
Posts: 3
New Member

    I work for a small shop on a Lawson 8.1 apps, 8.1 environment, Unix - AIX,  DB2 applications. We are going thru a SOX audit and the auditors have found several 'issues' with our Lawson procedures. Since my boss and I are the only Lawson Sys. Admins - and there is no program promotion software in place, the current procedures we follow are documenting changes, documenting user testing, submitting change control docs to committee which meets weekly and then I (the developer) move the module into production after hours and compile.  

    For various reasons -  I need to find a process to audit the source code and alert when there are changes to production source code on a daily basis.  I thought about just running a compare of the .gnt compile output for dates - BUT - someone could theoretically make a change to an application module or working storage module and when patches are applied weeks down the line - that change would be compiled into production source code without any alerts that it happened. So - Anyone have a process that runs against all source code and alerts on a date update?  Any suggestions as to how this could be done?  All help is appreciated! 

    Ben Coonfield
    Veteran Member
    Posts: 146
    Veteran Member
      If you run an incremental backup on the directories that contain the source code, your backup tool should list the files that were changed and therefore were included in the backup. That way you not only have the list of changed files, but the backup captures the before and after versions of each changed file.
      doreenraia
      New Member
      Posts: 3
      New Member
        Thanks
        jole7665
        New Member
        Posts: 1
        New Member

          Try typing this at the command line:

          find $LAWDIR/prod/??src -mtime -1

          Replace "prod" with the directory for your actual product line.  This will display a list of files with a modification time within 1 day in any of the ??src folders, e.g. acsrc, txsrc, etc.

          doreenraia
          New Member
          Posts: 3
          New Member
            Thank you - this works much better for me! It is exactly what I needed....
            John Henley
            Posts: 3353
              You could create a script that you run via cron to run that find command every day and email you if any results, etc.

              However, that only protects you after the fact. One other topic you should check out is the Lawson 'permsmaint' utility, which--by setting the chown/chmod masks on the files and directories--can prevent source code changes by any user other than 'lawson' or root. Then it just becomes a matter dealing with who knows the lawson password, who has root access, etc. And you can smile and tell the auditors that you "followed the vendors' recommended security practice".
              Thanks for using the LawsonGuru.com forums!
              John