PRTSECOFR – Print *SECOFR
PRTSECOFR prints a simple audit report listing all programs that adopt elevated *SECOFR authority:

Creates a two reports
(1) IBM I standard audit report of programs adopting authority and
(2) Uses the @GENXREF Database to report of all programs that are adopting authority or look a bit dodgy.
The scheduled @GENXREF Database is buit daily by default. It creates a DSPOBJD *ALL, DSPPGMREF *ALL and FILE *MBR checks *ALL on *ALLUSR – it generally takes 10+ minutes to run.

This generates two separate spool files detailing lots of potential security flaws that need investigation


Several commands FNDSRC, WRKPGMUSG, WRKDTAUSG, PRTSECOFR etc all use this dbase.