|
Problem IC63581
|
Status: Geschlossen |
SECURITY: INCORRECT FILE PERMISSION AND AUTHORIZATION FOR HA SCR IPTSWHEN INSTALLED VIA V9.5. |
| Produkt: |
DB2 FOR LUW / DB2FORLUW / 950 - DB2 |
| Problembeschreibung: |
In V9.5 we have introduced the integrated high Availability (HA)
solution with TSA. This scripts is automatically installed
inside the /usr/sbin/rsct/sapolicies/db2 directory. However
the files when installed have incorrect file permissions and
authorization.
Here's the list of files installed...
$ ls -ltr /usr/sbin/rsct/sapolicies/db2
total 112
-r-xr-xr-x 1 18597 7777 1312 Aug 27 2007 lockreqprocessed
-r-xr-xr-x 1 18597 7777 3617 Aug 27 2007 hadrV95_stop.ksh
-r-xr-xr-x 1 18597 7777 3621 Aug 27 2007 hadrV95_start.ksh
-r-xr-xr-x 1 18597 7777 2926 Jan 21 2008
db2V95_monitor.ksh
-r-xr-xr-x 1 18597 7777 5377 Feb 14 2008 db2V95_start.ksh
-r-xr-xr-x 1 18597 7777 4615 Feb 22 2008
mountV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4535 Oct 3 2008 hadrV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4906 Jan 5 2009
mountV95_start.ksh
-rw-r--r-- 1 root root 199 Sep 11 12:35 spec |
| Problem-Zusammenfassung: |
Users Affected : All
Problem Descriy :
Security : Incorrect file permission and authorization for
HA scripts when installed via 9.5.
Problem Summary :
In V9.5 we have introduced the integrated high Availability (HA)
solution with TSA. This scripts is automatically installed
inside the /usr/sbin/rsct/sapolicies/db2 directory. However
the files when installed have incorrect file permissions and
authorization.
Here's the list of files installed...
$ ls -ltr /usr/sbin/rsct/sapolicies/db2
total 112
-r-xr-xr-x 1 18597 7777 1312 Aug 27 2007 lockreqprocessed
-r-xr-xr-x 1 18597 7777 3617 Aug 27 2007 hadrV95_stop.ksh
-r-xr-xr-x 1 18597 7777 3621 Aug 27 2007 hadrV95_start.ksh
-r-xr-xr-x 1 18597 7777 2926 Jan 21 2008
db2V95_monitor.ksh
-r-xr-xr-x 1 18597 7777 5377 Feb 14 2008 db2V95_start.ksh
-r-xr-xr-x 1 18597 7777 4615 Feb 22 2008
mountV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4535 Oct 3 2008 hadrV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4906 Jan 5 2009
mountV95_start.ksh
-rw-r--r-- 1 root root 199 Sep 11 12:35 spec |
| Local-Fix: |
Current fix is to manually change the file authorizations to
be root/root and file permission should be -r-xr-xr-x. |
| verfügbare FixPacks: |
DB2 Version 9.5 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 6a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 10 for Linux, UNIX, and Windows
|
| Lösung |
Problem was first fixed in V9.5 FP5. |
| Workaround |
Current workaround is to manually change the file authorizations
to be root/root and file permission should be -r-xr-xr-x. |
| Bug-Verfolgung |
Vorgänger : APAR is sysrouted TO one or more of the following: IC63959 IC77539
Nachfolger : |
| Weitere Daten |
Datum - Problem gemeldet :
Datum - Problem geschlossen :
Datum - der letzten Änderung:
| 06.10.2009
15.12.2009
15.12.2009 |
| Problem behoben ab folgender Versionen (IBM BugInfos) |
9.5.FP5
|
| Problem behoben lt. FixList in der Version |
| 9.5.0.5
|
 |
