|
Problem IC63959
|
Status: Closed |
SECURITY: INCORRECT FILE PERMISSION AND AUTHORIZATION FOR HA SCR IPTSWHEN INSTALLED VIA V9.5. |
| product: |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 |
| Problem description: |
In V9.5 we have introduced the integrated high Availability (HA)
solution with TSA. This scripts is automatically installed
inside the /usr/sbin/rsct/sapolicies/db2 directory. However
the files when installed have incorrect file permissions and
authorization.
Here's the list of files installed...
$ ls -ltr /usr/sbin/rsct/sapolicies/db2
total 112
-r-xr-xr-x 1 18597 7777 1312 Aug 27 2007 lockreqprocessed
-r-xr-xr-x 1 18597 7777 3617 Aug 27 2007 hadrV95_stop.ksh
-r-xr-xr-x 1 18597 7777 3621 Aug 27 2007 hadrV95_start.ksh
-r-xr-xr-x 1 18597 7777 2926 Jan 21 2008
db2V95_monitor.ksh
-r-xr-xr-x 1 18597 7777 5377 Feb 14 2008 db2V95_start.ksh
-r-xr-xr-x 1 18597 7777 4615 Feb 22 2008
mountV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4535 Oct 3 2008 hadrV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4906 Jan 5 2009
mountV95_start.ksh
-rw-r--r-- 1 root root 199 Sep 11 12:35 spec |
| Problem Summary: |
Users Affected : All
Problem Description :
Security: Incorrect file permission and authorization for HA
scripts when installed via V9.5. Problem can also occur in V9.7.
Problem Summary :
In V9.5 we have introduced the integrated high Availability (HA)
solution with TSA. This scripts is automatically installed
inside the /usr/sbin/rsct/sapolicies/db2 directory. However
the files when installed have incorrect file permissions and
authorization.
Here's the list of files installed...
$ ls -ltr /usr/sbin/rsct/sapolicies/db2
total 112
-r-xr-xr-x 1 18597 7777 1312 Aug 27 2007 lockreqprocessed
-r-xr-xr-x 1 18597 7777 3617 Aug 27 2007 hadrV95_stop.ksh
-r-xr-xr-x 1 18597 7777 3621 Aug 27 2007 hadrV95_start.ksh
-r-xr-xr-x 1 18597 7777 2926 Jan 21 2008
db2V95_monitor.ksh
-r-xr-xr-x 1 18597 7777 5377 Feb 14 2008 db2V95_start.ksh
-r-xr-xr-x 1 18597 7777 4615 Feb 22 2008
mountV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4535 Oct 3 2008 hadrV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4906 Jan 5 2009
mountV95_start.ksh
-rw-r--r-- 1 root root 199 Sep 11 12:35 spec |
| Local Fix: |
Current fix is to manually change the file authorizations to
be root/root and file permission should be -r-xr-xr-x. |
| available fix packs: |
DB2 Version 9.7 Fix Pack 1 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 2 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 3 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 3a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 4 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 6 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 10 for Linux, UNIX, and Windows
|
| Solution |
Problem was first fixed in V9.7 FP1. |
| Workaround |
Current workaround is to manually change the file authorizations
to be root/root and file permission should be -r-xr-xr-x. |
| Timestamps |
Date - problem reported :
Date - problem closed :
Date - last modified :
| 22.10.2009
15.12.2009
15.12.2009 |
| Problem solved at the following versions (IBM BugInfos) |
9.7.FP1
|
| Problem solved according to the fixlist(s) of the following version(s) |
| 9.7.0.1
|
 |
