|
Problem IC86354
|
Status: Closed |
PACKAGEAUTH contains records WITH GRANTEE='SYSIBM' and GRANTEETYPE='S' |
| product: |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 |
| Problem description: |
When executing "SELECT * FROM SYSIBMADM.AUTHORIZATIONIDS", one
may see AUTHIDTYPE incorrectly set to 'S'
AUTHID AUTHIDTYPE
---------------------------------------------
SYSIBM S
An AUTHIDTYPE of 'S' represents a SYSTEM type grantee. The only
valid values for AUTHIDTYPE are U (user), R (Role), and G
(group).
This is because DB2 is incorrectly inserting records into
PACKAGEAUTH with grantee='SYSIBM' and granteetype='S'. SYSIBM is
a system user and it already has implicit privilege on package
operations, thus the extra records in PACKAGEAUTH are not
needed. This poses no risk or vulnerabilities with regards to
DB2 security. |
| Problem Summary: |
****************************************************************
* USERS AFFECTED: *
* All *
****************************************************************
* PROBLEM DESCRIPTION: *
* See Error Description *
****************************************************************
* RECOMMENDATION: *
* Upgrade to DB2 v9.7 FP8 *
**************************************************************** |
| Local Fix: |
|
| available fix packs: |
DB2 Version 9.7 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 10 for Linux, UNIX, and Windows
|
| Solution |
Fixed in DB2 v9.7 FP8 |
| Workaround |
not known / see Local fix |
| BUG-Tracking |
forerunner : APAR is sysrouted TO one or more of the following: IC91304
follow-up : |
| Timestamps |
Date - problem reported :
Date - problem closed :
Date - last modified :
| 05.09.2012
01.04.2013
01.04.2013 |
| Problem solved at the following versions (IBM BugInfos) |
9.7.FP8
|
| Problem solved according to the fixlist(s) of the following version(s) |
| 9.7.0.8
|
 |
