IBM Support

OA64782: ZSECURE ALERT ISSUES ALERT 1402 DURING STANDARD SSHD RECOVERY PROCESSING

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • zSecure Alert issues alert 1402 during standard SSHD recovery
    processing.
    
    When an SSH client disconnects instead of exiting normally,
    alert 1402 can be triggered as a result of the actions that SSHD
    takes to make the pseudo-terminal (TTY) available for re-use.
    

Local fix

  • Exit normally from SSHD.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Alert exploiting            *
    *                 predefined alert ID 1402 (Global write       *
    *                 specified when altering file mode).          *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Alert ID 1402 (Global write     *
    *                      specified when altering file mode)      *
    *                      is triggered when the connection to a   *
    *                      terminal device is not closed normally. *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When a user terminates a terminal session (without issuing an
    'exit' command), zSecure Alert triggers alert ID 1402 (Global
    write specified when altering file mode).
    

Problem conclusion

  • zSecure Alert ID 1402 has been modified to exclude
    UNIX character devices whose names begin with 'ttyp' as the
    chmod is the expected behavior of the ssh deamon when a
    connection is closed abnormally. As a result, predefined alert
    ID 1402 is not triggered.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA64782

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    250

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2023-05-02

  • Closed date

    2023-05-12

  • Last modified date

    2023-06-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ92799

Modules/Macros

  • C2PS1402
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ92799

       UP23/05/13 P F305

[{"Business Unit":{"code":"BU011","label":"Systems - zSystems software"},"Product":{"code":"SG19O","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF054","label":"z Systems"}],"Version":"250"}]

Document Information

Modified date:
02 June 2023