A fix is available
APAR status
Closed as new function.
Error description
new function
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: Users of the RACF/DB2 Access Control * * Module (DSNXRXAC) using system DBADM * * authority on DB2 10 for z/OS. * **************************************************************** * PROBLEM DESCRIPTION: Currently system DBADM implicitly has * * system privileges, which need to be * * separated from system DBADM authority. * **************************************************************** * RECOMMENDATION: * **************************************************************** Currently system DBADM has implicit system privilege STOPALL, and has implicit USE privilege on system resources BUFFERPOOL and STOGROUP. Also, system DBADM has implicit privilege to issue the system commands STOP DB2, START/STOP/MODIFY DDF, START/STOP RLIMIT, CANCEL THREAD/DDF THREAD and RESET GENERICLU. Implicit system privileges have to be separated from system DBADM authority.
Problem conclusion
Temporary fix
Comments
DSNXRXAC has been changed such that system DBADM no longer has implicit system privilege STOPALL, and no longer has implicit USE privilege on system resources BUFFERPOOL and STOGROUP. Also, system DBADM no longer has implicit privilege to issue the system commands STOP DB2, START DDF, STOP DDF, MODIFY DDF, STOP RLIMIT, START RLIMIT, CANCEL THREAD, CANCEL DDF THREAD and RESET GENERICLU.
APAR Information
APAR number
PM28543
Reported component name
DB2 RACF EXIT Z
Reported component ID
5740DRE00
Reported release
A10
Status
CLOSED UR1
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / New Function / Xsystem
Submitted date
2010-12-08
Closed date
2011-02-25
Last modified date
2011-04-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UK65253
Modules/Macros
DSNXRXAC
SC19298201 |
Fix information
Fixed component name
DB2 RACF EXIT Z
Fixed component ID
5740DRE00
Applicable component levels
RA10 PSY UK65253
UP11/03/15 P F103
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEPEK","label":"Db2 for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A10"}]
Document Information
Modified date:
05 March 2021