IBM Support

PM28543: NEW FUNCTION

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • new function
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of the RACF/DB2 Access Control         *
    *                 Module (DSNXRXAC) using system DBADM         *
    *                 authority on DB2 10 for z/OS.                *
    ****************************************************************
    * PROBLEM DESCRIPTION: Currently system DBADM implicitly has   *
    *                      system privileges, which need to be     *
    *                      separated from system DBADM authority.  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Currently system DBADM has implicit system privilege STOPALL,
    and has implicit USE privilege on system resources BUFFERPOOL
    and STOGROUP.
    Also, system DBADM has implicit privilege to issue the system
    commands STOP DB2, START/STOP/MODIFY DDF,
    START/STOP RLIMIT, CANCEL THREAD/DDF THREAD and RESET GENERICLU.
    Implicit system privileges have to be separated from system
    DBADM authority.
    

Problem conclusion

Temporary fix

Comments

  • DSNXRXAC has been changed such that system DBADM no longer has
    implicit system privilege STOPALL, and no longer has implicit
    USE privilege on system resources BUFFERPOOL and STOGROUP.
    Also, system DBADM no longer has implicit privilege to issue
    the system commands
    STOP DB2, START DDF, STOP DDF, MODIFY DDF, STOP RLIMIT,
    START RLIMIT, CANCEL THREAD, CANCEL DDF THREAD and
    RESET GENERICLU.
    

APAR Information

  • APAR number

    PM28543

  • Reported component name

    DB2 RACF EXIT Z

  • Reported component ID

    5740DRE00

  • Reported release

    A10

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2010-12-08

  • Closed date

    2011-02-25

  • Last modified date

    2011-04-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK65253

Modules/Macros

  •    DSNXRXAC
    

Publications Referenced
SC19298201    

Fix information

  • Fixed component name

    DB2 RACF EXIT Z

  • Fixed component ID

    5740DRE00

Applicable component levels

  • RA10 PSY UK65253

       UP11/03/15 P F103

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEPEK","label":"Db2 for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A10"}]

Document Information

Modified date:
05 March 2021