IBM Support

PI78951: CICS TS 5.3 SOME USS FILES INSTALLED BY CICS HAVE THE UNIX UNIVERSAL WRITE BIT TURNED ON 17/09/01 PTF PECHANGE

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Recently installed CICS TS 5.3, and notice some  z/FS files
    have the universal write bit turned on- meaning anyone can
    write to them.
    
    There is a problem with the DFHZFSSH install script that
    created the directories, with the incorrect permissions.
    
    
    Additional Symptom(s) Search Keyword(s): KIXREVxxx
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All CICS users with UI43258, UI43263 or      *
    *                 UI43268 applied.                             *
    ****************************************************************
    * PROBLEM DESCRIPTION: Some /etc/wlp directories have          *
    *                      permissions determined by umask instead *
    *                      of 775.                                 *
    ****************************************************************
    PI67639 and PI67640 moved the CICS supplied Liberty server files
    to $USSHOME/etc/wlp.  However, DFHZFSSH which creates the
    directories only sets the permissions to 775 for the lowest
    level directories.  For example, if the system's umask is 000
    then the parent directories will have permissions 777 which
    gives all users write permission.
    

Problem conclusion

  • UI43258 UI43263 UI43268
    
    DFHZFSSH has been modified to explicitly set the permissions for
    all directories in $USSHOME/etc/wlp to 775.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI78951

  • Reported component name

    CICS TS Z/OS V5

  • Reported component ID

    5655Y0400

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    YesPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-03-28

  • Closed date

    2017-05-08

  • Last modified date

    2017-09-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • DFHAMSJ  DFHEIQSY DFHMNXM  DFHRLRO  DFHSJBD  DFHSJDM  DFHSJDS
    DFHSJDUF DFHSJIT  DFHSJJS  DFHSJJST DFHSJL   DFHSJRL  DFHSJSC
    DFHSJST  DFHSJTH  DFHSTP   DFHWLPAX DFHZFSSH DFJ@H350 DFJ@H360
    DFJ@H387
    

Fix information

  • Fixed component name

    CICS TS Z/OS V5

  • Fixed component ID

    5655Y0400

Applicable component levels

  • R00D PSY UI47045

       UP17/05/15 P F705 {

  • R80D PSY UI47039

       UP17/05/15 P F705 {

  • R90D PSY UI47042

       UP17/05/15 P F705 {

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Document information

More support for: CICS Transaction Server

Software version: 5.3

Reference #: PI78951

Modified date: 01 September 2017


Translate this page: