IBM Support

PM26977: NEW FUNCTION

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • New Function
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All DB2 10 for z/OS users using system       *
    *                 DBADM authority.                             *
    ****************************************************************
    * PROBLEM DESCRIPTION: Currently system DBADM has implicit     *
    *                      system privileges, which need to be     *
    *                      separated from system DBADM authority.  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Currently system DBADM has implicit system privilege STOPALL,
    and has implicit USE privilege on system resources BUFFERPOOL
    and STOGROUP.
    Also, system DBADM has implicit privilege to issue the system
    commands STOP DB2, START/STOP/MODIFY DDF, START/STOP RLIMIT,
    CANCEL THREAD/DDF THREAD and RESET GENERICLU.
    Implicit system privileges have to be separated from system
    DBADM authority.
    

Problem conclusion

Temporary fix

Comments

  • DB2 code has been changed such that system DBADM no longer has
    implicit system privilege STOPALL, and no longer has implicit
    USE privilege on system resources BUFFERPOOL and STOGROUP.
    Also, system DBADM no longer has implicit privilege to issue
    the following system commands:
    STOP DB2, START DDF, STOP DDF, MODIFY DDF, STOP RLIMIT,
    START RLIMIT, CANCEL THREAD, CANCEL DDF THREAD and
    RESET GENERICLU.
    System DBADM may now need to be explicitly granted privileges
    that were previously held implicitly.
    

APAR Information

  • APAR number

    PM26977

  • Reported component name

    DB2 OS/390 & Z/

  • Reported component ID

    5740XYR00

  • Reported release

    A10

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function

  • Submitted date

    2010-11-17

  • Closed date

    2011-02-24

  • Last modified date

    2011-04-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK65205

Modules/Macros

  • DSNXA2SM DSNXA2UM
    

Fix information

  • Fixed component name

    DB2 OS/390 & Z/

  • Fixed component ID

    5740XYR00

Applicable component levels

  • RA10 PSY UK65205

       UP11/03/15 P F103

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEPEK","label":"Db2 for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.1","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
04 April 2011