IBM Support

IV65892: AUDITING FULLPATH FROM INSIDE A WPAR MAY FAIL TO SHOW FILENAME APPLIES TO AIX 7100-03

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Auditing with the "fullpath" option from inside a WPAR
    fails
    to show the filename with "FILE_Open", "FILE_Read" or
    "FILE_Write" if the audited process is not privileged.
    
    The filename is shown for root processes or processes
    with
    sufficient privileges.
    

Local fix

  • No local fix is possible.
    

Problem summary

  • Auditing with the "fullpath" option from inside a WPAR
    fails to show the filename with "FILE_Open", "FILE_Read"
    or "FILE_Write" if the audited process is not privileged
    

Problem conclusion

  • Check if the current process is in a WPAR and take care of that
    case.
    

Temporary fix

Comments

  • 7100-03 - use AIX APAR IV65892
    7100-03 - use AIX APAR IV65892
    

APAR Information

  • APAR number

    IV65892

  • Reported component name

    AIX V7.1

  • Reported component ID

    5765H4000

  • Reported release

    710

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Submitted date

    2014-10-15

  • Closed date

    2014-10-23

  • Last modified date

    2015-05-22

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IV66310

Fix information

  • Fixed component name

    AIX V7.1

  • Fixed component ID

    5765H4000

Applicable component levels

  • R710 PSY U865837

       UP15/05/19 I 1000

PTF to Fileset Mapping



Document information

More support for: AIX Enterprise Edition

Software version: 710

Operating system(s): AIX

Reference #: IV65892

Modified date: 22 May 2015