IBM Support

IC97037: WORLD-WRITABLE PERMISSIONS ON CIT "ETC" AND "WSCANHW" DIRECTORIES

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • On the /usr/tivoli/tsm/client/ba/bin64/cit/bin/etc and
    /usr/tivoli/tsm/client/ba/bin64/cit/bin/etc/wscanhw directories
    there are world-writable permissions 777 set by the Common
    Inventory Technology (CIT) component, which is packaged with
    Tivoli Storage Manager V6 products.
    
    Here is how it looks like:
    
    # pwd
    /usr/tivoli/tsm/client/ba/bin64/cit/bin
    # ls -lpd etc etc/wscanhw
    drwxrwxrwx    3 root     system          256 Aug 17 2011  etc/
    drwxrwxrwx    2 root     system          256 Jun 12 2012
    etc/wscanhw/
    
    TSM Versions Affected:
    Tivoli Storage Manager client V6 on AIX platform
    
    Initial Impact:
    Low
    
    Additional Keywords:
    TSM CIT etc wscanhw world-writable permission 777
    

Local fix

  • 1. Remove etc directory:
    rm -R /usr/tivoli/tsm/client/ba/bin64/cit/bin/etc
    
    2. Create an empty file SingleUserMode in config directory:
    touch /usr/tivoli/tsm/client/ba/bin64/cit/config/SingleUserMode
    
    After this change the scans will create directories with
    permissions drwxr-xr-x (755)
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All Unix users where the CIT component is    *
    *                 installed.                                   *
    ****************************************************************
    * PROBLEM DESCRIPTION: See Error Description                   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The problem was caused by the component that scans and provides
    system information. This component would create directories
    with world writable permissions.
    

Problem conclusion

  • The etc and wscanhw directories are now created during the
    installation of the CIT component
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC97037

  • Reported component name

    TSM CLIENT

  • Reported component ID

    5698ISMCL

  • Reported release

    63A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-10-21

  • Closed date

    2014-02-28

  • Last modified date

    2014-02-28

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • DSMADMC  DSMJ
    

Fix information

  • Fixed component name

    TSM CLIENT

  • Fixed component ID

    5698ISMCL

Applicable component levels

  • R71A PSY

       UP

  • R71H PSY

       UP

  • R71L PSY

       UP

  • R71M PSY

       UP

  • R71S PSY

       UP



Document information

More support for: Tivoli Storage Manager

Software version: 63A

Reference #: IC97037

Modified date: 28 February 2014