A fix is available
APAR status
Closed as program error.
Error description
Recently installed CICS TS 5.3, and notice some z/FS files have the universal write bit turned on- meaning anyone can write to them. There is a problem with the DFHZFSSH install script that created the directories, with the incorrect permissions. Additional Symptom(s) Search Keyword(s): KIXREVxxx
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users with UI43258, UI43263 or * * UI43268 applied. * **************************************************************** * PROBLEM DESCRIPTION: Some /etc/wlp directories have * * permissions determined by umask instead * * of 775. * **************************************************************** PI67639 and PI67640 moved the CICS supplied Liberty server files to $USSHOME/etc/wlp. However, DFHZFSSH which creates the directories only sets the permissions to 775 for the lowest level directories. For example, if the system's umask is 000 then the parent directories will have permissions 777 which gives all users write permission.
Problem conclusion
UI43258 UI43263 UI43268 DFHZFSSH has been modified to explicitly set the permissions for all directories in $USSHOME/etc/wlp to 775.
Temporary fix
Comments
APAR Information
APAR number
PI78951
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
000
Status
CLOSED PER
PE
YesPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2017-03-28
Closed date
2017-05-08
Last modified date
2017-09-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
DFHAMSJ DFHEIQSY DFHMNXM DFHRLRO DFHSJBD DFHSJDM DFHSJDS DFHSJDUF DFHSJIT DFHSJJS DFHSJJST DFHSJL DFHSJRL DFHSJSC DFHSJST DFHSJTH DFHSTP DFHWLPAX DFHZFSSH DFJ@H350 DFJ@H360 DFJ@H387
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
R00D PSY UI47045
UP17/05/15 P F705 {
R80D PSY UI47039
UP17/05/15 P F705 {
R90D PSY UI47042
UP17/05/15 P F705 {
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
01 September 2017