|
Problem IC63959
|
Status: Geschlossen |
SECURITY: INCORRECT FILE PERMISSION AND AUTHORIZATION FOR HA SCR IPTSWHEN INSTALLED VIA V9.5. |
| Produkt: |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 |
| Problembeschreibung: |
In V9.5 we have introduced the integrated high Availability (HA)
solution with TSA. This scripts is automatically installed
inside the /usr/sbin/rsct/sapolicies/db2 directory. However
the files when installed have incorrect file permissions and
authorization.
Here's the list of files installed...
$ ls -ltr /usr/sbin/rsct/sapolicies/db2
total 112
-r-xr-xr-x 1 18597 7777 1312 Aug 27 2007 lockreqprocessed
-r-xr-xr-x 1 18597 7777 3617 Aug 27 2007 hadrV95_stop.ksh
-r-xr-xr-x 1 18597 7777 3621 Aug 27 2007 hadrV95_start.ksh
-r-xr-xr-x 1 18597 7777 2926 Jan 21 2008
db2V95_monitor.ksh
-r-xr-xr-x 1 18597 7777 5377 Feb 14 2008 db2V95_start.ksh
-r-xr-xr-x 1 18597 7777 4615 Feb 22 2008
mountV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4535 Oct 3 2008 hadrV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4906 Jan 5 2009
mountV95_start.ksh
-rw-r--r-- 1 root root 199 Sep 11 12:35 spec |
| Problem-Zusammenfassung: |
Users Affected : All
Problem Description :
Security: Incorrect file permission and authorization for HA
scripts when installed via V9.5. Problem can also occur in V9.7.
Problem Summary :
In V9.5 we have introduced the integrated high Availability (HA)
solution with TSA. This scripts is automatically installed
inside the /usr/sbin/rsct/sapolicies/db2 directory. However
the files when installed have incorrect file permissions and
authorization.
Here's the list of files installed...
$ ls -ltr /usr/sbin/rsct/sapolicies/db2
total 112
-r-xr-xr-x 1 18597 7777 1312 Aug 27 2007 lockreqprocessed
-r-xr-xr-x 1 18597 7777 3617 Aug 27 2007 hadrV95_stop.ksh
-r-xr-xr-x 1 18597 7777 3621 Aug 27 2007 hadrV95_start.ksh
-r-xr-xr-x 1 18597 7777 2926 Jan 21 2008
db2V95_monitor.ksh
-r-xr-xr-x 1 18597 7777 5377 Feb 14 2008 db2V95_start.ksh
-r-xr-xr-x 1 18597 7777 4615 Feb 22 2008
mountV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4535 Oct 3 2008 hadrV95_monitor.ksh
-r-xr-xr-x 1 18597 7777 4906 Jan 5 2009
mountV95_start.ksh
-rw-r--r-- 1 root root 199 Sep 11 12:35 spec |
| Local-Fix: |
Current fix is to manually change the file authorizations to
be root/root and file permission should be -r-xr-xr-x. |
| verfügbare FixPacks: |
DB2 Version 9.7 Fix Pack 1 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 2 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 3 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 3a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 4 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 6 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 10 for Linux, UNIX, and Windows
|
| Lösung |
Problem was first fixed in V9.7 FP1. |
| Workaround |
Current workaround is to manually change the file authorizations
to be root/root and file permission should be -r-xr-xr-x. |
| Weitere Daten |
Datum - Problem gemeldet :
Datum - Problem geschlossen :
Datum - der letzten Änderung:
| 22.10.2009
15.12.2009
15.12.2009 |
| Problem behoben ab folgender Versionen (IBM BugInfos) |
9.7.FP1
|
| Problem behoben lt. FixList in der Version |
| 9.7.0.1
|
 |
