IBM Support

IV48422: MKVG/EXTENDVG NOT WORKING FOR USER IN GROUP SYSTEM IF RBAC IS ON APPLIES TO AIX 6100-08

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In a system with enhanced RBAC turned on, a user in the
    system group is not able to run the mkvg or extendvg
    commands.  Users in system group should be able to
    run these commands even without explicitly having the
    relevant RBAC roles.
    -> id
    uid=12(bf40004) gid=0(system) groups=1(staff)
    -> extendvg vg00 hdisk2
    0516-1391 extendvg: To use this command, you
              must either have root user authority
              or be a member of the system group.
    

Local fix

Problem summary

  • mkvg or extendvg will fail with error as above for non-root
    users in system group if they do not have the appropriate
    RBAC roles.
    This is only an issue with enhanced RBAC on (this is default).
    

Problem conclusion

  • Modify privcmds info for mkvg and extendvg to properly allow
    anyone in system group to execute them in addition to anyone
    with RBAC roles.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV48422

  • Reported component name

    AIX 610 STD EDI

  • Reported component ID

    5765G6200

  • Reported release

    610

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Submitted date

    2013-09-12

  • Closed date

    2013-09-12

  • Last modified date

    2014-02-17

  • APAR is sysrouted FROM one or more of the following:

    IV44467

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    AIX 610 STD EDI

  • Fixed component ID

    5765G6200

Applicable component levels

  • R610 PSY U859957

       UP14/02/17 I 1000

PTF to Fileset Mapping

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSLLZP","label":"AIX Standard Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"610","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSMV87","label":"AIX 6.1 Enterprise Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"610","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}},{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSMVAX","label":"AIX Express Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"610","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSAUMY","label":"IBM AIX Enterprise Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"610","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG11Q","label":"AIX 6.1 HIPERS, APARs and Fixes"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"610","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG11R","label":"APARs - AIX 7.1 environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"610","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
17 February 2014