IBM Support

IZ81797: AIXPERT ROOTCRNJOBCK SHOULD FAIL IF CRONJOB DOESN'T EXISTS APPLIES TO AIX 5300-12

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • If root crontab has an entry for which the associated
    binary/script doesn't exists, aixpert -c will put a
    message
    in the log but the aixpert rule will not fail, so the
    administrator might not be aware of the security
    exposure.
    

Local fix

  • check the aixpert report or log file each time.
    

Problem summary

  • aixpert -c does not fail the rootcrnjobck check if a
    cronjob script/binary  does not exist.
    

Problem conclusion

  • Made rootcrnjobck script exit with 1 if any script/binary
    to be run by cron does not exist.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IZ81797

  • Reported component name

    AIX 5.3

  • Reported component ID

    5765G0300

  • Reported release

    530

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Submitted date

    2010-08-06

  • Closed date

    2010-08-06

  • Last modified date

    2013-03-28

  • APAR is sysrouted FROM one or more of the following:

    IZ76398

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    AIX 5.3

  • Fixed component ID

    5765G0300

Applicable component levels

  • R530 PSY U837573

       UP10/09/20 I 1000

PTF to Fileset Mapping

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG11P","label":"APARs - AIX 5.3 environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"530","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
28 March 2013