PI52301: REDUCE READS TO /DEV/RANDOM CAUSING CSFSERV CSFRNG ACCESS

APAR status

• Closed as program error.

Error description

• The IBM HTTP Server V9.0 server does many reads during startup
  to /dev/random to build a Pseudo Random Number Generator (PRNG)
  to use.  The number of reads done can be reduced.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of IBM HTTP Server 9.0 on z/OS        *
  ****************************************************************
  * PROBLEM DESCRIPTION: IBM HTTP Server performs many reads of  *
  *                      CSFRNG during startup, causing a flood  *
  *                      of                                      *
  *                      audit messages.                         *
  ****************************************************************
  * RECOMMENDATION:  Apply this fix if using IBM HTTP Server 9.0 *
  *                  on                                          *
  *                  z/OS.                                       *
  ****************************************************************
  If access to CSFRNG is audited, the startup of IBM HTTP Server
  might generate thousands of records (for very small reads).
  

Problem conclusion

• The code was updated to perform large reads of /dev/random,
  drastically reducing the number of auditable events.
  
  This issue will be fixed in IBM HTTP Server 9.0.0.0-PI54808,
  tentatively scheduled for 1Q2016.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS IHS ZOS

• Fixed component ID

  5655I3510

Applicable component levels