IC75624: DSMSERV CREATES DIRECTORIES WITHIN ARCHIVE LOG BASE DIRECTORY WITH UNSECURE PERMISSIONS OF 777

APAR status

• Closed as program error.

Error description

• After Tivoli Storage Manager server has been installed,
  configured and started, dsmserv executable creates directories
  within base archive log destination directory with unsecure
  permissions of 777.
  
  Directories within base archive log destination directory will
  have following permissions, after dsmserv has been started:
  
  # ls -l archlog/
  total 12
  drwxrwxrwx 3 tsminst1 tsmsrvrs 4096 Oct 13 11:17 archmeth1
  drwxrwxrwx 3 tsminst1 tsmsrvrs 4096 Oct 13 11:17 failarch
  drwxrwxrwx 3 tsminst1 tsmsrvrs 4096 Oct 13 11:17 RstDbLog
  
  TSM Versions Affected:
  Tivoli Storage Manager server 6.x on UNIX platforms
  
  Initial Impact:
  Low
  
  Additional Keywords:
  zz61 zz62 archivelog directory permissions unsecure
  

Local fix

• Manually change permissions to 750 for all subdirectories
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Tivoli Storage Manager server users.     *
  ****************************************************************
  * PROBLEM DESCRIPTION: The directories named "RstDbLog",       *
  *                      "archmeth1", and "failarch" are         *
  *                      created by the Tivoli Storage Manager   *
  *                      server with universal permissions,      *
  *                      777, or drwxrwxrwx. These are archive   *
  *                      log directories used by the Tivoli      *
  *                      Storage Manager server. These           *
  *                      directories are created in the          *
  *                      directory specified on the DSMSERV      *
  *                      FORMAT command using the options        *
  *                      ARCHLogdir, ARCHFailoverlogdir, and     *
  *                      MIRRorlogdir. The configuration         *
  *                      wizard and upgrade wizard that can be   *
  *                      used to create the Tivoli Storage       *
  *                      Manager server instance can also        *
  *                      perform the DSMSERV FORMAT function.    *
  *                      These directories can be changed to     *
  *                      750 for the permissions drwxr-x---      *
  *                      and it is suggested that all users      *
  *                      of the Tivoli Storage Manager server    *
  *                      running a version 6 server make this    *
  *                      change to the directory permissions.    *
  *                      Anytime the DSMSERV FORMAT command is   *
  *                      executed, the directory permissions     *
  *                      must be changed again unless the        *
  *                      directories already existed when        *
  *                      the command was executed.               *
  ****************************************************************
  * RECOMMENDATION: Apply fixing level when available. This      *
  *                 problem is currently projected to be fixed   *
  *                 in level and 6.2.3.  Note that       *
  *                 this is subject to change at the             *
  *                 discretion of IBM.                           *
  ****************************************************************
  *
  

Problem conclusion

• This problem has been corrected.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM SERVER

• Fixed component ID

  5698ISMSV

Applicable component levels

• R61A PSY

     UP

• R61H PSY

     UP

• R61L PSY

     UP

• R61S PSY

     UP

• R61W PSY

     UP

• R62A PSY

     UP

• R62H PSY

     UP

• R62L PSY

     UP

• R62S PSY

     UP

• R62W PSY

     UP