IZ16114: CHANGE UNIX TABLESPACE CONTAINER PATH PERMISSIONS TO 711

DB2 Version 9.5 Fix Pack 3b for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 2a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 2  for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 4  for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 3a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 3 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 4a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 6a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 10 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• Symptom: EACCES errors in the db2diag.log when the Storage
  Manager snapshot is run.
  
  This problem impacts tablespace container permissions on UNIX or
  Linux platforms only.
  
  Prior to this APAR, UNIX permissions for subdirectories were 700
  so that the instance owner only had permissions and this avoided
  security concerns.
  
  However, UDFs such as the Storage Manager Snapshot fail with
  EACCES (permission denied) when accessing tablespace containers.
  This can happen if the fencedID user is not the DB2 instance
  owner since the UDFs run fenced under the db2fmp process which
  belongs to the fencedID.  As a result, this APAR will change
  tablespace container directories to be 711 so that the fencedID
  can traverse the directory. This includes subdirectories that
  DB2 creates as part of adding containers to a tablespace.
  

Local fix

• Manually fix permissions for tablespace containers to 711.
  

Problem summary

• USERS AFFECTED:ALL
  PROBLEM DESCRIPTION:SEE ERROR DESCRIPTION
  PROBLEM SUMMARY:SEE ERROR DESCRIPTION
  

Problem conclusion

• Problem was first fixed in Version 9.5 FixPak 2
  

Temporary fix

• Manually fix permissions for tablespace
                 containers to 711
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IY97297

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 UDB WSE SOL

• Fixed component ID

  5765F3502

Applicable component levels

• R910 PSN

     UP

• R950 PSN

     UP