IC97037: WORLD-WRITABLE PERMISSIONS ON CIT "ETC" AND "WSCANHW" DIRECTORIES

IBM Tivoli Storage Manager (TSM) client 7.1.0.x interim fix downloads
IBM Tivoli Storage Manager (TSM) Client 7.1.1 Downloads and READMEs

APAR status

• Closed as program error.

Error description

• On the /usr/tivoli/tsm/client/ba/bin64/cit/bin/etc and
  /usr/tivoli/tsm/client/ba/bin64/cit/bin/etc/wscanhw directories
  there are world-writable permissions 777 set by the Common
  Inventory Technology (CIT) component, which is packaged with
  Tivoli Storage Manager V6 products.
  
  Here is how it looks like:
  
  # pwd
  /usr/tivoli/tsm/client/ba/bin64/cit/bin
  # ls -lpd etc etc/wscanhw
  drwxrwxrwx    3 root     system          256 Aug 17 2011  etc/
  drwxrwxrwx    2 root     system          256 Jun 12 2012
  etc/wscanhw/
  
  TSM Versions Affected:
  Tivoli Storage Manager client V6 on AIX platform
  
  Initial Impact:
  Low
  
  Additional Keywords:
  TSM CIT etc wscanhw world-writable permission 777
  

Local fix

• 1. Remove etc directory:
  rm -R /usr/tivoli/tsm/client/ba/bin64/cit/bin/etc
  
  2. Create an empty file SingleUserMode in config directory:
  touch /usr/tivoli/tsm/client/ba/bin64/cit/config/SingleUserMode
  
  After this change the scans will create directories with
  permissions drwxr-xr-x (755)
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Unix users where the CIT component is    *
  *                 installed.                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION: See Error Description                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The problem was caused by the component that scans and provides
  system information. This component would create directories
  with world writable permissions.
  

Problem conclusion

• The etc and wscanhw directories are now created during the
  installation of the CIT component
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• DSMADMC  DSMJ
  

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels

• R71A PSY

     UP

• R71H PSY

     UP

• R71L PSY

     UP

• R71M PSY

     UP

• R71S PSY

     UP