IT38740: In MQ Appliance 9.2, the copy command could cause the permissions on the backup directory to be altered.

APAR status

• Closed as program error.

Error description

• In MQ Appliance 9.2, when a file is copied from an external
  machine to the MQ Appliance backup directory using the copy
  command, the permissions on the directory are altered.
  
  As a consequence, some of the MQ Appliance certificate commands
  such as "keybackup" or "keyrestore" might fail.
  
  For example:
  mqa(mqcli)# keyrestore -m Qmgr -file Qmgr_newrepos.tar.gz
  -password "password"
  5724-H72 (C) Copyright IBM Corp. 1994, 2021.
  AMQ9845E: Unable to access file
  'mqbackup://Qmgr_newrepos.tar.gz'
  

Local fix

• Contact IBM Support for assistance to change the
  file permissions of the MQ Appliance backup directory.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  User copying files from remote machine to appliance using copy
  command.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  By default MQ files created as a result of copy command were
  owned by the internal root user and so MQ files uploaded in this
  way will not be readable or writable by the mqm user or group.
  

Problem conclusion

• The code has been updated to copy the files individually from
  the remote machine with file ownerships and permissions being
  set accordingly.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.2 LTS   9.2.0.5
  v9.x CD    9.2.4
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ APPL M2002 V

• Fixed component ID

  5737H4701

Applicable component levels