IT39270: When installing the IBM MQ Client on Windows the system wide error logs files are created with insufficient permissions

APAR status

• Closed as program error.

Error description

• When installing the IBM MQ client on Windows, the Permission for
  system-wide error logs for "Everyone" should be "Full Control",
  but with the IBM MQ 9.2 client the permission is "Read" only.
  
  Additionally, with an IBM MQ 9.2 server installation Windows, if
  the error logs are deleted and recreated with the amqicdir
  utility, it creates error logs with "Read" only for "Everyone".
  

Local fix

• For MQ Client, user should manually change the permissions of
  system-wide error logs to "Full Control" for "Everyone".
  
  For MQ Server, by default the error logs are created with "Full
  Control", but in case if error logs are deleted then restarting
  the qmgr will create error logs with "Full Control".
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All IBM MQ users who install IBM MQ client on windows.
  
  
  Platforms affected:
  Windows
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Coding error in MQ meant that the system error logs created by
  MQ client install are created with the wrong permissions for
  "EveryOne".
  

Problem conclusion

• MQ code has been modified to apply appropriate permissions for
  system error logs for "Everyone".
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.2 LTS   9.2.0.7
  v9.x CD    9.2.5
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ BASE V9.2

• Fixed component ID

  5724H7281

Applicable component levels