IZ64356: WMQ LICENSES FILES ARE INSTALLED WITH INCORRECT PERMISSIONS.

WebSphere MQ V6, Fix Pack 6.0.2.9
WebSphere MQ V6.0 for iSeries Fix Pack 6.0.2.9

APAR status

• Closed as program error.

Error description

• When installing WebSphere MQ version 6.0, the files under the
  directory  /opt/mqm/licenses have permissions set to 777
  -rwxrwrxrwx. The permissions should really be 444 -r--r--r--.
  ADDITIONAL KEYWORDS: world-writable read write execute
  license installation install directories security audit
  Chinese.txt
  Chinese_TW.txt
  Czech.txt
  English.txt
  French.txt
  German.txt
  Italian.txt
  Japanese.txt
  Korean.txt
  Polish.txt
  Portuguese.txt
  Spanish.txt
  status.dat
  Turkish.txt
  zlib_license.txt
  

Local fix

• Manually modify permissions on the files in /opt/mqm/licenses
  to have permissions of 444 -r--r--r--.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users installing WebSphere MQ version 6.0 on a UNIX platform who
  have strict internal policies on the presence of world-writable
  files.
  
  Platforms affected:
  All Unix
  
  ****************************************************************
  PROBLEM SUMMARY:
  As part of the install process, the installation scripts
  specifically set the permission of the files in
  /opt/mqm/licenses to 777 and therefore makes those files
  world-writeable.
  

Problem conclusion

• The installation scripts have been modified so that a more
  restrictive set of permissions (444) is used for the files in
  /opt/mqm/licenses.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
                     v6.0
  Platform           Fix Pack 6.0.2.9
  --------           --------------------
  AIX                U828012
  HP-UX (PA-RISC)    U827381
  HP-UX (Itanium)    U827383
  Solaris (SPARC)    U827693
  Solaris (x86-64)   U828055
  Linux (x86)        U827380
  Linux (x86-64)     U827694
  Linux (zSeries)    U827590
  Linux (Power)      U827382
  Linux (s390x)      U827695
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available, information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WMQ LIN X86 V6

• Fixed component ID

  5724H7204

Applicable component levels

• R600 PSY

     UP