LI78342: LINUX LOGIN AUTHENTICATED COMMAND EXECUTION OTHER FIELD UPDATED TO ALLOW ADDITIONAL COMMANDS

APAR status

• Closed as program error.

Error description

• Wave allows its administrators to select from three
  Authenticated Command Execution options: sudo, su, and other.
  Currently, the "other" option allows the administrator to enter
  text into a field and then runs the command with the following
  syntax: commandPrefix + "su -c " + cmd;
  
  Need to  change the function of "Other" option in
  Administrative --> Manage Parameters --> Security -->
  Authorized Command Execution to allow for any string to be
  entered instead of requiring "su -c"
  

Local fix

• This can be problem with linux security managers.  Workaround is
  to disable the security manager on the linux server and run the
  wave function.
  

Problem summary

• Customer could not use Linux security manager authorized
  commands (e.g. dzdo) when Wave executed Linux commands.
  

Problem conclusion

• With this fix, customer can now use Linux security manager
  authorized commands with Wave.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAVE FOR Z/VM

• Fixed component ID

  5648AE101

Applicable component levels

• R110 PSY

     UP