IBM Support

OA49804: SCANINS FIELD DOES NOT CORRECTLY REPORT FAKEOPER

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The ScanIns field does not correctly report FakeOper
    instructions that exist in scanned members.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit exploiting the        *
    *                 "Audit Libraries" reports (interactive       *
    *                 option AU.L)/newlist types EXIT, MEMBER, PC, *
    *                 SUBSYS, and SVC.                             *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Audit reports the FAKEOPER flag *
    *                      (Set operations authority) incorrectly. *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    The "Audit Libraries" reports (interactive option AU.L)
    generated by zSecure Audit incorrectly displays the FAKEOPER
    flag in the ScanIns field (actiually the auditor attribute flag
    is displayed instead). Same applies to the SCAN_INSTR field
    present in the newlist types EXIT, MEMBER, PC, SUBSYS, and SVC.
    

Problem conclusion

  • zSecure Audit for RACF has been modified so that the FAKEOPER
    flag is correctly reported. The zSecure Collect component has
    also been modified to generate the CKFREEZE data set with the
    correct information.
    211Y
    220Y
    CKFSCAN
    CKFSYS
    CKRCFS
    CKRCFV
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA49804

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    211

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-01-26

  • Closed date

    2016-02-17

  • Last modified date

    2016-03-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA80725 UA80726

Modules/Macros

  •    CKFSCAN  CKFSYS   CKRCFS   CKRCFV
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R211 PSY UA80725

       UP16/02/19 P F602

  • R220 PSY UA80726

       UP16/02/19 P F602

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSCE68R","label":"zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"211","Edition":""}]

Document Information

Modified date:
03 March 2016