IBM Support

PH10302: ENHANCEMENT TO ECHO XML OF AUDIT POLICY TO DATA SET AND/OR AGENT AUILOG WHEN INSTALLED BY GUARDIUM APPLIANCE INTO AGEN

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • This enhancement enables the Agent Task to echo to the AUILOG
    and to a data set the XML of an Audit Policy, as installed by
    the Guardium Appliance. Two new configuration keywords are
    added to activate and
    control the process; XML_ECHO_LOG, and XML_ECHO_DATASET. These
    are defined as follows:
    XML_ECHO_DATASET(&Data_Set_Name[,&Cylinders])
    This parameter indicates that when an Appliance installs an
    Audit Policy in an Agent, its corresponding XML is to be echoed
    to a data set given by &Data_Set_Name. If
    &Data_Set_Name is intended to be as a Generation Data
    Group, then it must be set as the GDG base name. The Agent
    looks in the system catalog to determine whether
    &Data_Set_Name exists, and whether it is a GDG base name,
    or not.  &Data_Set_Name can contain z/OS system symbols
    such as &&SYSNAME. To determine the names of the system
    symbols currently defined to the system, issue the DISPLAY
    SYMBOLS command to the system console. To determine all
    possible system symbols that might be defined on a system, see
    the z/OS MVS Programming: Assembler Services Reference
    description of the ASASYMB service.
    If the &Data_Set_Name does not exist, and there is no GDG
    base defined this name, the Agent allocates the data set as a
    non-GDG using DISP=NEW, DCB=(DSORG=VB,LRECL=32756) and
    SPACE(CYL, (&Cylinders, &Cylinders)). If
    &Data_Set_Name is a regular physical sequential data set
    (non-GDG based) and does exist, the Agent deletes the data set
    and reallocates it as if it were new. This is done so that any
    change to the &Cylinders keyword can be accommodated when
    the Agent is restarted. &Cylinders defaults to 1 and can
    range from 1-10. If &Data_Set_Name is found to be a GDG
    base name, then the next generation is allocated; for example,
    ‘&Data_Set_Name.G0006V00’. The allocation is
    done using DISP=NEW and DSN=&Data_Set_Name(+1) and, if it
    is the first generation, the same DCB and SPACE parameters
    shown above are used.
    XML_ECHO_AUILOG(Y|N)
    Indicates whether the Policy XML is to be echoed to the AUILOG
    DD. The default is N.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All Users.                                   *
    ****************************************************************
    * PROBLEM DESCRIPTION: This enhancement enables the Agent Task *
    *                      to echo to the AUILOG and to a data set *
    *                      the XML of an Audit Policy, as          *
    *                      installed by the Guardium Appliance.    *
    *                      Two new configuration keywords are      *
    *                      added to activate and control the       *
    *                      process; XML_ECHO_LOG, and              *
    *                      XML_ECHO_DATASET. The latter indicates  *
    *                      that when an Appliance installs an      *
    *                      Audit Policy in an Agent, its           *
    *                      corresponding XML is to be echoed to a  *
    *                      data set given by &Data_Set_Name.       *
    *                      XML_ECHO_AUILOG(Y|N) indicates whether  *
    *                      the Policy XML is to be echoed to the   *
    *                      AUILOG DD. The default is N.            *
    ****************************************************************
    .
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PH10302

  • Reported component name

    SEC GUAR STAP I

  • Reported component ID

    5655STM00

  • Reported release

    A13

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-03-27

  • Closed date

    2019-05-08

  • Last modified date

    2019-06-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI62892

Modules/Macros

  • AUIAAACM AUIAAAME AUIAATUP AUIAAUGT AUIAAUTP AUIACBIM AUIACLIM
    AUIACLMI AUIACSMF AUIACSUI AUIADBRD AUIADDLI AUIADDXG AUIADORD
    AUIADT@  AUIAGAIF AUIAGCCH AUIAGCCM AUIAGDCC AUIAGDSC AUIAGPHN
    AUIAGQHN AUIAGUDC AUIALISS AUIAMMST AUIAMO@  AUIAPLMT AUIAPTLG
    AUIAQINS AUIASM@  AUIAXMLE AUICPY4E AUICPY4F AUIFAGTF AUIFASMM
    AUIFDT@  AUIFHRDR AUIFSMF  AUILAIMM AUILDT@  AUILIMS  AUILIMSL
    AUILMAIM AUILMDT@ AUILMLOG AUILMMLG AUILMTRD AUILOG0X AUILRRDR
    AUIPCTFT AUIPDT@  AUIPGMMG AUIPGMPC AUIPGRDM AUIPLGHL AUIPPRIT
    AUIPPRMS AUIPQITM AUIPQLST AUIRAGNT AUIRDT@  AUIRFXFL AUIRIMS
    AUIRLTRF AUIRMXFL AUIRPSBF AUIRRCF  AUIRRCLR AUIRRCP  AUIRRCPA
    AUIRRCPR AUIRRCPS AUIRRCR  AUIRRCST AUIRRCT  AUIRREP  AUIRREPO
    AUIRSMF  AUIRUIDF AUIRVER  AUITAAS  AUITACK  AUITAGT  AUITCFG
    AUITDT@  AUITECMD AUITEVAC AUITEVCR AUITEVNA AUITEVRP AUITEVRQ
    AUITEVRS AUITEVSE AUITEVSH AUITEVTE AUITEVTH AUITLOC  AUITLOCG
    AUITLOCS AUITLOGN AUITMACH AUITNACK AUITOPTS AUITPERR AUITPMAP
    AUITPROT AUITRCRD AUITREQ  AUITRESP AUITRPT  AUITRPTO AUITRSRC
    AUITSESS AUITTCMD AUITTHRD AUITTOP  AUITTREQ AUITTSEL AUITXCFG
    AUIUACSA AUIUACSM AUIUACUT AUIUCSUT AUIUDT@  AUIURAMG AUIURAMP
    AUIURDT@ AUIURMIG AUIXAAPP AUIXADT@ AUIXAPMP AUIXCCMN AUIXCDBG
    AUIXCDT@ AUIXCMO@ AUIXCSM@ AUIXLDT@ AUIXLLOG AUIXLWLH AUIXMDSC
    AUIXMDT@ AUIXMMEM AUIXMSGS AUIXMSHM AUIXNDT@ AUIXNNET AUIXNSCF
    AUIXPDT@ AUIXPPSX AUIXSDT@ AUIXSSTR AUIXTDT@ AUIXTMTH AUIXTRNB
    AUIXTTMR AUIXUDT@ AUIXUUTL AUIXXDT@ AUIXXXML AUIXYDD  AUIXYDSV
    AUIXYDT@ AUIXYJOB AUIXYMVU AUIXYPCF AUIXYSBM AUIXYSCS AUIXZA01
    AUIXZA02 AUIXZA03 AUIXZA04 AUIXZA05 AUIXZA06 AUIXZA07 AUIXZA08
    AUIXZA09 AUIXZA0A AUIXZA0B AUIXZA0C AUIXZA0D AUIXZA0E AUIXZA0F
    AUIXZA10 AUIXZA11 AUIXZA12 AUIXZA13 AUIXZA14 AUIXZA15 AUIXZA16
    AUIXZA17 AUIXZA18 AUIXZA19 AUIXZA1A AUIXZA1C AUIXZA1D AUIXZA1E
    AUIXZA1F AUIXZA20 AUIXZA21 AUIXZA22 AUIXZA23 AUIXZA24 AUIXZDT@
    AUIXZMVT AUIYCSI  AUIYDT@  AUIZAAGT AUIZAART AUIZACFB AUIZACFG
    AUIZACPB AUIZACPR AUIZACXB AUIZAEPI AUIZAEST AUIZAPIR AUIZASPB
    AUIZCFGF AUIZCMN  AUIZCSPB AUIZDMAN AUIZDSN  AUIZDT@  AUIZFFLL
    AUIZIMSV AUIZMO@  AUIZMSGS AUIZNETL AUIZPAS  AUIZPCFG AUIZPLIN
    AUIZSLSV AUIZSM@  AUIZSMAN AUIZSPDS AUIZSPRX AUIZSSPC AUIZTCFG
    

Fix information

  • Fixed component name

    SEC GUAR STAP I

  • Fixed component ID

    5655STM00

Applicable component levels

  • RA13 PSY UI62892

       UP19/05/15 P F905

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCJM6A","label":"IBM Security Guardium S-TAP for IMS on z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A13","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A13","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
03 June 2019