PH15234: IT IS NOT POSSIBLE TO OVERRIDE THE UMASK OF NON-DFE PROCESSES

APAR status

• Closed as requirement.

Error description

• It is not possible to explicitly override the umask of processes
  other than the DataflowEngine process. This means that it is not
  possible to prevent files generated by bipbroker or
  biphttplistener from having a "world readable" configuration.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus version 10 and App Connect
  Enterprise version 11
  
  
  Platforms affected:
  MultiPlatform, z/OS
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  <span style="background-color:rgb(255, 255, 255)">It is not
  possible to explicitly override the umask of processes
  </span><span style="background-color:rgb(255, 255, 255)">other
  than the DataflowEngine process. This means that it is not
  </span><span style="background-color:rgb(255, 255,
  255)">possible to prevent files generated by bipbroker
  </span><span style="background-color:rgb(255, 255, 255)">from
  having a "world readable" configuration.  </span>
  

Problem conclusion

• This APAR introduces the new environment variable
  MQSI_SET_BIPBROKER_UMASK when set this causes the bipbroker
  umask to be set to the value specified in the envionrment
  variable. Where this umask would not allow correct operation
  then permissions will be expanded. For example attempting to
  remove group or owner read / write using this environment
  variable will not be effective.
  
  This mirrors the behaviour of the pre-existing variable
  MQSI_SET_DEF_UMASK.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.19
  v11.0      11.0.0.9
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

• new environment variable MQSI_SET_BIPBROKER_UMASK
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels