IBM Support

PH15234: IT IS NOT POSSIBLE TO OVERRIDE THE UMASK OF NON-DFE PROCESSES

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as requirement.

Error description

  • It is not possible to explicitly override the umask of processes
    other than the DataflowEngine process. This means that it is not
    possible to prevent files generated by bipbroker or
    biphttplistener from having a "world readable" configuration.
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All users of IBM Integration Bus version 10 and App Connect
    Enterprise version 11
    
    
    Platforms affected:
    MultiPlatform, z/OS
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    <span style="background-color:rgb(255, 255, 255)">It is not
    possible to explicitly override the umask of processes
    </span><span style="background-color:rgb(255, 255, 255)">other
    than the DataflowEngine process. This means that it is not
    </span><span style="background-color:rgb(255, 255,
    255)">possible to prevent files generated by bipbroker
    </span><span style="background-color:rgb(255, 255, 255)">from
    having a "world readable" configuration.  </span>
    

Problem conclusion

  • This APAR introduces the new environment variable
    MQSI_SET_BIPBROKER_UMASK when set this causes the bipbroker
    umask to be set to the value specified in the envionrment
    variable. Where this umask would not allow correct operation
    then permissions will be expanded. For example attempting to
    remove group or owner read / write using this environment
    variable will not be effective.
    
    This mirrors the behaviour of the pre-existing variable
    MQSI_SET_DEF_UMASK.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v10.0      10.0.0.19
    v11.0      11.0.0.9
    
    The latest available maintenance can be obtained from:
    http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
    
    If the maintenance level is not yet available,information on
    its planned availability can be found on:
    http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
    ---------------------------------------------------------------
    

Temporary fix

Comments

  • new environment variable MQSI_SET_BIPBROKER_UMASK
    

APAR Information

  • APAR number

    PH15234

  • Reported component name

    IIB Z/OS

  • Reported component ID

    5655AB100

  • Reported release

    A00

  • Status

    CLOSED REQ

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-08-02

  • Closed date

    2020-04-20

  • Last modified date

    2020-05-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSNQH8","label":"IBM Integration Bus for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
21 May 2020