PI76686: Z/OSMF PERMISSION SETTINGS FOR DIRECTORY ROOT/WORKFLOW/PLUGINS/ IS 777

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The directory ROOT/workflow/plugins has access permissions 777,
  which can throw security audit violations and is generally not
  secure enough for the z/OSMF filesystem.
  
  This directory is different depending on the version of z/OSMF
  you are running due to changes in the ROOT location:
  V2R1: /usr/lpp/zosmf/V2R1/workflow/plugins
  V2R2: /usr/lpp/zosmf/workflow/plugins
  

Local fix

• The permissions of the directory can be manually changed by
  using the chmod command.
  
  chmod 755 ROOT/workflow/plugins
  
  755 is the standard access for other directories in the root
  file system. Note in the above example ROOT should be replaced
  by the appropriate ROOT directory based on your version of
  z/OSMF.
  These permissions may change back to 777 upon application of
  z/OSMF maintenance until such a time that a fix is provided. In
  this case, you would need to manually change the permissions
  back to 755 after maintenance.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All V2R1 IBM z/OS Management Facility for HSMA21A: z/MF      *
  * Configuration Assistant workflow users                       *
  * All V2R2 IBM z/OS Management Facility for HSMA22A: z/MF      *
  * Configuration Assistant workflow users                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * After install z/OSMF and CA build, the root/workflow/plugins *
  * folder permission is 777, it's more permissive.              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The problem has been fixed
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI45038 UI45039 PI77357

Modules/Macros

• IZUCAHLP IZUCAPAX IZUCAWFT IZUCAWFU
  

Fix information

• Fixed component name

  Z/MF CONFIG ASS

• Fixed component ID

  5655S28CA

Applicable component levels

• R21A PSY UI45356

     UP17/03/13 P F703

• R22A PSY UI45357

     UP17/03/13 P F703

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.