IBM Support

IJ21900: ALL TE_POLICY WERE SET TO OFF AFTER UPGRADED TO AIX7.2 TL3 SP3 APPLIES TO AIX 6100-09

 

APAR status

  • Closed as program error.

Error description

  • After the AIX level was upgraded to AIX 7.2 TL3 SP3,
    the /etc/security/tsd/tepolicies.dat file had been
    overwritten, and all TE_POLICY were set to OFF.
    

Local fix

  • Manually set back:
    # trustchk -p CHKEXEC=ON CHKSHLIB=ON CHKSCRIPT=ON \
    CHKKERNEXT=ON STOP_ON_CHKFAIL=ON
    # setkst
    

Problem summary

  • After updating a system's bos.rte.security fileset, the
    tepolicies.dat config file for Trusted Execution is reverted
    to the default state.
    

Problem conclusion

  • The bos.rte.security fileset now will not replace a system's
    tepolicies.dat file during updates.
    

Temporary fix

Comments

  • 6100-09 - use AIX APAR IJ21900
    7100-05 - use AIX APAR IJ21310
    7200-04 - use AIX APAR IJ21357
    

APAR Information

  • APAR number

    IJ21900

  • Reported component name

    AIX 6.1 EXT SUP

  • Reported component ID

    5765G6299

  • Reported release

    61E

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Submitted date

    2020-01-06

  • Closed date

    2020-01-06

  • Last modified date

    2020-11-16

  • APAR is sysrouted FROM one or more of the following:

    IJ18685

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    AIX 6.1 EXT SUP

  • Fixed component ID

    5765G6299

Applicable component levels

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSLLZP","label":"AIX Standard Edition"},"Platform":[{"code":"PF053","label":"Power Systems"}],"Version":"61E","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
17 November 2020