PH49699: SETTING _DFH_UMASK IN JVMPROFILE HAS NO EFFECT ON FILES

Obtain the fix for this APAR.

APAR status

• Closed as unreproducible in next release.

Error description

• When setting the _DFH_UMASK parameter in the JVM profile, it
  does not seem to set the umask properly and affect the
  permission bits for the output files created by the JVM server.
  The customer found the wlpenv file was created with permission
  660 and would like to grant 'Other' with read and write
  permission.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: wlpenv is created with default          *
  *                      permissions of 660 even when the        *
  *                      Liberty server is being started with    *
  *                      a _DFH_UMASK.                           *
  ****************************************************************
  When a CICS Liberty server is started a number of files are
  created, one being wlpenv. This file is being created with the
  default permissions of 660. The CICS Liberty server has a
  jvmprofile which includes a _DFH_UMASK but this is not being
  honoured.
  

Problem conclusion

Temporary fix

Comments

• CICS code has been changed to honour the setting of _DFH_UMASK.
  
  The documentation has been changed with:
  "For security, it is best practice to allocate z/OS user IDs to
  groups.
  Permissions can be applied at a group level, rather than on an
  individual basis."
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI83404

Modules/Macros

• DFHSJFS  DFHSJSC  DFJ@H356 DFJ@H467 DFJ@H468
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R300 PSY UI83404

     UP22/11/23 P F211

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.