IJ51457: FILE AUDIT LOGGING AUDIT LOG DATA CORRUPTION WHEN COMPRESSED

APAR status

• Closed as program error.

Error description

• f the File Audit Logging Audit Logs are compressed while GPFS is
  appending to them, the Audit Log can become corrupted and
  unrecoverable.This can happen when a compression policy is run
  against the audit log fileset / audit logs.
  

Local fix

Problem summary

• If the File Audit Logging Audit Logs are compressed while GPFS
  is appending to them, the Audit Log can become corrupted and
  unrecoverable.This can happen when a compression policy is run
  against the audit log fileset / audit logs.
  

Problem conclusion

• This problem is fixed in 5.1.9.5
  To see all Spectrum Scale APARs and their respective
  Fix solutions refer to page: 
  https://public.dhe.ibm.com/storage/spectrumscale/spectrum_scale
  _apars.htmlBenefits of the solution:Prevent Audit Log corruption
  Logs are compressed
  
  Work Around:
  None
  
  Problem trigger:
  The problem could be triggered if the Audit Logs are compressed
  by something other that File Audit Logging code.When File Audit
  Logging wraps logs, FAL compresses the Audit Logs after mmfsd is
  done appending to them. If a user or program attempts to
  compress logs that are currently being appended to,
  unrecoverable corruption can happen to that Audit Log.
  
  Symptom:
  Operation failure due to FS corruption
  
  Platforms affected:
  Linux Only
  
  Functional Area affected:
  File Audit Logging
  
  Customer Impact:
  Critical
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SPEC SCALE STD

• Fixed component ID

  5737F33AP

Applicable component levels