IJ38919: THE 'NOEXEC' FLAG AND SCANNER-RELATED REQUIREMENT NOT SPECIFIED IN ILMT DOCUMENTATION

APAR status

• Closed as documentation error.

Error description

• In ILMT with BigFix scenario the "/var/opt/BESClient/LMT/CIT/"
  client directory is meant to contain ILMT-related content used
  for running scans and preparing their outputs. If the "noexec"
  flag is set on the "/var" filesystem, e.g. in result of a
  hardening policy, then user may observe errors while
  installing/updating the scanner module and running scans. ILMT
  documentation should inform users that the "/var" filesystem is
  not meant to be set to 'noexec' if deploying and running scanner
  is planned.
  
  TS008789329
  

Local fix

• No workaround.
  

Problem summary

• ****************************************************************
  *****************
  ERROR DESCRIPTION:
  
  In ILMT with BigFix scenario the "/var/opt/BESClient/LMT/CIT/"
  
  client directory is meant to contain ILMT-related content used
  
  for running scans and preparing their outputs. If the "noexec"
  
  flag is set on the "/var" filesystem, e.g. in result of a
  
  hardening policy, then user may observe errors while
  
  installing/updating the scanner module and running scans. ILMT
  
  documentation should inform users that the "/var" filesystem is
  
  not meant to be set to 'noexec' if deploying and running scanner
  
  is planned.
  
  
  
  TS008789329
  
  ****************************************************************
  *****************
  * EXPECTED RESULTS:
  * The documentation needs to be updated.
  ****************************************************************
  * RECOMMENDATION: Refer to updated product documentation for
  * the corrected statement when available.
  ****************************************************************
  

Problem conclusion

• * The fix for this APAR is contained in the product on-line
  * documentation (Knowledge Center).
  * The info was added under the following link:
  https://www.ibm.com/docs/en/license-metric-tool
  ****************************************************************
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels