IT33149: IBM SPECTRUM PROTECT PLUS AGENT FILES ASSIGNED TO "EVERYONE" WITH "FULL CONTROL" PERMISSION.

APAR status

• Closed as program error.

Error description

• The ACL entry of "everyone" with "full control" of IBM Spectrum
  Protect Plus agent files cannot pass the security scan.
  The full control permission is supposed to be limited to the
  registered IBM Spectrum Protect Plus user.
  The Files are located in the following location: C:\Program
  Files\IBM\IBM Spectrum Protect Plus\bin
  
  IBM Spectrum Protect Plus Versions Affected: IBM Spectrum
  Protect Plus 10.1.4 10.1.5 10.1.6
  
  Initial Impact: Medium
  
  Additional Keywords: SPP, SPPlus, TS003649974
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.5 and 10.1.6            *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  * For more information, refer to the security bulletin         *
  * published at                                                 *
  * https://www.ibm.com/support/pages/node/6255116               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in 10.1.6 ifix2 and 10.1.7. Note that  *
  * this is subject to change at the discretion of IBM           *
  ****************************************************************
  

Problem conclusion

• File permissions those are not required are removed while
  installing the files.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels