IT34717: STICKY BIT IS NOT SET ON WORLD-WRITABLE DIRECTORY

APAR status

• Closed as program error.

Error description

• IBM Spectrum Protect Plus has several directories that are
  failing security scans due to a sticky bit not being set. When
  these are found during scans, the sticky bit can be set on the
  directories. This normally shows up as the the following in a
  security scan:
  
   Sticky bit is not set on world-writable
  directory: <directory>
  
  
  IBM Spectrum Protect Plus Versions
  Affected:
   10.1.6
  
  Initial Impact:
   Low
  
  Additional Keywords:
  
   TS003864742 SPP ISPP
  

Local fix

• NA
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.6, 10.1.7 and 10.1.8    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * see ERROR Description.                                       *
  * Refer to the security bulletin at this link:                 *
  * https://www.ibm.com/support/pages/node/6466609               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply the fixing level when available. This problem is       *
  * currently projected to be fixed in IBM Spectrum Protect Plus *
  * level 10.1.8 patch1 and 10.1.9                               *
  * Note that this is subject to change at the discretion of     *
  * IBM.                                                         *
  ****************************************************************
  

Problem conclusion

• IBM Spectrum Protect Plus maintenance job has been updated to
  dynamically set the sticky bit for the directories as part of
  each individual run of the job.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels