IBM Support

PH16434: BINDAGENT SHOULD BE ALLOWED TO FREE AND DROP PACKAGE FOR EXTERNAL SECURITY

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • For RACF Exit, BINDAGENT can not free package. It should be
    allowed to Free and Drop package to match the internal security
    behavior.
    Currently, BINDAGENT can Free plan already.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users of the RACF/Db2 Access Control                         *
    * Module (DSNXRXAC).                                           *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * BINDAGENT privilege is not supported                         *
    * by XAPLPRIV value 73 (DROPAUTK) in                           *
    * DSNXRXAC.                                                    *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply corrective PTF when available                          *
    ****************************************************************
    XAPLPRIV value 73 (DROPAUTK) allows users to issue FREE PACKAGE
    command or DROP PACKAGE SQL statement. DSNXRXAC does not
    support BINDAGENT privilege to be included in DROPAUTK for free
    package or drop package.
    

Problem conclusion

  • DSNXRXAC has been changed to support BINDAGENT privilege
    in XAPLPRIV value 73 (DROPAUTK) for FREE PACKAGE command
    or DROP PACKAGE SQL statement.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH16434

  • Reported component name

    DB2 OS/390 & Z/

  • Reported component ID

    5740XYR00

  • Reported release

    B10

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-09-06

  • Closed date

    2020-02-14

  • Last modified date

    2020-03-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI67927 UI67928

Modules/Macros

  • DSNXRXAC
    

Fix information

  • Fixed component name

    DB2 RACF EXIT Z

  • Fixed component ID

    5740DRE00

Applicable component levels

  • RB10 PSY UI67927

       UP20/02/22 P F002

  • RC10 PSY UI67928

       UP20/02/22 P F002

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"B10","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
27 March 2020