IBM Support

The /tmp/javasharedresources Java cache directory has 777 permissions

Troubleshooting


Problem

On the MDM or DWC, the /tmp/javasharedresources directory has 777 permissions, which is a potential security exposure.

Environment

Workload Scheduler 9.4 or earlier

Diagnosing The Problem

When you run the ls -al /tmp/javasharedresources command, you see the following directory permissions:
drwxrwxrwx   2 root root 

Resolving The Problem

Use the following steps to set the generic JVM arguments in the Administration Console for WAS for TWSProfile (MDM) and JazzSM (DWC):

Sample WebSphere Admin Console URLs using default ports:

   MDM: https://<hostname>:31124/ibm/console

   DWC: https://<hostname>:16316/ibm/console

In the WebSphere Admin Console:
  • Expand Servers > Server Type and click WebSphere application servers.
  • Click the name of your server (server1)
  • Expand Java and Process Management and select Process Definition.
  • Under Additional Properties, click Java Virtual Machine.
  • Scroll down and locate the text box for Generic JVM arguments.
  • Add to the existing arguments: -Xshareclasses:none
  • Stop the WebSphere server(s) and remove the directory /tmp/javasharedresources.
  • Start the WebSphere server(s). 

The directory /tmp/javasharedresources will not be created automatically.

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSGSPN","label":"IBM Workload Scheduler"},"Component":"MDM;DWC","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"9.4 or earlier","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Product Synonym

WAS; TWS; IWS

Document Information

Modified date:
30 October 2019

UID

ibm11101417

Page Feedback