IBM Support

OA60941: AUDIT CONCERN "MEMORY REGION WRITABLE BY ANY USER" INCORRECTLY REPORTED FOR XSHR

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Audit concern "Memory region writable by any user"
    incorrectly reported for XSHR.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit exploiting the        *
    *                 'Globally Writable Common Storage' report    *
    *                 (interactive option AU.S -> MVS Tables' or   *
    *                 newlist type CSM).                           *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Audit reports an audit concern  *
    *                      that memory region is writable by any   *
    *                      user for shared memory objects.         *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    zSecure Audit reports an audit concern that states 'Memory
    region writable by any user' for shared memory objects (referred
    by zSecure to as XSHR) while there should not be such concern.
    

Problem conclusion

  • zSecure Audit has been modified so that it does not report an
    audit concern that memory region writable by any user for shared
    memory objects.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA60941

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    231

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-02-24

  • Closed date

    2021-03-01

  • Last modified date

    2021-04-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ04941

Modules/Macros

  • CKAOUCSM GKROUCSM
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R240 PSY UJ04941

       UP21/03/03 P F103

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"231"}]

Document Information

Modified date:
02 April 2021