IBM Platform Symphony 7.1 Interim Fix 362788 Readme File

Abstract

Enhance security for RFE64088 so that a user who wants to change the user list or group list for a consumer must have privilege to edit the consumer’s parent consumer.

Description

With RFE64088, a user that can edit a consumer can also change the user list or group list of this consumer.

With this fix, a user who wants to change the user list or group list for a consumer must have the privilege to edit the consumer’s parent consumer, or the system will return an error when running the request.

This fix applies only to the following platform:

       Linux2.6-glibc2.3-x86_64

Readme file for: IBM® Platform Symphony

Product/Component Release: 7.1

Update Name: Interim Fix 362788

Fix ID: sym-7.1-build362788-jpmc

Publication date: 9 September 2015

Last modified date: 9 September 2015

Contents:

1.     List of fixes

2.     Download location

3.     Products or components affected

4.   Known limitations

5.     Installation and configuration

6.     List of files

7.     Copyright and trademark information 

1.   List of fixes

APAR#P101363

2.   Download location

Download interim fix 362788 from the following location: http://www.ibm.com/eserver/support/fixes/.

3.   Products or components affected 

Product/Component Name, Platform:

Platform Symphony/vemkd, Linux 64-bit

4.   Known limitations

      None.

5.  Installation and configuration

5.1         Before installation

1.  Stop the cluster. Log on to the master host as the cluster administrator and run:

$ soamcontrol app disable all

$ egosh service stop all

$ egosh ego shutdown all

2. Back up the following file on all management hosts:

$EGO_TOP/3.1/linux2.6-glibc2.3-x86_64/etc/vemkd

5.2        Installation steps

1. Copy the vemkd file to the following directory on all management hosts:

$EGO_TOP/3.1/linux2.6-glibc2.3-x86_64/etc/

2. Edit $EGO_CONFDIR/ego.conf, by adding

EGO_RESTRICT_EXECUTION_USER_CHECK_PARENT_CONSUMER=Y

to enable this fix.

5.3          After installation

Start the cluster and enable the application. Log on to the master host as the cluster administrator and run:

$ egosh ego start all

$ soamcontrol app enable <appName>

5.4      Uninstalling

1. Stop the cluster.

2. Restore the backed-up files.

3. Restore the ego.conf file.

4. Start the cluster and enable the application.

6.   List of files

vemkd

 

7.   Copyright and trademark information

© Copyright IBM Corporation 2015

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.