IBM Spectrum LSF Application Center V10.2.0.7 Fix 535484 Readme

Abstract

This fix resolves a security issue where "su root" is periodically called for root access.

Description

Readme documentation for IBM Spectrum LSF Application Center V10.2.0 Fix including installation-related instructions, prerequisites and co-requisites, and list of fixes.

This fix addresses the following issue:
Application Center is periodically calling "su root" for root access, which is a security issue.

Readme file for: IBM® Spectrum LSF Application Center
Product/Component Release: 10.2.0.7
Update Name: Fix 535484
Fix ID: pac-10.2-build535484
Publication date: Dec. 30 2019
Last modified date: Dec. 30 2019

Contents

List of fixes
Download location
Product notifications
Products or components affected
System requirements
Installation and configuration
Uninstallation
List of files
Copyright and trademark information

List of fixes
P103319
Download location
Download from the following location: http://www.ibm.com/eserver/support/fixes/
Product notifications:
To receive information about product solution and patch updates automatically, subscribe to product notifications on the My notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.
Products or components affected
N/A
System requirements
- Linux-x86_64
Installation and configuration
- 6.1 Before installation
  - Log on to the IBM Spectrum LSF Application Center server host as root.
  - Set your IBM Spectrum LSF Application Center environment.
    For csh or tcsh:
    % source /opt/ibm/lsfsuite/ext/cshrc.platform
    For sh, ksh, or bash:
    $ . /opt/ibm/lsfsuite/ext/profile.platform
  - Determine the location of your existing IBM Spectrum LSF Application Center installation.
    #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-appcenter
  - Check and record the version and build number of your existing installation of IBM Spectrum LSF Application Center in case you need to roll back the fix.
    pmcadmin -V
  - Stop all IBM Spectrum LSF Application Center services.
    perfadmin stop all
    pmcadmin stop
  - Back up your existing installation.
    For example:
    #cp -rfp /opt/ibm /opt/ibm.bak
- 6.2 Installation steps for IBM Spectrum LSF Application Center V10.2.0.
  The following steps assume that IBM Spectrum LSF Application Center is installed in /opt/ibm.
  Replace with your actual installation directory.
  Note: This patch is only for LSF Application Center V10.2.0. If you are using other versions, you must first migrate to V10.2.0 before applying this Fix Pack.
  - Extract pac10.2.0.7_standard_linux-x64.tar.Z.
    tar -xzvf pac10.2.0.7_standard_linux-x64.tar.Z
  - As root, log on to your IBM Spectrum LSF Application Center 10.2 host.
  - Set your IBM Spectrum LSF Application Center environment.
    For csh or tcsh:
    % source /opt/ibm/lsfsuite/ext/cshrc.platform
    For sh, ksh, or bash:
    $ . /opt/ibm/lsfsuite/ext/profile.platform
  - Configure the pacinstall.sh file
    Replace ${INSTALLATION_TOP} with your actual installation directory, set ${USE_REMOTE_DB} as 'Y' in case of PAC HA.
  - Install the patch
    ./pacinstall.sh
    Note: Make sure the script and all RPM files for the upgrade package are in the same directory.
  - Optional. Set "MAX_CONCURRENT_RESTAPI=${COUNT}" in $PMC_TOP/gui/conf/pmc.conf to control the max threads number. Where ${COUNT} is 0 means does not control the max threads number.
  - Start IBM Spectrum LSF Application Center services.
    perfadmin start all
    pmcadmin start
Uninstallation
- 7.1 Before uninstallation
  
  Stop all IBM Spectrum LSF Application Center services:
  perfadmin stop all
  pmcadmin stop
- 7.2 Roll back the fix
  The following steps assume that IBM Spectrum LSF Application Center is installed in the /opt/ibm directory.
  Replace this with your actual installation directory.
  - Determine the location of your existing IBM Application Center installation.
    #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-appcenter
  - Download package pac-10.2-build509656
  - Set your IBM Spectrum LSF Application Center environment:
    For csh or tcsh:
    % source /opt/ibm/lsfsuite/ext/cshrc.platform
    For sh, ksh, or bash:
    $ . /opt/ibm/lsfsuite/ext/profile.platform
  - Extract pac10.2.0.7_standard_linux-x64.tar.Z.
    tar -xzvf pac10.2.0.7_standard_linux-x64.tar.Z
  - Configure the pacinstall.sh file
    Replace ${INSTALLATION_TOP} with your acture installation directory
  - Install the package of previous version
    ./pacinstall.sh -d
    Note: Make sure the script and all RPMs for the downgrade package are in the same directory.
  - If you have made any customizations, reapply your customizations from the backup directory.
  - Start IBM Spectrum LSF Application Center services
    perfadmin start all
    pmcadmin start
  - Clear your browser cache before logging into IBM Spectrum LSF Application Center.
    This is required on every browser that will access IBM Spectrum LSF Application Center. Otherwise, IBM Spectrum LSF Application Center will not work properly.
List of files

$PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/classes/com/platform/gui/pac/util/shell/ShellHelper.class
$PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/classes/com/platform/gui/common/util/shell/ShellHelper.class
Copyright and trademark information
©Copyright IBM Corporation 2019

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at http://www.ibm.com/legal/copytrade.shtml