How to add program-controlled extended attribute to zssServer
search cancel

How to add program-controlled extended attribute to zssServer

book

Article ID: 249127

calendar_today

Updated On:

Products

Brightside

Issue/Introduction

RACF is used as Mainframe security product, Zowe v1.27 is newly installed, and Zowe editor returns "failed to open:Permission denied".

System log shows:

  • ICH420I PROGRAM program-name, FROM {[LIBRARY dsname] | LPA | JPA | IDENTIFY } CAUSED THE ENVIRONMENT TO BECOME UNCONTROLLED.
  • BPXP015I HFS PROGRAM pathname IS text.
  • BPXP014I ENVIRONMENT MUST BE CONTROLLED FOR DAEMON (BPX.DAEMON) PROCESSING.

 

Environment

Release : 3.0

Component : ZOWE Z/OS SERVICES v1.27

Cause

In the UNIX file system, executable files may be tagged with the program-controlled extended attribute. If a user issues a z/OS UNIX shell command or runs a program that does not have the program-controlled extended attribute, the process becomes "dirty"; in either case, the process is never "cleaned". That is, the "dirty bit" remains on, which will cause certain services to fail as a result.

Resolution

Issue the following unix shell command to establish program control for zssServer

  • extattr +p <runtimeDir>/components/zss/bin/zssServer

To check the attribute:

  • ls -E  <runtimeDir>/components/zss/bin/zssServer

The p flag in the command output indicates that this file has the program-controlled extended attribute.(example: -rwxr-xr-x -ps)

Additional Information

https://www.ibm.com/docs/en/zos/2.2.0?topic=installation-establishing-program-control