How to add program-controlled extended attribute to zssServer
Article ID: 249127
Updated On:
Products
Issue/Introduction
RACF is used as Mainframe security product, Zowe v1.27 is newly installed, and Zowe editor returns "failed to open:Permission denied".
System log shows:
- ICH420I PROGRAM program-name, FROM {[LIBRARY dsname] | LPA | JPA | IDENTIFY } CAUSED THE ENVIRONMENT TO BECOME UNCONTROLLED.
- BPXP015I HFS PROGRAM pathname IS text.
- BPXP014I ENVIRONMENT MUST BE CONTROLLED FOR DAEMON (BPX.DAEMON) PROCESSING.
Environment
Release : 3.0
Component : ZOWE Z/OS SERVICES v1.27
Cause
In the UNIX file system, executable files may be tagged with the program-controlled extended attribute. If a user issues a z/OS UNIX shell command or runs a program that does not have the program-controlled extended attribute, the process becomes "dirty"; in either case, the process is never "cleaned". That is, the "dirty bit" remains on, which will cause certain services to fail as a result.
Resolution
Issue the following unix shell command to establish program control for zssServer
- extattr +p <runtimeDir>/components/zss/bin/zssServer
To check the attribute:
- ls -E <runtimeDir>/components/zss/bin/zssServer
The p flag in the command output indicates that this file has the program-controlled extended attribute.(example: -rwxr-xr-x -ps)
Additional Information
Feedback
