Patch operation failed : Error: Unable to provision. AccessDeniedException: "java.nio.file.AccessDeniedException"

Products

• CA API Gateway

Issue/Introduction

Insstalled patch-management-1.0.0-20230119031535.noarch.rpm and followed the steps in the API GW 11.0 online documentation but we keep getting an error when we try to run the patch.sh command.

Below are the steps.

Stopped the Gateway. 

Started pms. /opt/SecureSpan/PatchManagement/bin/pms.sh start
Patch Management Service started successfully.

Command I run:

/opt/SecureSpan/PatchManagement/bin/patch.sh upload /opt/SecureSpan/PatchManagement/Layer7_API_Gateway_v11.1.00.17707.L7P

Output from the script: 

Patch operation failed : Error: Unable to provision, see the following errors:

1) [Guice/ErrorInjectingConstructor]: AccessDeniedException: /opt/SecureSpan/PatchManagement/var/logs/patches.log.lck
  at PatchRecordManagerImpl.<init>(Unknown Source)
  while locating PatchRecordManagerImpl
  at BindingsModule.configure(Unknown Source)
  at PatchServiceApiImpl.<init>(Unknown Source)
      \_ for 3rd parameter
  while locating PatchServiceApiImpl
  at BindingsModule.configure(Unknown Source)
  while locating PatchServiceApi

Learn more:
  https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR

1 error

======================
Full classname legend:
======================
AccessDeniedException:  "java.nio.file.AccessDeniedException"
BindingsModule:         "com.broadcom.patchman.binding.BindingsModule"
PatchRecordManagerImpl: "com.broadcom.patchman.service.PatchRecordManagerImpl"
PatchServiceApi:        "com.broadcom.patchman.service.PatchServiceApi"
PatchServiceApiImpl:    "com.broadcom.patchman.service.PatchServiceApiImpl"
========================
End of classname legend:
========================

Environment

Software gateway 11.0

Cause

The patch log file and patch files have wrong permission and owner/group values. 

Resolution

The user login as root when copied files to the server.  Change the every file under /opt/SecureSpan/PatchManagement/var  owner to patcher:patcher (if not that user and group) and with proper permission (at least  rwx for the user/group).