The fix is shipped as file IBM.HALG320.UI91776
The fix has rework (build) date 2023131 (11 May 2023)
The following fixes are prerequisites for this fix:
The following fixes are corequisites for this fix:
The following fixes are superseded by this fix:
AH08404 AH11157 AH13444 AH16509 AH18993 AH20001 AH21393 AH23647 AH25702 AH26459 AH26542 AH29206 AH29493 AH29806 AH30018 AH32053 AH32283 AH32291 AH34527 AH35294 AH36087 AH37906 AH37983 AH39435 AH40116 AH40136 AH41614 AH43100 AH44969 AH45939 AH47252 AH48608 AH49041 AH50480 AH53030 AH53377 UI61282 UI62591 UI63687 UI65205 UI66345 UI66849 UI67578 UI68624 UI69673 UI70105 UI71447 UI71761 UI71874 UI72099 UI72909 UI74419 UI75480 UI75741 UI75848 UI77570 UI77775 UI79568 UI79780 UI80571 UI81899 UI83251 UI90162Steps required to install the fix:
A sequential data set must be allocated on the z/OS system to receive the fix that you will upload from your workstation. You can do this by submitting the job below. Add a job card and modify the parameters to meet your site's requirements before submitting.
// SET HLQ=#hlq //* //ALLOC EXEC PGM=IEFBR14 //UI91776 DD DSN=&HLQ..IBM.HALG320.UI91776, // DISP=(NEW,CATLG,DELETE), // DSORG=PS, // RECFM=FB, // LRECL=80, // UNIT=SYSALLDA, //* VOL=SER=volser, //* BLKSIZE=6160, // SPACE=(TRK,(146,20)) //*
Upload the file in binary format from your workstation to the z/OS data set. On a Windows system, you can use FTP from a command prompt to upload the file. In the sample dialog shown below, commands or other information entered by the user are in bold, and the following values are assumed:
User enters: | Values |
---|---|
mvsaddr | TC P/IP address of the z/OS system |
tsouid | Your TSO user ID |
tsopw | Your TSO password |
d: | Your drive containing the fix files |
hlq | High-level qualifier that you used for the data set that you allocated in the job above |
C:\>ftp mvsaddr Connected to mvsaddr. 220-FTPD1 IBM FTP CS %version% at mvsaddr, %time% on %date%. 220 Connection will close if idle for more than 60 minutes. User (mvsaddr:(none)): tsouid 331 Send password please. Password: tsopw 230 tsouid is logged on. Working directory is "tsouid.". ftp> cd .. 250 "" is the working directory name prefix. ftp> cd hlq 250 "hlq." is the working directory name prefix. ftp> binary 200 Representation type is Image ftp> put d:\IBM.HALG320.UI91776 200 Port request OK. 125 Storing data set hlq.IBM.HALG320.UI91776 250 Transfer completed successfully 8125600 bytes sent in 0.28 seconds ftp> quit 221 Quit command received. Goodbye.
++HOLD(UI81899) SYSTEM FMID(HALG320) REASON(ACTION) DATE(22223) COMMENT( **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG by adding the following optional directives: #CONSOLE_INTERVAL Specifies, in 1/100 of a second, how long JES Job Monitor will wait before collecting console messages after issuing one of the supported operator commands. The default is 100 (1 second). The minimum value is 1, the maximum value is 2,147,483,647. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI79568) SYSTEM FMID(HALG320) REASON(ACTION) DATE(22062) COMMENT( **************************************************************** * Affected function: RSE API server * **************************************************************** * Description: security permit required for batch startup * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: none * **************************************************************** After applying this fix, RSE API will require that the server user ID has at least READ permit to FACILITY class profile HUH.START.BATCH.jobname.port when started as a job or process. No security permit is required when started as started task. **************************************************************** * Affected function: configuration * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: tomcat.base/samples/rseapi.env * * {/etc/zexpl/rseapi.env} * **************************************************************** This fix updates the sample rseapi.env by adding the following optional directives: #RSEAPI_HUH_SAF_CLASS=${_RSE_FEK_SAF_CLASS:-FACILITY} The security class holding RSEAPI specific HUH.** security profiles. The default is FACILITY. Uncomment and change to match your actual security class name. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI77775) SYSTEM FMID(HALG320) REASON(ACTION) DATE(21295) COMMENT( **************************************************************** * Affected function: security setup * **************************************************************** * Description: add permit for z/OS UNIX chmod command * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: FEK.SFEKSAMP(FEKRACF) * **************************************************************** This fix introduces the following permit for the started task: # define override for chmod command RLIST UNIXPRIV SUPERUSER.FILESYS.CHANGEPERMS ALL RDEFINE UNIXPRIV SUPERUSER.FILESYS.CHANGEPERMS UACC(NONE) - DATA('OVERRIDE UNIX CHANGE PERMIT RESTRICTIONS') PERMIT SUPERUSER.FILESYS.CHANGEPERMS CLASS(UNIXPRIV) - ACCESS(READ) ID(STCRSE) SETROPTS RACLIST(UNIXPRIV) REFRESH **************************************************************** * Affected function: installation verification * **************************************************************** * Description: update ivpinit initialization script * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/bin/ivpinit * * /etc/zexpl/ivpinitŲ * **************************************************************** This maintenance updates the ivpinit script, which was copied to /etc/zexpl during initial customization of the product. Issue the following z/OS UNIX command to update the copied version: cp /usr/lpp/IBM/zexpl/bin/ivpinit /etc/zexpl/ ). ++HOLD(UI77570) SYSTEM FMID(HALG320) REASON(ACTION) DATE(21286) COMMENT( **************************************************************** * Affected function: RSED * **************************************************************** * Description: security permit required for batch startup * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: none * **************************************************************** After applying this fix, RSED will require that the server user ID has at least READ permit to FACILITY class profile FEK.START.BATCH.jobname.port when started as a job. No security permit is required when started as started task. **************************************************************** * Affected function: JMON * **************************************************************** * Description: security permit required for batch startup * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: none * **************************************************************** After applying this fix, JMON will require that the server user ID has at least READ permit to FACILITY class profile FEJ.START.BATCH.jobname.port when started as a job. No security permit is required when started as started task. **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG by adding the following optional directives: #SAF_CLASS The security class holding JMON specific FEJ.** security profiles. The default is FACILITY. Uncomment and change to match your actual security class name. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI75741) SYSTEM FMID(HALG320) REASON(ACTION) DATE(21158) COMMENT( **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG by adding the following optional directives: #DISPLAY_ACTIVE=ON Control whether a client can show system information, like job name, owner, CPU usage, etc, of all active address spaces. The default is ON. Uncomment and specify OFF to disallow showing all active address spaces. **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG file. Redo your customizations, if any, after applying this maintenance. **************************************************************** * Affected function: JMON * **************************************************************** * Description: new operator commands * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: / * **************************************************************** After this update, JMON users can issue new operator commands to change a job's CLASS and MSGCLASS. Verify that users are able to issue the following operator commands. This permit can be conditional, so it's only granted when the console is JMON. JES2 $T{J|S|T}(jobid),C=class UPDATE permit to profile jesname.MODIFY.BAT, jesname.MODIFY.STC, and jesname.MODIFY.TSU in the OPERCMDS class. $TO{J|S|T}(jobid),Q=queue UPDATE permit to profile jesname.MODIFY.BATOUT, jesname.MODIFY.STCOUT, and jesname.MODIFY.TSUOUT in the OPERCMDS class. JES3 *F,J=jobid,C=class UPDATE permit to profile jesname.MODIFY.JOB in the OPERCMDS class. *F,U,J=jobid,NCL=class UPDATE permit to profile jesname.MODIFY.U in the OPERCMDS class. **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updates the sample rse.env by adding the following optional directives: #RSE_EXTENDED_LOCK=TRUE Enable or disable the extended lock tracker. The default is FALSE. Uncomment and specify TRUE to enable the function. When enabled, RSE_EXTENDED_LOCK_DSN must also be specified. In an environment with multiple RSED started tasks, all RSED started tasks that share the same RSE_EXTENDED_LOCK_DSN value can see and report on each other's exclusive data set and member locks. RSEAPI, the REST API interface to RSE, is also able to utilize the extended lock tracker when enabled. #RSE_EXTENDED_LOCK_DSN=FEK.#CUST.LOCKS.VSAM Name of the VSAM data set used by the extended lock tracker. Uncomment and specify the correct data set name when you enable the extended lock tracker (RSE_EXTENDED_LOCK=TRUE). The VSAM data set can be created using SFEKSAMP(FEKLOCKA). #RSE_EXTENDED_LOCK_TIMEOUT=120000 Cache timeout value for querying the extended lock tracker. The default is 120000 milliseconds. Uncomment and specify the desired timeout value in milliseconds (1/1000 second). When present, RSE will use the cached value to report who owns a lock, thus reducing the amount of I/O to the VSAM. **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updated sample file rse.env. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI74419) SYSTEM FMID(HALG320) REASON(ACTION) DATE(21071) COMMENT( **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG by adding the following optional directives: #ENF70_MONITOR_INTERVAL=5 The number of minutes between ENF70 heartbeat checks. ENF70 is a JES listener exit used to notify clients when a job ends. The ENF70 heartbeat check will detect when the exit is no longer active and reset things so that the notify function continues working. The default is 5. Uncomment and specify a value between 0 and 30 (inclusive). Specify 0 to disable the ENF70 heartbeat check. **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG file. Redo your customizations, if any, after applying this maintenance. **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updates the sample rse.env by adding the following optional directives: #_RSE_JAVAOPTS="$_RSE_JAVAOPTS -Dseqsosi.to.spaces=true" Enable or disable the automatic replacement of the sequential SO and SI symbols in the content when opening a data set file in DBCS host encoding. The default is false. When the value is set to true, SOSI and SISO instances in the content will be replaced with spaces. It is to avoid a column shift left in display and read-only mode when the data set file is opened. The conversion is saved to the host only when users save the content explicitly. **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updated sample file rse.env. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI72909) SYSTEM FMID(HALG320) REASON(ACTION) DATE(20338) COMMENT( **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG by adding the following optional directives: #PASS_PHRASE=OFF Support authentication using a pass phrase. The default is OFF. Uncomment and specify ON to allow pass phrases up to 100 characters instead of a 8-character password or passticket for authentication. Note that this option only applies to clients who connect directly to JMON. This does not include the z/OS Explorer client, who connects to the RSED daemon, and in turn the daemon connects to JMON, using passtickets for authentication. **************************************************************** * Affected function: JMON * **************************************************************** * Description: new environment variable * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: SFEKSAMP(FEJJCNFG) * * {FEK.#CUST.PARMLIB(FEJJCNFG)} * **************************************************************** This fix updates the sample FEJJCNFG file. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI71761) SYSTEM FMID(HALG320) REASON(ACTION) DATE(20268) COMMENT( **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This enhancement updates the sample rse.env by adding the following optional directives: #RSE_PLUGIN_PATH Reference to plugin products that are not installed in the plugin directory. The default is an empty string. Uncomment and change to match the installation paths of products that extend z/OS Explorer. Multiple paths are separated by a semicolon (:). Products that are installed in the plugin/ sub-directory are detected automatically and do not need to be added to RSE_PLUGIN_PATH. **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updated sample file rse.env. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI69673) SYSTEM FMID(HALG320) REASON(ACTION) DATE(20146) COMMENT( **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updates the sample rse.env by removing the following optional directive: GSK_PROTOCOL_SSLV3 Sample command to enable or disable SSLv3 usage. and adding the following optional directives: GSK_PROTOCOL_TLSV1_3 Specifies whether the specified encryption protocol, TLSV1_3 in this sample, is enabled. A protocol that is supported by but not enabled in System SSL can be enabled here by specifying GSK_PROTOCOL_<protocol>=ON. You can disable a protocol by specifying OFF as value. For a list of supported protocols and the matching variable names, see Cryptographic Services System SSL Programming (SC24-5901). Note * Due to a vulnerability in the SSLv3 (Secure Socket Layer) protocol, support for this protocol is deprecated in z/OS Explorer. * Enabling the TLSv1.3 (Transport Layer Security) protocol requires z/OS 2.4 or higher. It also requires the usage of 4-character cipher IDs, specific ciphers, and server key shares. These definitions are set automatically if you do not set them yourself. GSK_SERVER_TLS_KEY_SHARES Specifies the encryption key share groups in order of preference as a string consisting of one or more 4-character values. Uncomment and specify the desired string if you want to influence key share group selection when protocol TLSv1.3 or higher is used. For a list of supported key share groups and their 4-character ID, see Cryptographic Services System SSL Programming (SC24-5901). **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updated sample file rse.env. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI67578) SYSTEM FMID(HALG320) REASON(ACTION) DATE(20027) COMMENT( **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: pre-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This enhancement updates the sample rse.env by adding the following optional directives: #_RSE_JAVAOPTS="$_RSE_JAVAOPTS -DSHOW_SSH_TERMINAL=true" This option enables the z/OS SSH terminal on the client. The default is false. **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: /usr/lpp/IBM/zexpl/samples/rse.env * * /etc/zexpl/rse.envŲ * **************************************************************** This fix updated sample file rse.env. Redo your customizations, if any, after applying this maintenance. ). ++HOLD(UI66345) SYSTEM FMID(HALG320) REASON(ACTION) DATE(19312) COMMENT( **************************************************************** * Affected function: RSE * **************************************************************** * Description: new environment variables * **************************************************************** * Timing: post-APPLY * **************************************************************** * Part: SFEKSAMP(FEKRSED) * * FEK.#CUST.PROCLIB(RSED)Ų * **************************************************************** This fix updates environment variable processing by allowing you to conditionally initialize variables PATH, LIBPATH, CLASSPATH, and STEPLIB. To avoid initialization, define environment variable RSE_NO_INIT before or during RSED startup, for example by adding it to DD STDENV of the RSED started task. The RSE_NO_INIT variable holds a semicolon (:) separated list of variable names that should not be initialized. For example: //STDENV DD * RSE_NO_INIT=PATH:STEPLIB ).
SMP/E ACCEPT the prerequisites to facilitate an easy backout of the fix, if required. Note that once accepted, you cannot backout the accepted prerequisites.
This step can be skipped if there are no prerequisites, or if there is a reason to not make a prerequisite permanent.
You can accept the prerequisites by submitting the job below. Add a job card and modify the parameters to meet your site's requirements before submitting.
//* //* Change #globalcsi to the data set name of your global CSI. //* Change #dzone to your CSI distribution zone name. //* //ACCEPT EXEC PGM=GIMSMP,REGION=0M //SMPCSI DD DISP=OLD,DSN=#globalcsi //SMPCNTL DD * SET BOUNDARY(#dzone) . ACCEPT SELECT( ) REDO COMPRESS(ALL) BYPASS(HOLDSYS,HOLDERROR). //*
SMP/E RECEIVE and APPLY the fix.
You can do this by submitting the job below. Add a job card and modify the parameters to meet your site's requirements before submitting.
//* //* Change #hlq to the high level qualifier used to upload the fix. //* Change (2x) #globalcsi to the data set name of your global CSI. //* Change #tzone to your CSI target zone name. //* // SET HLQ=#hlq //* //RECEIVE EXEC PGM=GIMSMP,REGION=0M //SMPCSI DD DISP=OLD,DSN=#globalcsi //SMPPTFIN DD DISP=SHR,DSN=&HLQ..IBM.HALG320.UI91776 //SMPCNTL DD * SET BOUNDARY(GLOBAL) . RECEIVE SELECT( UI91776 ) SYSMODS LIST . //* //APPLY EXEC PGM=GIMSMP,REGION=0M //SMPCSI DD DISP=OLD,DSN=#globalcsi //SMPCNTL DD * SET BOUNDARY(#tzone) . APPLY SELECT( UI91776 ) REDO COMPRESS(ALL) BYPASS(HOLDSYS,HOLDERROR). //*
Restart started tasks to activate changes.