DASH Cumulative fix Packs

https://www.ibm.com/developerworks/community/wikis/home?lang=en-us#!/wiki/W8b1151be2b42_4819_998e_f7de7db7bfa2/page/Download%20Cumulative%20Patches%20-%20UI%20Services%20(DASH)

https://developer.ibm.com/answers/questions/290614/how-to-check-jazzsmdash-cumulative-patch-version/

Checking DASH version
$ cd /opt/ibm/tivoli/netcool/JazzSM/ui/bin
$ ./consolecli.sh Version
Dashboard Application Services Hub version: 3.1.3.0-201606061247-201709141353
Charting version: dash_prod-201606061247

CTGWA4017I The command completed successfully.


JazzSM versions installed

cd /opt/ibm/tivoli/netcool/JazzSM/properties/version

$ ls
Jazz_for_Service_Management-1.1.0.1.fxtag
Jazz_for_Service_Management-1.1.0.2.fxtag
Jazz_for_Service_Management-1.1.0.3.fxtag
Jazz_for_Service_Management-1.1.0.swtag
Jazz_for_Service_Management-1.1.1.swtag
Jazz_for_Service_Management-1.1.2.1.fxtag
Jazz_for_Service_Management-1.1.2.swtag
Jazz_for_Service_Management-1.1.3.swtag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.0.1.fxtag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.0.2.fxtag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.0.3.fxtag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.0.cmptag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.1.cmptag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.2.1.fxtag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.2.cmptag
Jazz_for_Service_Management_Dashboard_Application_Services_Hub-3.1.3.cmptag

$ cd/opt/ibm/tivoli/netcool/IM188/eclipse/tools
$ ./imcl listInstalledPackages -features -long
/appl/esm/tivoli/netcool/IM188/eclipse : com.ibm.cic.agent_1.8.8000.20171130_1105 : IBM® Installation Manager : 1.8.8 :
/appl/esm/tivoli/netcool/WebSphere/AppServer : com.ibm.tivoli.tacct.psc.install.was85.extension_1.1.2001.20160606-1749 : Jazz for Service Management extension for IBM WebSphere 8.5 : 1.1.2.1 :
/appl/esm/tivoli/netcool/WebSphere/AppServer : com.ibm.websphere.BASE.v85_8.5.5009.20160225_0435 : IBM WebSphere Application Server : 8.5.5.9 : com.ibm.sdk.6_64bit,ejbdeploy,embeddablecontainer,thinclient
/appl/esm/tivoli/netcool/WebSphere/AppServer : com.ibm.websphere.IBMJAVA.v70_7.0.9030.20160224_1826 : IBM WebSphere SDK Java Technology Edition (Optional) : 7.0.9.30 :
/appl/esm/tivoli/netcool/JazzSM : com.ibm.tivoli.tacct.psc.tip.install_3.1.3000.20160606-1749 : IBM Dashboard Application Services Hub : 3.1.3.0 : com.ibm.tivoli.tacct.psc.install.server.feature.tip.config
/appl/esm/tivoli/netcool/gui : com.ibm.tivoli.netcool.itnm.gui_4.2.4.20180404_2022 : Network Manager GUI Components : 4.2.0.5 :
/appl/esm/tivoli/netcool/gui : com.ibm.tivoli.netcool.omnibus.webgui_8.1.12.201712140056 : IBM Tivoli Netcool/OMNIbus Web GUI : 8.1.0.12 : WebGUI.feature

[netcool@pgv01222e tools]$ cd /opt/ibm/tivoli/netcool/JazzSM/ui/bin/
[netcool@pgv01222e bin]$
[netcool@pgv01222e bin]$
[netcool@pgv01222e bin]$ ./consolecli.sh SystemInfo --outputFile /tmp/dashinfo
CTGWA4017I The command completed successfully.

Oracle SQLPlus commands

/appl/oracle/app/oracle/product/12.1.0/client_1/bin/sqlplus ncim/ncim@pgv012265:20001/NCIMP_APP.oradb.albertsons.com


./sqlplus reporter/reporter@pgv012266:20001/HISTNCP_APP.oradb.albertsons.com

ITNM poller not running as root after set_uid script

Had an issue at customer where the ICMP poller was not running and below warning messages are seen in the log file

2018-09-11T14:37:28: Information: I-MOM-001-013: [641210176t] Connected to broker: 127.0.0.1:1883 using clientId: ncp_poller_4098_BACKSTAGE_P
2018-09-11T14:37:28: Information: I-MOM-001-001: [641210176t] ncp_poller[4098] Version 4.2 (Build 60) 64 bit on linux2x86 becoming Primary
2018-09-11T14:37:28: Information: I-DB-001-018: [328492800t] Polling thread: Database poller is connected to NCIM database 'NCIMP_APP.oradb.albertsons.com' (schema 'ncim')
2018-09-11T14:37:28: Information: I-POL-001-003: [326391552t] Opening plugin SnmpPoller: library name is /appl/esm/tivoli/netcool/precision/precision/platform/linux2x86/lib64/libNcpSnmpPoller.so
2018-09-11T14:37:28: Warning: W-SNM-003-012: [326391552t] Cannot create raw IPv4 socket (error = 1)
2018-09-11T14:37:28: Warning: W-SNM-003-009: [326391552t] Error 1: Operation not permitted
2018-09-11T14:37:28: Warning: W-SNM-003-013: [326391552t] ICMPv4 will be disabled
2018-09-11T14:37:28: Information: I-POL-001-003: [326391552t] Opening plugin Monitor: library name is /appl/esm/tivoli/netcool/precision/precision/platform/linux2x86/lib64/libNcpMonitor.so
2018-09-11T14:37:30: Information: I-DB-001-018: [80545536t] Polling thread: Database poller is connected to NCIM database 'NCIMP_APP.oradb.albertsons.com' (schema 'ncim')

This error is because some server mount points have restrictions on running processes as setuid. look at /etc/fstab and if the mount has nosuid, remove this to fix the issue.

Note: restart of the server is required for the new configuration to take effect.

After restart, the log file shows these lines

2018-09-11T17:02:18: Information: I-MOM-001-013: [3563349824t] Connected to broker: 127.0.0.1:1883 using clientId: ncp_poller_18546_BACKSTAGE_P
2018-09-11T17:02:18: Information: I-MOM-001-001: [3563349824t] ncp_poller[18546] Version 4.2 (Build 60) 64 bit on linux2x86 becoming Primary
2018-09-11T17:02:18: Information: I-DB-001-018: [3250796288t] Polling thread: Database poller is connected to NCIM database 'NCIMP_APP.oradb.albertsons.com' (schema 'ncim')
2018-09-11T17:02:18: Information: I-POL-001-003: [3248695040t] Opening plugin SnmpPoller: library name is /appl/esm/tivoli/netcool/precision/precision/platform/linux2x86/lib64/libNcpSnmpPoller.so
2018-09-11T17:02:18: Information: I-POL-001-003: [3248695040t] Opening plugin Monitor: library name is /appl/esm/tivoli/netcool/precision/precision/platform/linux2x86/lib64/libNcpMonitor.so
2018-09-11T17:02:20: Information: I-DB-001-018: [2327533312t] Polling thread: Database poller is connected to NCIM database 'NCIMP_APP.oradb.albertsons.com' (schema 'ncim')
2018-09-11T17:02:21: Information: I-DB-001-020: [3248695040t] Created handle 1 of (unlimited handles) in pool to DB 'NCIM'
2018-09-11T17:02:21: Information: I-DB-001-020: [3248695040t] Created handle 1 of (unlimited handles) in pool to DB 'POLLDATA'
2018-09-11T17:02:21: Information: I-FAI-001-006: [3248695040t] Operating as the primary ncp_poller in a failover pair

Some info on the mount point options.

I see those two options constantly suggested on the web when someone describes how to mount a tmpfs or ramfs. Often also with noexec but I'm specifically interested in nodev and nosuid. I basically hate just blindly repeating what somebody suggested, without real understanding. And since I only see copy/paste instructions on the net regarding this, I ask here.

This is from documentation:
nodev - Don't interpret block special devices on the filesystem.
nosuid - Block the operation of suid, and sgid bits.

But I would like a practical explanation what could happen if I leave those two out. Let's say that I have configured tmpfs or ramfs(without these two mentioned options set) that is accessible(read+write) by a specific (non-root)user on the system. What can that user do to harm the system? Excluding the case of consuming all available system memory in case of ramfs

linux security fstab