sqldbdir & sqlnodir owned by regular user / Security exposure (RIMS)

PMR 44825,035,649 db2icrt creates a directory ~/sqllib with 775 permissions for a new instance. It does not 'bother' to intially create directories ~/sqllib/sqldbdir, ~/sqllib/sqlnodir and ~/sqllib/sqlgwdir. If dbm cfg is updated with a group for SYSCTRL, then members of this group will be able to execute the command CATALOG NODE... as should be expected. However, if they happen to be the FIRST person to execute this command, the directory and the containing files will be created with the owner of the account that issued the command. I would expect the directory and files should be created with the instance account as the OWNER. In this example, howardb is a brand new instance and dtaylor1 is a member of the SYSCTRL group who has executed a CATALOG NODE command. drwxrwsr-t 17 howardb db2admin 4096 Oct 03 09:00 /home/howardb/sqllib/ drwxrwxr-x 2 dtaylor1 db2admin 256 Oct 03 09:00 /home/howardb/sqllib/sqlnodir/ -rw-rw-r-- 1 dtaylor1 db2admin 32 Oct 03 09:00 /home/howardb/sqllib/sqlnodir/sqlnobak -rw-rw-r-- 1 dtaylor1 db2admin 32 Oct 03 09:00 /home/howardb/sqllib/sqlnodir/sqlnodir This might be considered a security vulnerability because the account that owns the directory could switch files in and out without detection and essentially hijack an communications path.