java.lang.UnsatisfiedLinkError for JNI Code with "zos" profile

[dkelosky]

When adding the zos profile to configuration and calling native code through JNI, you get UnsatisfiedLinkError during invocation. When starting through JCL, messages like this appear in the job log:

08.14.25 JOB51197  TSS7003W Password Will Expire on 07/01/19                                
08.14.25 JOB51197  TSS7000I xxxxxxx Last-Used 26 Jun 19 06:23 System=xxxx Facility=ZOSMF    
08.14.25 JOB51197  TSS7001I Count=00423 Mode=Fail Locktime=None Name=KELOSKY, DANIEL L      
08.14.25 JOB51197  BPXP015I HFS PROGRAM ./libwtojni.so IS NOT MARKED PROGRAM CONTROLLED.    
08.14.25 JOB51197  TSS7236E ENVIRONMENT IS CONTROLLED - UNIX MARK UNCONTROLLED REQUEST RE   
08.14.25 JOB51197  JECTED                                                                   
08.14.25 JOB51197  BPXP014I ENVIRONMENT MUST REMAIN CONTROLLED FOR DAEMON (BPX.DAEMON) PR   
08.14.25 JOB51197  OCESSING.                                                                

Removing the zos from the profile "resolves" the UnsatisfiedLinkError.

[vvvlc]

does ./libwtojni.so have +p program control attribute?
if not use extattr +p libwtojni.so
This should help

[dkelosky]

That's it! Is there some good documentation on this? I haven't come across this before.

Thanks!

[dkelosky]

Also, do you know why this is needed with the zos profile?

[vvvlc]

I found this https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.bpxb200/dirtyadd.htm

[dkelosky]

Great resource - thanks again!

[vvvlc]

I found this regarding zos profile:

jzos provides PlatformAccessControl, this function calls __check_resource_auth_np, but I don't see requirement of program controlled for __check_resource_auth_np.