Patch Name: PHSS_3492 Patch Description: s700 9.X Int'l HP DCE 1.1 libraries, login and su utilities This patch eliminates the possibility of a rare, but drastic corruption in the CDS namespace. When this problem occurs, any access of the corrupted directory will crash the CDS server. This corruption is permanent; the only way to recover from this problem is to remove and re-configure the entire cell. This patch also allows an administrator to restrict the network addresses that a DCE server will advertise in the name-space/endpoint-map. This restriction is implemented via the RPC_SUPPORTED_NETADDRS environment variable. This patch also corrects the following problems, which were first fixed in earlier HP DCE 1.1 patches: - In the RPC runtime, a race condition could result when a multi-threaded process has one thread that is initializing the runtime and another thread that is trying to fork the process. This patch includes a new libdce that corrects this interference. - Problems in the login and su utilities. Without the patch, the DCE versions of login and su will fail to work, and the DCE version of vuelogin may obtain stale home-directory, login-shell, and full-name information. The patch should be installed before the dce.login script is run to install the login utilities. - A problem in which a forked child of a program that certifies its identity doesn't inherit its parent's credentials. This patch is applicable to s700 International 9.x HP DCE 1.1. This patch is one of a set of four: - PHSS_3491 (Series 700 Domestic Version) - PHSS_3492 (Series 700 International Version) - PHSS_3493 (Series 800 Domestic Version) - PHSS_3494 (Series 800 International Version) Patches for HP DCE/9000 1.1 are cumulative; each patch includes fixes from all previously released HP DCE/9000 1.1 patches. Patches superseded by this patch are listed below. Path Name: /hp-ux_patches/s700/9.X/PHSS_3492 Effective Date: 940105 OS Release: 9.00 9.01 9.03 Reboot Required: No Patch Files: /opt/dcelocal/lib/libdce.a /opt/dcelocal/lib/libdce.sl /opt/dcelocal/bin/cdsd /opt/dcelocal/bin/secd /opt/dcelocal/bin/sec_create_db /opt/dcelocal/bin/sec_salvage_db /bin/login.dce /bin/su.dce SR#: 5003156505 "what" string/timestamp: (the following are excerpts) HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: libdce (Export) Date: 1994/01/05-08:29:40 HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: libdce (Export) Date: 1994/01/05-08:29:40 HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: login Date: 1994/01/05-11:09:22 HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: su Date: 1994/01/05-11:09:22 HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: cdsd Date: 1994/01/05-08:29:40 HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: secd (Export) Date: 1994/01/05-08:29:40 HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: sec_create_db (Export) Date: 1994/01/05-08:29:40 HP DCE/9000 1.1 patches PHSS_3492,PHSS_3494 Module: sec_salvage_db (Export) Date: 1994/01/05-08:29:40 "sum" output: 53774 9257 libdce.a 17981 6520 libdce.sl 13256 98 login.dce 2442 66 su.dce 19167 1802 cdsd 43892 7954 secd 11773 7978 sec_create_db 42542 8026 sec_salvage_db Dependencies: None Supersedes: PHSS_2879 PHSS_3162 Patch Package Size: 21402 Kbytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and limitation of liability and warranties, before installing this patch. Note: Before you install this patch, you should: 1. Back up the target host. 2. Stop all DCE control programs and DCE-based application programs on the target host. 3. Exit from any DCE control programs on the target host. 4. Use dce_config or SAM to stop all other DCE programs on the target host. After you have completed installing the patch, you can restart DCE software as desired. --------------------------------------------------------------------------- After getting the patch onto your machine, unshar the patch (sh PHSS_3492). To install this patch do the following: 1) Run /etc/update (Note: you must be logged in as root to update a system). 2) Once in the update "Main Menu" move the highlighted line to "Change Source or Destination ->" and press "Return" or "Select Item". 3) Make sure the highlighted item in the "Change Source or Destination" window is "From Tape Device to Local System ...", then press "Return" or "Select Item". 4) You should now be in the "From Tape Device to Local System" window. Change the "Source: /dev/rmt/0m" to "Source: /tmp/PHSS_3492.updt" (this assumes that you are in the /tmp directory where PHSS_3492.updt has been placed). Note: You must enter the complete path name. 5) Press "Done". 6) From here on follow the standard directions for update. The customize script that update runs will move the original software to /system/PHSS_3492/orig. HP recommends keeping this software there in order to recover from any potential problems. It is also recommended that you move the PHSS_3492.text file to /system/PHSS_3492 to be retained for future reference. If you wish to put this patch on a magnetic tape and update from the tape drive, dd a copy of the patch to the tape drive. As an example the following will create a copy of the patch that update can read: dd if=PHSS_3492.updt of=/dev/rmt/0m bs=2048