Patch Name: PHCO_27049 Patch Description: s700_800 11.11 audit(5) man page patch Creation Date: 02/06/16 Post Date: 02/12/05 Hardware Platforms - OS Releases: s700: 11.11 s800: 11.11 Products: N/A Filesets: SecurityMon.AUDT-ENG-A-MAN,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP Automatic Reboot?: No Status: General Release Critical: No Category Tags: defect_repair general_release manual_dependencies Path Name: /hp-ux_patches/s700_800/11.X/PHCO_27049 Symptoms: PHCO_27049: ( SR:8606245587 CR:JAGae12052 ) The audit(5) man page does not list the commands: useradd, usermod, userdel, groupadd, groupmod and groupdel as self audited commands in trusted mode. Defect Description: PHCO_27049: ( SR:8606245587 CR:JAGae12052 ) The commands: useradd, usermod, userdel, groupadd, groupmod and groupdel have been updated to make them self audited commands, using the standard HP-UX auditing subsystem. The audit(5) man page does not list these commands as self audited commands. Resolution: The audit(5) man page has been changed to list the comamnds: useradd, usermod, userdel, groupadd, groupmod and groupdel as self audited commands. Enhancement: No SR: 8606245587 Patch Files: SecurityMon.AUDT-ENG-A-MAN,fr=B.11.11, fa=HP-UX_B.11.11_32/64,v=HP: /usr/share/man/man5.Z/audit.5 what(1) Output: SecurityMon.AUDT-ENG-A-MAN,fr=B.11.11, fa=HP-UX_B.11.11_32/64,v=HP: /usr/share/man/man5.Z/audit.5: None cksum(1) Output: SecurityMon.AUDT-ENG-A-MAN,fr=B.11.11, fa=HP-UX_B.11.11_32/64,v=HP: 2151059034 4244 /usr/share/man/man5.Z/audit.5 Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: PHCO_27049: Prior to patch PHCO_27018, the commands: useradd, usermod, userdel, groupadd, groupmod and groupdel did not self audit. To obtain self auditing versions of these commands, install PHCO_27018 (or superseding). Supersedes: None Equivalent Patches: None Patch Package Size: 30 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHCO_27049 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHCO_27049.depot By default swinstall will archive the original software in /var/adm/sw/save/PHCO_27049. If you do not wish to retain a copy of the original software, include the patch_save_files option in the swinstall command above: -x patch_save_files=false WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHCO_27049.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHCO_27049.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHCO_27049.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: None