Patch Name: PHKL_27949

Patch Description: s700_800 11.11 shm_lock scaling; shm_open-shm_unlink audit

Creation Date: 02/10/04

Post Date:  02/11/06

Hardware Platforms - OS Releases:
	s700: 11.11
	s800: 11.11

Products: N/A

Filesets:
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP

Automatic Reboot?: Yes

Status: General Release

Critical: No

Category Tags:
	defect_repair general_release

Path Name: /hp-ux_patches/s700_800/11.X/PHKL_27949

Symptoms:
	PHKL_27949:
	( SR:8606271683 CR:JAGae35891 )
	shm_open() and shm_unlink() fail to generate audit records
	when operating in trusted mode with auditing enabled.

	PHKL_25362:
	( SR:8606157512 CR:JAGad26843 )
	When a process is performing a memory locking operation on
	a sysV shared memory segment, other processes which need to
	operate on a different sysV shared memory segment will seem
	to be serialized behind the locking process. For example,
	if Process A is currently performing a shmctl(SHM_LOCK)
	operation on a 4 gigabyte segment, and Process B starts a
	shmctl(IPC_STAT) operation on a completely different
	segment, Process B may not be able to make forward progress
	until Process A finishes with the locking operation.

Defect Description:
	PHKL_27949:
	( SR:8606271683 CR:JAGae35891 )
	shm_open() & shm_unlink() need to log information through
	the auditing system.

	Resolution:
	When auditing is enabled, shm_open() and shm_unlink() now
	call an audit logging function to log auditing records.

	PHKL_25362:
	( SR:8606157512 CR:JAGad26843 )
	The defect is caused by contention for the shared memory
	lock within the kernel. When performing any sysV shared
	memory operation such as shared memory locking or shared
	memory attaching, this shared memory lock needs to be
	held by the working process. Once the process is
	finished with the operation, the process will drop the
	shared memory lock. Unfortunately, while the operation
	is going on, no other processes can perform shared
	memory operations on any other shared memory segments.

	Resolution:
	The solution is to have the working process let the
	system know that it is about to perform a shared memory
	operation on a particular segment. The system will then
	set a flag indicating that the segment is currently
	busy. Operations on other segments can now run
	unhindered.

Enhancement:
	No

SR:
	8606157512 8606271683

Patch Files:
	
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP:
	/usr/conf/lib/libvm.a(sysV_shm.o)

	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP:
	/usr/conf/lib/libvm.a(sysV_shm.o)

what(1) Output:
	
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP:
	/usr/conf/lib/libvm.a(sysV_shm.o):
		sysV_shm.c $Date: 2002/10/04 11:01:38 $Revision: r11
			.11/2 PATCH_11.11 (PHKL_27949)

	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP:
	/usr/conf/lib/libvm.a(sysV_shm.o):
		sysV_shm.c $Date: 2002/10/04 11:01:38 $Revision: r11
			.11/2 PATCH_11.11 (PHKL_27949)

cksum(1) Output:
	
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP:
	2506827266 15528 /usr/conf/lib/libvm.a(sysV_shm.o)

	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP:
	3340022038 37024 /usr/conf/lib/libvm.a(sysV_shm.o)

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes:
	PHKL_25362 

Equivalent Patches: None

Patch Package Size: 80 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHKL_27949

	5. Run swinstall to install the patch:

		swinstall -x autoreboot=true -x patch_match_target=true \
			  -s /tmp/PHKL_27949.depot

	By default swinstall will archive the original software in 
	/var/adm/sw/save/PHKL_27949.  If you do not wish to retain a
	copy of the original software, include the patch_save_files
	option in the swinstall command above:

		-x patch_save_files=false

	WARNING: If patch_save_files is false when a patch is installed,
		 the patch cannot be deinstalled.  Please be careful
		 when using this feature.

	For future reference, the contents of the PHKL_27949.text file is 
	available in the product readme:

		swlist -l product -a readme -d @ /tmp/PHKL_27949.depot

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHKL_27949.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None