OBSOLETE Patch-ID# 120051-06
Download this patch from My Oracle Support
Your use of the firmware, software and any other materials contained
in this update is subject to My Oracle Support Terms of Use, which
may be viewed at My Oracle Support.
|
For further information on patching best practices and resources, please
see the following links:
|
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.
|
Keywords: security usermod increase buffer size /etc/group ppriv
Synopsis: Obsoleted by: 120012-14 SunOS 5.10_x86: usermod patch
Date: May/07/2007
Install Requirements: After installing this patch on an active boot environment, the system will be in a potentially inconsistent state until a reconfigure reboot is performed. Unless otherwise specified in the Special Install Instructions below, it is normally safe to apply further patches prior to initiating the reboot due to the relatively small footprint of the patch utilities. Normal operations must not be resumed until after the reconfigure reboot is performed.
Use Single User Mode (run level S) when installing this patch on an active boot environment. An alternative may be specified in the Special Install Instructions.
Solaris Release: 10_x86
SunOS Release: 5.10_x86
Unbundled Product:
Unbundled Release:
Xref: This patch available for SPARC as patch 120050
Topic: SunOS 5.10_x86: usermod patch
Relevant Architectures: i386
Bugs fixed with this patch:
Changes incorporated in this version: 6217899
Patches accumulated and obsoleted by this patch: 124209-01
Patches which conflict with this patch:
Patches required with this patch: 118855-36 (or greater)
Obsoleted by: 120012-14
Files included with this patch:
/usr/include/libtsnet.h
/usr/include/sys/priv.h
/usr/include/sys/priv_const.h
/usr/include/sys/priv_names.h
/usr/include/sys/tsol/label.h
/usr/include/sys/tsol/label_macro.h
/usr/include/sys/tsol/priv.h
/usr/include/sys/tsol/tndb.h
/usr/include/sys/tsol/tsyscall.h
/usr/include/tsol/label.h
/usr/include/ucred.h
/usr/include/user_attr.h
/usr/sbin/groupadd
/usr/sbin/groupdel
/usr/sbin/groupmod
/usr/sbin/passmgmt
/usr/sbin/roleadd
/usr/sbin/roledel
/usr/sbin/rolemod
/usr/sbin/useradd
/usr/sbin/userdel
/usr/sbin/usermod
Problem Description:
6217899 usermod -K project=proj user does not work
(from 120051-05)
6489363 usermod patch needs to require the latest KU patch
(from 120051-04)
6474678 lazyload all Trusted Extensions libraries
(from 120051-03)
1236941 would like usermod -c to not abort if the user is logged in
6465639 useradd usermod passmgmt need support for Trusted Extensions keywords
6357764 monitor manipulation in FEM panics system
6388050 the message for successful password update is a PAM_ERROR_MSG
6415535 audit_event TX code review issues
6435911 root can't login via console CLI if label daemon is not running
6457407 the fix for 6431503 broke printer banners for complex labels
6458668 TX route get changes can cause panic if passed an ioctl with NULL credentials
(from 120051-02)
6249813 useradd/usermod -p dies with SEGV and dumps core
6221091 usermod(1M) dumped core when project name was specified
(from 120051-01)
6211845 increase the buffer for group entries in useradd/usermod
(from 124209-01)
6186472 Integration of AGPgart driver for x86 to solaris
5068886 support for agp aperture memory in seg_dev
6243434 different definition of 'fu_uid' causes compilation error
6244217 segdev_fault() should not return FC_MAKE_ERR(err) after segdev_faultpage
6274647 gcc and agpgart don't get along
6402114 gart privileges should have more generic names
6394554 integrate Solaris Trusted Extensions
5039974 modhash could do with an mdb walker
6227744 sys/modhash.h has an unnecessary nested include
6268229 gcc and snoop don't get along
6270225 gcc and route don't get along
6293271 zone processes should use zone_kcred instead of kcred
6313214 hextoalabel(1M) succeeds with hexadecimal label that is invalid by one character
6355953 assertion failed: cpu == CPU, file: ../../i86pc/vm/hat_i86.c, line: 925
6403267 address remaining issues raised during TX code reviews
6389264 acl_totext needs support for by-passing nameservice lookup
6391893 acl_totext support for by-passing nameservice lookup needs to support ZFS-style ACLs
6399963 get_zone_pool() isn't consistent with its return values
6404051 ABI versioning is missing for sparcv9 and amd64 libtsnet
6404290 snoop uses is_system_labeled as if it were a variable
6404563 Trusted integration breaks part of ucred propagation
6404654 zoneadm mount command fails on labeled systems
6404729 libtsol changes needed for gcc
6404877 classifications should be ranged checked during label conversions
6405400 sctp_send_abort() tips over referencing uninitialized variable
6405777 SCTP cannot find a correct source address
6406097 tsol_option_set breaks userland IP option setting
6407920 TX panic during lo_mount
6411400 Solaris Trusted Extensions putback breaks SC build
6412471 str_to_label error offsets into the string are dependent on leading spaces
6413767 sort out libc versions for U3 (and TLC)
6413809 Trusted Extensions automount daemon failure in reading-down over NFS
6414797 code in zone_find_by_any_path generates bad assembly code and panics, can be worked around with change
Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions. The following example
installs a patch to a standalone machine:
example# patchadd /var/spool/patch/104945-02
The following example removes a patch from a standalone system:
example# patchrm 104945-02
For additional examples please see the appropriate man pages.
Special Install Instructions:
-----------------------------
NOTE 1: If you're planning to set up Zones on this system, please make
sure to install the following patch which fixes bugid 6216195
(zone installation confused by UPDATE=yes in pkginfo(4) file.)
119255-06 (or greater) Install and Patch Utilities Patch
NOTE 2: To obtain the complete fix for 6211845 (increase the buffer for
group entries in useradd/usermod), please also install the following
patch:
118345-09 (or greater) libc.so.1 patch
NOTE: The list of 'patches required with this patch' (above) has been
modified from the list specified at patch creation time. The reason for
the modification is that one or more of the required patches was
either never released or withdrawn after its release. The following
substitutions (which are guaranteed to satisfy the original requirements)
were therefore made:
118855-36 replaces 118855-25
README -- Last modified date: Saturday, November 10, 2012