Patch-ID# 124628-16


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security secure by default sbd manifest miniroot zones upgrade nfsv4 single host zfs boot itu
Synopsis: SunOS 5.10: CD-ROM Install Boot Image Patch
Date: Oct/25/2012


Install Requirements: NA

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 124629

Topic: SunOS 5.10: CD-ROM Install Boot Image Patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
511006215230132
627274215266699
643877315335739
643932215336041
644523015338577
645004015340714
646784115349227
647201415351165
647340615351778
647669915353222
648030215354858
648155715355413
651743215374482
652141215376782
656018215398679
656150515399409
664487315447647
671594515488283
688393515591018
693260215627662
695236515643099
695236715643100
695241415643135
695241515643136
695257215643238
695388615644285
695559515645667
696004215648936
696589115653510
696640515653906
696799215655104
699785715679671
709785415745944
719904915816575


Changes incorporated in this version: 6997857 7199049

Patches accumulated and obsoleted by this patch: 126677-02

Patches which conflict with this patch:

Patches required with this patch: 119081-25 (or greater)

Obsoleted by:

Files included with this patch:

/sbin/getbootargs
/sbin/install-du
/sbin/sysid-finish
/usr/sbin/install.d/mergescripts/merge_service_profile
/usr/sbin/install.d/patchUpdate (deleted)
/usr/sbin/sysidprofile
/usr/snadm/lib/libadmutil.so.2

Problem Description:

6997857 120199-17/120200-17 apply to SUNWCmreq, but required patch 124628/124629 doesn't
7199049 getbootargs limited to 128 characters
 
(from 124628-15)
 
7097854 remove the workaround for dcfs bug 6855379 introduced in Auto-reg project
 
(from 124628-14)
 
6932602 console becomes garbled after 'Apply driver updates' selection during interactive install
 
(from 124628-13)
 
6967992 Auto-reg service gets online even if 'auto_reg=disable' is in autoreg_config
 
(from 124628-12)
 
6965891 empty autoreg_config is created when 'auto_reg=disable' is specified
6966405 Autoregistration configuration file is not encrypted
 
(from 124628-11)
 
6952414 need to implement password encryption on the proxy field of Autoregistration
6960042 GUI install should have password encryption for Autoregistration
 
(from 124628-10)
 
6952365 /tmp/autoreg_file needs rename as /var/run/autoreg_file otherwise it's vulnerability issue
6952367 convert sprintf calls introduced in AutoReg project to snprintf to avoid array overrun
6952415 need a way to disable AutoReg in hands-off install
6952572 AutoReg Install
6953886 Auto Registration info provided by luupgrade contains wrong link
6955595 luupgrade is checking autoreg credential file as /etc/autoreg/cred instead of /etc/autoreg/creds
 
(from 124628-09)
 
6883935 install-du script needs to change due to ITU sparc support
 
(from 124628-08)
 
6521412 PSARC 2006/525: new boot sparc
 
(from 124628-07)
 
6715945 T-patch 124629-07 deletes /etc/svc/repository.db in miniroot
 
(from 124628-06)
 
6644873 loss of network client information at install time (ITU)
 
(from 124628-05)
 
6517432 sysidtool should be used in exclusive IP non-global zones
 
(from 124628-04)
 
6561505 sysid nfs4 displays garbage on console on upgrade with Asian locales
 
(from 124628-03)
 
6560182 /usr/sbin/sys-unconfig failed with unconfig_nfs4
 
(from 124628-02)
 
5110062 NFSv4 domain prompting should be done by sysidtool framework
6439322 sysidnfs4 too strict on domain names
6445230 /etc/inet/hosts and /etc/inet/ipnodes need to be the same file
 
(from 124628-01)
 
6272742 Install gate should not depend on build system's manifests to build miniroot repository
6438773 Install needs way of (de)selecting Secure-by-Default
6450040 support Zones upgrade of Lockhart 3.x in S10U3
6467841 remove obsoleted Install Check packages for Ashanti upgrade in S10U3
6472014 need to handle Zones upgrade from S10/S10U1/S10U2 to S10U3 for Appserver from 8.0 to 8.2
6473406 need to handle Zones upgrade for Java System Message Queue and Web Console packages
6476699 patches 119082-26 through rev29 fail to install
6480302 remove SUNWzfsg for Zones upgrade in S10U3
6481557 patch T118833-29 will not install in miniroot
 
(from 126677-02)
 
        This revision addresses a packaging issue.
 
(from 126677-01)
 
5110062 NFSv4 domain prompting should be done by sysidtool framework
6439322 sysidnfs4 too strict on domain names
6445230 /etc/inet/hosts and /etc/inet/ipnodes need to be the same file


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
Not all patches listed in this section as needed for the completion
of a fix or feature, may be available at the same time as this patch.
This allows the remaining fixes/features to be made available sooner.
 
NOTE 1:  To get the fixes contained in this patch, this patch must be
         applied to the Miniroot which is located in the Boot directory
         on Net Install servers and Boot servers.
 
         The Miniroot needs to be patched on the Net Install server
         and on all Boot servers that have already been created from
         the Net Install server.
 
         Please also note that a patched Net Install server will create
         patched Boot servers. In other words, if you patch a Net Install
         server, and subsequently make a Boot server from it by using the
         'setup_install_server' command, the newly-created Boot server
         will incorporate the patch applied to the Net Install server.
 
         Use 'patchadd -C' for this patch, rather than the generic
         invocation.
 
         Please read the following document for a complete guide to miniroot
         patching on Solaris 10:
 
         http://www.oracle.com/technetwork/systems/articles/patchmini-jsp-137348.html
 
         Please also reference the ZFS Flash Support document:
 
         http://opensolaris.org/os/community/zfs/boot/flash/
 
NOTE 2:  To get the complete NFSv4 feature (PSARC/2005/487), please also
         install the following patches:
 
         119252-18 (or greater)  System Administration Applications Patch
         120199-09 (or greater)  sysidtool Patch
         124630-09 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 3:  To get the complete Single Host File feature (PSARC/2006/530
         and PSARC/2006/299), please also install the following patches:
 
         124630-09 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
         119534-12 (or greater)  Flash Archive Patch
         119252-18 (or greater)  System Administration Applications Patch
         120199-09 (or greater)  sysidtool Patch
         120011-14 (or greater)  Kernel Patch
 
NOTE 4:  To get the complete fix for BugId 6561505 (sysid nfs4 displays
         garbage on the console if you do upgrade with Asian locales),
         please also install the following patch
 
         119252-20 (or greater)  System Administration Applications Patch
 
NOTE 5:  To get the complete fix for BugId 6517432 (sysidtool should be
         used in exclusive IP non-global zones), please also install the
         following patches:
 
         120199-11 (or greater)  sysidtool Patch
         119252-21 (or greater)  System Administration Applications Patch
 
NOTE 6:  To get the complete fix for BugId 6644873 (loss of network client
         information at install time (ITU)), please also install the
         following patch:
 
         124630-17 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 7:  To get the complete ZFS Boot and New Boot Sparc feature
      	 PSARC/2006/370 and PSARC/2006/525, please also install the following
         patches:
 
      	 119254-59 (or greater)  Install and Patch Utilities Patch
      	 119252-26 (or greater)  System Administration Applications Patch
      	 119313-23 (or greater)  WBEM Patch
      	 120450-02 (or greater)  Get netmask Utility Patch
      	 121430-27 (or greater)  Live Upgrade Patch
      	 121428-11 (or greater)  Live Upgrade Zones Support Patch
      	 124630-18 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 8:  To get the complete Auto Registration fix for the following BugId's:
 
         6952572 AutoReg Install
         6952365 /tmp/autoreg_file needs rename as /var/run/autoreg_file
                 otherwise it's vulnerability issue
         6952367 convert sprintf calls introduced in AutoReg project to
                 snprintf to avoid array overrun
         6953886 Auto Registration info provided by luupgrade contains wrong
                 link
         6955595 luupgrade is checking autoreg credential file as
                 /etc/autoreg/cred instead of /etc/autoreg/creds
 
         please also install the following patches:
 
         119252-29 (or greater)  System Administration Applications Patch
         120199-16 (or greater)  sysidtool Patch
  	 121430-50 (or greater)  Live Upgrade Patch
 	 124630-42 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 9:  To get the complete fix for BugId 6952415 (need a way to disable
         AutoReg in hands-off install), please also install the following patch:
 
         119252-29 (or greater)  System Administration Applications Patch
 
NOTE 10: To get the complete fix for BugId 6952414 (need to implement password
         encryption on the proxy field of Autoregistration), please also install
         the following patches:
 
  	 121430-51 (or greater)  Live Upgrade Patch
 	 124630-43 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 11: To get the complete fix for BugId 6967992 (Auto-reg service gets
         online even if 'auto_reg=disable' is in autoreg_config), please
         also install the following patch:
 
  	 121430-53 (or greater)  Live Upgrade Patch
 
NOTE 12: To get the complete Secure-by-Default feature (PSARC/2004/368 and
         PSARC/2005/373), please also install the following patches:
 
         118833-26 (or greater)* kernel patch
         119252-14 (or greater)  System Administration Applications patch
         119313-08 (or greater)  WBEM patch
         120199-07 (or greater)  sysidtool patch
         120272-06 (or greater)  SMA patch
         121308-08 (or greater)  Solaris Management Console patch
         122539-06 (or greater)* volmgt and bsmconv patch
         122856-03 (or greater)* sendmail patch
         124393-01 (or greater)  dtlogin smf patch
         124630-01 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
         * Substitute patch 118833-36 for the indicated set of patches.
           Due to some of them being unreleased and/or accumulated into
           unreleased 118833 revisions, 118833-36 is the only available
           patch that contains all of them.


README -- Last modified date: Saturday, November 10, 2012