Patch-ID# 124629-17


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security secure by default sbd manifest miniroot zones upgrade nfsv4 single host zfs boot itu
Synopsis: SunOS 5.10_x86: CD-ROM Install Boot Image Patch
Date: Oct/25/2012


Install Requirements: NA

Solaris Release: 10_x86

SunOS Release: 5.10_x86

Unbundled Product:

Unbundled Release:

Xref: This patch available for SPARC as patch 124628

Topic: SunOS 5.10_x86: CD-ROM Install Boot Image Patch

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
511006215230132
627274215266699
628619015271919
635162215298447
635162415298449
635162715298451
635238615298726
635239015298727
636415415303281
641925515327660
642087415328330
643877315335739
643932215336041
644523015338577
645004015340714
645968515345411
645968715345412
646784115349227
647201415351165
647340615351778
647447415352211
647669915353222
648030215354858
648155715355413
651743215374482
652141215376782
656018215398679
656150515399409
664271815446382
664487315447647
665602715453966
671594515488283
688393515591018
693260215627662
695236515643099
695236715643100
695241415643135
695241515643136
695257215643238
695388615644285
695559515645667
696004215648936
696589115653510
696640515653906
696799215655104
699785715679671
719904915816575


Changes incorporated in this version: 6997857 7199049

Patches accumulated and obsoleted by this patch: 126678-02

Patches which conflict with this patch:

Patches required with this patch: 119082-25 (or greater)

Obsoleted by:

Files included with this patch:

/sbin/getbootargs
/sbin/install-du
/sbin/sysid-finish
/usr/sbin/install.d/mergescripts/merge_service_profile
/usr/sbin/install.d/patchUpdate (deleted)
/usr/sbin/sysidprofile
/usr/snadm/lib/libadmutil.so.2

Problem Description:

6997857 120199-17/120200-17 apply to SUNWCmreq, but required patch 124628/124629 doesn't
7199049 getbootargs limited to 128 characters
 
(from 124629-16)
 
6932602 console becomes garbled after 'Apply driver updates' selection during interactive install
 
(from 124629-15)
 
6967992 Auto-reg service gets online even if 'auto_reg=disable' is in autoreg_config
 
(from 124629-14)
 
6965891 empty autoreg_config is created when 'auto_reg=disable' is specified
6966405 Autoregistration configuration file is not encrypted
 
(from 124629-13)
 
6952414 need to implement password encryption on the proxy field of Autoregistration
6960042 GUI install should have password encryption for Autoregistration
 
(from 124629-12)
 
6952365 /tmp/autoreg_file needs rename as /var/run/autoreg_file otherwise it's vulnerability issue
6952367 convert sprintf calls introduced in AutoReg project to snprintf to avoid array overrun
6952415 need a way to disable AutoReg in hands-off install
6952572 AutoReg Install
6953886 Auto Registration info provided by luupgrade contains wrong link
6955595 luupgrade is checking autoreg credential file as /etc/autoreg/cred instead of /etc/autoreg/creds
 
(from 124629-11)
 
6883935 install-du script needs to change due to ITU sparc support
 
(from 124629-10)
 
6656027 inconsistency in user experience when choosing 'Apply Drivers aka ITU' installation
 
(from 124629-09)
 
6521412 PSARC 2006/525: new boot sparc
 
(from 124629-08)
 
6715945 T-patch 124629-07 deletes /etc/svc/repository.db in miniroot
 
(from 124629-07)
 
6644873 loss of network client information at install time (ITU)
 
(from 124629-06)
 
6286190 HP DL 580-1 does not install Solaris (with ITU)
6351622 network install, after applying a CD Driver Update, user asked to re-insert Solaris CD
6351624 after applying a Driver Update, user has no idea if the DU was accepted
6351627 inconsistency between ITU/Jumpstart menu and "Apply driver updates" selection
6352386 when adding CD ITU, floppy is read first
6352390 support ITUs from USB floppies
6364154 users should be able to add ITUs from USB Flash drives
6419255 Solaris does not check to ensure correct install CD/DVD re-inserted after adding ITUs
6420874 development Solaris does not ask for OS CD after reading ITU CDs (S10 U1 and U2 do)
6459685 with USB floppy for ITUs, drive not read if "[f]loppy" option is selected
6459687 new ITU menu option "removable media" is unclear and misleading
6474474 SIGPIPE ignored for GUI-based install causing yes to spin
6642718 patches 119253-24 and 119082-25 clash on /sbin/install-du
 
(from 124629-05)
 
6517432 sysidtool should be used in exclusive IP non-global zones
 
(from 124629-04)
 
6561505 sysid nfs4 displays garbage on console on upgrade with Asian locales
 
(from 124629-03)
 
6560182 /usr/sbin/sys-unconfig failed with unconfig_nfs4
 
(from 124629-02)
 
5110062 NFSv4 domain prompting should be done by sysidtool framework
6439322 sysidnfs4 too strict on domain names
6445230 /etc/inet/hosts and /etc/inet/ipnodes need to be the same file
 
(from 124629-01)
 
6272742 Install gate should not depend on build system's manifests to build miniroot repository
6438773 Install needs way of (de)selecting Secure-by-Default
6450040 support Zones upgrade of Lockhart 3.x in S10U3
6467841 remove obsoleted Install Check packages for Ashanti upgrade in S10U3
6472014 need to handle Zones upgrade from S10/S10U1/S10U2 to S10U3 for Appserver from 8.0 to 8.2
6473406 need to handle Zones upgrade for Java System Message Queue and Web Console packages
6476699 patches 119082-26 through rev29 fail to install
6480302 remove SUNWzfsg for Zones upgrade in S10U3
6481557 patch T118833-29 will not install in miniroot
 
(from 126678-02)
 
        This revision addresses a packaging issue.
 
(from 126678-01)
 
5110062 NFSv4 domain prompting should be done by sysidtool framework
6439322 sysidnfs4 too strict on domain names
6445230 /etc/inet/hosts and /etc/inet/ipnodes need to be the same file


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
Not all patches listed in this section as needed for the completion
of a fix or feature, may be available at the same time as this patch.
This allows the remaining fixes/features to be made available sooner.
 
NOTE 1:  To get the fixes contained in this patch, this patch must be
         applied to the Miniroot which is located in the Boot directory
         on Net Install servers and Boot servers.
 
         The Miniroot needs to be patched on the Net Install server
         and on all Boot servers that have already been created from
         the Net Install server.
 
         Please also note that a patched Net Install server will create
         patched Boot servers. In other words, if you patch a Net Install
         server, and subsequently make a Boot server from it by using the
         'setup_install_server' command, the newly-created Boot server
         will incorporate the patch applied to the Net Install server.
 
         Use 'patchadd -C' for this patch, rather than the generic
         invocation.
 
         Please read the following document for a complete guide to miniroot
         patching on Solaris 10:
 
         http://www.oracle.com/technetwork/systems/articles/patchmini-jsp-137348.html
 
         Please also reference the ZFS Flash Support document:
 
         http://opensolaris.org/os/community/zfs/boot/flash/
 
NOTE 2:  To get the complete NFSv4 feature (PSARC/2005/487), please also
         install the following patches:
 
         119253-19 (or greater)  System Administration Applications Patch
         120200-09 (or greater)  sysidtool patch
         124631-09 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 3:  To get the complete Single Host File feature (PSARC/2006/530
         and PSARC/2006/299), please also install the following patches:
 
         124631-09 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
         119535-12 (or greater)  Flash Archive Patch
         119253-19 (or greater)  System Administration Applications Patch
         120200-09 (or greater)  sysidtool patch
         120012-14 (or greater)  Kernel Patch
 
NOTE 4:  To get the complete fix for BugId 6561505 (sysid nfs4 displays
         garbage on the console if you do upgrade with Asian locales),
         please also install the following patch
 
         119253-21 (or greater)  System Administration Applications Patch
 
NOTE 5:  To get the complete fix for BugId 6517432 (sysidtool should be
         used in exclusive IP non-global zones), please also install the
         following patches:
 
         120200-11 (or greater)  sysidtool Patch
         119253-22 (or greater)  System Administration Applications Patch
 
NOTE 6:  To get the complete fix for BugId 6644873 (loss of network client
         information at install time (ITU)), please also install the
         following patch:
 
         124631-17 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 7:  To get the complete ZFS Boot and New Boot Sparc feature
      	 PSARC/2006/370 and PSARC/2006/525, please also install the following
         patches:
 
         119255-59 (or greater)  Install and Patch Utilities Patch
      	 119253-29 (or greater)  System Administration Applications Patch
      	 119314-24 (or greater)  WBEM Patch
      	 120451-02 (or greater)  Get netmask Utility Patch
      	 121431-27 (or greater)  Live Upgrade Patch
      	 121429-11 (or greater)  Live Upgrade Zones Support Patch
      	 124631-18 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 8:  To get the complete Auto Registration fix for the following BugId's:
 
         6952572 AutoReg Install
         6952365 /tmp/autoreg_file needs rename as /var/run/autoreg_file
                 otherwise it's vulnerability issue
         6952367 convert sprintf calls introduced in AutoReg project to
                 snprintf to avoid array overrun
         6953886 Auto Registration info provided by luupgrade contains wrong
                 link
         6955595 luupgrade is checking autoreg credential file as
                 /etc/autoreg/cred instead of /etc/autoreg/creds
 
         please also install the following patches:
 
         119253-32 (or greater)  System Administration Applications Patch
         120200-16 (or greater)  sysidtool Patch
         121431-51 (or greater)  Live Upgrade Patch
         124631-42 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 9:  To get the complete fix for BugId 6952415 (need a way to disable
         AutoReg in hands-off install), please also install the following patch:
 
         119253-32 (or greater)  System Administration Applications Patch
 
NOTE 10: To get the complete fix for BugId 6952414 (need to implement password
         encryption on the proxy field of Autoregistration), please also install
         the following patches:
 
         121431-52 (or greater)  Live Upgrade Patch
         124631-43 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 11: To get the complete fix for BugId 6967992 (Auto-reg service gets
         online even if 'auto_reg=disable' is in autoreg_config), please
         also install the following patch:
 
         121431-54 (or greater)  Live Upgrade Patch
 
NOTE 12: To get the complete Secure-by-Default feature (PSARC/2004/368 and
         PSARC/2005/373), please also install the following patches:
 
         118855-26 (or greater)* kernel patch
         119253-15 (or greater)  System Administration Applications patch
         119314-09 (or greater)  WBEM patch
         120200-07 (or greater)  sysidtool patch
         120273-07 (or greater)  SMA patch
         121309-08 (or greater)  Solaris Management Console patch
         122532-05 (or greater)* volmgt and bsmconv patch
         122857-04 (or greater)* sendmail patch
         124394-02 (or greater)  dtlogin smf patch
         124631-01 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
         * Substitute patch 118855-36 for the indicated set of patches.
           Due to some of them being unreleased and/or accumulated into
           unreleased 118855 revisions, 118855-36 is the only available
           patch that contains all of them.


README -- Last modified date: Saturday, November 10, 2012