Patch-ID# 125534-19


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security gnome trusted tjds tx
Synopsis: GNOME 2.6.0_x86: Trusted Extension Runtime Patch
Date: Feb/09/2017


Install Requirements: NA

Solaris Release: 10_x86

SunOS Release: 5.10_x86

Unbundled Product: GNOME

Unbundled Release: 2.6.0_x86

Xref: This patch available for SPARC as 125533

Topic: GNOME 2.6.0_x86: Trusted Extension Runtime Patch

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
712777015764765
16794838
648441815356792
648764315358358
648768915358373
648770415358378
648867515358875
649545415362183
649918515364087
650445915366998
651577615373487
652072515376366
653329615383321
653435915383957
653438415383969
654730315391138
654734215391168
654956915392456
654961615392474
654962115392478
655010415392791
655269115394101
656978215403843
656999115403968
657172215404904
657192015405011
657328515405796
657494315406675
658385615411659
658406215411765
658625215412981
658891915414425
659986515420658
660374615422741
661031515426672
664129315445544
664700315448556
664834315449370
664871815449559
664954915450037
665233315451709
667094715462516
667095615462520
668273415469356
672718515495292
675781815514186
680017015538997
684421315564863
685854515574552
685854615574553
687554015584849
687743915586153
687879915587133
695024915641423
718351115803347


Changes incorporated in this version: 15764765

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch: 122213-14 (or greater)

Obsoleted by:

Files included with this patch:

/usr/bin/tsoljds-setssheight
/usr/bin/tsoljds-tstripe
/usr/bin/tsoljds-xagent
/usr/bin/tsoljds-xagent-proxy
/usr/bin/tsoljdsdevmgr
/usr/bin/tsoljdslabel
/usr/bin/tsoljdslabel-ui
/usr/bin/tsoljdsselmgr
/usr/dt/config/C/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ar/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ar_EG.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/cs_CZ.ISO8859-2/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/da_DK.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/de.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/de/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/el_GR.ISO8859-7/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/en_GB.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/en_IE.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/en_US.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/en_US.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/es.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/es/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/et_EE.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/fi_FI.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/fr.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/fr/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/he/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/he_IL.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/hi_IN.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/hr_HR.ISO8859-2/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/hu/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/hu_HU.ISO8859-2/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/it.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/it/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ja/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ja_JP.PCK/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ja_JP.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ja_JP.eucJP/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ko.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ko/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/nl_BE.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/nl_NL.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/pl_PL.ISO8859-2/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/pl_PL.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/pt_BR.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/pt_BR/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/pt_PT.ISO8859-15/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ru_RU.ISO8859-5/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/ru_RU.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/sv.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/sv/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/th_TH.ISO8859-11/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/th_TH.TIS620/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/th_TH.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/th_TH/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/tr_TR.ISO8859-9/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/zh.GBK/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/zh.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/zh/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/zh_HK.BIG5HK/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/zh_TW.BIG5/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/zh_TW.UTF-8/Xresources.d/Xtsolresources.jds (deleted)
/usr/dt/config/zh_TW/Xresources.d/Xtsolresources.jds (deleted)
/usr/include/libgnometsol/sel_config.h
/usr/lib/libgnometsol.so.0.0.0
/usr/share/gnome/TrustedPathExecutables
/usr/share/gnome/sel_config
/usr/share/xsessions/tsolcde.desktop (deleted)
/usr/share/xsessions/tsoljds.desktop (deleted)

Problem Description:

15764765 tsoljds-xagent and offspring in TX can give 1-2 extra orphan lines in pargs -e output: /usr/bin
 
(from 125534-18)
 
16794838 Xorg core dumps with 17 labeled workspaces
 
(from 125534-17)
 
7183511 problem with GNOME (trusted-ext)
 
(from 125534-16)
 
6950249 Trusted Stripe requires rebranding
 
(from 125534-15)
 
6877439 devmgr applet in trusted path
6878799 preferences in TP
 
(from 125534-14)
 
6875540 installing patch 125533-13, 125534-13 does not resolve CR6858545 completely
 
(from 125534-13)
 
6858545 use the principle of least privilege to prevent unauthorized filesystem access
6858546 use the principle of least privilege to prevent privilege escalation
 
(from 125534-12)
 
6844213 updatemanager runs in wrong zone
 
(from 125534-11)
 
6757818 [tjds] cannot launch some applications from the menu as non-root role user
6800170 [tjds] tsoljds-xagent has quit unexpectedly dialog appearing when user logs into TJDS desktop
 
(from 125534-10)
 
6727185 [tjds] tsoljdsdevmgr coredumps on locales
 
(from 125534-09)
 
6647003 *tsoljds-xagent-proxy* dumps core on stdin fuzz testing
 
(from 125534-08)
 
6571920 TJDS Device Administration GUI needs to use class and xdpy when modifying Sun Ray devices
6586252 devices disappear from TJDS GUI when device properties opened and closed from DevUI
6610315 devices disappear temporarily in TJDS DA GUI in one scenario
6652333 TJDS DevUI not refreshing correctly on allocation/deallocation of a device sometimes
6682734 [tjds] stripe/wnck applet intermittently hangs during stress testing
 
(from 125534-07)
 
6648343 [tjds] truncated label in trusted stripe
6670947 TJDS selection manager should use solaris.label.win.noview to conditionally hide selection view
6583856 TJDS label builder does not handle labels with multiple compartments correctly
6670956 TJDS should be able to configure auto-deny for selection transfers
 
(from 125534-06)
 
6649549 launching labeled zone takes more 20 seconds
6603746 applications unable to start in TJDS session with role user
6599865 [tjds] session does not die on ctrl-alt-backspace-backspace DTU reset
6648718 (rework) Trusted Extensions button available through dtlogin when it should not be
 
(from 125534-05)
 
6648718 Trusted Extensions button available through dtlogin when it should not be
 
(from 125534-04)
 
6641293 remove login manager configuration files from tsoljdslabel to support pkg move to default install
 
(from 125534-03)
 
6588919 remove shadow text from labels on stripe, windows and Selection Manager
6533296 [tjds] Trusted Stripe error dialog observed sometimes upon logout
6550104 [tjds] desktop does not start on initial change of label
6573285 [tjds] Trusted Stripe should be at bottom of the screen (configurable)
6584062 [tjds] TJDS uses libtlc which is being deprecated
6571722 logout from TJDS session doesn't cleanup /usr/bin/gnome-keyring-daemon process
6574943 Selection Manager pops up repeatedly and can't be dismissed when using Netbeans
 
(from 125534-02)
 
6549569 TX: On allocating device in TJDS, DA GUI does not show allocated list sometimes
6552691 ZIP disk connected to Sun Ray disappears from TJDS DA GUI available list when CANCEL selected
6547303 Available Devices list disappears in TJDS DA GUI on TX 10 x86 on one-ip-address-per-zone setup
6549616 while adding device in DA GUI in administration page, some fields not filled by default in TJDS
6549621 DA GUI of TJDS throws error message when click on labels under administration page
6569991 Device Manager doesn't work properly in role workspaces
6569782 [tjds] root user running Device Manager does not show devices already allocated
6547342 TX-Sparc in TJDS, Device Allocation GUI shows empty lists sometimes
 
(from 125534-01)
 
6515776 uttscwrap not working with normal user on TX
6484418 [tjds] Device Manager not refreshed after allocating/deallocating devices (intermittent)
6520725 Available Devices in Device manager disappears upon sorting multiple times in TJDS
6487689 [tjds] "Change workspace label" window has some missing l10n
6504459 [tjds] garbled string 'Password' in tsoljds-tstripe authentication window
6499185 [tjds] some preference items should be launching in Trusted path
6495454 [tjds] cannot change the roles on locales
6487704 [tjds] missing l10n when assuming root role
6487643 [tjds] MOTD screen missing l10n
6488675 [tjds] Selection Manager dialog launched multiple times when copying strings from Java to Java
6534384 [tjds] Device Allocation needs to filter out non-DTU devices in a SunRay session
6534359 Trusted Path application launching is not extensible


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
Not all patches listed in this section as needed for the completion
of a fix or feature, may be available at the same time as this patch.
This allows the remaining fixes/features to be made available sooner.
 
NOTE 1:  To get the complete fix for BugId's,
 
         6588919 remove shadow text from labels on stripe, windows and
                 selection manager
         6573285 TJDS Trusted Stripe should be at the bottom of the screen
 
         please also install the following patches:
 
         119539-13 (or greater)  GNOME 2.6.0_x86: Window Manager Patch
         122213-21 (or greater)  GNOME 2.6.0_x86: Desktop Patch
 
NOTE 2:  To get the complete fix for BugId 6599865 ([tjds] session does not die
         on ctrl-alt-backspace-backspace DTU reset), please also install the
         following patch:
 
         122213-24 (or greater)  GNOME 2.6.0_x86: Desktop Patch
 
NOTE 3:  To get the complete fix for BugId 6657546 ([dtlogin] adding patch
         125533-06/125534-06 to s10u4_12b TX system breaks TJDS login), please
         also install the following patches:
 
         119279-18 (or greater)  CDE 1.6_x86: dtlogin patch
         126366-05 (or greater)  SunOS 5.10_x86: CDE Desktop changes - Solaris
                                                 Trusted Extensions
         126364-03 (or greater)  SunOS 5.10_x86: X Window System changes -
                                                 Solaris Trusted Extensions
         123612-03 (or greater)  X11 6.6.2_x86: Trusted Extensions patch
 
NOTE 4:  To get the complete fix for BugId 6875540 (installing patch 125533-13,
         125534-13 does not resolve CR6858545 completely), please also install
         the following patch:
 
         120461-16 (or greater)  GNOME 2.6.0_x86: Gnome libs Patch
 
NOTE 5:  To get the complete fix for BugId 6858546 (use the principle of least
         privilege to prevent privilege escalation), please also install the
         following patch:
 
         120095-25 (or greater)  X11 6.6.2_x86: xscreensaver patch


README -- Last modified date: Thursday, February 9, 2017