OBSOLETE Patch-ID# 126449-05


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security label nfs share txzonemgr upgrading downgrading chk_encodings , >2gb file
Synopsis: Obsoleted by: 127128-11 SunOS 5.10_x86: Trusted Extensions labeld, chk_encodings, txzonemgr, zoneunshare, zoneshare patch
Date: Nov/26/2007


Install Requirements: NA

Solaris Release: 10_x86

SunOS Release: 5.10_x86

Unbundled Product:

Unbundled Release:

Xref: This patch is available for Sparc as patch 126448

Topic: SunOS 5.10_x86: Trusted Extensions labeld, chk_encodings, txzonemgr, zoneunshare, zoneshare patch

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
647843615354048
647981915354661
648352815356366
649011415359619
650477615367134
651949415375690
652511615378890
654417415389391
655220715393974
655505715395520
656534715401496
659565415418236
659891015420176
659891315420178
660176715421678
660714915424760


Changes incorporated in this version: 6565347 6595654 6607149

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by: 127128-11

Files included with this patch:

/usr/lib/labeld
/usr/lib/zones/zoneshare
/usr/lib/zones/zoneunshare
/usr/sbin/chk_encodings
/usr/sbin/txzonemgr

Problem Description:

6565347 txzonemgr failed to add an interface to a zone
6595654 Administrative interface needed for nscd-per-zone configuration in
        Trusted Extensions
6607149 txzonemgr's install zone failed to create sysidcfg under TJDS
 
(from 126449-04)
 
6598910 zonecopy function in labeld should validate pointer offsets
6598913 Label builder door service should validate size of memory passed by
        caller
6601767 setlabel errors with Value too large for defined data type on files > 2GB
 
(from 126449-03)
 
This patch revision was created to address patch construction issues.
 
(from 126449-02)
 
6544174 txzonemgr needs better error checking
6552207 txzonemgr does not configure loopback mounts for /etc/passwd and
        /etc/shadow when creating zones
6555057 txzonemgr assumes LANG is valid
 
(from 126449-01)
 
6478436 Obsolete binary to string routines default to external view
6479819 txzonemgr reads tnzonecfg but doesn't remove entries from it
6483528 the private lslabels would improve usability if it knew the maximum MAC
        label
6490114 full parse mode returns an error for the same label that regular mode
        accepts
6504776 label range check is incorrect when upgrading or downgrading a file
6519494 txzonemgr should support trusted networking configuration
6525116 cannot share more than one directory via NFS per zone


Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
-----------------------------
 
NOTE 1: After patch installation is complete, the labeld daemon should be
        restarted:
 
                # svcadm restart labeld


README -- Last modified date: Saturday, November 10, 2012