<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Patch-ID# 105182-05
Keywords: security kernel MP sigtimewait FFB2 acl UFS procfs VOP_REALVP WebNFS
Synopsis: SunOS 5.6_x86: kernel update patch
Date: May/12/98

Solaris Release: 2.6_x86

SunOS Release: 5.6_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 105181

Topic: SunOS 5.6_x86: kernel update patch

	NOTE 1:  To get the complete fix for bug 4090929 (system panics due to
       	         infinite recursion in prrealvp) we recommend installation of
                 rev 01 (or greater revisions) of the following patches:

         	        105779-01  kernel/fs/specfs
       		        105781-01  kernel/fs/fifofs

	NOTE 2:  To get the complete fix for 1237009 (users umask modifies
                 ACL's of new files under default ACL's) and 4073684 (mkdir
                 -p dir" and "mkdir dir" work differently in the presence
                 of default ACLs), we recommend installation of rev 01
                 (or greater revisions) of the /usr/bin/mkdir patch:

			106142-01  /usr/bin/mkdir

	         As a result of this fix for 1237009, the umask/ACL interaction  
		 has changed.  

                 Please refer to the paragraph under "Special Install Instructions" 
		 (NOTE 2) for additional information.


BugId's fixed with this patch: 1237009 4062572 4064495 4067641 4070968 4073684 4076062 4077343 4086905 4089451 4090862 4090929 4095411 4097082 4099656 4101647 4106093 4114176 4115793 4117898 

Changes incorporated in this version: 1237009 4073684 4095411 4097082 4099656 4101647 4106093 4114176 4115793 4117898

Relevant Architectures: i386

Patches accumulated and obsoleted by this patch: 105777-01 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch:

/kernel/fs/procfs
/kernel/genunix
/platform/i86pc/kernel/unix
/usr/include/sys/proc.h
/usr/include/sys/proc/prdata.h

Problem Description:

4114176 system panics due to one lwp closing another lwp's /proc file descriptor
4117898 panic in procfs due to unprotected reference count
4115793 /proc security too restrictive; a process should be able to open itself
4106093 system hangs during high I/O loads (bread/bflush deadlock)
4101647 loop-back mounts of /proc (for chroot(1M)) are insecure and broken
4099656 httpd process hangs and can't be killed
4097082 _lwp_sigredirect() if called from a non-mt process panics kernel.
4095411 softintrs handled in software is not MP safe
1237009 users umask modifies ACL's of new files under default ACL's
4073684 "mkdir -p dir" and "mkdir dir" work differently in the presence of default ACLs

(from 105182-04)

4090862 speculative TLB loading causes data corruption and may panic the system
4089451 doors/scheduler activation broken in the execed process
4086905 interrupt flurry can cause a double fault
4067641 changing acl's on a UFS fs mounted readonly causes machine to panic

(from 105182-03)

4070968 a synch object that spans pages can cause deadlock

(from 105182-02)

4062572 syncing page gives up during shutdown
4070968 a synch object that spans pages can cause deadlock
4076062 sigtimedwait() returns immediately
4077343 sun4u systems incorrectly report "sync - giving up" while halting

(from 105182-01)

4064495 Workaround needed for some x86 MP machines

(from 105777-01)

4090929 system panics due to infinite recusion in prrealvp

Patch Installation Instructions: 
-------------------------------- 
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.

Special Install Instructions: 
----------------------------- 
Reboot the system after patch installation.

	NOTE 1:  To get the complete fix for bug 4090929 (system panics due to
       	         infinite recursion in prrealvp) we recommend installation of
                 rev 01 (or greater revisions) of the following patches:

                	105779-01  /kernel/fs/specfs
                	105781-01  /kernel/fs/fifofs

	NOTE 2:  To get the complete fix for 1237009 (users umask modifies
                 ACL's of new files under default ACL's) and 4073684 (mkdir
                 -p dir" and "mkdir dir" work differently in the presence
                 of default ACLs), we recommend installation of rev 01
                 (or greater revisions) of the /usr/bin/mkdir patch:

			106142-01  /usr/bin/mkdir

	         As a result of this fix for 1237009, the umask/ACL interaction  
		 has changed.  

                 Please refer to the following paragraph for a revision to the
		 manpage for the command 'setfacl' which defines the new umask/ACL
                 interaction.

                 ************************************************************

                 A directory may contain default ACL entries.  If a  file
                 is created in a directory that contains default ACL entries,
                 the newly created file will have permissions generated
                 according to the intersection of the default ACL entries,
                 and the permissions requested at creation time.

                 The umask(1) will not be applied if the directory contains
                 default ACL entries. If a default ACL is specified for a
                 specific user (or users), the file will have a regular ACL
                 created;  otherwise, only the mode bits will be initialized
                 according to the intersection described above.  The default
                 ACL should be thought of as the maximum discretionary access
                 permissions that may be granted.

                *************************************************************
</pre></body></html>