<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Patch-ID# 108101-02
Keywords: Starfire alternate pathing security
Synopsis: AP 2.0.1: SECURITY: meta drivers have world read/write permissions!
Date: Apr/10/00

Solaris Release: 2.5.1

SunOS release: 5.5.1

Unbundled Product: Alternate Pathing (AP)

Unbundled Release: 2.0.1

Topic: AP 2.0.1: SECURITY: meta drivers have world read/write permissions!

BugId's fixed with this patch: 4215821 4244664 4291115 4311971

Changes incorporated in this version: 4291115 4311971

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/kernel/drv/mge
/kernel/drv/mhme
/kernel/drv/mle
/kernel/drv/mnf
/kernel/drv/mqe
/kernel/drv/mqfe

Problem Description:

4291115 switching of mether with IP traffic can cause panic
4311971 recursive mutex_enter panic on OS 2.6 running with AP 2.3 and Trunking/GEM

(from 108101-01)

4215821 first manual ap switch of ethernet metadevice loses communication for a while
		Due to the various configurations of network switches
		and routers, there may still be some period immediately
		following a switch on the AP path during which traffic
		will appear to be suspended.  This period can last up
		to 90 seconds, after which traffic will resume
		normally.  This is a side effect of the various media
		negotiation and topology "learning" used by some switch
		manufacturers.  It may be possible to reduce this delay
		by configuring the underlying device drivers (e.g. hme)
		and the switch with similiar link parameters (speed,
		duplex), and disabling the autoconfiguration features
		on your switch or router.  Consult the physical device
		driver and switch documentation for details on the
		specific steps.  Note that in no case should a delay of
		more than 90 seconds be experienced, and in no case
		should this cause TCP or RPC connections to be
		dropped.
4244664 SECURITY: meta drivers have world read/write permissions!

Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch. Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
-----------------------------
none
</pre></body></html>