<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Patch-ID# 114916-01
Keywords: security ed tempfiles
Synopsis: Trusted Solaris 8 4/01: ed patch
Date: Apr/17/2003

Install Requirements: None                      
                      
Solaris Release: Trusted_Solaris_8_4/01

SunOS Release: N/A

Unbundled Product: 

Unbundled Release: 

Xref: 

Topic: Trusted Solaris 8 4/01: ed patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4777716

Changes incorporated in this version: 4777716

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/bin/ed
/usr/bin/red
/usr/xpg4/bin/ed

Problem Description:

4777716 Port fix for 4397459 *ed* creates tempfiles in an insecure manner

Patch Installation Instructions:
-------------------------------- 
Refer to the man pages for instructions on using the
generic 'patchadd' and 'patchrm' scripts.
Any other special or non-generic installation
instructions should be described below as special instructions.

Special Install Instructions:
----------------------------- 
Note:
 
The steps below assume the patch file has been placed
into the ADMIN_LOW subdirectory of /tmp (/tmp is a MLD)
and that the patch file label is configured to ADMIN_LOW.
Create a role that contains the Software Installation profile
(typically the admin role).  The patch file should be owned
by this role.  Keep in mind, after rebooting, contents in the
/tmp directory are removed; if saving the patch tarfile is
desired, select another MLD such as /var/tmp.
 
        1) Login as a user authorized to assume a role that
        contains the Software Installation profile; typically
        the admin role.  Assume that role. 
 
        2) cd into /tmp and unzip the patch file.  A patch
        directory will be created by the unzip command.
 
        # cd /tmp
        # unzip &lt;123456-01.zip&gt;
 
        3) Install the patch by typing:
 
        # patchadd /tmp/&lt;patch_dir&gt;
 
Special Backout Instructions:
-----------------------------
 
 
        1) Login as a user authorized to assume a role that contains
        the Software Installation profile; typically the admin role.
        Assume that role.
 
        2) Backout patch by typing:
 
        # patchrm &lt;patch-id&gt;
 
        where &lt;patch-id&gt; is the patch number.

README -- Last modified date:  Thursday, April 17, 2003

</pre></body></html>