<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Patch-ID# 117574-01
Keywords: security nfs otw
Synopsis: Trusted_Solaris_8_HW_12/02_x86: procfs patch
Date: May/28/2004


Install Requirements: Reboot after installation                      
                      
Solaris Release: Trusted_Solaris_8_HW_12/02_x86

SunOS Release: Trusted_Solaris_8_HW_12/02_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 117573

Topic: Trusted_Solaris_8_HW_12/02_x86: procfs patch

Relevant Architectures: i386

BugId's fixed with this patch: 4932041

Changes incorporated in this version: 4932041

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/kernel/fs/procfs

Problem Description:

4932041 proc tools produce revealing error messages to unprivileged subjects

Patch Installation Instructions:
--------------------------------
 
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
scripts provided with Trusted Solaris. Any other special or non-generic
installation instructions should be described below as special instructions.
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
NOTE 1: In order to get the full fix for bug 4932041
        one will also need to apply the following patch:
 
	116147-03 (or newer)     genunix_policy patch
 
The steps below assume the patch has been put into an ADMIN_LOW
directory in /var/tmp and the patch file label is configured to ADMIN_LOW.
 
Create a role which contains the Software Installation profile
(typically admin role is assigned this profile) and whose label
range includes the ADMIN_LOW label.  All the steps in the patch
installation should be executed at ADMIN_LOW.
 
The patch should be owned by this role.
 
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchadd".
 
        The result should be:
         /usr/sbin/patchadd    uid=0, privs=all, label=admin_low
 
        2) cd into /var/tmp and install the patch file.
 
        # cd /var/tmp
        # patchadd /var/tmp/&lt;patch-id&gt;
 
        where &lt;patch-id&gt; is the patch number.
 
Special Backout Instructions:
-----------------------------
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchrm".
 
        The result should be:
        /usr/sbin/patchrm    uid=0, privs=all, label=admin_low
 
        2) Backout patch by typing:
 
        # patchrm &lt;patch-id&gt;
 
        where &lt;patch-id&gt; is the patch number.

README -- Last modified date:  Friday, May 28, 2004

</pre></body></html>