What is Escalations Supplement erg712629c, the UnixWare fs and namefs driver update? Problem Fixed ------------- 1. Fixed panic that can sometimes occur due to race condition between fdetach of a named pipe and the last close on the pipe's file descriptors. Ref. erg711929 erg712629 fz519727 2. SECURITY: A new file system tunable, CHROOT_SECURITY is provided to protect against a known exploit for escaping from a chroot prison. The new tunable is described in /etc/conf/dtune.d/fs and defined in /etc/conf/mtune.d/fs. Protection is provided by the defaault value of 1 but traditional behavior may be obtained by resetting CHROOT_SECURITY to 0. Ref. erg712509 fz528555 Contents -------- /etc/conf/dtune.d/fs /etc/conf/mtune.d/fs /etc/conf/pack.d/fs/Driver_atup.o /etc/conf/pack.d/fs/Driver_mp.o /etc/conf/pack.d/fs/space.c /etc/conf/pack.d/namefs/Driver_atup.o /etc/conf/pack.d/namefs/Driver_mp.o /usr/include/sys/vfs.h Software Notes and Recommendations ---------------------------------- erg712629c should only be installed on: UnixWare 7.1.4 Warning ------- This package is produced by the SCO Escalations Research Group and is not intended for general distribution. It has been produced to address a particular problem and has not been tested in all system configurations. Installation Instructions ------------------------- 1. Download the erg712629c.Z file to the /tmp directory on your machine. 2. As root, add the package to your system using these commands: $ su - Password: # zcat /tmp/erg712629c.Z | pkgadd -d - Alternatively, this package may be installed in quiet mode, that is, without displaying the release notes and asking for confirmation. To do this, use these commands: $ su - Password: # zcat /tmp/erg712629c.Z | pkgadd -qd - all 3. Reboot the system after installing this package. Removal Instructions -------------------- 1. As root, remove the package using these commands: $ su - Password: # pkgrm erg712629 2. Reboot the system after removing this package. If you have questions regarding this supplement, or the product on which it is installed, please contact your software supplier.