Patch Name: PHCO_18755

Patch Description: s700_800 10.26 ps does not report process status correctly

Creation Date: 99/08/23

Post Date:  99/08/27

Hardware Platforms - OS Releases:
	s700: 10.26
	s800: 10.26

Products: N/A

Filesets:
	OS-Core.UX-CORE

Automatic Reboot?: No

Status: General Release

Critical: No

Path Name: /hp-ux_patches/s700_800/10.X/PHCO_18755

Symptoms:
	PHCO_18755:
	Without macquery authorization, a process is restricted
	to viewing only those processes with sensitivity labels
	that are matched by the requesting process sensitivity
	label.

Defect Description:
	PHCO_18755:
	The command ps uses pstat() system call to read the process
	status of all the processes. Without allowmacread privilege,
	kernel returns the status of only those processes with
	sensitivilty labels that are matched by the requesting
	process sensitivity label.

	Resolution:
	The command ps first raises the allowmacread privilege
	and then calls pstat() to read the status of all the
	processes in the system. Then the status of only those
	processes with sensitivity labels that are dominated by
	the requesting process' label is reported.

SR:
	1653306001

Patch Files:
	/usr/bin/ps

what(1) Output:
	/usr/bin/ps:
		1999/08/17 Hewlett-Packard HP-UX 10.26 TOS [ ic5cy -
			 DAV17 ]
		ps.c  $Revision: 78.2 $ $Date: 96/03/14 14:42:49 $
		99/08/17 cmd/ps/ps.c, hpux, hpux_10.26, ic5cy Revisi
			on 1.4 PATCH_10.26 (PHCO_18755)

cksum(1) Output:
	3834925074 36864 /usr/bin/ps

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches: None

Patch Package Size: 90 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHCO_18755

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHCO_18755.depot

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHCO_18755.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	WARNING: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHCO_18755.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHCO_18755.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None