Patch Name: PHCO_18764

Patch Description: s700_800 10.26 kill(1) command audit enhancement

Creation Date: 99/10/11

Post Date:  99/10/15

Hardware Platforms - OS Releases:
	s700: 10.26
	s800: 10.26

Products: N/A

Filesets:
	OS-Core.CORE-ENG-A-MAN OS-Core.UX-CORE

Automatic Reboot?: No

Status: General Release

Critical: No

Path Name: /hp-ux_patches/s700_800/10.X/PHCO_18764

Symptoms:
	PHCO_18764:
	kill(1) command doesn't do any auditing

Defect Description:
	PHCO_18764:
	Kill command needs to do auditing to help distinguish
	between normally terminated sessions and killed sessions.

	Resolution:
	Added auditing to kill command. The name of the command
	to which the signal is sent is extracted and logged.
	Modified kill command man page to include auditing
	information.

SR:
	1653305227

Patch Files:
	/usr/bin/kill
	/usr/share/man/man1.Z/kill.1

what(1) Output:
	/usr/bin/kill:
		1999/10/05 Hewlett-Packard HP-UX 10.26 TOS [ ic5dm -
			 DAV17 ]
		99/10/01 cmd/kill.c, hpux, hpux_10.26, ic5dm Revisio
			n 1.5 PATCH_10.26 (PHCO_18764)
		$Revision: 76.2 $
	/usr/share/man/man1.Z/kill.1:
		None

cksum(1) Output:
	3745151779 16384 /usr/bin/kill
	2359223393 5441 /usr/share/man/man1.Z/kill.1

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches: None

Patch Package Size: 80 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHCO_18764

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHCO_18764.depot

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHCO_18764.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	WARNING: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHCO_18764.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHCO_18764.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None