Patch Name: PHCO_21991 Patch Description: s700_800 10.10 auto_parms/set_parms Creation Date: 00/08/07 Post Date: 00/08/21 Hardware Platforms - OS Releases: s700: 10.10 s800: 10.10 Products: N/A Filesets: OS-Core.UX-CORE Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHCO_21991 Symptoms: PHCO_21991: 1. In some cases, a non-privileged local user could prevent an HP-UX machine from booting properly. 2. A user could obtain unauthorized privileges. Defect Description: PHCO_21991: Insecure operations in shell code. SR: 0000000000 Patch Files: /sbin/set_parms /sbin/set_parms.util /sbin/set_parms.d/05_hostname /sbin/set_parms.d/20_ip_address /sbin/set_parms.d/25_addl_netwrk what(1) Output: /sbin/set_parms: $Revision: 10.1.1 $ /sbin/set_parms.util: $Revision: 10.1.1 $ /sbin/set_parms.d/05_hostname: $Revision: 10.1.1 $ /sbin/set_parms.d/20_ip_address: $Revision: 10.2.1 $ /sbin/set_parms.d/25_addl_netwrk: $Revision: 10.1.1 $ cksum(1) Output: 962062191 23757 /sbin/set_parms 922145462 42907 /sbin/set_parms.util 4177347622 13305 /sbin/set_parms.d/05_hostname 1784069589 9243 /sbin/set_parms.d/20_ip_address 2708912641 39196 /sbin/set_parms.d/25_addl_netwrk Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: PHCO_21990: s700: 10.01 s800: 10.01 PHCO_21992: s700: 10.20 s800: 10.20 PHCO_21993: s700: 11.00 s800: 11.00 Patch Package Size: 180 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHCO_21991 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHCO_21991.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHCO_21991. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHCO_21991.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHCO_21991.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: None