Patch Name: PHCO_29216

Patch Description: s700_800 10.26 libsecurity cumulative patch

Creation Date: 03/06/25

Post Date: 03/06/27

Hardware Platforms - OS Releases:
	s700: 10.26
	s800: 10.26

Products: N/A

Filesets:
	BLS.BLS-CORE BLS.BLS-ENG-A-MAN BLS.MAXSIX
	ProgSupport.PROG-MIN

Automatic Reboot?: Yes

Status: General Release

Critical:
	No (superseded patches were critical)
	PHCO_28757: MEMORY_LEAK
	PHCO_18179: MEMORY_LEAK

Path Name: /hp-ux_patches/s700_800/10.X/PHCO_29216

Symptoms:
	PHCO_29216:
	1. getprpwent() routine doesn't return NIS users if
	   "hipfiltered" privilege is not present in the
	   potential set, even if hip is not configured
	   in the system.

	PHCO_28919:
	1. Possible core dump by check_cmdauth.

	PHCO_28757:
	1. Applications using mapping routines like
	   pw_idtoname(), pw_nametoid(), gr_idtoname() or
	   gr_nametoid() leaks memory.

	PHCO_27822:
	Yppullc consumes 90% of the CPU time forever.

	PHCO_23735:
	Trusted login hangs for upto 15 minutes on a busy system

	PHCO_20467:
	The system hangs as a result of crashed mandatory
	access policy daemon (macilbd).

	PHCO_20430:
	On starting the NIS client processes on the NIS master
	machine, ypullc starts hogging the CPU time.

	PHCO_19042:
	Smartcard does not password authenticate correctly

	PHCO_18502:
	Functions to access protected password database that take
	directory as argument do not exist.
	Getprpwent function stops returning nis entries after
	it returns the first one.

	PHCO_18179:
	Memory leak in security policy daemons

	PHCO_17856:
	We need to create strsecerror function in libsecurity.
	It should work the same way as psecerror except that it
	returns the message string instead of sending it to the
	standard error.

	PHCO_17760:
	There is no way to get the classification string from
	an IR in all Encodings cases. Additionally, the SHORT_WORDS
	specifier has no effect on the returned classification. It
	always returns the long form.

Defect Description:
	PHCO_29216:
	1. getprpwent() routine doesn't return NIS users if
	   "hipfiltered" privilege is not present in the
	   potential set, even if hip is not configured
	   in the system.

	Resolution:
	Code has been modified to take care of this issue.

	PHCO_28919:
	1. check_cmdauth dumps core if the authorization
	   is more than 80 characters.

	Resolution:
	1. Code has been modified to prevent core dump by
	   check_cmdauth.

	PHCO_28757:
	1. Applications using mapping routines like
	   pw_idtoname(), pw_nametoid(), gr_idtoname() or
	   gr_nametoid() leaks memory.

	Resolution:
	1. Code has been modified to reuse the previously
	   allocated memory.

	PHCO_27822:
	When a NIS map is changed in the server side,yppullc
	sometimes goes in to an infinite loop.This is because
	of a list that was not managed properly in the
	libsecurity library.
	Resolution:
	Code has been modified to handle the map transferring
	logic properly.

	PHCO_23735:
	There can be excessive delays if the system has heavy I/O
	through the buffer cache.
	Resolution:
	Replaced the sync() system call with fsync() library
	function

	PHCO_20467:
	Each security policy daemon maintains a cache of its
	security policy database pages to reduce the I/O. The
	cache is being implemented as a list of fixed number of
	buffers. It uses the Least Recently Used (LRU) policy to
	pick a buffer for reuse.  In certain conditions, the daemon
	fails to pick any buffer even if buffers are available.
	It results in a crash of security policy daemons

	PHCO_20430:
	On starting the yppullc, it starts monitoring the password
	and group maps on the NIS master machine for the updates.
	On detecting a change, it triggers the regeneartion of
	pw_id_map and gr_id_map on all the clients. These maps are
	generated in the context of yppullc or any other processes
	whoever tries to map the user name or group name to its id
	first. Most of the time, it happens in the context of
	yppullc. Because of a defect in the map generation logic,
	it loops forever.

	PHCO_19042:
	The password changing commands need to know
	CRString for a new password to perform the password history
	checks. Currently, these commands are invoking
	smartcard_PWchange() twice in succession to achieve this
	functionality. The first invokation sets the new password
	and the second invokation restores the old password. This is
	just a workaround which is causing problem in developing the
	Smartcard hook library.

	Resolution: Added a new hook in the libSmartCard library to
	get the CRstring for a new passwword without writing into
	the Smart Card. All the commands which change the user
	passwords have been modified to invoke the hook.

	PHCO_18502:
	Functions fgetprpwnam and fputprpwnam need to be created.
	They will read/write protected password entry from the
	desired directory. NIS does not need to be up.
	Getprpwent function is calling other functions which will
	reset the pointer when NIS users are accessed.

	Resolution:
	Two new functions are created:
	struct pr_passwd *fgetprpwnam(char *nam, char *authdir)
	int
	fputprpwnam(char *nam, struct pr_passwd *p, char *authdir)
	They can be used to access any desired protected password
	directory and read and write entries from there.
	Getprpwent function was redesigned so that it does not
	call the function that reset the entry pointer so that all
	the entries are now correctly returned.

	PHCO_18179:
	The daemon fails to release the lock on the memory
	page in some error cases. This results a process
	space memory leak.  This size of the daemon grows
	over a long period of time and eventually the daemon
	dies and the system becomes unusable.

	Resolution:
	Release page lock under error conditions.

	PHCO_17856:
	New requirement.

	Resolution:
	Create the function and the man page.

	PHCO_17760:
	New requirement.

	Resolution:
	Provide a new interface to retrieve classification from a
	valid IR.

SR:
	0000000000

Patch Files:
	/usr/lib/libsec.a(smartcard.o)
	/usr/lib/libsec.a(map_ids.o)
	/usr/lib/libsec.a(discr.o)
	/usr/lib/libsecurity.1
	/tcb/bin/acld
	/tcb/bin/dbck
	/tcb/bin/m6d
	/tcb/bin/m6dbck
	/tcb/bin/m6mkdb
	/tcb/bin/macilbd
	/tcb/bin/mkdb
	/usr/include/mandatory.h
	/usr/lib/libsec.a(mandlib.o)
	/usr/lib/libsec.a(psecerror.o)
	/usr/lib/libsec.a(getprpwent.o)
	/usr/lib/libsec.a(authcap.o)
	/usr/share/man/man3.Z/mand.3
	/usr/share/man/man3.Z/mand_ir_to_class_er.3
	/usr/share/man/man3.Z/psecerror.3
	/usr/share/man/man3.Z/strsecerror.3
	/usr/lib/libsec.a(subsystems.o)

what(1) Output:
	/usr/lib/libsec.a(smartcard.o):
		99/06/25 lib/libsecurity/smartcard.c, hpux, hpux_10.
			26, ic5cv Revision 1.4 PATCH_10.26 (PHCO_190
			42)
	/usr/lib/libsec.a(map_ids.o):
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
	/usr/lib/libsec.a(discr.o):
		01/03/26 lib/libsecurity/discr.c, hpux, hpux_10.26,
			ic5fq Revision 1.3 PATCH_10.26 (PHCO_23735)
	/usr/lib/libsecurity.1:
		2003/06/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5ib -
			 DAV17 ]
		99/05/21 lib/libsecurity/authcap.c, hpux, hpux_10.26
			, ic5ib Revision 1.5 PATCH_10.26 (PHCO_18502
			)
		01/03/26 lib/libsecurity/discr.c, hpux, hpux_10.26,
			ic5ib Revision 1.3 PATCH_10.26 (PHCO_23735)
		03/06/24 lib/libsecurity/getprpwent.c, hpux, hpux_10
			.26, ic5ib Revision 1.28 PATCH_10.26 (PHCO_2
			9216)
		03/06/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5ib Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5ib Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		99/03/09 lib/libsecurity/psecerror.c, hpux, hpux_10.
			26, ic5ib Revision 1.4 PATCH_10.26 (PHCO_178
			56)
		03/04/23 lib/libsecurity/subsystems.c, hpux, hpux_10
			.26, ic5ib Revision 1.6 PATCH_10.26 (PHCO_28
			919)
		99/05/21 lib/libsecurity/chsecattr.c, hpux, hpux_10.
			26, ic5ib Revision 1.3 PATCH_10.26 (PHCO_185
			02)
		99/06/25 lib/libsecurity/smartcard.c, hpux, hpux_10.
			26, ic5ib Revision 1.4 PATCH_10.26 (PHCO_190
			42)
	/tcb/bin/acld:
		HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		00/01/05 lib/libc/net/net/innetgr.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_all.c, hpux, hpux_10.26,
			 ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782)
		01/02/01 lib/libc/core/stdio/doprnt.c, hpux, hpux_10
			.26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_23
			181) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_bind.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782
			)
		00/01/05 lib/libc/net/yp/yp_match.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2)
		00/01/05 lib/libc/net/rpc/xdr_mem.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		2003/02/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5hk -
			 DAV17 ]
		99/11/15 seccmd/secpolicy/spdbm.c, hpux, hpux_10.26,
			 ic5hk Revision 1.7 PATCH_10.26 (PHCO_20467)
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		03/02/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		ic5ae_DAV17 lib/libc/archive_pa1/libc.a_01
		Feb 24 2003 12:03:18
	/tcb/bin/dbck:
		HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		03/02/24 lib/libc/core/gen/ctime.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_17823
			) UNMODIFIED
		00/01/05 lib/libc/net/net/innetgr.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_all.c, hpux, hpux_10.26,
			 ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782)
		00/01/05 lib/libc/net/yp/yp_bind.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782
			)
		01/02/01 lib/libc/core/stdio/doprnt.c, hpux, hpux_10
			.26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_23
			181) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_match.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2)
		00/01/05 lib/libc/net/rpc/xdr_mem.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		2003/02/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5hk -
			 DAV17 ]
		99/11/15 seccmd/secpolicy/spdbm.c, hpux, hpux_10.26,
			 ic5hk Revision 1.7 PATCH_10.26 (PHCO_20467)
		01/03/26 lib/libsecurity/discr.c, hpux, hpux_10.26,
			ic5hk Revision 1.3 PATCH_10.26 (PHCO_23735)
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		03/02/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		99/05/21 lib/libsecurity/authcap.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_18502
			)
		ic5ae_DAV17 lib/libc/archive_pa1/libc.a_01
		Feb 24 2003 12:03:18
	/tcb/bin/m6d:
		HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		03/02/24 lib/libc/core/gen/ctime.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_17823
			) UNMODIFIED
		00/01/05 lib/libc/net/net/innetgr.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_all.c, hpux, hpux_10.26,
			 ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782)
		00/01/05 lib/libc/net/yp/yp_bind.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782
			)
		00/01/05 lib/libc/net/yp/yp_master.c, hpux, hpux_10.
			26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_207
			82)
		01/02/01 lib/libc/core/stdio/doprnt.c, hpux, hpux_10
			.26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_23
			181) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_match.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2)
		00/01/05 lib/libc/net/rpc/xdr_mem.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		2003/02/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5hk -
			 DAV17 ]
		seccmd/msix/m6d.c, m6d, hpux_mlpmp, mlpmp6 $Date: 96
			/12/04 15:47:33 $Revision: 1.22 PATCH_10.16
			(PHCO_7524)
		99/11/15 seccmd/secpolicy/spdbm.c, hpux, hpux_10.26,
			 ic5hk Revision 1.7 PATCH_10.26 (PHCO_20467)
		01/03/26 lib/libsecurity/discr.c, hpux, hpux_10.26,
			ic5hk Revision 1.3 PATCH_10.26 (PHCO_23735)
		03/02/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		99/05/21 lib/libsecurity/authcap.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_18502
			)
		ic5ae_DAV17 lib/libc/archive_pa1/libc.a_01
		Feb 24 2003 12:03:18
	/tcb/bin/m6dbck:
		HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		03/02/24 lib/libc/core/gen/ctime.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_17823
			) UNMODIFIED
		00/01/05 lib/libc/net/net/innetgr.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_all.c, hpux, hpux_10.26,
			 ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782)
		00/01/05 lib/libc/net/yp/yp_bind.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782
			)
		01/02/01 lib/libc/core/stdio/doprnt.c, hpux, hpux_10
			.26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_23
			181) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_match.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2)
		00/01/05 lib/libc/net/rpc/xdr_mem.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		2003/02/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5hk -
			 DAV17 ]
		99/11/15 seccmd/secpolicy/spdbm.c, hpux, hpux_10.26,
			 ic5hk Revision 1.7 PATCH_10.26 (PHCO_20467)
		01/03/26 lib/libsecurity/discr.c, hpux, hpux_10.26,
			ic5hk Revision 1.3 PATCH_10.26 (PHCO_23735)
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		03/02/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		99/05/21 lib/libsecurity/authcap.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_18502
			)
		ic5ae_DAV17 lib/libc/archive_pa1/libc.a_01
		Feb 24 2003 12:03:18
	/tcb/bin/m6mkdb:
		HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		03/02/24 lib/libc/core/gen/ctime.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_17823
			) UNMODIFIED
		00/01/05 lib/libc/net/net/innetgr.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_all.c, hpux, hpux_10.26,
			 ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782)
		00/01/05 lib/libc/net/yp/yp_bind.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782
			)
		01/02/01 lib/libc/core/stdio/doprnt.c, hpux, hpux_10
			.26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_23
			181) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_match.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2)
		00/01/05 lib/libc/net/rpc/xdr_mem.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		2003/02/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5hk -
			 DAV17 ]
		99/11/15 seccmd/secpolicy/spdbm.c, hpux, hpux_10.26,
			 ic5hk Revision 1.7 PATCH_10.26 (PHCO_20467)
		01/03/26 lib/libsecurity/discr.c, hpux, hpux_10.26,
			ic5hk Revision 1.3 PATCH_10.26 (PHCO_23735)
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		99/05/21 lib/libsecurity/authcap.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_18502
			)
		03/02/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		ic5ae_DAV17 lib/libc/archive_pa1/libc.a_01
		Feb 24 2003 12:03:18
	/tcb/bin/macilbd:
		HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		00/01/05 lib/libc/net/net/innetgr.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_all.c, hpux, hpux_10.26,
			 ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782)
		01/02/01 lib/libc/core/stdio/doprnt.c, hpux, hpux_10
			.26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_23
			181) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_bind.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782
			)
		00/01/05 lib/libc/net/yp/yp_match.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2)
		00/01/05 lib/libc/net/rpc/xdr_mem.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		2003/02/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5hk -
			 DAV17 ]
		03/02/24 seccmd/secpolicy/macilbd.c, hpux, hpux_10.2
			6, ic5hk Revision 1.6 PATCH_10.26 (PHCO_1776
			0)
		99/11/15 seccmd/secpolicy/spdbm.c, hpux, hpux_10.26,
			 ic5hk Revision 1.7 PATCH_10.26 (PHCO_20467)
		03/02/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		ic5ae_DAV17 lib/libc/archive_pa1/libc.a_01
		Feb 24 2003 12:03:18
	/tcb/bin/mkdb:
		HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		03/02/24 lib/libc/core/gen/ctime.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_17823
			) UNMODIFIED
		00/01/05 lib/libc/net/net/innetgr.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_all.c, hpux, hpux_10.26,
			 ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782)
		00/01/05 lib/libc/net/yp/yp_bind.c, hpux, hpux_10.26
			, ic5hk Revision 1.2 PATCH_10.26 (PHCO_20782
			)
		01/02/01 lib/libc/core/stdio/doprnt.c, hpux, hpux_10
			.26, ic5hk Revision 1.2 PATCH_10.26 (PHCO_23
			181) UNMODIFIED
		00/01/05 lib/libc/net/yp/yp_match.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2)
		00/01/05 lib/libc/net/rpc/xdr_mem.c, hpux, hpux_10.2
			6, ic5hk Revision 1.2 PATCH_10.26 (PHCO_2078
			2) UNMODIFIED
		2003/02/24 Hewlett-Packard HP-UX 10.26 TOS [ ic5hk -
			 DAV17 ]
		99/11/15 seccmd/secpolicy/spdbm.c, hpux, hpux_10.26,
			 ic5hk Revision 1.7 PATCH_10.26 (PHCO_20467)
		01/03/26 lib/libsecurity/discr.c, hpux, hpux_10.26,
			ic5hk Revision 1.3 PATCH_10.26 (PHCO_23735)
		03/02/24 lib/libsecurity/map_ids.c, hpux, hpux_10.26
			, ic5hk Revision 1.16 PATCH_10.26 (PHCO_2875
			7)
		99/05/21 lib/libsecurity/authcap.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_18502
			)
		03/02/24 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5hk Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
		ic5ae_DAV17 lib/libc/archive_pa1/libc.a_01
		Feb 24 2003 12:03:18
	/usr/include/mandatory.h:
		$Revision: 1.6 include/mandatory.h, hpux, hpux_10.26
			, ic5bb $ $Date: 99/02/25 16:11:03 $ Hewlett
			-Packard Co. */
		99/02/26 include/mandatory.h, hpux, hpux_10.26, ic5b
			b Revision 1.6 PATCH_10.26 (PHCO_17760) */
	/usr/lib/libsec.a(mandlib.o):
		99/02/26 lib/libsecurity/mandlib.c, hpux, hpux_10.26
			, ic5bb Revision 1.5 PATCH_10.26 (PHCO_17760
			) $
	/usr/lib/libsec.a(psecerror.o):
		99/03/09 lib/libsecurity/psecerror.c, hpux, hpux_10.
			26, ic5bo Revision 1.4 PATCH_10.26 (PHCO_178
			56)
	/usr/lib/libsec.a(getprpwent.o):
		03/06/24 lib/libsecurity/getprpwent.c, hpux, hpux_10
			.26, ic5ib Revision 1.28 PATCH_10.26 (PHCO_2
			9216)
	/usr/lib/libsec.a(authcap.o):
		99/05/21 lib/libsecurity/authcap.c, hpux, hpux_10.26
			, ic5cn Revision 1.5 PATCH_10.26 (PHCO_18502
			)
	/usr/share/man/man3.Z/mand.3:
		None
	/usr/share/man/man3.Z/psecerror.3:
		None
	/usr/share/man/man3.Z/mand_ir_to_class_er.3:
		None
	/usr/share/man/man3.Z/strsecerror.3:
		None
	/usr/lib/libsec.a(subsystems.o):
		03/04/23 lib/libsecurity/subsystems.c, hpux, hpux_10
			.26, ic5ht Revision 1.6 PATCH_10.26 (PHCO_28
			919)

cksum(1) Output:
	2147740892 3872 /usr/lib/libsec.a(smartcard.o)
	3343840040 25148 /usr/lib/libsec.a(map_ids.o)
	2824789469 4872 /usr/lib/libsec.a(discr.o)
	2307300816 385024 /usr/lib/libsecurity.1
	4133915739 523008 /tcb/bin/acld
	552436238 642868 /tcb/bin/dbck
	3994315659 2097288 /tcb/bin/m6d
	1073704621 649592 /tcb/bin/m6dbck
	1385638743 626336 /tcb/bin/m6mkdb
	4039641505 559972 /tcb/bin/macilbd
	342165593 626336 /tcb/bin/mkdb
	2696317173 12952 /usr/include/mandatory.h
	3481558456 13080 /usr/lib/libsec.a(mandlib.o)
	23154580 2072 /usr/lib/libsec.a(psecerror.o)
	3700106534 17604 /usr/lib/libsec.a(getprpwent.o)
	401969751 14232 /usr/lib/libsec.a(authcap.o)
	11071229 10246 /usr/share/man/man3.Z/mand.3
	1539658251 1088 /usr/share/man/man3.Z/psecerror.3
	11071229 10246 /usr/share/man/man3.Z/mand_ir_to_class_er.3
	1539658251 1088 /usr/share/man/man3.Z/strsecerror.3
	376502241 15284 /usr/lib/libsec.a(subsystems.o)

Patch Conflicts: None

Patch Dependencies:
	s700: 10.26: PHKL_17761 PHCO_20322 PHCO_20022
	s800: 10.26: PHKL_17762 PHCO_20322 PHCO_20022

Hardware Dependencies: None

Other Dependencies: None

Supersedes:
	PHCO_28919 PHCO_28757 PHCO_27822 PHCO_18502 PHCO_18179 PHCO_17856
	PHCO_17760 PHCO_19042 PHCO_20430 PHCO_20467 PHCO_23735

Equivalent Patches: None

Patch Package Size: 2470 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHCO_29216

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHCO_29216.depot

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHCO_29216.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	WARNING: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHCO_29216.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHCO_29216.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None