SGI Logo
 
 

Patch 1598 : Searchbook and iconbook file permissions security patch in 6.2 : [IRIX 6.2]
INDEX

  • Relations
  • Release Notes
  • Inst Subsystem Requirements
  • Inst Subsystem Checksums
  • Inst Subsystem File Listings
  • Download Patch


    RELATIONS

    This patch does not replace any other patches.

    This patch has no known incompatiblities with other patches.

    This patch fixes the following bugs:
    431565 - /usr/sbin/iconbook has permissions security issue for 5.2-6.2


    RELEASE NOTES

    1. Patch SG0001598 Release Note

           This release note describes patch SG0001598 to IRIX 6.2.
    
    
    1.1 Supported Hardware Platforms
           This patch contains bug fixes for all.  The software cannot
           be installed on other configurations.
    
    
    1.2 Supported Software Platforms
           This patch contains bug fixes for IndigoMagic Desktop
           (version 1232792133) on a system running IRIX 6.2.  The
           software cannot be installed on other configurations.
    
    
    1.3 Bugs Fixed by Patch SG0001598
           This patch contains fixes for the following bugs in IRIX
           6.2.  Bug numbers from Silicon Graphics bug tracking system
           are included for reference.
    
              o  This patch fixes bug no. 431565 for IRIX 6.2.  On
                editing iconbook or searching for files using
                searchbook, the files thus created in &lthome
                dir>/.desktop-&lthostname>/iconbook and
                &lthomedir&gt.desktop-&lthostname>/ searchbook had 666
                permissions. This security hole is fixed by this patch.
    
    
    1.4 Subsystems Included in Patch SG0001598
           This patch release includes these subsystems:
    
              o patchSG0001598.desktop_base_sw.dso
    
    
    1.5 Installation Instructions
           Because you want to install only the patches for problems
           you have encountered, patch software is not installed by
           default.  After reading the descriptions of the bugs fixed
           in this patch (see Section 1.3), determine the patches that
           meet your specific needs.
    
           If, after reading Sections 1.1 and 1.2 of these release
           notes, you are unsure whether your hardware and software
           meet the requirements for installing a particular patch, run
           inst.  The inst program does not allow you to install
           patches that are incompatible with your hardware or
           software.
    
    
           Patch software is installed like any other Silicon Graphics
           software product.  Follow the instructions in your Software
           Installation Administrator's Guide to bring up the miniroot
           form of the software installation tools.
    
           Follow these steps to select a patch for installation:
    
             1.  At the Inst> prompt, type
    
                 install patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             2.  Initiate the installation sequence. Type
    
                 Inst> go
    
             3.  You may find that two patches have been marked as
                 incompatible.  (The installation tools reject an
                 installation request if an incompatibility is
                 detected.)  If this occurs, you must deselect one of
                 the patches.
    
                 Inst> keep patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             4.  After completing the installation process, exit the
                 inst program by typing
    
                 Inst> quit
    
    
    1.6 Patch Removal Instructions
           To remove a patch, use the versions remove command as you
           would for any other software subsystem.  The removal process
           reinstates the original version of software unless you have
           specifically removed the patch history from your system.
    
           versions remove patchSGxxxxxxx
    
           where xxxxxxx is the patch number.
    
           To keep a patch but increase your disk space, use the
           versions removehist command to remove the patch history.
    
           versions removehist patchSGxxxxxxx
    
    
           where xxxxxxx is the patch number.
    
    
    1.7 Known Problems
    
    
    INST SUBSYSTEM REQUIREMENTS
    No Requirements Information Available.
    

    INST SUBSYSTEM CHECKSUMS

    These checksums help to provide a 'signature' for the patch inst image which can be used to authenticate other inst images. You can obtain this kind of output by running sum -r on the image (from the command line):

    27329      1   patchSG0001598
    19453   1660   patchSG0001598.desktop_base_sw
    26176      2   patchSG0001598.idb
    

    INST SUBSYSTEM FILE LISTINGS

    The following lists the files which get installed from each subsystem in the patch:

    patchSG0001598.desktop_base_sw.dso
    usr/lib/libdesktopIcon.so
    usr/relnotes/patchSG0001598/TC
    usr/relnotes/patchSG0001598/ch1.z


    DOWNLOAD PATCH
    Download Server File Name Date Added Size Download
    download.sgi.com patchSG0001598.tar 05-Dec-1996 844 K FTP HTTP Add to download cart 
    download.sgi.com patchSG0001598.tardist 05-Dec-1996 844 K FTP HTTP
     
    FTP = download using FTP protocol
    HTTP = download using HTTP protocol
    Add to shopping list= store in your basket for downloading later
  •  


    Document Id: 20021117063852-IRIXPatch-991