SGI Logo
 
 

Patch 2239 : security for syserr : [IRIX 6.2]
INDEX

  • Relations
  • Release Notes
  • Inst Subsystem Requirements
  • Inst Subsystem Checksums
  • Inst Subsystem File Listings
  • Download Patch


    RELATIONS

    This patch replaces the following patches:
    1326, 1516, 1753

    This patch is incompatible with the following patches:
    1915, 2226

    This patch fixes the following bugs:
    498885 - syserr creates file that could be security issue
    501797 - /usr/lib/desktop/permissions program has a buffer overrun security
                    issu


    RELEASE NOTES

    1. Patch SG0002239 Release Note

           This release note describes patch SG0002239 to IRIX 6.2.
    
           Patch SG0002239 replaces patches(es) SG0001753, SG0001516,
           and SG0001326.
    
           Patch SG0002239 is incompatible with patch SG0001915.
    
    
    1.1 Supported Hardware Platforms
           This patch contains bug fixes for all hardware platforms.
    
    
    1.2 Supported Software Platforms
           This patch contains bug fixes for desktop_eoe.sw.envm
           (1232792133) on a system running 6.2.  The software cannot
           be installed on other configurations.
    
    
    1.3 Bugs Fixed by Patch SG0002239
           This patch contains fixes for the following bugs in IRIX
           6.2.  Bug numbers from Silicon Graphics bug tracking system
           are included for reference.
    
              o A security hole exists in the IRIX 6.2 permissions
                panel that a user can exploit to gain access to the
                system as a privileged user (Bug #501797).
    
              o Syserr creates files that could be a security issue
                (Bug #498885).
    
    
    1.4 Subsystems Included in Patch SG0002239
           This patch release includes these subsystems:
    
              o patchSG0002239.desktop_eoe_sw.envm
    
              o patchSG0002239.sysmon_sw.notifier
    
    
    1.5 Installation Instructions
           Because you want to install only the patches for problems
           you have encountered, patch software is not installed by
           default.  After reading the descriptions of the bugs fixed
           in this patch (see Section 1.3), determine the patches that
           meet your specific needs.
    
    
           If, after reading Sections 1.1 and 1.2 of these release
           notes, you are unsure whether your hardware and software
           meet the requirements for installing a particular patch, run
           inst.  The inst program does not allow you to install
           patches that are incompatible with your hardware or
           software.
    
           Patch software is installed like any other Silicon Graphics
           software product.  Follow the instructions in your Software
           Installation Administrator's Guide to bring up the miniroot
           form of the software installation tools.
    
           Follow these steps to select a patch for installation:
    
             1.  At the Inst> prompt, type
    
                 install patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             2.  Initiate the installation sequence. Type
    
                 Inst> go
    
             3.  You may find that two patches have been marked as
                 incompatible.  (The installation tools reject an
                 installation request if an incompatibility is
                 detected.)  If this occurs, you must deselect one of
                 the patches.
    
                 Inst> keep patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             4.  After completing the installation process, exit the
                 inst program by typing
    
                 Inst> quit
    
    
    1.6 Patch Removal Instructions
           To remove a patch, use the versions remove command as you
           would for any other software subsystem.  The removal process
           reinstates the original version of software unless you have
           specifically removed the patch history from your system.
    
           versions remove patchSGxxxxxxx
    
    
           where xxxxxxx is the patch number.
    
           To keep a patch but increase your disk space, use the
           versions removehist command to remove the patch history.
    
           versions removehist patchSGxxxxxxx
    
           where xxxxxxx is the patch number.
    
    
    1.7 Known Problems
    
    
    INST SUBSYSTEM REQUIREMENTS
    No Requirements Information Available.
    

    INST SUBSYSTEM CHECKSUMS

    These checksums help to provide a 'signature' for the patch inst image which can be used to authenticate other inst images. You can obtain this kind of output by running sum -r on the image (from the command line):

    62613      5   patchSG0002239
    08003    107   patchSG0002239.desktop_eoe_sw
    07661     12   patchSG0002239.idb
    65280   2881   patchSG0002239.sysadmdesktop_sw
    45274     95   patchSG0002239.sysmon_sw
    

    INST SUBSYSTEM FILE LISTINGS

    The following lists the files which get installed from each subsystem in the patch:

    patchSG0002239.desktop_eoe_sw.envm
    usr/lib/X11/app-defaults/Permissions
    usr/lib/desktop/permissions
    usr/relnotes/patchSG0002239/TC
    usr/relnotes/patchSG0002239/ch1.z

    patchSG0002239.sysadmdesktop_sw.clients
    usr/Cadmin/bin/cbizcard
    usr/Cadmin/bin/cexport
    usr/Cadmin/bin/cfile
    usr/Cadmin/bin/cformat
    usr/Cadmin/bin/chaltsys
    usr/Cadmin/bin/chost
    usr/Cadmin/bin/chostInfo
    usr/Cadmin/bin/cimport
    usr/Cadmin/bin/clogin
    usr/Cadmin/bin/cmidi
    usr/Cadmin/bin/cnet
    usr/Cadmin/bin/cnet.script
    usr/Cadmin/bin/configClogin
    usr/Cadmin/bin/copenremoteshell
    usr/Cadmin/bin/copenremotetoolchest
    usr/Cadmin/bin/cpeople
    usr/Cadmin/bin/cports
    usr/Cadmin/bin/cpuView
    usr/Cadmin/bin/crestart
    usr/Cadmin/bin/csetup
    usr/Cadmin/bin/cswap
    usr/Cadmin/bin/diskView
    usr/Cadmin/bin/rchostInfo
    usr/Cadmin/bin/tapeView
    usr/Cadmin/bin/videoView

    patchSG0002239.sysmon_sw.notifier
    usr/sbin/syserr


    DOWNLOAD PATCH
    Download Server File Name Date Added Size Download
    download.sgi.com patchSG0002239.tar 03-Sep-1997 1.5 Mb FTP HTTP Add to download cart 
    download.sgi.com patchSG0002239.tardist 03-Sep-1997 1.5 Mb FTP HTTP
     
    FTP = download using FTP protocol
    HTTP = download using HTTP protocol
    Add to shopping list= store in your basket for downloading later
  •  


    Document Id: 20021117065625-IRIXPatch-1109