OBSOLETE Patch-ID# 101386-01 Keywords: path, unsecure, modules, openwindows, security, loadmodule, script Synopsis: OBSOLETED by 100448 Date: Dec/01/93 Solaris Release: 1.0, 1.1, 1.1C, 1.1.1 SunOS Release: 4.1.2, 4.1.3, 4.1.3C, 4.1.3_u1 Unbundled Product: OpenWindows Unbundled Release: 3.0 Relevant Architectures: sparc BugId's fixed with this patch: 1148753 Changes incorporated in this version: 1148753 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: 100448-01 101200-01 Obsoleted by: 100448 Files included with this patch: 59105 1 sun4/evqload 37406 1 sun4/winlockload Problem Description: 1148753 loadmodule scripts in /etc/openwin/modules open up security holes Patch Installation Instructions: 1. Become root su 2. move the old scripts to FCS mv $OPENWINHOME/modules/evqload $OPENWINHOME/modules/evqload.fcs mv $OPENWINHOME/modules/winlockload $OPENWINHOME/modules/winlockload.fcs mv /etc/openwin/modules/evqload /etc/openwin/modules/evqload.fcs mv /etc/openwin/modules/winlockload /etc/openwin/modules/winlockload.fcs 3. copy the new scripts from sun4 directory cp ./sun4/evqload $OPENWINHOME/modules/evqload cp ./sun4/winlockload $OPENWINHOME/modules/winlockload cp ./sun4/evqload /etc/openwin/modules/evqload cp ./sun4/winlockload /etc/openwin/modules/winlockload 4. set the permissions appropriately chmod 0511 $OPENWINHOME/modules/evqload chmod 0511 $OPENWINHOME/modules/winlockload chmod 0511 /etc/openwin/modules/evqload chmod 0511 /etc/openwin/modules/winlockload