OBSOLETE Patch-ID# 103696-05
Keywords: security single user su C2 TZ password log authentication
Synopsis: Obsoleted by: 103640-35 SunOS 5.5.1: /sbin/su, /usr/bin/su and /sbin/sulogin patch
Date: Mar/19/1999

Solaris Release: 2.5.1

SunOS Release: 5.5.1

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 103697

Topic: SunOS 5.5.1: /sbin/su, /usr/bin/su and /sbin/sulogin patch

Relevant Architectures: sparc

BugId's fixed with this patch: 1237257 1244971 1254449 4010565 4078468 4167968

Changes incorporated in this version: 4167968

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 
	NOTE:  Refer to Special Install Instructions section for 
               IMPORTANT specific information on this patch.
NOTE: updated on 10.5.00 as 103612-02 (or newer) was obsoleted by 103640


Obsoleted by: 103640-35

Files included with this patch: 

/sbin/su
/sbin/sulogin
/usr/bin/su

Problem Description:

4167968 su - can create corrupted environment - Backport of 1214794
(from 103696-04)
4078468 su.static and sulogin fail to build because of bug fix 4031930
(from 103696-03)
4010565 su can be interrupted by <control-C> and not logged in /var/adm/log
(from 103696-02)
1237257 su change between 2.4 and 2.5 for user without password
(from 103696-01)
1254449 /sbin/su dumps core if c2 security is enabled.
1244971 solaris 2.3, patch 101318-77 has a bug, it can''t handle `boot -s` correctly.

Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file within the patch for instructions on
using the generic ''installpatch'' and ''backoutpatch'' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
-----------------------------
This patch requires the 2.5.1 sparc libc patch, 103612-02 or higher.
	NOTE:   If this patch is installed without the pam security
        	patch (104433-04 or higher), the su invalid password
        	sleep time will be doubled.

README -- Last modified date:  Thursday, March 8, 2001