Patch-ID# 106439-13 Keywords: security syslogd file descriptors mp pipe -1 Synopsis: SunOS 5.6: /usr/sbin/syslogd patch Date: May/28/2003 Install Requirements: See Special Install Instructions Solaris Release: 2.6 SunOS Release: 5.6 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 106440 Topic: SunOS 5.6: /usr/sbin/syslogd patch Relevant Architectures: sparc BugId's fixed with this patch: 4077873 4091197 4129273 4140423 4145169 4154248 4160727 4162016 4176365 4192420 4220910 4224086 4233526 4243984 4246796 4256338 4271807 4309712 4323101 4336917 4337337 4345133 4345785 4353901 4357732 4369289 4374785 4374974 4385688 4386798 4424387 4429942 4463575 4476741 4519254 4558909 4614036 4665297 4670382 4670414 4670468 4674435 4705713 4772471 4787413 4812764 Changes incorporated in this version: 4772471 4787413 4812764 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/sbin/syslogd Problem Description: 4772471 console logfile corrupted due to syslogd: some logger thread(s) are stuck 4787413 syslogd: Bad terminal owner; root owns '/dev/console' but utmp says LOGIN 4812764 *syslogd* dumps core with large size (> 1024) packet. (from 106439-12) 4674435 When msgid=0 was configured in log.conf, qfe link messages wasn't logged. 4705713 *syslogd* outputs error messages when shutting down the system (from 106439-11) 4243984 *syslogd* drops FORW messages 4424387 *syslogd* gathers unnecessary information 4558909 syslogd stops logging remote messages after restart 4665297 syslogd shuts down itself 4670382 *syslogd* opens door too early 4670414 *syslogd* should not close door while reconfiguring 4670468 *syslogd* does not log its error message (from 106439-10) 4476741 syslogd dumps core 4385688 syslog recurses when memory is low, runs off stack 4519254 *syslogd* does not check the permissions on the door file 4614036 *syslogd* incorrectly logs kern messages under user facil. from remote machines (from 106439-09) 4463575 syslogd ignores log messages sent over IPv6 (from 106439-08) 4429942 syslog incorrectly logs emerg messages when forwarding to remote syslogd (from 106439-07) 4077873 syslogd "mark" facility messages may be incorrectly suppressed as duplicates 4140423 syslogd consumes far too much CPU 4160727 Cust logging a mark on loghost and not working (syslog problems) 4162016 early syslog messages can be lost 4220910 syslogd does not handle malformed log messages 4233526 syslogd does not handle network messages containing newlines 4246796 *syslogd* does not reflect when messages are ignored due to highwater mark 4271807 *syslogd* loggers leak messages 4369289 syslog(3C) can't output the strings including newline code correctly. 4374974 *syslogd* checks open("/dev/zero") for failure incorrectly 4309712 *syslogd* hangs on HUP when Lentronic terminal server has flow control enabled 4323101 *syslogd* syslogd on Solaris 7 stops logging if file size exceeds 2gb 4336917 *syslogd* inherits its parent's behaviour for signal HUP 4337337 *syslogd* leaks file descriptors when sent repeated SIGHUP 4345133 *syslogd* dies when given lots of SIGHUPS 4345785 *syslogd* calls perror when stderr points to a bad file: 4353901 *syslogd* can't print japanese code to remote host. 4357732 *syslogd* debugging information is meaningless 4374785 *syslogd* mark facility of syslog not time stamping log file properly 4386798 *syslogd* sometimes hangs when given lots of SIGHUP (from 106439-06) 4256338 *syslogd* dumps core when logging msgs & sending HUP's simultaneously (from 106439-05) 4176365 syslogd is increasing its size rapidly (from 106439-04) 4224086 syslogd dies when sent a SIGHUP (reworked) (from 106439-03) 4192420 SIGHUP handling of syslogd in Solaris 7 incorrect 4224086 syslogd dies when sent a SIGHUP (from 106439-02) 4091197 sending kill -1 to syslog twice kills syslogd 4145169 syslogd core dumps immediately when executed 4154248 outputting to a pipe; when pipe gets full, syslogd stops and never restarts (from 106439-01) 4129273 syslog fails to close file descriptors on MP systems Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- NOTE 1: When syslogd receives a HUP signal, it attempts to complete outputting pending messages, and close all log files to which it is currently logging messages. If, for some reason, one (or more) of these files does not close within a gen- erous grace period, syslogd discards the pending messages, forcibly closes these files, and starts reconfiguration. If this shutdown procedure is disturbed by an unexpected error and syslogd cannot complete reconfiguration, syslogd sends a mail message to the superuser on the current system stating that it has shut down, and exits. NOTE 2: The fix for bug 4309712 can cause the sending of a mail message to the superuser. When syslogd receives a HUP signal, it attempts to close all log files to which it is currently logging messages. If, for some reason, one of these files does not close within a generous grace period, syslogd shuts down, logging an error message to the console. If the console is one of the files which did not successfully close, syslogd instead sends a mail message to the superuser on the current system stating that it shut down, and that the console was not responding. NOTE 3: The fix for bug 4353901 fully allows forwarding of messages which contain characters defined in the system default locale. Care should be taken to ensure that each window displaying messages forwarded by syslogd (especially console windows) is run in the system default locale (which is syslogd's locale). If this advice is not followed, it may be possible for for a syslog message to alter the terminal settings for that window, possibly even allowing remote execution of arbitrary commands from that window. README -- Last modified date: Tuesday, April 20, 2004