OBSOLETE Patch-ID# 106832-02
Keywords: security audit trail auditreduce praudit c2audit panic
Synopsis: OBSOLETED by 107117: SunOS 5.7: auditreduce/c2audit/praudit patch
Date: Mar/11/99

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 106833

Topic: SunOS 5.7: auditreduce/c2audit/praudit patch

BugId's fixed with this patch: 4166626 4167174 4168892 4172111 4172702 4174308 4182072 4187811 

Changes incorporated in this version: 4182072 4187811

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:  

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 107117 

Files included with this patch:

/etc/security/audit_class 
/etc/security/audit_event
/kernel/sys/c2audit
/kernel/sys/sparcv9/c2audit
/usr/include/bsm/audit_record.h
/usr/sbin/auditreduce
/usr/sbin/praudit

Problem Description:

4187811 auditing of read or write system calls can cause system panic
4182072 praudit -l command merges output for several records into one line

(from 106832-01)

4172702 system panics when ssh is used
4168892 Solaris 7 auditreduce does not work with pre-Solaris 7 audit trails
4172111 Audreduce gives random diagnostics.
4174308 auditreduce command confused of format of AUT_SOCKET token
4167174 praudit cannot process Solaris 2.6 audit trails
4166626 praudit produces core when it process record of failure event with errno > 128


Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.


Special Install Instructions: 
----------------------------- 
None.