Patch-ID# 111135-02
Keywords: security nsmail run tmp
Synopsis: Sun Cluster 2.2: Internet Pro Patch
Date: Aug/06/2001

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: Sun Cluster

Unbundled Release: 2.2

Xref: This patch available for Solaris 2.6 as patch 108505

Topic: Sun Cluster 2.2: Internet Pro Patch
	NOTE:	Refer to Special Install Instructions section for
		IMPORTANT specific information on this patch.

Relevant Architectures: sparc

BugId's fixed with this patch: 4339357 4402009 4455691

Changes incorporated in this version: 4339357

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/opt/SUNWcluster/ha/dns/dns_probe
/opt/SUNWcluster/ha/nsmail/nsmail_fm_check
/opt/SUNWcluster/ha/nsmail/nsmail_fm_start
/opt/SUNWcluster/ha/nsmail/nsmail_fm_stop
/opt/SUNWcluster/ha/nsmail/nsmail_probe
/opt/SUNWcluster/ha/nsmail/nsmail_svc_abort
/opt/SUNWcluster/ha/nsmail/nsmail_svc_start
/opt/SUNWcluster/ha/nsmail/nsmail_svc_stop
/opt/SUNWcluster/ha/nsmail/nsmail_svc_stop_net
/opt/SUNWcluster/ha/nsmail/nsmail_sync

Problem Description:

4339357 nsmail_svc_stop and nsmail_svc_stop_net are reversed
 
(from 111135-01)
 
4402009 Sun Cluster INetPro files write to /tmp insecurely
4455691 Complete fix for BugID 4402009

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
        example# patchadd /var/spool/patch/<patchid>
 
The following example removes a patch from a standalone system:
 
        example# patchrm <patchid> 
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------------
Stop the Sun Cluster software on this node before applying this patch.
Apply this patch to this node and then restart the Sun Cluster software after
patch installation
 
o login as root, then run the command:
 
  # scadmin stopnode
 
o apply the patch as usual
 
o restart the cluster on this node
 
  # scadmin startnode
 
 
NOTE 1: To get the complete fix for files insecurely writing to /tmp, 
        one needs to install the following patches (or newer):
 
        109209-11 Sun Cluster 2.2: Framework Patch
        109212-05 Sun Cluster 2.2: Comm Patch
        107997-13 Sun Cluster 2.2: HA-Oracle Patch
        108424-03 Sun Cluster 2.2: Data Service Common Patch
        108512-03 Sun Cluster 2.2: HA-Sybase Patch
        111132-01 Sun Cluster 2.2: HA-Informix Patch
        107538-05 Sun Cluster 2.2: System Management Patch
 
Patch Backout:
-------------
 
  Before backing out the patch, make sure the cluster software is stopped
  on the node:
 
  o login as root, then run the command:
 
    # scadmin stopnode
 
  o Remove the patch as usual.

README -- Last modified date:  Monday, August 6, 2001