Patch-ID# 116336-06
Keywords: security screen lock exit sunray pointer login activcard cryptoflex
Synopsis: Trusted_Solaris_8_HW_12/02: dtsession dtlogin patch
Date: Oct/29/2004


Install Requirements: Reboot after installation                      
                      
Solaris Release: Trusted_Solaris_8_HW_12/02

SunOS Release: Trusted_Solaris_8_HW_12/02

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 116337

Topic: Trusted_Solaris_8_HW_12/02: dtsession dtlogin patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4868804 4903672 4920664 4939675 4944393 5026455 5033132 5038488 5066620

Changes incorporated in this version: 5066620

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/dt/bin/dtchooser
/usr/dt/bin/dtgreet
/usr/dt/bin/dtlogin
/usr/dt/bin/dtsession
/usr/dt/config/Xsession.d/0200.dtTsol
/usr/dt/config/Xstartup
/usr/dt/config/sessionetc

Problem Description:

5066620 Detaching a Sun Ray NSCM session kills the session
 
(from 116336-05)
 
5026455 SunRay 2.0/Removing smartcard soon after login, allow the user to gain access.
5033132 Application visible to user after user already logged out
 
(from 116336-04)
 
5038488 SunRay patch 114880-04 breaks USB devices & audio on Trusted Solaris
 
(from 116336-03)
 
4868804 SC login GUI does not come up when we enable SC login using "-S" option
4939675 dtsession dies/SEGV with PIN authentication under activcard
 
(from 116336-02)
 
4944393 User's CDE session does not terminate/lock after removing smart card
 
(from 116336-01)
 
4903672 screen does not lock if pointer is grabbed
4920664 dtsession screen lock deferred until PAM conversation function run

Patch Installation Instructions:
--------------------------------
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
scripts provided with Trusted Solaris. Any other special or non-generic
installation instructions should be described below as special instructions.
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
NOTE 1: To get the complete fix for bug 4903672, one needs to install
        the following patches:
 
        116338-01 (or newer)    Xsun patch
 
	Reboot immediately after the patches are installed.
 
NOTE 2: To get the complete fix for bug 5026455, one needs to install
        the following patches:
 
        114880-05 (or newer)    Sun Ray Server verion 2.0 Patch Update
 
The steps below assume the patch has been put into an ADMIN_LOW
directory in /var/tmp and the patch file label is configured to ADMIN_LOW.
 
Create a role which contains the Software Installation profile
(typically admin role is assigned this profile) and whose label
range includes the ADMIN_LOW label.  All the steps in the patch
installation should be executed at ADMIN_LOW.
 
The patch should be owned by this role.
 
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchadd".
 
        The result should be:
         /usr/sbin/patchadd    uid=0, privs=all, label=admin_low
 
        2) cd into /var/tmp and install the patch file.
 
        # cd /var/tmp
        # patchadd /var/tmp/<patch-id>
 
        where <patch-id> is the patch number.
 
Special Backout Instructions:
-----------------------------
NOTE 1:	Reboot immediately after the patch is removed.
 
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchrm".
 
        The result should be:
        /usr/sbin/patchrm    uid=0, privs=all, label=admin_low
 
        2) Backout patch by typing:
 
        # patchrm <patch-id>
 
        where <patch-id> is the patch number.

README -- Last modified date:  Friday, October 29, 2004