Patch-ID# 103696-04 Keywords: security single user su C2 TZ password log authentication Synopsis: SunOS 5.5.1: /sbin/su, /usr/bin/su and /sbin/sulogin patch Date: Feb/10/98 Solaris Release: 2.5.1 SunOS Release: 5.5.1 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 103697 Xref: This patch available for PPC as patch 103698 Topic: SunOS 5.5.1: /sbin/su, /usr/bin/su and /sbin/sulogin patch NOTE: If this patch is installed without the pam security patch (104433-04 or newer), the su invalid password sleep time will be doubled. BugId's fixed with this patch: 1237257 1244971 1254449 4010565 4078468 Changes incorporated in this version: 4078468 Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: 103612-02 (or higher revs) Obsoleted by: Files included with this patch: /sbin/su /sbin/sulogin /usr/bin/su Problem Description: 4078468 su.static and sulogin fail to build because of bug fix 4031930 (from 103696-03) 4010565 su can be interrupted by and not logged in /var/adm/log (from 103696-02) 1237257 su change between 2.4 and 2.5 for user without password (from 103696-01) 1254449 /sbin/su dumps core if c2 security is enabled. 1244971 solaris 2.3, patch 101318-77 has a bug, it can't handle `boot -s` correctly. Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- This patch requires the 2.5.1 sparc libc patch, 103612-02 or newer. NOTE: If this patch is installed without the pam security patch (104433-04 or newer), the su invalid password sleep time will be doubled.