PROBLEM: (QAR 50057, QAR 50155, QAR 50353, SSRT0435U) ******** (Patch ID: OSF405DX-400006) A potential security vulnerability has been discovered, where under certain circumstances, system integrity may be compromised. This may be in the form of improper file or privilege management. DIGITAL has corrected this potential vulnerability. PROBLEM: (QAR 52285, SSRT0435U) (Patch ID: OSF405DX-400009) ******** This patch fixes a problem that occurs on DIGITAL UNIX systems running Version 4.0 or higher with C2 security enabled and Patch OSF405DX-4000006 (216.00) installed. The dop command rejects all password attempts when run by non-root users. Patch OSF405DX-400006 fixed a security violation that occurred in the dop command. For systems that are enabled for C2 security, this patch introduced a problem in which dop rejects all password attempts when run by non-root users. While not a security violation, it requires the user to be root before using the system administration applications (for example, Network Configuration or Disk Configuration). PROBLEM: (QAR 53612) (Patch ID: OSF405DX-400011) ******** This patch fixes a problem that occurs on systems that have installed Patch OSF405DX-400006. If more than one argument is given on the dop command line, dop passes all arguments as a single argument to the command. The following example passes the -c flag and the argument enclosed in quotation marks ("") as a single argument to the dxdw command. $ dop dxdw -c "/usr/bin/tail -f /var/adm/messages" PROBLEM: ( QAR 57627 ) (Patch ID: OSFDX-400015) ******** This fix replaces a previous fix for /usr/sbin/dop that contained an error which prevented certain applications found in /etc/doprc from being started. The applications affected were those which have one or more arguments to the command in the path portion of the doprc entry. An example entry is: nissetup { {path { /usr/share/sysman/bin/runterm /usr/sbin/nissetup }} } The affected /etc/doprc entries are: nissetup, latsetup and btcreate. The dop error causes command startup to fail, with an exit code ($? variable) of 2.