AlphaServer SC patch kit: ========================== AlphaServer SC Version : SC V2.6 SSB Kit Name: SCV26SSB3206576334 Release Date: 06/30/2004 WFM Case: 3206576334 Abstract: scmountd security fixes This patch does not contain any kernel mods so you do not have to build or deploy kernels or reboot any nodes to install it. You will have to stop scmountd temporarily while installing this patch because it cannot be replaced while it is in use. You will not be able to online or offline any SCFS or PFS file systems while scmountd is stopped but otherwise there should be no effect on the operation of the system. Description of Patch: ===================== 1. Security fixes for scmountd. 2. Updated and simplified the report format used by the scfsmgr "status" command. Removed some unnecessary detail that made the status report difficult to interpret. Kit location: ============= The patch kit is SCV26SSB3206576334.tar.gz and it is available from ITRC. Prerequisites: ============== Before installing this Patch kit, you should ensure the following: 1) You have all mandatory patches for this release installed Kit checksum: ============= # cksum SCV26SSB3206576334.tar.gz 3944597262 81435 SCV26SSB3206576334.tar.gz Updated files: ============== A list of the files included in this patch is given below along with the cksum values for each file. 425745530 254960 /usr/opt/srasysman/bin/scmountd Instructions: ============= This patch is provided as a setld installable kit. Unpack it into a directory that is NFS mounted on the management station and all domains e.g. /nfs/SCV26SSB3206576334 and install it as follows: Patch required on Management Server (if used) : YES Patch required on Domains : YES Execute the following commands on the management station. If you don't have a management station then execute them on node 0 of the machine instead: Stop scmountd: # /sbin/init.d/scmountd stop Install the patch on the management station itself (if you have one): # cd /nfs/SCV26SSB3206576334 # setld -l /nfs/SCV26SSB3206576334 SCV26SSB3206576334 Install the patch on the domain nodes: # cd /nfs/SCV26SSB3206576334 # scrun -d all setld -l /nfs/SCV26SSB3206576334 SCV26SSB3206576334 Start the new scmountd: # /sbin/init.d/scmountd start The new scmountd should be up and running at this point. You do not need to build or deploy kernels or reboot any nodes. To verify that you are using the new scmountd, type "scfsmgr status". The status report has changed somewhat and the new format looks like this: # scfsmgr status No command in progress atlasD0: srad is responding, idle. atlasD1: srad is responding, idle. Commands in queue: 0 # If you see an old-style status report like the one below you are still using the old scmountd and need to investigate what went wrong. Most likely you did not stop scmountd while installing the patch - you may not have been on the correct node when you issued the "/sbin/init.d/scmountd stop" command. # scfsmgr status No command in progress Domain: atlasD0 (0) state: responding command: state: idle name: (155); timer: not set Domain: atlasD1 (0) state: responding command: state: idle name: (157); timer: not set # ------------------------------------------------------------------------- To remove the patch use the following commands on the management station (or node 0 if you don't have a management station): # /sbin/init.d/scmountd stop # setld -d SCV26SSB3206576334 # scrun -d all setld -d SCV26SSB3206576334 # /sbin/init.d/scmountd start =======================================================================