PRODUCT:    DEC OSF/1

COMPONENT:  Security

SOURCE:     Digital Equipment Corporation

ECO INFORMATION:

     ECO Kit Name:  SSRT035901_OSF1030B
     ECO Kits Superseded by This ECO Kit:  SSRT0359_OSF1032C
     ECO Kit Approximate Size:  9047 Blocks

     Kit Applies To:  DEC OSF/1 Version 3.0B
     System/Cluster Reboot Necessary:  Yes


ECO KIT SUMMARY:

An ECO kit exists for syslog and C2 Security on Dec OSF/1, Version 3.0B
This kit addresses the following problems:

  o  A potential security vulnerability has been identified with syslog
     internal buffering for DEC OSF/1.

     A second potential security vulnerability has been identified with
     disabled accounts for DEC OSF/1 running C2 enhanced security.

     A number of non-security related problem fixes have also been supplied
     with this ECO. Refer to the README file for more details.



INSTALLATION NOTES:

    This ECO is a compressed tar image and once uncompressed the following 
    files are available:
    NOTE: If you receive this ECO on media from the Digital Software
          Supply Distribution Center it will be in uncompressed format rather
          than a compressed tar as indicated above.
 
            ./date              
            ./loader            
            ./init              
            ./getty             
            ./rlogind           
            ./ypclnt.h  
            ./libc.a            
            ./libc_r.a          
            ./libsecurity.a     
            ./libc.so           
            ./libc_r.so         
            ./libsecurity.so    
            ./README.SSRT035901_OSF1030B
 
    A reboot is required in order to have the currently running processes
    use the new shared library.

    This software is proprietary to and embodies the confidential technology
    of Digital Equipment Corporation.  Possession, use, or copying of this
    software and media is authorized only pursuant to a valid written license
    from Digital or an authorized sublicensor.

    This ECO has not been through an exhaustive field test process.
    Due to the experimental stage of this ECO/workaround, Digital
    makes no representations regarding its use or performance.  The
    customer shall have the sole responsibility for adequate protection
    and back-up data used in conjunction with this ECO/workaround.

Colorado Site
Georgia Site

ssrt035901_osf1030b.README
ssrt035901_osf1030b.CHKSUM
ssrt035901_osf1030b.CVRLET_TXT
ssrt035901_osf1030b.tar_z