dUNIX SSRT0376_OSF1032D Security V3.2d-1/3.2e-1 ECO Summary
Copyright (c) Digital Equipment Corporation 1996. All rights reserved.
PRODUCT: DEC OSF/1
COMPONENT: Security
SOURCE: Digital Equipment Corporation
ECO INFORMATION:
ECO Kit Name: SSRT0376_OSF1032D
ECO Kits Superseded by This ECO Kit: None
ECO Kit Approximate Size: 8622 Bytes
Kit Applies To: DEC OSF/1 Versions 3.0, 3.0B, 3.2, 3.2B, 3.2C,
3.2d-1/3.2e-1
System/Cluster Reboot Necessary: No
ECO KIT SUMMARY:
An ECO kit exists for C2 Security on DEC OSF/1, Versions 3.0 through
3.2d-1/3.2e-1. This kit addresses the following problems:
o This kit contains new configuration files that corrects a
potential security vulnerability where C2 security is
enabled, that may allow authorized users to gain unauthorized
access to a system.
INSTALLATION NOTES:
This compressed tar file consists of several configuration files for the
applicable versions of DEC OSF/1 Versions 3.0 through V3.2d-1/3.2e-1.
Digital recommends that you save the existing version of OSFC2_matrix.conf
before replacing it with the new version(s). To install the appropriate
version, copy the kit into /patches and execute the following as root:
NOTE: If the file is called ssrt0376_osf1032d.tar_z,
please move (mv) the file to ssrt0376_osf1032d.tar.Z.
EXAMPLE:
# cd /patches
# zcat ssrt0376_osf1032d.tar.Z | tar xvf -
# mv OSFC2_matrix_v??.conf OSFC2_matrix.conf
# cd /etc/sia
# mv OSFC2_matrix.conf OSFC2_matrix.conf.orig
# mv /patches/OSFC2_matrix.conf .
# chown root:bin OSFC2_matrix.conf
# chmod 644 OSFC2_matrix.conf
As always, Digital urges you to periodically review your system
management and security procedures. Digital will continue to review and
enhance the security features of its products and work with customers to
maintain and improve the security and integrity of their systems.
This patch can be found at any of these sites:
Colorado Site
Georgia Site
Files on this server are as follows:
ssrt0376_osf1032d.README
ssrt0376_osf1032d.CHKSUM
ssrt0376_osf1032d.CVRLET_TXT
ssrt0376_osf1032d.tar_z
|
