Patch-ID# 107478-06

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: security 4.1.4 -hosts automount mountd netgroup
Synopsis: SunOS 5.7_x86: /usr/lib/nfs/mountd Patch
Date: Mar/13/2006


Install Requirements: See Special Install Instructions                      
                      Reboot after installation, an alternative may be in Special Install Instructions                      
                      Install in Single User Mode                      
                      
Solaris Release: 7_x86

SunOS Release: 5.7_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 107477

Topic: SunOS 5.7_x86: /usr/lib/nfs/mountd Patch
       NOTE:  Refer to Special Install Instructions section for
              IMPORTANT specific information on this patch.

Relevant Architectures: i386

BugId's fixed with this patch: 4092505 4124715 4196956 4215075 4954310 6279317

Changes incorporated in this version: 6279317

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/nfs/mountd

Problem Description:

6279317 mountd hang up when receiving a signal
 
(from 107478-05)
 
4954310 automountd runs continuously
 
(from 107478-04)
 
4215075 Cannot mount an NFS filesystem shared to network from x86 server
 
(from 107478-03)
 
4124715 Denial of Service in connection oriented transports.
 
(from 107478-02)
 
4196956 NFS - denial of netgroup access doesn't work properly.
 
(from 107478-01)
 
4092505 4.1.4 system can't mount Solaris 2.6 with /net -hosts automount

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
Reboot the system after patch installation.
 
NOTE 1: To get the complete fix for bug 4124715 (DENIAL OF
        SERVICE IN CONNECTION ORIENTED TRANSPORTS), one also
        needs to install the following patches:
 
        106943-09  (or greater)  libnsl & rpc.nisd patch
        108749-01  (or greater)  /usr/lib/nfs/statd patch
        108751-01  (or greater)  /usr/lib/netsvc/yp/ypbind patch
        108753-01  (or greater)  /usr/lib/netsvc/yp/ypserv patch
        108755-01  (or greater)  /usr/lib/netsvc/yp/ypxfrd patch
        108757-01  (or greater)  /usr/lib/netsvc/yp/rpc.ypupdated patch
        108759-01  (or greater)  /usr/sbin/keyserv patch
        108761-01  (or greater)  /usr/sbin/rpcbind patch
        108763-01  (or greater)  /usr/sbin/rpc.nisd_resolv patch
        108765-01  (or greater)  /usr/sbin/rpc.bootparamd patcj
        108552-03  (or greater)  /usr/sbin/rpc.nispasswdd patch
 
NOTE 2: To get the complete fix for bugid 4954310 (automountd runs
        continuously), please also install this patch on the target system:
 
        106981-25  (or greater)  libthread patch
 
        The soft dependency on patch 106981-25 for this complete bugfix
        is, however, one-way;  hence this bugid (4954310) does not need
        to be delivered in nor is it documented in the README of
        106981-25.

README -- Last modified date:  Monday, March 13, 2006