Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-001
Project: HCX
Product: cx_sx
Date Issued: Thu Mar 25 15:17:00 1993
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.0
Related Patches: cx6.2-025 lan_sx6.2-001
Related Modification Numbers:
Related SARs:
Problem Description:
A LAN/SX interface will only recognize one domain of interpretation
(DOI) when configured for CIPSO.
Resolution Description:
Allow multiple DOI maps to be associated per interface.
Modified Source:
usr/src/cmd/satfmt/satfmt.c
usr/src/cmd/satfmt/socket.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
usr/include/if_mls.h
usr/man/p_man/man3/getnetclrent.3sx
usr/man/p_man/man4/satfmt.4sx
usr/catman/p_man/man3/getnetclrent.3sx.z
usr/catman/p_man/man4/satfmt.4sx.z
mls/bin/satfmt
lib_sat_mls sat.o
Conditions for Installation: none
Possible Side Effects: none
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-002
Project: HCX
Product: cx_sx
Date Issued: Fri Jun 18 15:40:39 1993
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: None
Related Patches: cx6.2-038, cx_326.2-001, cx_646.2-001, cx_NOLIM6.2-001,
lan_sx6.2-002, tcp_ip6.2-008
Related Modification Numbers: None
Related SARs: HM10812, HM10845
Problem Description:
1. The assurance system does not work.
2. Long labels cause assorted programs to fail.
3. MailSetup usage message says to use MailClean to remove an authorized
level, when this is not so. It also fails to proceed if it cannot
create a default privilege for a mail label.
4. Chpriv complains that user is not authorized to reclassify files when
the user is.
5. Labels command reports labels of files user is not authorized to
access.
6. The newpriv command fails to reset the user's access vector or clear
the screen when it exits.
7. Accessing the labels file could lead the system to deadlock.
Resolution Description:
1. Modify the mkassure program to understand about Series 5000 systems.
Also, change the rootproto, bootproto, and TCB files to reflect the
filesystem layout in release 6.2.
2. Patch cx6.2-038 modifies the MLS library (libmls.a) to accomodate long
labels. Change scripts and programs appropriately, and recompile users
of the MLS library.
3. Change the usage message in MailSetup not to mention MailClean for
removal of authorized levels.
4. Change message in chpriv to complain that session is not authorized
to reclassify the requested file.
5. Change labels command to verify that the user can in fact read the
requested file before reporting its label.
6. Modify newpriv command so it updates the access vector and clears the
screen when exiting.
7. Modify the mls_lbl routine in the kernel to prevent the deadlock
condition from presenting itself.
Modified Source:
usr/src/cmd/LpSetup.sh
usr/src/cmd/MailSetup.sh
usr/src/cmd/assure/TCB/TCB.base
usr/src/cmd/assure/TCB/TCB.net
usr/src/cmd/assure/assurance
usr/src/cmd/assure/assure.mk
usr/src/cmd/assure/mkassure.c
usr/src/cmd/assure/mkrproto.sed
usr/src/cmd/assure/subr.c
usr/src/cmd/assure/subr.h
usr/src/cmd/chpriv.c
usr/src/cmd/labels.c
usr/src/cmd/newpriv.c
usr/src/cmd/priv/grp.clean.sh
usr/src/cmd/relbl.c
usr/src/cmd/satfmt/labels.c
usr/src/cmd/satfmt/satfmt.mk
usr/src/cmd/satfmt/socket.c
usr/src/cmd/scripts/startup.sh
usr/src/cmd/sx.admin/admin/menu/securemgmt/Savelist
usr/src/cmd/sx.admin/admin/menu/securemgmt/Setperm
usr/src/cmd/sx.admin/admin/menu/syssetup/sx_setup
usr/src/uts/machine/sat_mls/mls.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
mls/assure/TCB/TCB.base
mls/assure/assurance
mls/assure/bootproto
mls/assure/rootproto
mls/bin/LpSetup
mls/bin/MailSetup
mls/bin/group.cleanup
mls/bin/mkassure
mls/bin/mkdevclr
mls/bin/mklbl
mls/bin/prlbl
mls/bin/relbl
mls/bin/rmdevclr
mls/bin/satfmt
mls/bin/satmap
mls/bin/satmask
mls/bin/satstart
mls/bin/sessions
usr/admin/menu/securemgmt/Savelist
usr/admin/menu/securemgmt/Setperm
usr/admin/menu/syssetup/sx_setup
usr/bin/addpriv
usr/bin/chpriv
usr/bin/clearances
usr/bin/delpriv
usr/bin/dominates
usr/bin/labels
usr/bin/lspriv
usr/bin/mailcheck
usr/bin/maxclear
usr/bin/mkgrp
usr/bin/mkpriv
usr/bin/mkuser
usr/bin/mvpriv
usr/bin/newpriv
usr/bin/rmpriv
usr/bin/rmuser
usr/bin/addgrp
usr/bin/delgrp
usr/bin/lsgrp
usr/bin/rmgrp
lib_sat_mls sat.o
lib_sat_mls mls.o
usr/man/a_man/man1/mount.1ms
usr/catman/a_man/man1/mount.1ms.z
usr/man/p_man/man3/tr_open.3sx
usr/catman/p_man/man3/tr_open.3sx.z
usr/catman/p_man/man3/twrite.3sx.z
Conditions for Installation:
The related patches that apply to the installation must
be installed with this patch.
Possible Side Effects: None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-004
Project: HCX
Product: cx_sx
Date Issued: Wed Jan 26 13:39:11 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: TBD
Related Patches: cx6.2-074
Related Modification Numbers: None
Related SARs: None
Problem Description:
Patch cx6.2-074 modifies file fbs.h. This modification
requires mls.c to be rebuilt to match the change to
fbs.h
Resolution Description:
Rebuild the file mls.o
Modified Source:
usr/src/uts/machine/sat_mls/mls.c
Object Modules:
lib_sat_mls mls.o
Conditions for Installation:
Patch cx6.2-074 must be installed before this patch.
Possible Side Effects:
None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-005
Project: HCX
Product: cx_sx
Date Issued: Thu Apr 14 16:05:18 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.1
Related Patches: ksh6.2-001, cx6.2-082, tcp_ip6.2-012
Related Modification Numbers: None
Related SARs: None
Problem Description:
1. CX/SX lan/sx can hang the audit trail mechanism.
Resolution Description:
1. On audit trail spin locks, the IPL is raised above net level.
Modified Source:
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
lib_sat_mls sat.o
Conditions for Installation:
The system on which this patch is installed must be a Series 4000 or
5000 system with CX/SX 6.2.
Possible Side Effects: none
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-006
Project: HCX
Product: cx_sx
Date Issued: Tue Aug 9 18:29:07 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.1
Related Patches: cx6.2-092, tcp_ip6.2-014,
lan_sx6.2-004, cx_86.2-001, cx_166.2-001, cx_326.2-002,
cx_646.2-002, cx_1286.2-001, cx_2566.2-001, cx_NOLIM6.2-003.
Related Modification Numbers:
None
Related SARs:
None
Problem Description:
Need support for CIPSO tag types 128 (information labels),
129 (privilege vector), and 130 (user id).
Resolution Description:
Install CIPSO tag types 128, 129, and 130.
Add new man page for getsocktags(3sx).
Modified Source:
None
Object Modules:
usr/man/p_man/man3/getsocktags.3sx
usr/catman/p_man/man3/getsocktags.3sx.z
Conditions for Installation:
CX/SX with LAN/SX
Possible Side Effects:
None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-007
Project: HCX
Product: cx_sx
Date Issued: Tue Sep 6 17:31:13 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.1
Related Patches: cx6.2-096, lan_sx6.2-005
Related Modification Numbers: None
Related SARs: None
Problem Description:
1) The DOD evaluation criteria requires more specific
audit reduction tools.
2) Updates required for man pages.
3) LpSetup.sh should use shell echo.
4) Permissions database needs updates.
5) Chpriv should not use a privilege that is being removed
from the system.
6) Need to recompile commands with new libmls.a
Resolution Description:
1) The audit reduction scripts are installed in /mls/bin/scripts.
2) Update the following man pages: mailsetup.1ms, maxclear.1ms,
mklbl.1ms, rmpriv.1sx, satmap.1sx, satstart.1ms, and
satsave.1ms.
3) Replace echo inside of LpSetup.sh.
4) Update /etc/PermDB file.
5) Chpriv does not use privileges that are going to be removed
from system.
6) The following commands have been recompiled with libmls.a:
mkdevclr, satfmt, satmap, clearances, labels, and mailcheck.
Modified Source:
usr/src/cmd/LpSetup
usr/src/cmd/chpriv.c
usr/src/cmd/etc/PermDB
usr/src/cmd/sx.scripts/access
usr/src/cmd/sx.scripts/exec_access
usr/src/cmd/sx.scripts/file_access
usr/src/cmd/sx.scripts/format_audit
usr/src/cmd/sx.scripts/get_level
usr/src/cmd/sx.scripts/ia
usr/src/cmd/sx.scripts/level
usr/src/cmd/sx.scripts/network
usr/src/cmd/sx.scripts/pglbl_override
usr/src/cmd/sx.scripts/priv_user
usr/src/cmd/sx.scripts/removal
usr/src/cmd/sx.scripts/terminal_activity
usr/src/cmd/sx.scripts/uids
usr/src/cmd/sx.scripts/user
usr/man/a_man/man1/MailSetup.1ms
usr/man/a_man/man1/maxclear.1ms
usr/man/a_man/man1/mklbl.1ms
usr/man/u_man/man1/rmpriv.1sx
usr/man/a_man/man1/satmap.1ms
usr/man/a_man/man1/satsave.1ms
usr/man/a_man/man1/satstart.1ms
Object Modules:
etc/PermDB
mls/bin/LpSetup.sh
mls/bin/mkdevclr
mls/bin/satfmt
mls/bin/satmap
mls/bin/scripts/access
mls/bin/scripts/exec_access
mls/bin/scripts/file_access
mls/bin/scripts/format_audit
mls/bin/scripts/get_level
mls/bin/scripts/ia
mls/bin/scripts/level
mls/bin/scripts/network
mls/bin/scripts/pglbl_override
mls/bin/scripts/priv_user
mls/bin/scripts/removal
mls/bin/scripts/terminal_activity
mls/bin/scripts/uids
mls/bin/scripts/user
usr/bin/chpriv
usr/bin/clearances
usr/bin/labels
usr/bin/mailcheck
usr/catman/a_man/man1/MailSetup.1ms.z
usr/catman/a_man/man1/maxclear.1ms.z
usr/catman/a_man/man1/mklbl.1ms.z
usr/catman/u_man/man1/rmpriv.1sx.z
usr/catman/a_man/man1/satmap.1ms.z
usr/catman/a_man/man1/satsave.1ms.z
usr/catman/a_man/man1/satstart.1ms.z
usr/man/a_man/man1/MailSetup.1ms
usr/man/a_man/man1/maxclear.1ms
usr/man/a_man/man1/mklbl.1ms
usr/man/u_man/man1/rmpriv.1sx
usr/man/a_man/man1/satmap.1ms
usr/man/a_man/man1/satsave.1ms
usr/man/a_man/man1/satstart.1ms
Conditions for Installation:
None
Possible Side Effects:
None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-008
Project: HCX
Product: cx_sx
Date Issued: Thu Sep 22 13:32:42 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.1
Related Patches: cx6.2-099, lan_sx6.2-006, tcp_ip6.2-016, nfs6.2-002
Related Modification Numbers: None
Related SARs: None
Problem Description:
Need LAN/SX support for Secure X windows.
Resolution Description:
Add LAN/SX support for Secure X windows.
Modified Source:
usr/catman/p_man/man3/getmlsx.3sx.z
usr/include/if_mls.h
usr/man/p_man/man3/getmlsx.3sx
Object Modules:
usr/catman/p_man/man3/getmlsx.3sx.z
usr/include/if_mls.h
usr/man/p_man/man3/getmlsx.3sx
lib_sat_mls sat.o
Conditions for Installation: None
Possible Side Effects: None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-009
Project: HCX
Product: cx_sx
Date Issued: Thu Nov 17 11:29:38 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: None.
Related Patches: cx6.2-103, lan_sx6.2-007
Problem Description:
CX/SX systems could not send or receive network mail at multiple
security labels.
Resolution Description:
The patch provides support for a multilevel version of sendmail for
CX/SX systems.
Modified Source:
usr/src/cmd/sx.admin/admin/menu/securemgmt/SXINSTALL
usr/src/cmd/sx.admin/admin/menu/securemgmt/Savelist
usr/src/cmd/MailClean.sh
Object Modules:
etc/PermDB
usr/admin/menu/securemgmt/SXINSTALL
usr/admin/menu/securemgmt/Savelist
mls/bin/MailClean
usr/man/a_man/man1/MailClean.1ms
usr/catman/a_man/man1/MailClean.1ms.z
Conditions for Installation:
Although this patch contains a change to SXINSTALL, it is not necessary
for sites already running CX/SX to reinstall it.
Possible Side Effects:
None.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-010
Project: HCX
Product: cx_sx
Date Issued: Fri Dec 9 14:25:32 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: TBD
Related Patches:
cx6.2-104
tcp_ip6.2-017
rje6.2-001
cx_1286.2-002
cx_166.2-002
cx_2566.2-002
cx_326.2-003
cx_646.2-003
cx_86.2-002
cx_NOLIM6.2-004
Related Modification Numbers: None.
Related SARs: None.
Problem Description:
Modifications to allow up to 4096 members in each group
The chpriv(1) command failed with "Privilege is being removed"
Resolution Description:
Change the size of the buffer in getgrent()
Change chpriv(1) to not check for removed privilege until we've
called getlblmatch to search for a valid label.
Modified Source:
usr/src/cmd/priv/addpriv.c
usr/src/cmd/priv/rmpriv.c
usr/src/cmd/priv/delpriv.c
usr/src/cmd/priv/mkpriv.c
usr/src/cmd/chpriv.c
usr/src/cmd/mkgrp.c
Object Modules:
mls/bin/mkdevclr
mls/bin/satsave
mls/bin/satmap
usr/bin/clearances
usr/bin/labels
usr/bin/mailcheck
usr/bin/maxclear
usr/bin/mkuser
usr/bin/newpriv
usr/bin/lspriv
usr/bin/chpriv
usr/bin/addpriv
usr/bin/rmpriv
usr/bin/delpriv
usr/bin/mkpriv
usr/bin/mkgrp
Conditions for Installation: None.
Possible Side Effects: None.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-011
Project: HCX
Product: cx_sx
Date Issued: Tue Nov 15 13:30:34 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: none
Related Patches: cx6.2-105, lan_sx6.2-007, tcp_ip6.2-018, cx_rt_develop6.2-005
Problem Description:
1) A method was required for notifying the system administrator when certain
security-relevant events occurred.
2) Many enhancements to the CX/SX auditing system have been requested.
3) Booting the system is too slow due to filesystem mapping for audit trail.
4) The /etc/rc file removed the access vector file at system reboot.
5) When uninstalling CX/SX, multi-level directories and their contents were
deleted.
Resolution Description:
1) The new satalert(1MS) command monitors the audit trail and notifies the
system administrator as security-related events occur. The command is
configured by the administrator via /mls/satalert.conf.
2) This patch provides enhancements to system auditing. Improvements include:
a) Auditing support for Secure X.
b) Auditing support for netguard.
c) Access vectors are now fully audited.
d) A new satrename command breaks up the audit trail files into daily
audit logs. This allows viewing of the audit trail more quickly and
easily.
e) New options to satfmt(1MS) to restrict output to records generated on
a specific DEVICE, by a specific PROGRAM, by sessions accessing a specific
FILE, by sessions with a specific ACCESS VECTOR, or by sessions that access
objects with a specific LABEL.
f) A new "user sessions" format for the satfmt(1MS) command, allowing viewing
of all information regarding users logging in and out.
g) Auditing of all superuser system calls (with the exception of write(2),
read(2), lseek(2), and select(2), which are performed on objects to which
access has already been granted.)
i) Miscellaneous improvements to satmask(1MS), satsave(1MS), and
satstart(1MS). Please see man pages for details.
3) Enhanced satmap(1MS) to map filesystems in parallel, similar to fsck(1).
4) The /etc/rc file no longer removes the /etc/acc_vector file at reboots.
5) The CX/SX uninstall process will now give the user the option of whether
or not to remove multi-level directories.
Modified Source:
usr/src/cmd/fsmap.c
usr/src/cmd/satfmt/alert.c
usr/src/cmd/satfmt/chkpt.c
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/extern.h
usr/src/cmd/satfmt/filename.c
usr/src/cmd/satfmt/global.c
usr/src/cmd/satfmt/gname.c
usr/src/cmd/satfmt/interface.c
usr/src/cmd/satfmt/keys.c
usr/src/cmd/satfmt/labels.c
usr/src/cmd/satfmt/list.c
usr/src/cmd/satfmt/malloc.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/program.c
usr/src/cmd/satfmt/satalert.c
usr/src/cmd/satfmt/satalert.conf
usr/src/cmd/satfmt/satfmt.c
usr/src/cmd/satfmt/satfmt.h
usr/src/cmd/satfmt/satfmt.mk
usr/src/cmd/satfmt/satprint.c
usr/src/cmd/satfmt/satrename.c
usr/src/cmd/satfmt/session.c
usr/src/cmd/satfmt/shlib.h
usr/src/cmd/satfmt/socket.c
usr/src/cmd/satfmt/ttyname.c
usr/src/cmd/satfmt/username.c
usr/src/cmd/satfmt/vectors.c
usr/src/cmd/satmap/list.c
usr/src/cmd/satmap/programs.c
usr/src/cmd/satmap/satmap.c
usr/src/cmd/satmap/satmap.h
usr/src/cmd/satmap/satmap.mk
usr/src/cmd/satmask.c
usr/src/cmd/satsave.c
usr/src/cmd/scripts/startup.sh
usr/src/cmd/sx.admin/admin/menu/securemgmt/SXUNINSTALL
usr/src/uts/machine/sat_mls/mls.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
mls/bin/fsmap
mls/bin/satfmt
mls/bin/satmap
mls/bin/satmask
mls/bin/satsave
mls/bin/satstart
mls/bin/satalert
mls/bin/satrename
mls/satalert.conf
usr/admin/menu/securemgmt/SXUNINSTALL
usr/catman/a_man/man1/satalert.1ms.z
usr/catman/a_man/man1/satfmt.1ms.z
usr/catman/a_man/man1/satmap.1ms.z
usr/catman/a_man/man1/satmask.1ms.z
usr/catman/a_man/man1/satrename.1ms.z
usr/catman/p_man/man4/satfmt.4sx.z
usr/man/a_man/man1/satalert.1ms
usr/man/a_man/man1/satfmt.1ms
usr/man/a_man/man1/satmap.1ms
usr/man/a_man/man1/satmask.1ms
usr/man/a_man/man1/satrename.1ms
usr/man/p_man/man4/satfmt.4sx
lib_sat_mls sat.o
lib_sat_mls mls.o
Conditions for Installation:
None.
Possible Side Effects:
This patch may cause the audit trail to consume additional disk space,
depending on which audit channels are enabled. Please see the man pages
included with this patch for advice on which audit channels to enable.
Some audit channels now use different numbers; therefore some system audit
masks must be changed in order to continue auditing the same events. The
audit mask is usually set in /etc/rc with the /mls/bin/satstart command.
This patch causes the format of the audit trail to change slightly. Customers
who might need to review old audit trails should keep a copy of the old
/mls/bin/satfmt for that purpose. The patch installation procedure will
save /mls/bin/satfmt in the "old" directory. If the user tries to view an
audit trail in the old format using the /mls/bin/satfmt included with this
patch, satfmt will advise the user that the audit trail is in the old format.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-012
Project: HCX
Product: cx_sx
Date Issued: Fri Feb 17 13:55:44 1995
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: n/a
Related Patches: cx6.2-115, tcp_ip6.2-021, lan_sx6.2-009
Problem Description: changes to support for new cyberguard product
Resolution Description:
Updated the sat* commands to support new audit trail
information that can be generated if the cyberguard product
is installed. Updated man pages. Updated and added new
functions to the audit trail code in the kernel.
Modified Source:
usr/src/cmd/satfmt/alert.c
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/extern.h
usr/src/cmd/satfmt/global.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/satfmt.c
usr/src/cmd/satfmt/socket.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
mls/bin/satfmt
mls/bin/satrename
mls/bin/satalert
usr/catman/a_man/man1/satalert.1ms.z
usr/catman/p_man/man4/satfmt.4sx.z
usr/man/a_man/man1/satalert.1ms
usr/man/p_man/man4/satfmt.4sx
lib_sat_mls sat.o
Conditions for Installation: n/a
Possible Side Effects: n/a
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-013
Project: HCX
Product: cx_sx6.2
Date Issued: Mon Mar 13 17:46:54 1995
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: n/a
Related Patches: none
Related Modification Numbers: none
Related SARs: none
Problem Description:
The /mls/satalert.conf file currently being shipped contains an
alert for an invalid audit trail channel (SAT_NETG_P_NO_MATCH).
Use of this invalid channel causes satrename to print an invalid
token error message.
Resolution Description:
Install a new /mls/satalert.conf that omits SAT_NETG_P_NO_MATCH.
Modified Source:
/mls/satalert.conf
Object Modules:
/mls/satalert.conf
Conditions for Installation:
System should be running CX/SX 6.2.
This is a MANDATORY CYBERGUARD PATCH.
Possible Side Effects:
None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-014
Project: HCX
Product: cx_sx
Date Issued: Tue Oct 3 16:47:01 1995
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches:
cx6.2-125, lan_sx6.2-010, cnd6.2-001, tcp_ip6.2-024
Related Modification Numbers: N/A
Related SARs: N/A
Problem Description:
Enhancements to the netguard code requires that few
audit headers be changed.
Resolution Description:
Update satalert, satfmt and satrename to support netguard
enhancements.
Modified Source:
usr/src/cmd/etc/PermDB
usr/src/cmd/satfmt/alert.c
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/extern.h
usr/src/cmd/satfmt/malloc.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/satalert.c
usr/src/cmd/satfmt/satalert.conf
usr/src/cmd/satfmt/satfmt.mk
usr/src/cmd/satfmt/satrename.c
usr/src/cmd/satfmt/socket.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
mls/bin/satalert
mls/satalert.conf
mls/bin/satfmt
mls/bin/satrename
etc/PermDB
usr/src/uts/machine/M88K/lib_sat_mls sat.o
usr/src/uts/machine/M88K-RT/lib_sat_mls sat.o
usr/src/uts/machine/NH5000/lib_sat_mls sat.o
usr/src/uts/machine/NH5000-RT/lib_sat_mls sat.o
Conditions for Installation:
Patch cx6.2-125 must first be installed. In addition, all other related
patches should be installed at the same time as cx_sx6.2-014
Possible Side Effects:
The file mls/satalert.conf must be merged with the new version,
distributed as mls/satalert.conf.cx_sx6.2-014
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-015
Project: HCX
Product: cx_sx
Date Issued: Fri Oct 27 17:52:54 1995
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: TBD
Related Patches: none
Related Modification Numbers: none
Related SARs: none
Problem Description: upgrade functionality of auditing
Resolution Description: The following features were incorporated:
(a) satrename can be re-started
(b) satsave/satstart can be forced to overwrite
audit files
(c) satalert can display debug information and
can have its audit information re-directed to
a different directory
(d) satfmt now has audit trail support for
proxies
(e) satalert.conf now supports checking for
partition sizes
(f) lib_sat_mls allows for extra audit trail fields
Modified Source:
usr/man/a_man/man1/satalert.1ms
usr/man/a_man/man1/satrename.1ms
usr/man/a_man/man1/satsave.1ms
usr/man/a_man/man1/satstart.1ms
usr/man/p_man/man4/satfmt.4sx
usr/src/cmd/satfmt/alert.c
usr/src/cmd/satfmt/alert_log_tidy_up
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/extern.h
usr/src/cmd/satfmt/global.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/satalert.c
usr/src/cmd/satfmt/satalert.conf
usr/src/cmd/satfmt/satfmt.c
usr/src/cmd/satfmt/satfmt.mk
usr/src/cmd/satfmt/satrename.c
usr/src/cmd/satfmt/socket.c
usr/src/cmd/satfmt/username.c
usr/src/cmd/satfmt/filename.c
usr/src/cmd/satsave.c
usr/src/cmd/scripts/startup.sh
usr/src/description_files/cx_sx.src
usr/src/description_files/cx_sx.usr
usr/src/uts/machine/sat_mls/mls.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
usr/man/a_man/man1/satalert.1ms
usr/man/a_man/man1/satrename.1ms
usr/man/a_man/man1/satsave.1ms
usr/man/a_man/man1/satstart.1ms
usr/man/p_man/man4/satfmt.4sx
usr/catman/a_man/man1/satalert.1ms.z
usr/catman/a_man/man1/satrename.1ms.z
usr/catman/a_man/man1/satsave.1ms.z
usr/catman/a_man/man1/satstart.1ms.z
usr/catman/p_man/man4/satfmt.4sx.z
mls/bin/alert_log_tidy_up
mls/bin/satrename
mls/bin/satfmt
mls/bin/satsave
mls/bin/satstart
mls/bin/satalert
mls/satalert.conf
lib_sat_mls mls.o
lib_sat_mls sat.o
Conditions for Installation: CX/SX must be installed.
Possible Side Effects: none
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-016
Project: HCX
Product: cx_sx
Date Issued: Thu Jan 11 17:43:13 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: TBD
Related Patches: cnd6.2-003, eg6.2-007, ise6.2-006, pg6.2-003,
pvn2.0-001, pvn_domestic2.0-001
Related Modification Numbers: none
Related SARs: none
Problem Description:
(1) Root user crontab script to run group.cleanup would fail each time it
was invoked.
(2) The Trusted Computing Base (TCB) assurance tape utility mkassure(1MS)
would fail with a size error when backing up the boot/mini-root portions
of the system.
(3) The MkAssure menu of the sysadm(1MS) utility did not list valid block
sizes in relation to cartridge tape drives or DAT tape drives.
(4) satfmt(1MS) did not format audit log data based on networking criteria.
(5) The /usr/bin/chpriv, /usr/bin/clearances, /usr/bin/dominates,
/usr/bin/labels, /usr/bin/mailcheck, /usr/bin/maxclear, /usr/bin/newpriv,
/usr/bin/mkpriv, and /mls/bin/mkdevclr utilities contain a potential
memory leak.
Resolution Description:
(1) Update the root crontab script to not invoke the /mls/bin/group.cleanup
script via the "su -" subshell program. By invoking this utility
via a subshell, the $PATH environment variable was being modified
causing stty command execution problems whenever root's .profile was
executed in the subshell startup sequence.
(2) Increase an internal block count on the mkassure(1MS) utility to
enable it to be able to backup the newer increased boot/mini-root
portions associated with this OS release.
(3) Modify the MkAssure menu to display valid block sizes for such tape
drives as DAT.
(4) New networking-specific options (-I, -Y, -W, and -O) have been
added to the satfmt(1MS) audit trail file format tool.
(5) Rebuild the utilities to take advantage of the corrected libmls.a
library function makecf().
Modified Source:
usr/src/cmd/assure/mkassure.c
usr/src/cmd/satfmt/chkpt.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/extern.h
usr/src/cmd/satfmt/global.c
usr/src/cmd/satfmt/gname.c
usr/src/cmd/satfmt/interface.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/program.c
usr/src/cmd/satfmt/satalert.c
usr/src/cmd/satfmt/satalert.conf
usr/src/cmd/satfmt/satfmt.c
usr/src/cmd/satfmt/satfmt.h
usr/src/cmd/satfmt/satfmt.mk
usr/src/cmd/satfmt/satprint.c
usr/src/cmd/satfmt/satrename.c
usr/src/cmd/satfmt/socket.c
usr/src/cmd/satfmt/username.c
usr/src/cmd/sx.admin/admin/menu/securemgmt/MkAssure
usr/man/a_man/man1/mkassure.1ms
usr/man/a_man/man1/satfmt.1ms
Object Modules:
usr/bin/chpriv
usr/bin/clearances
usr/bin/dominates
usr/bin/labels
usr/bin/mailcheck
usr/bin/maxclear
usr/bin/newpriv
usr/bin/mkpriv
mls/bin/mkdevclr
mls/bin/mkassure
mls/bin/satalert
mls/bin/satfmt
mls/bin/satrename
usr/admin/menu/securemgmt/MkAssure
usr/catman/a_man/man1/mkassure.1ms.z
usr/catman/a_man/man1/satfmt.1ms.z
usr/man/a_man/man1/mkassure.1ms
usr/man/a_man/man1/satfmt.1ms
Conditions for Installation:
Patch must be installed on a NH4000 or NH5000 system running CX/SX 6.2
with all applicable CX/SX product patches installed.
Possible Side Effects: None.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-017
Project: HCX
Product: cx_sx
Date Issued: Wed Feb 14 14:01:23 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches: None.
Related Modification Numbers: None.
Related SARs: None.
Problem Description:
(1) Informational messages written to the console by the satsave(1MS)
utility could potentially result in a system hang as it incorrectly
accessed console resources shared by other system processes.
(2) A process calling open(2) and another process calling the kernel
routine mlsconlbl() (responsible for the construction of labels from
levels and categories) can become deadlocked while waiting for the
other to release a resource associated with the /mls/labels file.
Resolution Description:
(1) The fix for this deadlock condition involved a check for control
of the system console prior to accessing it.
(2) The fix for this deadlock condition involved the reversal of the
locking order for the two resources in the kernel mlsconlbl() routine.
Modified Source:
usr/src/cmd/satsave.c
usr/src/uts/machine/sat_mls/mls.c
Object Modules:
mls/bin/satsave
usr/src/uts/machine/M88K/lib_sat_mls mls.o
usr/src/uts/machine/M88K-RT/lib_sat_mls mls.o
usr/src/uts/machine/NH5000/lib_sat_mls mls.o
usr/src/uts/machine/NH5000-RT/lib_sat_mls mls.o
Conditions for Installation:
Patch must be installed on a NH4000 or NH5000 system running CX/SX 6.2
with all applicable CX/SX product patches installed.
Possible Side Effects: None.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-018
Project: HCX
Product: cx_sx
Date Issued: Mon Mar 25 18:47:29 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches: None
Related Modification Numbers: N/A
Related SARs: N/A
Problem Description:
Changes to ip_netguard.h required a rebuild of the satfmt command.
Enhancements to satalert command were needed to support alternate
directories, output to syslog, and collection of TCP flags.
satrename was being killed after a user logged out and the fuser
command was used by the system.
Resolution Description:
satfmt was changed to allow rebuild with the new ip_netguard.h.
Added support for f=directory alert option to satalert command.
Added capability to the satalert command to pass audit alert line to syslog.
Added the capability to to the satalert command to output TCP flags
on destination ports to aid in debugging.
Corrected a problem with satrename where after a user logged out
and the system used the fuser(1) command, satrename was killed.
Modified Source:
usr/src/cmd/assure/assure.mk
usr/src/cmd/satfmt/alert.c
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/extern.h
usr/src/cmd/satfmt/filename.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/satalert.conf
usr/src/cmd/satfmt/satfmt.c
usr/src/cmd/satfmt/satrename.c
usr/src/cmd/satfmt/socket.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
mls/bin/satfmt
mls/bin/satrename
mls/bin/satalert
mls/satalert.conf
usr/catman/a_man/man1/satalert.1ms.z
usr/man/a_man/man1/satalert.1ms
usr/src/uts/machine/M88K/lib_sat_mls
usr/src/uts/machine/M88K-RT/lib_sat_mls
usr/src/uts/machine/NH5000/lib_sat_mls
usr/src/uts/machine/NH5000-RT/lib_sat_mls
Conditions for Installation: None
Possible Side Effects: None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-019
Project: HCX
Product: cx_sx
Date Issued: Tue May 7 09:59:12 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches: None
Related Modification Numbers: None
Related SARs: None
Description: Update the sat commands.
Modified Source:
usr/src/cmd/satfmt/alert.c
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/extern.h
usr/src/cmd/satfmt/filename.c
usr/src/cmd/satfmt/global.c
usr/src/cmd/satfmt/inet.c
usr/src/cmd/satfmt/interface.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/satalert.c
usr/src/cmd/satfmt/satfmt.c
usr/src/cmd/satfmt/satfmt.mk
usr/src/cmd/satfmt/satrename.c
usr/src/cmd/satfmt/session.c
usr/src/cmd/satfmt/socket.c
usr/src/cmd/scripts/startup.sh
Object Modules:
etc/PermDB
mls/bin/satalert
mls/bin/satfmt
mls/bin/satrename
mls/bin/satstart
usr/catman/a_man/man1/satalert.1ms.z
usr/catman/a_man/man1/satfmt.1ms.z
usr/catman/a_man/man1/satrename.1ms.z
usr/catman/p_man/man4/passwd.4sx.z
usr/man/a_man/man1/satalert.1ms
usr/man/a_man/man1/satfmt.1ms
usr/man/a_man/man1/satrename.1ms
usr/man/p_man/man4/passwd.4sx
Conditions for Installation: This patch should be installed only at the
same time as cx6.2-136, cx6.2-137, and tcp_ip6.2-031.
This is a CyberGuard 2.2 support patch.
Possible Side Effects: None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: cx_sx6.2-020
Project: HCX
Product: cx_sx
Date Issued: Fri Jun 14 14:51:24 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches: None
Related Modification Numbers: None
Related SARs: None
Problem Description:
1) 'GUI close' and 'GUI IP address' auditing in 'Logins' alert was not
working.
Resolution Description:
1) Made minor updates to satfmt, satrename, and satalert to add more
audit points and fix those that were not working.
Modified Source:
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/inet.c
usr/src/cmd/satfmt/misc.c
usr/src/cmd/satfmt/satalert.c
usr/src/cmd/satfmt/satrename.c
usr/src/cmd/satfmt/session.c
usr/src/cmd/satfmt/socket.c
usr/src/uts/machine/sat_mls/sat.c
Object Modules:
mls/bin/satfmt
mls/bin/satrename
mls/bin/satalert
usr/src/uts/machine/M88K/lib_sat_mls sat.o
usr/src/uts/machine/M88K-RT/lib_sat_mls sat.o
usr/src/uts/machine/NH5000/lib_sat_mls sat.o
usr/src/uts/machine/NH5000-RT/lib_sat_mls sat.o
Conditions for Installation: None
Possible Side Effects: None
return to index
================================================================================
CyberGuard Corporation Software Development
Software Patch Report
Patch Name: cx_sx6.2-021
Project: HCX
Product: cx_sx
Date Issued: Sat Aug 31 12:11:16 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches: This patch is required for patch firewall2.2-002.
Related Modification Numbers: N/A
Related SARs: N/A
Problem Description:
Satalert command does not work with the new satalert.master file
in the firewalll product.
Resolution Description:
Updated the satalert command to work with the new satalert.master in
the firewall product.
Modified Source:
usr/src/cmd/satfmt/alert.c
usr/src/cmd/satfmt/convert.c
usr/src/cmd/satfmt/define.h
usr/src/cmd/satfmt/global.c
usr/src/cmd/satfmt/satalert.c
usr/src/cmd/satfmt/satrename.c
Object Modules:
mls/bin/satalert
mls/bin/satfmt
mls/bin/satrename
usr/catman/a_man/man1/UucpSetup.1ms.z
usr/catman/a_man/man1/adduser.1ms.z
usr/catman/a_man/man1/mkassure.1ms.z
usr/catman/a_man/man1/mklbl.1ms.z
usr/catman/a_man/man1/satfmt.1ms.z
usr/catman/p_man/man3/devunasgn.3sx.z
usr/catman/p_man/man3/getdevclrent.3sx.z
usr/catman/p_man/man3/getsocktags.3sx.z
usr/catman/p_man/man3/libmls.3sx.z
usr/catman/p_man/man3/sessions.3sx.z
usr/catman/p_man/man4/group.4sx.z
usr/catman/p_man/man4/labels.4sx.z
usr/catman/p_man/man4/levels.4sx.z
usr/catman/p_man/man4/mldirs.4sx.z
usr/catman/p_man/man4/satfmt.4sx.z
usr/catman/u_man/man1/chpriv.1sx.z
usr/catman/u_man/man1/labels.1sx.z
usr/catman/u_man/man1/newpriv.1sx.z
usr/man/a_man/man1/UucpSetup.1ms
usr/man/a_man/man1/adduser.1ms
usr/man/a_man/man1/mkassure.1ms
usr/man/a_man/man1/mklbl.1ms
usr/man/a_man/man1/satfmt.1ms
usr/man/p_man/man3/devunasgn.3sx
usr/man/p_man/man3/getdevclrent.3sx
usr/man/p_man/man3/getsocktags.3sx
usr/man/p_man/man3/libmls.3sx
usr/man/p_man/man3/sessions.3sx
usr/man/p_man/man4/group.4sx
usr/man/p_man/man4/labels.4sx
usr/man/p_man/man4/levels.4sx
usr/man/p_man/man4/mldirs.4sx
usr/man/p_man/man4/satfmt.4sx
usr/man/u_man/man1/chpriv.1sx
usr/man/u_man/man1/labels.1sx
usr/man/u_man/man1/newpriv.1sx
Conditions for Installation: None
Possible Side Effects: None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-001
Project: HCX
Product: lan_sx
Date Issued: Thu Mar 25 15:31:12 1993
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.0
Related Patches: cx6.2-025 cx_sx6.2-001
Related Modification Numbers:
Related SARs:
Problem Description:
A LAN/SX interface will only recognize one domain of interpretation
(DOI) when configured for CIPSO.
Resolution Description:
Allow multiple DOI maps to be associated per interface.
Modified Source:
usr/src/uts/machine/net/if_mls.c
usr/src/uts/machine/netinet/ip_mls.c
usr/src/cmd/immu/ifstat.c
usr/src/cmd/net_check.c
usr/src/cmd/net_start.c
Object Modules:
usr/sbin/ifstat
usr/catman/u_man/man1/ifstat.1sx.z
usr/man/u_man/man1/ifstat.1sx
mls/bin/net_check
usr/catman/a_man/man1/net_check.1ms.z
usr/man/a_man/man1/net_check.1ms
usr/catman/p_man/man4/net_clearances.4sx.z
usr/man/p_man/man4/net_clearances.4sx
usr/catman/p_man/man4/net_levels.4sx.z
usr/man/p_man/man4/net_levels.4sx
mls/bin/net_start
usr/catman/a_man/man1/net_start.1ms.z
usr/man/a_man/man1/net_start.1ms
usr/catman/p_man/man4/net_doi_file.4sx.z
usr/man/p_man/man4/net_doi_file.4sx
lib_mlsnet if_mls.o
lib_mlsnet ip_mls.o
Conditions for Installation:none
Possible Side Effects: none
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-002
Project: HCX
Product: lan_sx
Date Issued: Fri Jun 18 17:15:28 1993
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: None
Related Patches: cx6.2-038, cx_sx6.2-002, cx_326.2-001, cx_646.2-001,
cx_NOLIM6.2-001, tcp_ip6.2-008
Related Modification Numbers: None
Related SARs: None
Problem Description:
1. Patch cx6.2-038 allowed for very long labels; corresponding utilities
must be relinked with the new libraries.
2. The system panics with a data access exception when configuring a
networking interface.
Resolution Description:
1. Relink the appropriate programs with the new libraries.
2. A pointer was being dereferenced before verifying its value. Delay
the dereference until it is certain the pointer is not NULL.
Modified Source:
usr/src/uts/machine/netinet/ip_mls.c
Object Modules:
lib_mlsnet ip_mls.o
mls/bin/net_check
mls/bin/net_start
usr/sbin/ifstat
Conditions for Installation:
The related patches that apply to the installation must
be installed with this patch.
Possible Side Effects: None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-004
Project: HCX
Product: lan_sx
Date Issued: Wed Aug 10 13:28:40 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.1
Related Patches: cx6.2-092, tcp_ip6.2-014, cx_sx6.2-006,
cx_86.2-001, cx_166.2-001, cx_326.2-002,
cx_646.2-002, cx_1286.2-001, cx_2566.2-001, cx_NOLIM6.2-003.
Related Modification Numbers:
None
Related SARs:
None
Problem Description:
Need support for CIPSO tag types 128 (information labels),
129 (privilege vector), and 130 (user id).
Resolution Description:
Install CIPSO tag types 128, 129, and 130 in ip_mls.o.
Rebuild mls_net.o module because of socket and socket mbuf
size changes.
Modified Source:
usr/src/uts/machine/netinet/ip_mls.c
Object Modules:
lib_mlsnet ip_mls.o
lib_mlsnet mls_net.o
Conditions for Installation:
CX/SX with LAN/SX
Possible Side Effects:
LAN/SX applications utilizing the SO_MLSATTR socket option (setsockopt
and getsockopt system calls) should be recompiled to take advantage
of a field addition to the mls_netattr structure supporting extended
cipso tags.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-005
Project: HCX
Product: lan_sx
Date Issued: Wed Sep 7 13:53:40 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.1
Related Patches: cx6.2-096, cx_sx6.2-007
Related Modification Numbers: None
Related SARs: None
Problem Description:
1) net_check did not print a warning message for interfaces
that were not configured to reject unlabeled packets.
2) net_start can generate an invalid maximum label for a network
interface during a dynamic update.
3) ifstat did not detect changes in the net_clearances file.
Resolution Description:
1) net_check prints a warning message for interfaces that are
not configured to reject unlabeled packets.
2) net_start updates maximum label correctly.
3) ifstat prints a warning message if it detects a change in
the net_clearances file upon booting to multiuser mode.
The /etc/rc script (in cx6.2-096) copies net_clearances to
net_clearances.lastboot before calling net_start.
Modified Source:
usr/src/cmd/net_check.c
usr/src/cmd/net_start.c
usr/src/cmd/immu/ifstat.c
usr/man/a_man/man1/net_check.1ms
usr/man/u_man/man1/ifstat.1sx
Object Modules:
mls/bin/net_check
mls/bin/net_start
usr/sbin/ifstat
usr/man/a_man/man1/net_check.1ms
usr/catman/a_man/man1/net_check.1ms.z
usr/man/u_man/man1/ifstat.1sx
usr/catman/u_man/man1/ifstat.1sx.z
Conditions for Installation:
None
Possible Side Effects:
None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-006
Project: HCX
Product: lan_sx
Date Issued: Thu Sep 22 14:39:54 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: 7.1
Related Patches: cx6.2-099, cx_sx6.2-008, tcp_ip6.2-016, nfs6.2-002
Related Modification Numbers: None
Related SARs: None
Problem Description:
Need LAN/SX support for Secure X windows.
Resolution Description:
Add LAN/SX support for Secure X windows.
Modified Source:
usr/catman/a_man/man1/net_check.1ms.z
usr/man/a_man/man1/net_check.1ms
usr/catman/a_man/man1/net_start.1ms.z
usr/man/a_man/man1/net_start.1ms
usr/catman/u_man/man1/ifstat.1sx.z
usr/man/u_man/man1/ifstat.1sx
usr/src/cmd/immu/ifstat.c
usr/man/p_man/man4/mls_terminals.4sx
usr/catman/p_man/man4/mls_terminals.4sx.z
usr/src/cmd/net_check.c
usr/src/cmd/net_start.c
usr/src/uts/machine/net/if_mls.c
usr/src/uts/machine/netinet/ip_mls.c
Object Modules:
usr/catman/a_man/man1/net_check.1ms.z
usr/man/a_man/man1/net_check.1ms
usr/catman/a_man/man1/net_start.1ms.z
usr/man/a_man/man1/net_start.1ms
usr/catman/u_man/man1/ifstat.1sx.z
usr/man/u_man/man1/ifstat.1sx
usr/sbin/ifstat
usr/man/p_man/man4/mls_terminals.4sx
usr/catman/p_man/man4/mls_terminals.4sx.z
mls/bin/net_check
mls/bin/net_start
lib_mlsnet if_mls.o
lib_mlsnet ip_mls.o
lib_mlsnet mls_net.o
Conditions for Installation: None
Possible Side Effects: None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-007
Project: HCX
Product: lan_sx
Date Issued: Thu Nov 17 11:33:47 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: None.
Related Patches: cx6.2-103, cx_sx6.1-009
Problem Description:
CX/SX systems could not send or receive network mail at multiple
security labels.
Resolution Description:
This patch provides support for a multilevel version of sendmail.
Modified Source:
usr/src/cmd/mailstat.c
usr/src/cmd/net_check.c
Object Modules:
mls/bin/net_check
usr/bin/mailstat
usr/catman/a_man/man1/net_check.1ms.z
usr/man/a_man/man1/net_check.1ms
usr/catman/p_man/man3/getnetmailent.3sx.z
usr/catman/p_man/man3/fgetnetmailent.3sx.z
usr/catman/p_man/man3/setnetmailent.3sx.z
usr/catman/p_man/man3/endnetmailent.3sx.z
usr/man/p_man/man3/getnetmailent.3sx
usr/catman/p_man/man4/net_mail.4sx.z
usr/man/p_man/man4/net_mail.4sx
usr/catman/u_man/man1/mailstat.1sx.z
usr/man/u_man/man1/mailstat.1sx
Conditions for Installation:
None.
Possible Side Effects:
None.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-008
Project: HCX
Product: lan_sx
Date Issued: Thu Nov 10 13:34:26 1994
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: none
Related Patches: cx6.2-105 cx_sx6.2-011 tcp_ip6.2-018 cx_rt_develop6.2-005
Problem Description:
When network access to an object is denied due to an invalid label, the
label in question is not recorded in the audit trail.
Resolution Description:
More information is now recorded in the audit trail when access to an object
is denied due to an invalid label.
Modified Source:
usr/src/uts/machine/netinet/ip_mls.c
Object Modules:
lib_mlsnet ip_mls.o
Conditions for Installation:
None.
Possible Side Effects:
None.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-009
Project: HCX
Product: lan_sx
Date Issued: Fri Feb 17 13:24:29 1995
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: n/a
Related Patches: cx6.2-115, tcp_ip6.2-021, cx_sx6.2-012
Problem Description: ifstat fails if there are no mls net definitions
Resolution Description: print error message, and exit gracefully.
Modified Source:
usr/src/cmd/immu/ifstat.c
Object Modules:
usr/sbin/ifstat
Conditions for Installation: none
Possible Side Effects: none
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-010
Project: HCX
Product: lan_sx
Date Issued: Tue Oct 3 14:16:46 1995
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches:
cx6.2-125, cx_sx6.2-014, cnd6.2-001, tcp_ip6.2-024
Related Modification Numbers: N/A
Related SARs: N/A
Problem Description:
Commands like ifstat, net_check and net_start don't understand
notion of Private Virtual Network.
Resolution Description:
Added support for private virtual network to the following
commands: ifstat, net_check and netstart.
All the related man-pages have been updated.
Modified Source:
usr/src/cmd/immu/ifstat.c
usr/src/cmd/net_check.c
usr/src/cmd/net_start.c
Object Modules:
mls/bin/net_check
mls/bin/net_start
usr/catman/a_man/man1/net_check.1ms.z
usr/catman/a_man/man1/net_start.1ms.z
usr/man/a_man/man1/net_check.1ms
usr/man/a_man/man1/net_start.1ms
usr/sbin/ifstat
Conditions for Installation:
Patch cx6.2-125 must first be installed. In addition, all other
related patches should all be installed at the same time as
lan_sx6.2-010
Possible Side Effects:
None
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-011
Project: HCX
Product: lan_sx
Date Issued: Fri Oct 27 13:38:20 1995
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: TBD
Related Patches: None.
Related Modification Numbers: None.
Related SARs: None.
Problem Description:
1. "net_start" and "net_check" commands could not decode 'Private Network'
file definitions.
Resolution Description:
1. Recompiled "net_start" and "net_check" commands to use modified
getpninfo() libmls library call.
Also, recompiled "ifstat" command to reflect 'Private Network' kernel
changes. To ip_mls.c, added extra audit options for network traffic such as
TCP flags and socket level. Changed "ifstat" man page.
Modified Source:
usr/man/u_man/man1/ifstat.1sx
usr/src/cmd/immu/ifstat.c
usr/src/uts/machine/netinet/ip_mls.c
Object Modules:
mls/bin/net_check
mls/bin/net_start
usr/sbin/ifstat
usr/man/u_man/man1/ifstat.1sx
usr/catman/u_man/man1/ifstat.1sx.z
lib_mlsnet ip_mls.o
Conditions for Installation:
CX/SX with LAN/SX.
Possible Side Effects:
None.
return to index
================================================================================
Harris CSD Software Development
Software Patch Report
Patch Name: lan_sx6.2-012
Project: HCX
Product: lan_sx
Date Issued: Sun Jan 21 20:55:05 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: TBD
Related Patches: none
Related Modification Numbers: none
Related SARs: none
Problem Description:
The net_check(1MS) utility contains a libmls.a library function which
can cause a potential memory leak.
Resolution Description:
Rebuild net_check(1MS) to incorporate the fixed libmls.a function
makecf() to prevent the potential memory leak.
Modified Source:
Object Modules:
mls/bin/net_check
Conditions for Installation:
Patch must be installed on a NH4000 or NH5000 system running CX/SX 6.2
and LAN/SX 6.2 with all applicable CX/SX and LAN/SX product patches
installed.
Possible Side Effects: None.
return to index
================================================================================
CyberGuard Corporation Software Development
Software Patch Report
Patch Name: lan_sx6.2-013
Project: HCX
Product: lan_sx
Date Issued: Fri Nov 08 15:14:49 1996
Release on Which Patch May Be Installed: 6.2
Release Which Corrects Problem: N/A
Related Patches: None
Related Modification Numbers: N/A
Related SARs: None
Problem Description:
Miscellaneous errors in man pages.
Resolution Description:
Fix and redistribute the man pages.
Modified Source: None
Object Modules:
usr/catman/a_man/man1/net_check.1ms.z
usr/catman/p_man/man4/net_categories.4sx.z
usr/catman/p_man/man4/net_clearances.4sx.z
usr/catman/p_man/man4/net_levels.4sx.z
usr/man/a_man/man1/net_check.1ms
usr/man/p_man/man4/mls_terminals.4sx
usr/man/p_man/man4/net_categories.4sx
usr/man/p_man/man4/net_clearances.4sx
usr/man/p_man/man4/net_doi_file.4sx
usr/man/p_man/man4/net_levels.4sx
Conditions for Installation: None
Possible Side Effects: None
return to index
================================================================================