 |
≫ |
|
|
|
パッチ名: PHCO_35771
パッチ摘要: s700_800 11.23 /sbin/init.d/auditingパッチ
作成日: 07/02/28
公開日: 07/05/14
ハードウェアプラットフォームおよびOSリリース:
s700: 11.23
s800: 11.23
現象:
PHCO_35771:
(SR:8606467324 CR:JAGag22742)
大規模なマシン上で"/sbin/init.d/auditing start"を実行すると、システム
がかなりの時間無応答状態になります。
問題点の説明:
PHCO_35771:
(SR:8606467324 CR:JAGag22742)
/sbin/init.d/auditingスクリプトは、監査対象外のイベントを選択解除する
前に監査をオンにしていました。そのため、しばらくの間、複数の監査対象外
イベントが選択されたままになっていました。
解決方法:
監査可能なイベントを構成し終えてから監査をオンにするようにコードを修正
しました。
-----------------------------------------------------------------------------
Patch Name: PHCO_35771
Patch Description: s700_800 11.23 /sbin/init.d/auditing patch
Creation Date: 07/02/28
Post Date: 07/05/14
Hardware Platforms - OS Releases:
s700: 11.23
s800: 11.23
Products: N/A
Filesets:
SecurityMon.SECURITY,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP
Automatic Reboot?: No
Status: General Release
Critical:
Yes
PHCO_35771: HANG
After "/sbin/init.d/auditing start" on a large
machine, system become unresponsive for a
significant period of time.
Category Tags:
defect_repair general_release critical halts_system
Path Name: /hp-ux_patches/s700_800/11.X/PHCO_35771
Symptoms:
PHCO_35771:
( SR:8606467324 CR:JAGag22742 )
After "/sbin/init.d/auditing start" on a large machine,
system becomes unresponsive for a significant period of
time.
Defect Description:
PHCO_35771:
( SR:8606467324 CR:JAGag22742 )
The /sbin/init.d/auditing script turns on auditing before
deselecting events not to be audited, leaving several events
unnecessarily selected for audit for a while.
Resolution:
Auditing is turned on only after auditable events are
configured.
Enhancement:
No
SR:
8606467324
Patch Files:
SecurityMon.SECURITY,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
/sbin/init.d/auditing
what(1) Output:
SecurityMon.SECURITY,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
/sbin/init.d/auditing:
auditing $Date: 2007/02/23 15:00:02 $Revision: r11.2
3/2 PATCH_11.23 (PHCO_35771)
cksum(1) Output:
SecurityMon.SECURITY,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
3261527358 4341 /sbin/init.d/auditing
Patch Conflicts: None
Patch Dependencies:
s700: 11.23: PHKL_35756
s800: 11.23: PHKL_35756
Hardware Dependencies: None
Other Dependencies: None
Supersedes: None
Equivalent Patches: None
Patch Package Size: 20 KBytes
Installation Instructions:
Please review all instructions and the Hewlett-Packard
SupportLine User Guide or your Hewlett-Packard support terms
and conditions for precautions, scope of license,
restrictions, and, limitation of liability and warranties,
before installing this patch.
------------------------------------------------------------
1. Back up your system before installing a patch.
2. Login as root.
3. Copy the patch to the /tmp directory.
4. Move to the /tmp directory and unshar the patch:
cd /tmp
sh PHCO_35771
5. Run swinstall to install the patch:
swinstall -x autoreboot=true -x patch_match_target=true \
-s /tmp/PHCO_35771.depot
By default swinstall will archive the original software in
/var/adm/sw/save/PHCO_35771. If you do not wish to retain a
copy of the original software, include the patch_save_files
option in the swinstall command above:
-x patch_save_files=false
WARNING: If patch_save_files is false when a patch is installed,
the patch cannot be deinstalled. Please be careful
when using this feature.
For future reference, the contents of the PHCO_35771.text file is
available in the product readme:
swlist -l product -a readme -d @ /tmp/PHCO_35771.depot
To put this patch on a magnetic tape and install from the
tape drive, use the command:
dd if=/tmp/PHCO_35771.depot of=/dev/rmt/0m bs=2k
Special Installation Instructions: None
|
