OBSOLETE Patch-ID# 116337-07

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: security screen lock exit sunray login activcard cryptoflex dtwm
Synopsis: Obsoleted by: 116337-08 Trusted_Solaris_8_HW_12/02_x86: dtsession dtlogin dtwm patch
Date: Feb/28/2005


Install Requirements: Reboot after installation, an alternative may be in Special Install Instructions                      
                      
Solaris Release: Trusted_Solaris_8_HW_12/02_x86

SunOS Release: Trusted_Solaris_8_HW_12/02_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 116336

Topic: Trusted_Solaris_8_HW_12/02_x86: dtsession dtlogin dtwm patch

Relevant Architectures: i386

BugId's fixed with this patch: 4868804 4903672 4920664 4939675 4944393 4956889 5026455 5033132 5038488 5066620

Changes incorporated in this version: 4956889

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/dt/bin/dtchooser
/usr/dt/bin/dtgreet
/usr/dt/bin/dtlogin
/usr/dt/bin/dtsession
/usr/dt/bin/dtwm
/usr/dt/config/Xsession.d/0200.dtTsol
/usr/dt/config/Xstartup
/usr/dt/config/sessionetc

Problem Description:

4956889 Workspace menu should recognize available applications
 
(from 116337-06)
 
5066620 Detaching a Sun Ray NSCM session kills the session
 
(from 116337-05)
 
5026455 SunRay 2.0/Removing smartcard soon after login, allow the user to gain access.
5033132 Application visible to user after user already logged out
 
(from 116337-04)
 
5038488 SunRay patch 114880-04 breaks USB devices & audio on Trusted Solaris
 
(from 116337-03)
 
4868804 SC login GUI does not come up when we enable SC login using "-S" option
4939675 dtsession dies/SEGV with PIN authentication under activcard
 
(from 116337-02)
 
4944393 User's CDE session does not terminate/lock after removing smart card
 
(from 116337-01)
 
4903672 screen does not lock if pointer is grabbed
4920664 dtsession screen lock deferred until PAM conversation function run

Patch Installation Instructions:
--------------------------------
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
scripts provided with Trusted Solaris. Any other special or non-generic
installation instructions should be described below as special instructions.
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
NOTE 1: To get the complete fix for bug 4903672, one needs to install
        the following patch:
 
        116339-01 (or greater)  Xsun patch
 
	Reboot immediately after the patch is installed.
 
The steps below assume the patch has been put into an ADMIN_LOW
directory in /var/tmp and the patch file label is configured to ADMIN_LOW.
 
Create a role which contains the Software Installation profile
(typically admin role is assigned this profile) and whose label
range includes the ADMIN_LOW label.  All the steps in the patch
installation should be executed at ADMIN_LOW.
 
The patch should be owned by this role.
 
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchadd".
 
        The result should be:
         /usr/sbin/patchadd    uid=0, privs=all, label=admin_low
 
        2) cd into /var/tmp and install the patch file.
 
        # cd /var/tmp
        # patchadd /var/tmp/<patch-id>
 
        where <patch-id> is the patch number.
 
Special Backout Instructions:
-----------------------------
NOTE 1:	Reboot immediately after the patch is removed.
 
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchrm".
 
        The result should be:
        /usr/sbin/patchrm    uid=0, privs=all, label=admin_low
 
        2) Backout patch by typing:
 
        # patchrm <patch-id>
 
        where <patch-id> is the patch number.

README -- Last modified date:  Friday, August 19, 2005

