Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Solaris automount Vulnerability

Solution:
Check automountd manuals and see if you require it for your particular instance.Statd doesn't run as root in Solaris 7 so the automounter will ignore its requests. This change was made late in Solaris 7 development and did not make it into any external release. The easiest way to work around this problem quickly is running statd as a user other than root, to this end a change in /etc/init.d/nfs.client as follows (but not on Solaris 7, where such a change may break statd).

28c28
< /usr/lib/nfs/statd > /dev/console 2>&1
---
> su daemon -c /usr/lib/nfs/statd > /dev/console 2>&1

(make sure you keep the links in /etc/rc?.d/[SK]*nfs.client pointing to /etc/init.d/nfs.client) and run:

$chown -R daemon /var/statmon
$chmod -R og-w /var/statmon

Then stop and start lockd & statd.

Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.4_x86
  • Sun 101946-44
    x86


Sun Solaris 2.4
  • Sun 101945-50
    sparc


Sun Solaris 2.5_x86
  • Sun 103188-25
    x86


Sun Solaris 2.5.1 _x86
  • Sun 104655-01
    x86


Sun Solaris 2.5.1
  • Sun 104654-03
    sparc








 

Privacy Statement
Copyright 2009, SecurityFocus