Patch-ID# 100424-01
Keywords: security, fsirand, seed, generation, nfs 
Synopsis: SunOS 4.1.1; NFS/fsirand security fix. 
Date:
 
SunOS release: 4.1.1
 
Unbundled Product:
 
Unbundled Release: 
 
Topic: 
 
BugId's fixed with this patch: 1063470

Architectures for which this patch is available: sun3, sun3x, sun4, sun4c

Patches which may conflict with this patch: 100177, 100259

Obsoleted by:  SYS_V Rel 4

Problem Description: 

NFS file handle guessing problems with the fsirand random number generator.

NOTE: This patch should only be applied in conjunction with patch 100173-07
      NFS jumbo patch.

NOTE: This patch is incompatible with DiskSuite and Backup: Copilot. 

INSTALL: 

NOTE: This patch should only be applied in conjunction with patch 100173-07
      NFS jumbo patch.

Install patch 100173-07 first (NFS jumbo patch)

as root:
mv /usr/etc/fsirand /usr/etc/fsirand.FCS
cp `arch -k`/fsirand /usr/etc/fsirand
chmod 755 /usr/etc/fsirand
chown root.staff /usr/etc/fsirand
mv /sys/`arch -k`/OBJ/ufs_inode.o /sys/`arch -k`/OBJ/ufs_inode.o.FCS
cp `arch -k`/ufs_inode.o /sys/`arch -k`/OBJ/ufs_inode.o

A new kernel will need to be configured, built, installed, and the system
rebooted.
Please refer to the System and Network Administration manual for 
details on building a custom kernel.