INSTALLATION INSTRUCTIONS FOR HOT FIX 81BA54 ON HP-UX


BEFORE DOWNLOADING:


The hot fix 81BA54 addresses the security issue(s) in Release 8.1 (TS1M0) 
of Base SAS software on HP-UX as documented in SAS Note(s):  

      SN-004201 Potential security exposure for sites that have installed
                the spawner programs (objspawn or sastcpd)   
      SN-007277 SAS/Integration Technologies Object Spawner does not 
                honor expired passwords when using SASAUTH authentication

which may be reviewed at:

      http://www.sas.com/service/techsup/unotes/SN/004/004201.html
      http://www.sas.com/service/techsup/unotes/SN/007/007277.html
      

The hot fix package that is downloaded is in tar format.  The name 
of the tar file is 81ba54h8.tar, and it contains the following files:

      * sastcpd.81ba54
             the replacement executable containing the hot fix

      * objspawn.81ba54
             the replacement executable containing the hot fix

      * sasauth.81ba54
             the replacement executable containing the hot fix

      * 81ba54h8.aud
             a hot fix identifier file that will allow Technical Support
             to determine which fixes have been applied to a system

      * 81ba54h8.txt
             a copy of these installation instructions; this file is installed
             in !SASROOT/hotfix/doc 



IMPORTANT NOTE(S):

1.  This hot fix may be applied to both Version 8 (TS M0) and Release 8.1
    (TS1M0).

2.  The file objspawn is installed along with the SAS/Integration Technologies 
    product and therefore may not be present on your system.



AFTER DOWNLOADING:

The following instructions describe the steps for installing the files listed 
above.  In this example, the directory where Release 8.1 (TS1M0) is installed is:

      /usr/lib/sas8


STEP 1:
Assuming the tar file is downloaded to the user's HOME directory, follow 
these procedures to install the package.

      $> cd /usr/lib/sas8
      $> tar xf $HOME/81ba54h8.tar
           

STEP 2:
The tar command will extract the files sastcpd.81ba54, objspawn.81ba54 and
sasauth.81ba54 into the !SASROOT/utilities/bin directory.  To replace the 
current sastcpd, objspawn and sasauth executables follow these steps (assuming 
you are still in the /usr/lib/sas8 directory).  

NOTE: The file objspawn is installed along with the SAS/Integration Technologies 
product and therefore may not be present on your system.


      $> cd utilities/bin 
     
      $> chown myuserid sastcpd objspawn sasauth    

         [where myuserid is a non-root userid]

      $> chmod 755 sastcpd objspawn sasauth

      $> mv sastcpd sastcpd.TS1M0

      $> mv objspawn objspawn.TS1M0

      $> mv sasauth sasauth.TS1M0

      $> mv sastcpd.81ba54 sastcpd

      $> mv objspawn.81ba54 objspawn

      $> mv sasauth.81ba54 sasauth


STEP 3:
Last, in order to authenticate a client’s identity and check the client’s 
authority to access resources, some setup is required by the root 
account. This setup changes the setuid permissions of files in 
!SASROOT/utilities/bin to root. 

This can be accomplished by executing the following commands:

      $> su root

      $> cd !SASROOT/utilities/bin

      $> chown root sastcpd objspawn sasauth

      $> chmod 4755 sastcpd objspawn sasauth

      $> exit



This completes the installation of hot fix 81BA54 on HP-UX.