OpenSolaris

Heads up: tnchkdb noise from Trusted Extensions DOI changes

Date: Wed, 13 Jun 2007 11:48:44 -0400
From: ken Powell - Sun Microsystem <Ken.Powell at Sun dot COM>
To: onnv-gate at onnv dot eng dot sun dot com
Subject: Heads up: tnchkdb noise from Trusted Extensions DOI changes

If you don't run with Trusted Extensions configured, you can delete.

My recent putback to the onnv-gate of fixes for

   CR 6507344 TX zones should not hard code DOI to 1

triggers older versions of /usr/sbin/tnchkdb to generate bogus DOI
error messages against the tnzonecfg file. For example:

   # /usr/sbin/tnchkdb
   checking /etc/security/tsol/tnrhtp ...
   checking /etc/security/tsol/tnrhdb ...
   checking /etc/security/tsol/tnzonecfg ...
   tnchkdb: DOI 0: line 40 entry global
   tnchkdb: DOI 0: line 41 entry public
   tnchkdb: DOI 0: line 42 entry internal

It is safe to ignore these errors.

This problem in tnchkdb previously fixed and distributed with Nevada
build 60 under

   CR 6520317 tnchkdb should not expect all DOI's to be hardcoded to 1

tnchkdb is not part of the ON consolidation. It is installed from
the Trusted Extensions package SUNWtsu in the Extra Value directory.
bfu and live upgrade do not automatically install new versions
of tnchkdb.

To avoid this problem, reinstall the Trusted Extensions Extra Value
packages or copy in a recent /usr/sbin/tnchkdb.

Ken