Firewall-1

Re: [FW-1] Installation error - Solaris patch 110934-20 the culprit

Subject: Re: [FW-1] Installation error - Solaris patch 110934-20 the culprit
From: Dave Aitchison <Dave AT CANBERRADJ DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Sat, 25 Sep 2004 15:14:09 +1000
Hi Rainer,

I was just about to write to the list about this one!  Sure took me a
while to figure that out.

The Solaris patch 110934-20 changes the pkgadd executable, forcing a
setuid 'nobody' while executing the request script.  Since the vast
majority of the CPshrd-54 package is owned by root with 700 permissions,
the request script can't use a lot of libs that it needs.  From the
patch description:

=====
Problem Description:

5038650 The pkgadd command is executing request scripts as root (and
should not be)
=====

I'll be logging a support call with Sun on Monday morning to find out
why they broke pkgadd...

Cheers,

Dave Aitchison.


Rainer Orsario wrote:

hi everybody

i solved it, there is a solaris patch causing this:

*Solaris8:   110934-20
Solaris9:   113713-17

deinstall patch / install FW / reinstall patch

have fun
*


Jean-Francois Gobin wrote:

Heya there,

We had some errors when trying to install from "uncompressed" archives.

A little "chown -R root:root *" on the directory where we
uncompressed it
solved.

Jean-Francois Gobin

On Fri, 24 Sep 2004, Rainer Orsario wrote:

hi

same here, solaris 9 core, patchcluster september 10th 2004
ng ai R55 installation via UnixInstallScript

same errors during installation

help?

Jean Caron wrote:

Folks,

I've been fighting an installation error, it follows. This is a Core
Solaris
8 install, fully patched (solution ID: sk10374 + a few extra packages
- 36
total). I run the UnixInstallScript from the location where I unzip
the
distro. I double checked and Check Point SVN Foundation NG Feature
Pack 3 is
installed. A little investigation shows that the error happens from
within
the ../solaris/install_pkg script, as soon as "pkgadd -a admin.asc
/cp_tmp
CPfw1-53" is invoked (near the bottom).

Thanks in advance for any pointers,
Jean

THE ERROR ITSELF BELOW:

application CPshrd-53      Check Point SVN Foundation NG Feature
Pack 3
ERROR: information for "CPclnt-53" was not found
Installing of CPfw1-53 package

Copyright 1994-2002 Check Point Software Technologies Ltd.

All rights reserved. This product and related documentation are
protected by
copyright and distributed under licenses restricting their use,
copying,
distribution, and decompilation. No part of this product or related
documentation may be reproduced in any form or by any means without
prior
written authorization of Check Point. While every precaution has been
taken
in the preparation of this software package, Check Point assumes no
responsibility for errors or omissions. This software package and its
features are subject to change without notice.
/cp_tmp/CPfw1-53/install/request:
/opt/CPshrd-53/log/install_fw1_fp3.log:
cannot create
/cp_tmp/CPfw1-53/install/request:
/opt/CPshrd-53/log/install_fw1_fp3.log:
cannot create
/cp_tmp/CPfw1-53/install/request:
/opt/CPshrd-53/log/install_fw1_fp3.log:
cannot create
/cp_tmp/CPfw1-53/install/request:
/opt/CPshrd-53/log/install_fw1_fp3.log:
cannot create
/cp_tmp/CPfw1-53/install/request:
/opt/CPshrd-53/log/install_fw1_fp3.log:
cannot create

**********************ERROR************************************************




The installation application has detected that you do not have
Check Point SVN Foundation NG Feature Pack 3 or higher installed.
In order to install VPN-1/FireWall-1 NG Feature Pack 3 you must first
install Check Point SVN Foundation NG Feature Pack 3.
Installation Aborted.

***************************************************************************




Please ignore the following error message:
WRAP_ERR_TRACK_BEGIN (CPfw1-53)

Processing package instance <CPfw1-53> from </cp_tmp>

Check Point VPN-1/FireWall-1 NG Feature Pack 3
(sparc) 5.0
pkgadd: ERROR: request script did not complete successfully

Installation of <CPfw1-53> failed.
No changes were made to the system.
WRAP_ERR_TRACK_END (CPfw1-53)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================



--
Rainer Orsario, Technical Services / IT-Security
Bacher Systems EDV GmbH, Wienerbergstr. 11B, A-1101 Wien, Austria
phone : +43 (1) 60 126-34 | fax: +43 (1) 60 126-4
e-mail: ro AT bacher DOT at | web: www.bacher.at

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


----------
Jean-Francois Gobin - Administrateur gobinjf.be
http://www.gobinjf.be   mailto:gobin AT gobinjf DOT be

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================



--
Rainer Orsario, Technical Services / IT-Security
Bacher Systems EDV GmbH, Wienerbergstr. 11B, A-1101 Wien, Austria
phone : +43 (1) 60 126-34 | fax: +43 (1) 60 126-4
e-mail: ro AT bacher DOT at | web: www.bacher.at

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>