[cobalt-security] Qube 2 OSUpdate 3.0

["martin@xxxxxxx" <martin@xxxxxxx>]

Hey there.

I have written an employee at Cobalt who is a friend of my boss about a
problem I have observed with the OS update for Qube2 but received no reply
in quite a while.

Thus I find it better to post a patch to this list and see what you folks
think. As far as I can tell, the way cobalts OSUpdate 3.0 ships, at least
samba gets broken.

I have seen no updates on Cobalts pages or announcements of any kind.
Theses alterations worked for me and I believe them to be correct.
Please inform me if I am incorrect.

Jeff, take a peek? ;)

If the patch doesn't make it to the list, I'll try again with the
cut-and-paste method ;)

Regards,

/Martin Moeller, Liga ApS.

*** original/upgrade_me	Thu Jun 29 23:53:01 2000
--- corrected/upgrade_me	Fri Jul 14 13:57:04 2000
***************
*** 32,41 ****
  fi
  
  # Grab the appropiate paramters from smb.conf > /dev/null
! SMBWORK = grep -ie "workgroup" /etc/smb.conf > /dev/null
! SMBDOMN = grep -ie "domain logons" /etc/smb.conf > /dev/null
! WINSSUP = grep -ie "wins support" /etc/smb.conf > /dev/null
! WINSSRV = grep -ie "wins server" /etc/smb.conf > /dev/null
  
  # Backup proftpd config
  if [ -e /etc/proftpd.conf ]; then
--- 32,44 ----
  fi
  
  # Grab the appropiate paramters from smb.conf > /dev/null
! # - MM - This can't be right? That equals nothing!?
! # - MM - Removing /dev/null, extra spaces.
! # - MM - Inserting ` marks at beginning and end to execute and store result.
! SMBWORK=`grep -ie "workgroup" /etc/smb.conf`
! SMBDOMN=`grep -ie "domain logons" /etc/smb.conf`
! WINSSUP=`grep -ie "wins support" /etc/smb.conf`
! WINSSRV=`grep -ie "wins server" /etc/smb.conf`
  
  # Backup proftpd config
  if [ -e /etc/proftpd.conf ]; then
***************
*** 61,68 ****
  echo -n "" > $UPGRADE_DIR/.installed_rpms
  
  # Perform the installation.
  for rpm in $RPMS; do
!   rpm -U $UPGRADE_DIR/RPMS/$rpm --nodeps --force &> /dev/null
    if [ $? != 0 ]; then
      echo "4015 Problem installing package component: $rpm"
      exit 1
--- 64,72 ----
  echo -n "" > $UPGRADE_DIR/.installed_rpms
  
  # Perform the installation.
+ # - MM - Added '/bin' in front of 'rpm' to avoid trouble.
  for rpm in $RPMS; do
!   /bin/rpm -U $UPGRADE_DIR/RPMS/$rpm --nodeps --force &> /dev/null
    if [ $? != 0 ]; then
      echo "4015 Problem installing package component: $rpm"
      exit 1
***************
*** 146,157 ****
  fi
  
  # Fix samba to reset customer settings
! cp /etc/smb.conf /etc/smb.conf.master >> $INST_LOG 2>&1
! sed -e "s/^.*workgroup.*$/$SMBWORK/" \
!        "s/^.*domain logons.*$/$SMBDOMN/" \
!        "s/^.*wins support.*$/$WINSSUP/" \
!        "s/^.*wins server.*$/$WINSSRV/" \
!        /etc/smb.conf > /etc/smb.conf.new
  mv -f /etc/smb.conf.new /etc/smb.conf
  
  # Modify inetd.conf to upgrade max pop connections
--- 150,167 ----
  fi
  
  # Fix samba to reset customer settings
! # - MM - This also doesn't work. Replaced $VARNAME with `$VARNAME`
! # - MM - Also, the resulting smb.conf file would be blank. 
! # - MM - Clarification: smb.conf.new would be blank. This is then made smb.conf
! # - MM - Corrected to 'cat' smb.conf and pipe it to sed.
! # - MM - Modified logging. Kept getting 'Ambiguous redirect' with the 2>&1.
! # - MM - Three -e's too little!?!
! cp /etc/smb.conf /etc/smb.conf.master >> $INST_LOG 2>$INST_LOG
! cat /etc/smb.conf | sed -e 's/^.*workgroup.*$/$SMBWORK/' \
!        -e 's/^.*domain logons.*$/$SMBDOMN/' \
!        -e 's/^.*wins support.*$/$WINSSUP/' \
!        -e 's/^.*wins server.*$/$WINSSRV/' \
!        > /etc/smb.conf.new 
  mv -f /etc/smb.conf.new /etc/smb.conf
  
  # Modify inetd.conf to upgrade max pop connections