Home • About Us • A-Z Index • Search * Contact Us • Register • Login • Press • Shop

The Open Brand -- Problem Reporting and Interpretations System

Problem Report 1046 Details

Help Show help | Quick Search | Submit a Test Suite Support Request | Click here to view your privileges

This page provides all information on Problem Report 1046.

Report 1046 Actions

    Problem Report Number 1046
    Submitter's Classification Test Suite problem
    State Resolved
    Resolution Rejected (REJ)
    Problem Resolution ID REJ.X.0285
    Raised 2001-06-15 08:00
    Updated 2003-03-13 08:00
    Published null
    Product Standard Commands and Utilities V3 (UNIX 98)
    Certification Program The Open Brand certification program
    Test Suite VSC version 5.1.2
    Test Identification POSIX.upe/at 891
    Problem Summary PG4C.00137 This request relates to a security issue involving NLSPATH
    Problem Text
    The failure above occurs because NLSPATH is removed from the environment in
    effect when the at utility was executed for security reasons. The implementation
    defined path for message catalogs used instead. This is in compliance with
    bwg2001-001 resolution for the use of NLSPATH and setuid applications. On our
    implementation at is a setuid program.
    Test Output
    ***********************************************************************
    /tset/POSIX.upe/at/at.ex 1 Failed

    Test Information:
    Assertion #891 (C): A command executed by at retains the en
    <LC> vironment set at the ...
    Standard output isn't the same as file 'at_eso_891_1'
    diff of "out.stdout" and "at_eso_891_1":
    *** out.stdout Tue May 1 14:58:05 2001
    --- at_eso_891_1 Tue May 1 14:58:05 2001
    ***************
    *** 25,30 ****
    --- 25,31 ----
    MAILMSG=[YOU HAVE NEW MAIL]
    MBI_ENV=garp
    NEGATIVE_TEST=1
    + NLSPATH=/usr/lib/nls/msg/%L/%N:/usr/lib/nls/msg/%L/%N.ca
    <LC> t
    NULL=NULL
    ODMDIR=/etc/objrepos
    PATH=/usr/bin:/etc:/usr/sbin:/usr/ucb:/usr/bin/X11:/sbin
    <LC> :/usr/java130/jre/bin:/usr/java130/bin:/tsuites/VSC
    <LC> /bin:/tsuites/VSC/vsc/Bin:/tsuites/VSC/vsc/Shlib:.

    ***********************************************************************

    Review Information

    Review Type TSMA Review
    Start Date null
    Completed null
    Status Complete
    Review Recommendation No Resolution Given
    Review Response
    The test suite does not set the NLSPATH environment variable itself, so
    this value must have been inherited from the shell that was used to start
    the tests. If the tests are executed from a shell which does not have
    NLSPATH set in the environment then this failure will not occur.

    It is recommended that this request is refused.

    Review Type SA Review
    Start Date null
    Completed null
    Status Complete
    Review Resolution Rejected (REJ)
    Review Conclusion
    This request is refused. We are refusing this on the Consultants
    recommendation.

    Problem Reporting System Options:

     

    Back   

Contact the Certification Authority