Solaris 10 7/07 HW Release Notes

Common Desktop Environment

The following bugs in Solaris 10 OS apply to the Common Desktop Environment (CDE).

Security Flaws in Firefox 2.0.0.1 (6526694)

The Firefox 2.0.0.1 web browser and derived products contain several flaws. Severe impacts of these flaws include enabling a remote attacker to execute arbitrary actions, or causing denial of service. For more information, see http://secunia.com/advisories/24205/. No error message is displayed.

Workaround: Upgrade to Firefox 2.0.0.3.

Printing From Some GNOME Applications Fail (6477108)

The name service switch enhancements feature causes the papiPrintersList() command to fail. This command is used by many GNOME applications to populate the print dialog with queue names.

No error message is displayed.

Workaround: None.

`strftime`(3c) Should Support GNU Extension in %-m And %-d (6448815)

The Java DS menu bar and some applications, like Evolution, incorrectly display Chinese date. The incorrect date is displayed in the %-m M %-d D format where M and D are the month and date in Chinese respectively.

Workaround: Perform the following steps:

Backup the /usr/share/locale/LC_MESSAGES/gnome-panel*.mo file.
Download gnome-panel.gnome-2-16.zh_CN.po from http://l10n.gnome.org/POT/gnome-panel.gnome-2-16/gnome-panel.gnome-2-16.zh_CN.po and save it under the /tmp directory.
Edit the file gnome-panel.gnome-2-16.zh_CN.po and replace all occurrences of %-m with %Om, and %-d with %e.
Generate a new gnome-panel.gnome-2-16.zh_CN.po file.
msgfmt -v -o gnome-panel.gnome-2-16.zh_CN.mo /tmp/gnome-panel.gnome-2-16.zh_CN.po
Copy the file back to the /usr/share/locale/LC_MESSAGES/ directory.
Log out of the system and re-login.

Nautilus ACL MASK is Not in Sync With Group Permissions (6464485)

The Group permissions in the Permissions tab should be the same as the Mask permissions in the Access Tab, but on some occasions they appear out of sync.

Workaround: Click the Close button, and then click Reload. View the file properties again. The Group permissions and the Mask permissions will now be in sync again. The permissions are set to what you changed the Mask to in the previous step.

SMC CLI Commands Do Not Process the Solaris Trusted Extensions Options (6447833)

This bug affects management of Solaris^TM Trusted Extensions by using the SMC. When the SMC command line with the -B toolbox option is used to pass in the Trusted Extensions options, the command is not executed. This failed execution prevents the use of the SMC CLI to manage Solaris Trusted Extensions. The following error message is displayed:

There was an unrecognized extended, nonstandard option specified with the -x option.
Please refer to man pages for additional information and correct syntax usage

Workaround: Use the SMC GUI for administration of users, roles, and profiles.

Mouse Pointer and the `dtfile` Icon Are Not Displayed When You Drag the `dtfile` Icon (6462945)

When you drag the dtfile icon, the icon and the the mouse pointer might not be displayed. No error message is displayed.

Workaround: Add the following lines to the /usr/dt/config/<locale>/sys.resources file , under #if EXT_SUN_TS OL:

!! DragNDrop protocol. Other styles cause policy violation.
*DragInitiatorProtocolStyle:            DRAG_DYNAMIC
*DragReceiverProtocolStyle:             DRAG_DYNAMIC

SMC Updates the `tnrhdb` File But Does Not Run `tnctl` to Update the Trusted Host Cache (6471594)

When the SMC is used to manage network security templates, the /etc/s ecurity/tsol/tnrhdb file is updated but the tndb cache is not updated. Network security definitions do not take effect. No error message is displayed.

Workaround: After you modify a network entry in the SMC, manually refresh the tndb cache with one of the following commands:

Modify an entry in the file scope:

# /usr/sbin/tnctl -H /etc/security/tsol/tnrhdb

Modify an entry in the LDAP scope:
# /usr/sbin/tnctl -H <hostname>

Cannot Login Using GDM Unless Clearance is Set to `admin_high` (6432114)

The login fails when you log in to the Solaris Trusted Extensions Java Desktop Systems (Java DS) by using GDM. This failure is caused by the PAM configuration. The pam.conf(4) file does not contain the required entries for GDM.

On login, the following error message is displayed:

The system administrator has disabled access to 
the system temporarily

Workaround: Add the following two lines to the /etc/pam.conf file:

gdm account requisite pam_roles.so.1
gdm account required pam_unix_account.so.1

For information about the file format, see the pam.conf(4) man page.

Trusted Stripe Disappears From The Screen After Resolution Change (6460624)

When you type the /usr/X11/bin/xrander -s command to set a smaller screen resolution, Trusted Stripe is no longer displayed. This affects the Trusted CDE Desktop but not the Trusted Java DS Desktop. No error message is displayed.

Workaround: After the resolution changes, restart the Workspace Manager. Select windows -> Restart Workspace Manager from the CDE workspace menu and click OK.

Secure Attention Key or Hot Key Does Not Work on x86 Systems (6486416)

The Secure Attention key or hot key, Alt+Break, on PC keyboards does not work on x86 systems. No error message is displayed.

Workaround: None.

Full-Screen Magnification and Keyboard Accessibility Features Not Working (6273030)

On your Java Desktop System software, you cannot set up the following:

Full-screen magnification
Keyboard accessibility features

Workaround: Perform the following steps:

Open the /etc/X11/gdm/gdm.conf file.
Depending on your system's platform, perform the following:
- On SPARC based systems:
  1. Look for the line in the file that begins as follows:
    command=/usr/openwin/bin/Xsun
  2. Append the following modification to the line:
    +kb +accessx -dev framebuffer1 -dev framebuffer2
    For example:
    +kb +accessx -dev /dev/fbs/pfb1 -dev /dev/fbs/pfb0
- On x86 based systems:
  1. Look for the line in the file that begins as follows:
    command=/usr/X11R6/bin/Xorg
  2. Append the following modification to the line:
    +kb +accessx

CDE Removable Media Auto Run Capability Removed (4634260)

The Removable Media auto run capability in the CDE desktop environment has been temporarily removed from the Solaris 10 software.

Workaround: To use the auto run function for a CD-ROM or another removable media volume, you must do one of the following:

Run the volstart program from the top level of the removable media file system.
Follow the instructions that are included with the CD for access from outside of CDE.

Solaris PDASync Cannot Delete Last Entry From the Desktop (4260435)

After you delete the last item from the desktop, the item is restored from the handheld device to the desktop when you synchronize your handheld device. Examples of items that you might delete, and then have restored, are the last appointment in your Calendar or the last address in the Address Manager.

Workaround: Manually delete the last entry from the handheld device prior to synchronization.