RHBA-2010:0425 - Bug Fix Advisory

Topic

Updated rsh packages that resolve an issue are now available.

Description

The rsh-server package contains programs which allow users to run
commands on remote machines, log in to other machines, copy files
between machines (rsh, rlogin and rcp), and provides an alternate
method of executing remote commands (rexec). All of these programs are
run by xinetd and can be configured through the Pluggable
Authentication Modules (PAM) system, and through configuration files
in the /etc/xinetd.d/ directory.

These updated rsh packages provide fix for the following bug:

• environment variables specified in /etc/security/pam_env.conf were

ignored (and, consequently, not initialized) by the rsh-server, rshd.
With this update, rshd now checks pam_env.conf for environment
variables and sets them as expected. (BZ#434937)

All rsh-server users should upgrade to these updated packages, which
resolve this issue.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 434937 - [PATCH] rshd access pam_env

CVEs

(none)

References

(none)