postinstall revision 27092493f25ffcb9366c35fb42b2b004a5b527ec
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# CDDL HEADER START
fd9abdda70912b99b24e3bf1a38f26fde908a74cnd# The contents of this file are subject to the terms of the
fd9abdda70912b99b24e3bf1a38f26fde908a74cnd# Common Development and Distribution License (the "License").
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# You may not use this file except in compliance with the License.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
96ad5d81ee4a2cc66a4ae19893efc8aa6d06fae7jailletc# See the License for the specific language governing permissions
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# and limitations under the License.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# When distributing Covered Code, include this CDDL HEADER in each
2e545ce2450a9953665f701bb05350f0d3f26275nd# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# If applicable, add the following below this CDDL HEADER, with the
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# fields enclosed by brackets "[]" replaced with your own identifying
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# information: Portions Copyright [yyyy] [name of copyright owner]
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# CDDL HEADER END
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# Copyright 2006 Sun Microsystems, Inc. All rights reserved.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# Use is subject to license terms.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# ident "%Z%%M% %I% %E% SMI"
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# Clear sysidtool which may have gone into maintenance due to a dependency
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# cycle with milestone/single-user, when upgrading to a system that
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorcat >> $BASEDIR/var/svc/profile/upgrade <<\_CLRSYSID
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ $? = 0 ] ; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ $? = 0 ] ; then
4aa603e6448b99f9371397d439795c91a93637eandif [ -h $BASEDIR/var/news.ABCsavedXYZ ] ; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ $? = 0 ] ; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorif [ -f $PMTAB ] ; then
853ab6827637acc5cdd976cd2ea20a18f82ae184lgentis sed -e 's/\\x00020ACE......../\\x00020ACE00000000/' \
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor -e 's/\\x00020203......../\\x0002020300000000/' $PMTAB >/tmp/t.$$
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor cp /tmp/t.$$ $PMTAB
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorif [ -f $AUTH_ATTR ] ; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor sed '/^solaris\.\*/d' $AUTH_ATTR > /tmp/a.$$
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor cp /tmp/a.$$ $AUTH_ATTR
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor rm -f /tmp/a.$$
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorif [ -f $INITTAB -a -n "$SUNW_PKG_INSTALL_ZONENAME" -a \
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor "$SUNW_PKG_INSTALL_ZONENAME" != "global" ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor sed -e '/^ap:/d' -e '/^sp:/d' $INITTAB > /tmp/i.$$
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor cp /tmp/i.$$ $INITTAB
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor rm -f /tmp/i.$$
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorif [ -f $VFSTAB -a -n "$SUNW_PKG_INSTALL_ZONENAME" -a \
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor "$SUNW_PKG_INSTALL_ZONENAME" != "global" ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor sed '/^\/devices[ ]/d' $VFSTAB > /tmp/v.$$
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor cp /tmp/v.$$ $VFSTAB
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor rm -f /tmp/v.$$
e3e52ec6993de04bb0100e098ce0a569c7001382lgentis# Get rid of obsolete BIND 8 server instance
a83ecfe48f684afd61d5e019064db91e4cc888e3gryzorcat >> $BASEDIR/var/svc/profile/upgrade <<\_DEL_BIND8
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor cur_se=`svcprop -p start/exec svc:/network/dns/server 2>/dev/null`
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ "$obs_se" = "$cur_se" ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor svcadm disable -s svc:/network/dns/server:default
38ba70f0f7aec8025f2e8800749c5997e15ca35elgentis svccfg delete svc:/network/dns/server:default
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # If this was the only instance, delete the service also
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor svccfg delete svc:/network/dns/server
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# Remove stale GLD services
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorSVCCFG_REPOSITORY=$PKG_INSTALL_ROOT/etc/svc/repository.db
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorexport SVCCFG_REPOSITORY
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor -f $PKG_INSTALL_ROOT/var/svc/manifest/network/datalink.xml ]; then
e3e52ec6993de04bb0100e098ce0a569c7001382lgentis if [ -r $PKG_INSTALL_ROOT/etc/svc/volatile/repository_door ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # Local package install. Need to disable the services first
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # before deleting.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor svcadm disable -s svc:/network/aggregation >/dev/null 2>&1
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor svcadm disable -s svc:/network/datalink-init >/dev/null 2>&1
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor svcadm disable -s svc:/network/datalink >/dev/null 2>&1
38ba70f0f7aec8025f2e8800749c5997e15ca35elgentis svccfg delete svc:/network/aggregation >/dev/null 2>&1
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor svccfg delete svc:/network/datalink-init >/dev/null 2>&1
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# svc:/network/rpc/keyserv is expected to be off on systems that don't
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# set domainname. On systems that do define a default domain, leave the
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# setting as previously set.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorcat >> $BASEDIR/var/svc/profile/upgrade <<\_CSVC_UPGRADE_2
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ ! -f /etc/defaultdomain ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor_CSVC_UPGRADE_2
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorif [ "$UPDATE" != yes ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # On initial install, default to ns_files.xml. The installer will
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # customize, if appropriate.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor ln -s ns_files.xml $BASEDIR/var/svc/profile/name_service.xml
e3e52ec6993de04bb0100e098ce0a569c7001382lgentiselif [ ! -r $BASEDIR/var/svc/profile/name_service.xml ] || \
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor [ ! -L $BASEDIR/var/svc/profile/name_service.xml ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # Associate name service profile, if none present.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor grep nisplus $BASEDIR/etc/nsswitch.conf >/dev/null 2>&1
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor is_nisplus=$?
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ $is_ldap = 0 ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor elif [ $is_nisplus = 0 ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor elif [ $is_nis = 0 ]; then
e3e52ec6993de04bb0100e098ce0a569c7001382lgentis # Remove stale copy of name_service.xml, if it is not a symlink.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ ! -L $BASEDIR/var/svc/profile/name_service.xml ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor /usr/bin/rm -f $BASEDIR/var/svc/profile/name_service.xml
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor ln -s $ns_profile $BASEDIR/var/svc/profile/name_service.xml
38ba70f0f7aec8025f2e8800749c5997e15ca35elgentis if [ $? = 0 ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor echo "/usr/sbin/svcadm enable network/dns/client" >> \
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# Associate correct inetd services profile.
20f499565e77defe9dab24dd85c02f38a1175855ndif [ "$UPDATE" = yes ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor ln -s inetd_upgrade.xml $BASEDIR/var/svc/profile/inetd_services.xml
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # Ensure inetd-upgrade is run post-upgrade
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor echo "/usr/sbin/svcadm enable network/inetd-upgrade" >> \
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor ln -s inetd_generic.xml $BASEDIR/var/svc/profile/inetd_services.xml
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# /etc/svc/repository.db was previously packaged but it is now generated
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# from one of the seed repositories and then updated by svccfg(1M).
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# Therefore, removef(1M) is used to remove the packaging database entry
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# although the repository itself is preserved.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor/usr/sbin/removef $PKGINST /etc/svc/repository.db >/dev/null 2>&1
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# Solaris audit's internal "enable/disable" state is maintained by
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# c2audit; if c2audit accepts the auditconfig query, then auditing is
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# enabled. If that is the case, then SMF should always enable auditd
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# in the global zone and also in a non-global zone if perzone auditing
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# is in use.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorcat >> $BASEDIR/var/svc/profile/upgrade <<\_ENABLE_AUDIT
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorif [ $? -eq 0 ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ `/sbin/zonename` = global ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor echo `/usr/sbin/auditconfig -getpolicy` | grep perzone > /dev/null
20f499565e77defe9dab24dd85c02f38a1175855nd if [ $? -eq 0 ]; then
e3e52ec6993de04bb0100e098ce0a569c7001382lgentis_ENABLE_AUDIT
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorif [ -f $BASEDIR/var/SUNWcsr-apply-limited-net ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor UPGRADEFILE=${PROFILEDIR}/upgrade
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor ln -sf ./generic_limited_net.xml ${PROFILEDIR}/generic.xml
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor cat >> ${UPGRADEFILE} <<\_ENABLE_LIMITED_NET
38ba70f0f7aec8025f2e8800749c5997e15ca35elgentis# apply the generic_limit_net profile selected at install
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# time, and set the accompanying properties since they can't
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# be readily set in the profile as of yet.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzorapply_limited_net()
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor# apply_limited_net as last action of this upgrade script
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzortrap apply_limited_net 0
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor_ENABLE_LIMITED_NET
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # This is not an initial (zone-)install: we are upgrading.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # If we have a previous version of generic.xml, keep that.
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor # Otherwise (upgrade from pre-SMF filesystem) take the default
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor if [ -f $BASEDIR/var/svc/profile/generic.xml.ABCsavedXYZ ]; then
c6c48c94b482d3405ab691399fa2043cb92ac56cgryzor mv $BASEDIR/var/svc/profile/generic.xml.ABCsavedXYZ \