961N/A#

961N/A# CDDL HEADER START

961N/A#

961N/A# The contents of this file are subject to the terms of the

961N/A# Common Development and Distribution License (the "License").

961N/A# You may not use this file except in compliance with the License.

961N/A#

961N/A# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

6983N/A# or http://www.opensolaris.org/os/licensing.

6983N/A# See the License for the specific language governing permissions

961N/A# and limitations under the License.

961N/A#

961N/A# When distributing Covered Code, include this CDDL HEADER in each

961N/A# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

6983N/A# If applicable, add the following below this CDDL HEADER, with the

6983N/A# fields enclosed by brackets "[]" replaced with your own identifying

6983N/A# information: Portions Copyright [yyyy] [name of copyright owner]

6983N/A#

961N/A# CDDL HEADER END

961N/A#

961N/A# Copyright 2007 Sun Microsystems, Inc. All rights reserved.

961N/A# Use is subject to license terms.

961N/A#

3231N/A# ident "%Z%%M% %I% %E% SMI"

5385N/A#

961N/ABASEPREFIX=`echo $BASEDIR | sed "s/\//_/g"`

961N/A#

961N/A# Clear sysidtool which may have gone into maintenance due to a dependency

5636N/A# cycle with milestone/single-user, when upgrading to a system that

961N/A# introduces milestone/sysconfig.

961N/A#

961N/Acat >> $BASEDIR/var/svc/profile/upgrade <<\_CLRSYSID

5636N/A /usr/sbin/svcadm clear svc:/system/sysidtool:net

961N/A /usr/sbin/svcadm clear svc:/system/sysidtool:system

961N/A_CLRSYSID

961N/A

961N/Aif [ -f $BASEDIR/etc/inet/ipnodes.hostsmerge ]; then

961N/A rm -f $BASEDIR/etc/inet/ipnodes.hostsmerge

961N/Afi

961N/A

961N/Aif [ -h $BASEDIR/var/mail.ABCsavedXYZ ] ; then

5636N/A rmdir $BASEDIR/var/mail/:saved >/dev/null 2>&1

961N/A if [ $? = 0 ] ; then

961N/A rmdir $BASEDIR/var/mail >/dev/null 2>&1

961N/A if [ $? = 0 ] ; then

5385N/A mv $BASEDIR/var/mail.ABCsavedXYZ $BASEDIR/var/mail

1878N/A fi

961N/A fi

1878N/A rm -fr $BASEDIR/var/mail.ABCsavedXYZ

961N/Afi

961N/A

1878N/Aif [ -h $BASEDIR/var/news.ABCsavedXYZ ] ; then

961N/A rmdir $BASEDIR/var/news >/dev/null 2>&1

961N/A if [ $? = 0 ] ; then

1878N/A mv $BASEDIR/var/news.ABCsavedXYZ $BASEDIR/var/news

961N/A fi

5636N/A rm -fr $BASEDIR/var/news.ABCsavedXYZ

961N/Afi

961N/A

961N/APMTAB=$BASEDIR/etc/saf/tcp/_pmtab

961N/Aif [ -f $PMTAB ] ; then

961N/A sed -e 's/\\x00020ACE......../\\x00020ACE00000000/' \

961N/A -e 's/\\x00020203......../\\x0002020300000000/' $PMTAB >/tmp/t.$$

961N/A cp /tmp/t.$$ $PMTAB

961N/Afi

961N/A

961N/AAUTH_ATTR=$BASEDIR/etc/security/auth_attr

961N/Aif [ -f $AUTH_ATTR ] ; then

961N/A sed '/^solaris\.\*/d' $AUTH_ATTR > /tmp/a.$$

5385N/A cp /tmp/a.$$ $AUTH_ATTR

1878N/A rm -f /tmp/a.$$

1878N/Afi

961N/A

961N/AINITTAB=$BASEDIR/etc/inittab

5636N/Aif [ -f $INITTAB -a -n "$SUNW_PKG_INSTALL_ZONENAME" -a \

961N/A "$SUNW_PKG_INSTALL_ZONENAME" != "global" ]; then

961N/A sed -e '/^ap:/d' -e '/^sp:/d' $INITTAB > /tmp/i.$$

961N/A cp /tmp/i.$$ $INITTAB

961N/A rm -f /tmp/i.$$

961N/Afi

5636N/A

961N/AVFSTAB=$BASEDIR/etc/vfstab

961N/Aif [ -f $VFSTAB -a -n "$SUNW_PKG_INSTALL_ZONENAME" -a \

961N/A "$SUNW_PKG_INSTALL_ZONENAME" != "global" ]; then

1878N/A sed '/^\/devices[ ]/d' $VFSTAB > /tmp/v.$$

5636N/A cp /tmp/v.$$ $VFSTAB

961N/A rm -f /tmp/v.$$

961N/Afi

961N/A

1878N/A#

1878N/A# Get rid of obsolete BIND 8 server instance

1878N/A#

5636N/Acat >> $BASEDIR/var/svc/profile/upgrade <<\_DEL_BIND8

961N/A obs_se=/usr/sbin/in.named

1878N/A cur_se=`svcprop -p start/exec svc:/network/dns/server 2>/dev/null`

961N/A if [ "$obs_se" = "$cur_se" ]; then

svcadm disable -s svc:/network/dns/server:default

svccfg delete svc:/network/dns/server:default

# If this was the only instance, delete the service also

svcs network/dns/server >/dev/null 2>&1 || \

svccfg delete svc:/network/dns/server

fi

_DEL_BIND8

#

# Get rid of obsolete DARPA trivial name server (Death to IEN-116!)

#

cat >> $BASEDIR/var/svc/profile/upgrade <<\_DEL_TNAME

svcs svc:/network/tname > /dev/null 2>&1

if [ "$?" = 0 ]; then

svcadm disable -s svc:/network/tname

svccfg delete svc:/network/tname

fi

_DEL_TNAME

#

# Remove stale GLD services

#

SVCCFG_REPOSITORY=$PKG_INSTALL_ROOT/etc/svc/repository.db

export SVCCFG_REPOSITORY

if [ -x /usr/sbin/svcadm -a -x /usr/sbin/svccfg -a \

-f $PKG_INSTALL_ROOT/var/svc/manifest/network/datalink.xml ]; then

if [ -r $PKG_INSTALL_ROOT/etc/svc/volatile/repository_door ]; then

#

# Local package install. Need to disable the services first

# before deleting.

#

svcadm disable -s svc:/network/aggregation >/dev/null 2>&1

svcadm disable -s svc:/network/datalink-init >/dev/null 2>&1

svcadm disable -s svc:/network/datalink >/dev/null 2>&1

fi

svccfg delete svc:/network/aggregation >/dev/null 2>&1

svccfg delete svc:/network/datalink-init >/dev/null 2>&1

svccfg delete svc:/network/datalink >/dev/null 2>&1

fi

# The ipsecalgs and policy services are delivered enabled.

# The ike and manual-key services are delivered disabled. The

# system administrator will need to enable them after creating

# the config file(s). If the system has been upgraded and the

# config files exist, enable the services on first boot.

# The file in /tmp indicates that this system had already been

# upgraded. The service will only be enabled on first upgrade.

IKEMANIFEST=`echo ike.xml"$BASEPREFIX" | cut -c 1-256`

if [ ! -f /tmp/${IKEMANIFEST} ]; then

cat >> ${PKG_INSTALL_ROOT}/var/svc/profile/upgrade <<\_IPSECUPGRD

if [ -f /etc/inet/ike/config ]; then

/usr/sbin/svcadm enable svc:/network/ipsec/ike:default

fi

_IPSECUPGRD

else

rm /tmp/${IKEMANIFEST}

fi

MANKEYMANIFEST=`echo manual-key.xml"$BASEPREFIX" | cut -c 1-256`

if [ ! -f /tmp/${MANKEYMANIFEST} ]; then

cat >> ${PKG_INSTALL_ROOT}/var/svc/profile/upgrade <<\_IPSECUPGRD

if [ -f /etc/inet/secret/ipseckeys ]; then

/usr/sbin/svcadm enable svc:/network/ipsec/manual-key:default

fi

_IPSECUPGRD

else

rm /tmp/${MANKEYMANIFEST}

fi

#

# If the eeprom service is present, remove it. We can't use

# /var/svc/profile/upgrade as it runs before manifest-import.

#

/usr/sbin/svccfg -s svc:/platform/i86pc/eeprom:default end >/dev/null 2>&1

if [ "$?" = 0 ]; then

if [ -r $PKG_INSTALL_ROOT/etc/svc/volatile/repository_door ]; then

svcadm disable -s svc:/platform/i86pc/eeprom:default \

>/dev/null 2>&1

fi

svccfg delete svc:/platform/i86pc/eeprom >/dev/null 2>&1

rm -f $PKG_INSTALL_ROOT/var/svc/profile/platform_i86pc.xml

rm -f $PKG_INSTALL_ROOT/var/svc/profile/platform.xml

fi

#

# svc:/network/rpc/keyserv is expected to be off on systems that don't

# set domainname. On systems that do define a default domain, leave the

# setting as previously set.

#

cat >> $BASEDIR/var/svc/profile/upgrade <<\_CSVC_UPGRADE_2

if [ ! -f /etc/defaultdomain ]; then

svcadm disable network/rpc/keyserv

fi

_CSVC_UPGRADE_2

if [ "$UPDATE" != yes ]; then

#

# On initial install, default to ns_files.xml. The installer will

# customize, if appropriate.

#

ln -s ns_files.xml $BASEDIR/var/svc/profile/name_service.xml

elif [ ! -r $BASEDIR/var/svc/profile/name_service.xml ] || \

[ ! -L $BASEDIR/var/svc/profile/name_service.xml ]; then

#

# Associate name service profile, if none present.

#

grep ldap $BASEDIR/etc/nsswitch.conf >/dev/null 2>&1

is_ldap=$?

grep nisplus $BASEDIR/etc/nsswitch.conf >/dev/null 2>&1

is_nisplus=$?

grep nis $BASEDIR/etc/nsswitch.conf >/dev/null 2>&1

is_nis=$?

if [ $is_ldap = 0 ]; then

ns_profile=ns_ldap.xml

elif [ $is_nisplus = 0 ]; then

ns_profile=ns_nisplus.xml

elif [ $is_nis = 0 ]; then

ns_profile=ns_nis.xml

else

ns_profile=ns_files.xml

fi

# Remove stale copy of name_service.xml, if it is not a symlink.

if [ ! -L $BASEDIR/var/svc/profile/name_service.xml ]; then

/usr/bin/rm -f $BASEDIR/var/svc/profile/name_service.xml

fi

ln -s $ns_profile $BASEDIR/var/svc/profile/name_service.xml

grep dns $BASEDIR/etc/nsswitch.conf >/dev/null 2>&1

if [ $? = 0 ]; then

echo "/usr/sbin/svcadm enable network/dns/client" >> \

$BASEDIR/var/svc/profile/upgrade

fi

fi

#

# Associate correct inetd services profile.

#

rm -f $BASEDIR/var/svc/profile/inetd_services.xml

if [ "$UPDATE" = yes ]; then

ln -s inetd_upgrade.xml $BASEDIR/var/svc/profile/inetd_services.xml

# Ensure inetd-upgrade is run post-upgrade

echo "/usr/sbin/svcadm enable network/inetd-upgrade" >> \

$BASEDIR/var/svc/profile/upgrade

else

ln -s inetd_generic.xml $BASEDIR/var/svc/profile/inetd_services.xml

fi

#

# /etc/svc/repository.db was previously packaged but it is now generated

# from one of the seed repositories and then updated by svccfg(1M).

# Therefore, removef(1M) is used to remove the packaging database entry

# although the repository itself is preserved.

#

/usr/sbin/removef $PKGINST /etc/svc/repository.db >/dev/null 2>&1

/usr/sbin/removef -f $PKGINST >/dev/null 2>&1

# Solaris audit's internal "enable/disable" state is maintained by

# c2audit; if c2audit accepts the auditconfig query, then auditing is

# enabled. If that is the case, then SMF should always enable auditd

# in the global zone and also in a non-global zone if perzone auditing

# is in use.

cat >> $BASEDIR/var/svc/profile/upgrade <<\_ENABLE_AUDIT

/usr/sbin/auditconfig -getcond 2> /dev/null

if [ $? -eq 0 ]; then

if [ `/sbin/zonename` = global ]; then

/usr/sbin/svcadm enable system/auditd

else

echo `/usr/sbin/auditconfig -getpolicy` | grep perzone > /dev/null

if [ $? -eq 0 ]; then

/usr/sbin/svcadm enable system/auditd

fi

fi

fi

_ENABLE_AUDIT

PROFILEDIR=$BASEDIR/var/svc/profile

GENERICXML=${PROFILEDIR}/generic.xml

if [ -f $BASEDIR/var/SUNWcsr-apply-limited-net ]; then

UPGRADEFILE=${PROFILEDIR}/upgrade

ln -sf ./generic_limited_net.xml ${GENERICXML}

cat >> ${UPGRADEFILE} <<\_ENABLE_LIMITED_NET

#

# apply the generic_limit_net profile selected at install

# time, and set the accompanying properties since they can't

# be readily set in the profile as of yet.

#

apply_limited_net()

{

/usr/sbin/netservices limited

}

# apply_limited_net as last action of this upgrade script

trap apply_limited_net 0

_ENABLE_LIMITED_NET

rm -f $BASEDIR/var/SUNWcsr-apply-limited-net

else

#

# This is not an initial (zone-)install: we are upgrading.

#

# If we have a previous version of generic.xml, keep that.

# Otherwise (upgrade from pre-SMF filesystem) take the default

# action, i.e., sym-link to ./generic_open.xml

#

if [ -h $GENERICXML.ABCsavedXYZ -o -f $GENERICXML.ABCsavedXYZ ]; then

mv $GENERICXML.ABCsavedXYZ $GENERICXML

elif [ ! -h $GENERICXML -a ! -f $GENERICXML ]; then

ln -s ./generic_open.xml $GENERICXML

fi

fi

# if platform/sun4u/mpxio-upgrade service exists, then

# delete the service on boot after upgrading.

if [ "$UPDATE" = yes ]; then

cat >> $BASEDIR/var/svc/profile/upgrade <<\_MPXIOUPGRD

/usr/bin/svcs platform/sun4u/mpxio-upgrade > /dev/null 2>&1

if [ "$?" = 0 ]; then

/usr/sbin/svccfg delete svc:/platform/sun4u/mpxio-upgrade

fi

_MPXIOUPGRD

fi

#

# Add nwam to sysidconfig app list so sys-unconfig does the right thing

#

cat >> $BASEDIR/var/svc/profile/upgrade <<\_NWAM_SYSID

/usr/sbin/sysidconfig -b "${PKG_INSTALL_ROOT}" -l |\

/usr/bin/grep -s net-nwam >/dev/null

if [ $? -ne 0 ]; then

/usr/sbin/sysidconfig -b "${PKG_INSTALL_ROOT}" \

-a /lib/svc/method/net-nwam

fi

_NWAM_SYSID

exit 0