CheckOs - and Solaris 2.8

When I run /opt/lotus/bin/checkos on my shiny new (and extremely cool) sparc server, (even after loading the “current recommended fixpacks”) I get a blood-curdlingly long list of patches that are required.

However, when I forwarded the list to my friendly (and yes - thats true!) Sparc guru, he responded:

Bill@BillBuchan.com wrote:

Could I grovel shamlessly and ask you to download the following patches
(or newer versions if they exist)…

They are all obsoleted or useless:

108827
Synopsis: Obsoleted by: 108993-18 SunOS 5.8: /usr/lib/libthread.so.1 patch

108875
Synopsis: Obsoleted by: 109007-11 SunOS 5.8: c2audit patch

108991
Synopsis: Obsoleted by: 108827-15 SunOS 5.8: /usr/lib/libc.so.1 patch

109181
Synopsis: Obsoleted by: 108528-13 SunOS 5.8: /kernel/fs/cachefs patch

109279
Synopsis: Obsoleted by: 108528-13 SunOS 5.8: /kernel/drv/ip patch

109322
Synopsis: Obsoleted by: 108827-15 SunOS 5.8: libnsl patch

109742
Synopsis: Obsoleted by: 108528-13 SunOS 5.8: /kernel/drv/icmp patch

109951
Synopsis: SunOS 5.8: jserver buffer overflow

110383
Synopsis: Obsoleted by: 108528-13 SunOS 5.8: libnvpair patch

110390
Synopsis: Obsoleted by: 108993-05 SunOS 5.8: ldapclient patch

110700
Synopsis: Obsoleted by: 108993-18 SunOS 5.8: automount patch

110723
Synopsis: SunOS 5.8: /kernel/drv/sparcv9/eri patch

111090
Synopsis: Obsoleted by: 108993-05 SunOS 5.8: /usr/lib/libsldap.so.1 patch

111659
Synopsis: Obsoleted by: 108993-18 SunOS 5.8: passwd and pam_unix.so.1 patch

Ouch.

So most, if not all are actually obselete ?

So - why does checkos report them ?

Can we trust checkos ?

Whilst I dont necessarily want to go around distrusting it, it does seem that it needs a bit of a refresh.

(Oh - my little UltraSparc has solaris 2.8 and domino 6.0.1 on it, and is the most stable domino platform I have ever seen. Buy one).

And it doesnt seem that my box actually needs these patches…

So if nothing else just to give us more confidence in (the otherwise completely reliable) checkos, could someone have a peek at this before 6.0.2 comes out ?

Many thanks,

—* Bill