April 24, 2007 9:00 AM PDT

Security Update 2007-004 (#4): Files modified by this update; AirPort connectivity problems and fixes; more

by CNET staff

Font size
Print
E-mail
Share
1 comment

[See yesterday's coverage of fixes for an issue where login does not work after applying Security Update 2007-004]

Files modified by this update Security Update 2007-004 is relatively far-reaching update. Though it modifies only a handful of user-level applications, it makes changes to kernel extensions used for wireless networking with AirPort hardware, the programs for mounting various network volumes, and a number of other key system components. A partial list of modified files is follows:

/Applications

Installer.app (for installing Mac OS X applications)

/sbin

mount_smbfs (used to mount SMB [Samba] shares)

mount_afp (used to mount AFP [Apple filesharing protocol] shares)

fsck (the program for checking the consistency of and repairing Mac OS X filesystems)

mount_webdav (used to mount WebDAV shares like the .Mac iDisk)

/System/Library/CoreServices

Help Viewer.app (for viewing standard help files)

loginwindow.app (manges user login)

/System/Library/Extensions (files stored here are kernel extensions -- items that are used to interact through an abstraction layer with the Mac OS X kernel, and can be implicated in kernel panics and other issues)

webdav_fs.kext (used for interacting with WebDAV filesystems)

AppleAirPort.kext (used for driving built-in AirPort hardware)

smbfs.kext (used for interacting with SMB filesystems)

IOHIDFamily.kext (used for mounting disk images)

/System/Library/Filesystems

URLMount (used for mounting filesystems through URLs)

webdav.fs (used for interacting with WebDAV filesystems)

AppleShare (used for mounting filesystems through AppleShare0

smbfs.fs (used for mounting SMB filesystems)

/System/Library/Frameworks

CoreServices.framework

Kerberos.framework (this is a framework used for network service authentication; hence it can be implicated in problems logging into servers and other issues)

AppleShareClient.framework

System.framework

AppleShareClientCore.framework

/usr/bin

fetchmail

gnutar (for working with tar compressed files)

kpasswd (associated with kerberos services)

smbutil (used in access to SMB shares)

As with all significant updates, it is important to take note of which files are modified by Security Update 2007-004 so that if a problem occurs after its installation, you can reasonably surmise whether or not there is a potential that the update was culpable. For instance, the update has caused issues with AirPort connectivity for a number of users -- a problem that can potentially (albeit not necessarily) be linked to the update's modification of the AirPort kernel extension: /System/Library/Extensions/AppleAirPort.kext.

The update has also posed serious issues with login, which may be associated with modifications to /System/Library/CoreServices/loginwindow.app

Finally, users have experienced issues with accessing network volumes, problems that could be tied to modifications made to SMB and AFP components, as well as changes to the kerberos authentication architecture.

AirPort connectivity problems Several readers have noted problems with AirPort connectivity after applying Security Update 2007-004, particularly an inability to recognize wireless networks. This issue may be more prevalent on systems running Mac OS X 10.3.9.

One reader writes:

"I am currently running Mac OS X 10.3.9 on my iBook G3. I ran the Security Update 2007-004 and found that my iBook no longer recognizes my Airport network when it comes back from sleep mode. The Airport network is recognized after a restart, but, when I close the clamshell and open it back up, the network is not recognized. Not entirely sure what to do about this."

Another reader adds:

"After installing security update 2007-004 I lose the connection to my wireless router after a period of inactivity. The only way to get the connection back is to reboot the machine. I don't think I have security set up on my Linksys router, could this be the problem? Things worked fine before the update.

MacFixIt reader Mike adds writes:

"Yesterday I updated my Titanium PowerBook G4 (running OS X 10.3.9) with Security Update 2004-004 and now the built-in AirPort card is acting up. The symptom is that the card can't see any wireless networks. But if I reboot the computer then it works again."

Fixes For various potential fixes for these issues, see our AirPort/wireless troubleshooting tutorial. If you have success with a particular fix, please let us know.

Cannot connect to local servers (Error -35) Some users are experiencing an inability to connect to local servers after applying the update.

MacFixIt reader Bill writes:

"After installing Security Update 2007-004, I can no longer Connect to Server... because 'required items cannot be found, Error code -35' (printing is fine, however). Re-installing the update and cache cleaning have no effect."

This problem could be due to changes Apple made to the Kerberos framework (which handles some AFP and SSH duties) in Security Update 2007-004.

If you are experiencing a similar issue, please let us know.

Flash playback not working Some users have problems playing back Flash content after the update.

MacFixIt reader Michael writes:

"Since installing the latest security update, Safari will no longer play YouTube video, although I have no such problem with Camino. Nor do I have an explanation."

In some cases, the problem may be soluble through toggling of certain Flash options in the QuickTime pane of System Preferences.

First, open the QuickTime pane, then click on the "Advanced" tab. Check the box next to "Enable Flash" in order to turn the option on.

Next, click on the "MIME Settings" button and scroll down to "Miscellaneous -- Miscellaneous file formats" and click the box to turn the option on. Next click on the disclosure triangle to show the options for miscellaneous file formats. Make sure that the "Flash media" and "QuickTime HTML (QHTM)" are turned on.

Failing the above, you may want to try uninstalling Flash (using this uninstaller) then re-installing it (Intel or PowerPC). Another potential fix involves navigating to the /Library/Internet Plug-Ins directory then removing the following file

Flash Player Enabler.plugin

Files in Finder cannot be renamed Some users have reported an issue where they cannot rename or otherwise modify files in the Finder after applying Security Update 2007-004.

MacFixIt reader Peter writes:

"After installing the security update, I can't modify file or folder names in the Finder, in any of the views or for any of my Volumes, including ones for which ownership is ignored. I've checked permissions on the system volume (they seems to be fine) and repaired permissions (nothing important was fixed) and still no explanation or fix. I'm going to start verifying/deleting .plist files and see what happens. I can use the keyboard just fine in other applications, so maybe it is just a preference. Weird."

In some cases this issue can be resolved by deleting the following file:

~/Library/Preferences/com.apple.finder.plist [the tilde (~) represents the current home user directory]

then restarting.

Last resort for login problems: Get the update off your Mac Yesterday we covered some fixes for an issue where users cannot login to their systems after applying Security Update 2004-007, with the most commonly successful workaround being removal of specific components from the /Library/QuickTime/ directory.

Unfortunately, some users have found no success with any listed fixes and have had to resort to removing Security Update 2007-004 from their Macs entirely via a process listed in our initial coverage of the update, and repeated here for convenience:

First, make a backup of your current Mac OS X installation with the Security Update applied, problematic as it may be. If there is an issue along the way, your valuable data will be safely intact in its current form.

Next, you'll need to perform an Archive and Install process to remove all of the Security Update's (and potentially problem-causing) components, and replace them with the components of a fresh copy provided by the Mac OS X disc that shipped with your system, or a retail Mac OS X disc. Unfortunately, this means you will lose some system settings and some or all third-party system add-ons.

To begin the process, insert your Mac OS X CD or DVD, as indicated above. Restart your machine and hold down the "C" key to boot from the newly inserted disc. Follow the on-screen instructions, and after accepting the license agreement, click "Options." Select "Archive and Install," and check the "Preserve User and Network Settings" option if you'd like to do so.

After the installation process is complete, you will be left with an earlier Mac OS X system that (hopefully) does not suffer from the problems generated by the Security Update. Use Software Update or Apple's download page to download the update that brings your system to a state directly prior to the Security Update

Feedback? Late-breakers@macfixit.com.

Previous coverage:

Resources

Apple's download page

Late-breakers@macfixit.com