Product SiteDocumentation Site

4.282. sos

An updated sos package that fixes one security issue, several bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link associated with each description below.
SOS is a set of tools that gathers information about system hardware and configuration.
Security Fix
CVE-2011-4083
The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic.
Bug fixes
BZ#600813
In previous versions, the yumlist yum plug-in option attempted to gather the repository list, but this option was broken: running sosreport -k yum.yumlist=True returned the following error:
no such option "yumlist" for plugin (yum)" error
With this update, the yumlist yum plug-in option is usable, and instead will include the output of the yum list command, if enabled (sosreport -k yum.yumlist=True). As this operation can be slow, yum.yumlist is disabled by default.
BZ#682124
Previously, the ldap plug-in did not include the /etc/nslcd.conf file. Consequently, no nslcd.conf file was found when running sosreport. With this update, sos now includes /etc/nslcd.conf in its reports on systems that are using the nss-pam-ldapd nsswitch module.
BZ#683404
Due to a regression, a bug prevented the autofs plug-in from collecting the output of the /sbin/chkconfig --list autofs command. This update corrects the problem and the output of chkconfig --list autofs is now correctly stored in the sos_commands/autofs/chkconfig_--list_autofs file.
BZ#704383
Due to a bug, sosreport did not capture Logical Volume Manager (LVM) information (vgscan, pvscan, lvs, pvs, and vgs). This update fixes this problem and LVM information is now collected.
BZ#713449
The sosreport utility could return misleading command output data. This happened because the utility called the stdout.strip() function on the returned command output and the function truncated the leading and trailing whitespace characters. With this update, the function is no longer called in this situation and the returned command output is correct.
BZ#721163
Prior to this update, the sosreport tool did not capture the IPv6 neighbor list. With this update, the code has been modified and sosreport captures the neighbor list as expected.
BZ#726360
Prior to this update, the sosreport tool failed to gather all the relevant data from the qpidd plug-in as the checkenabled() function was looking for the qpid package. However, no such package exists. With this update, the checkenabled() function now looks for the correct qpid-tool packages and sosreport gathers all the relevant qpid data as expected. In addition, a much greater set of configuration files and tool output is collected in this version.
BZ#736718
The path to the external RHN hardware.py plug-in was incorrect. Therefore the utility failed to locate and capture data from the plug-in. With this update, the path has been corrected and the problem no longer occurs.
Enhancements
BZ#691477
USB device information provided by lsusb, lsusb -v, and lsusb -t commands is now collected by sosreport using the hardware plug-in.
BZ#673244
This update adds the infiniband plug-in to allow sosreport to collect information about InfiniBand devices. If the libibverbs-utils package is installed, this plug-in will be enabled and includes the output of the ibv_devices and ibv_devinfo commands in the sosreport debugging archive.
BZ#677124
This update adds the iscsitarget plug-in to allow sosreport to collect iSCSI target session information and configuration. If the scsi-target-utils package is installed, this plug-in will be enabled and includes the /etc/tgt/targets.conf file and the output of tgtadm --lld iscsi --op show --mode target command in the sosreport debugging archive.
BZ#683219
Prior to this update, the sosreport general plug-in excluded files larger than 15 MB when the syslogsize option was specified. With this update, such files are truncated to 15 MB, in such a manner as to include the latest events, and saved in the /sosreport/sos_commands/ directory.
BZ#694813
The general plug-in for sosreport now collects information in the /etc/init directory.
BZ#697899
The networking plug-in now collects details about bridged network interfaces if present, including the output of the brctl show and brctl showstp commands.
BZ#709491
The vmware plugin now collects information from /proc/vmmemctl.
BZ#714293
The sosreport utility now captures the /etc/rhsm/ content.
BZ#726427
The sosreport utility now collects the results of the ethtool -g, ethtool -c, and ethtool -a commands by default.
BZ#729455
The sosreport utility now collects the cgroups configuration data.
All users of the sos packages are advised to upgrade to these updated packages, which address these issues and add these enhancements.