4.299. sos

Security Fix

CVE-2011-4083

The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic.

Bug fixes

BZ#600813

In previous versions, the yumlist yum plug-in option attempted to gather the repository list, but this option was broken: running sosreport -k yum.yumlist=True returned the following error:

no such option "yumlist" for plugin (yum)" error

With this update, the yumlist yum plug-in option is usable, and instead will include the output of the yum list command, if enabled (sosreport -k yum.yumlist=True). As this operation can be slow, yum.yumlist is disabled by default.

BZ#682124

Previously, the ldap plug-in did not include the /etc/nslcd.conf file. Consequently, no nslcd.conf file was found when running sosreport. With this update, sos now includes /etc/nslcd.conf in its reports on systems that are using the nss-pam-ldapd nsswitch module.

BZ#683404

Due to a regression, a bug prevented the autofs plug-in from collecting the output of the /sbin/chkconfig --list autofs command. This update corrects the problem and the output of chkconfig --list autofs is now correctly stored in the sos_commands/autofs/chkconfig_--list_autofs file.

BZ#704383

Due to a bug, sosreport did not capture Logical Volume Manager (LVM) information (vgscan, pvscan, lvs, pvs, and vgs). This update fixes this problem and LVM information is now collected.

BZ#713449

The sosreport utility could return misleading command output data. This happened because the utility called the stdout.strip() function on the returned command output and the function truncated the leading and trailing whitespace characters. With this update, the function is no longer called in this situation and the returned command output is correct.

BZ#721163

Prior to this update, the sosreport tool did not capture the IPv6 neighbor list. With this update, the code has been modified and sosreport captures the neighbor list as expected.

BZ#726360

Prior to this update, the sosreport tool failed to gather all the relevant data from the qpidd plug-in as the checkenabled() function was looking for the qpid package. However, no such package exists. With this update, the checkenabled() function now looks for the correct qpid-tool packages and sosreport gathers all the relevant qpid data as expected. In addition, a much greater set of configuration files and tool output is collected in this version.

BZ#736718

The path to the external RHN hardware.py plug-in was incorrect. Therefore the utility failed to locate and capture data from the plug-in. With this update, the path has been corrected and the problem no longer occurs.

Enhancements

BZ#691477

USB device information provided by lsusb, lsusb -v, and lsusb -t commands is now collected by sosreport using the hardware plug-in.

BZ#673244

This update adds the infiniband plug-in to allow sosreport to collect information about InfiniBand devices. If the libibverbs-utils package is installed, this plug-in will be enabled and includes the output of the ibv_devices and ibv_devinfo commands in the sosreport debugging archive.

BZ#677124

This update adds the iscsitarget plug-in to allow sosreport to collect iSCSI target session information and configuration. If the scsi-target-utils package is installed, this plug-in will be enabled and includes the /etc/tgt/targets.conf file and the output of tgtadm --lld iscsi --op show --mode target command in the sosreport debugging archive.

BZ#683219

Prior to this update, the sosreport general plug-in excluded files larger than 15 MB when the syslogsize option was specified. With this update, such files are truncated to 15 MB, in such a manner as to include the latest events, and saved in the /sosreport/sos_commands/ directory.

BZ#694813

The general plug-in for sosreport now collects information in the /etc/init directory.

BZ#697899

The networking plug-in now collects details about bridged network interfaces if present, including the output of the brctl show and brctl showstp commands.

BZ#709491

The vmware plugin now collects information from /proc/vmmemctl.

BZ#714293

The sosreport utility now captures the /etc/rhsm/ content.

BZ#726427

The sosreport utility now collects the results of the ethtool -g, ethtool -c, and ethtool -a commands by default.

BZ#729455

The sosreport utility now collects the cgroups configuration data.

BZ#800460

An error in the parsing of the "brctl" command's output caused the sosreport utility to log errors on systems with bridged network configurations. The "sosreport" command printed a Python backtrace and certain bridge configuration information was not collected from the system. This update corrects the parsing of the "brctl" command's output so that no backtrace is printed and full bridge configuration data is collected from the system.

BZ#817921

Previously, sos used a single fixed path to collect all libvirt logs in one directory. On certain releases of Red Hat Enterprise Virtualization, the libvirtd.log file could be located in the parent directory and, therefore, the libvirtd.log file was not collected on such systems. The sosreport utility now uses a wildcard character that matches both possible locations for the file. The livirtd.log file is now collected reliably on all supported versions of Red Hat Enterprise Virtualization.

BZ#801328

This update adds a new plug-in that is necessary to collect the requisite logs for the Gluster product. Information is collected from the files located in the /etc/glusterd/ and /var/log/glusterfs/ directories.