RHBA-2015:0399 - Bug Fix Advisory

Topic

Updated augeas packages that fix several bugs and add one enhancement are now
available for Red Hat Enterprise Linux 7.

Description

Augeas is a utility for editing configuration. Augeas parses configuration files
in their native formats and transforms them into a tree. Configuration changes
are made by manipulating this tree and saving it back into native configuration
files. Augeas also uses "lenses" as basic building blocks for establishing the
mapping from files into the Augeas tree and back.

This update fixes the following bugs:

• Previously, the Grub lens did not support the "setkey" and "lock" directives,

which caused the virt-v2v process to terminate unexpectedly when the grub.conf
file contained these directives. With this update, the Grub lens supports
"setkey" and "lock", and virt-v2v no longer fails in the described scenario.
(BZ#1059581)

• When automounter maps contained references to hosts with host names containing

hyphens, the automounter lens failed to parse these automounter maps. A patch
has been provided to fix this bug, and the automounter maps are now parsed as
expected. (BZ#1075162)

• Prior to this update, the Augeas utility did not properly handle colon

characters (":") in the /etc/services file. As a consequence, "service_name"
fields in /etc/services that contained a colon prevented Augeas from parsing the
file. Augeas now handles colons as intended, which prevents the described
problem. (BZ#1121527)

• Augeas was previously unable to parse the /etc/rsyslog.conf file if it

contained IPv6 loghosts or was configured for remote logging over Transmission
Control Protocol (TCP). This update fixes the problem and files containing this
configuration are now parsed. (BZ#1129386, BZ#1129388)

• Prior to this update, when entries in the /etc/exports file contained IPv6

client addresses, Augeas was unable to parse the file. This has been corrected,
and Augeas can now parse these entries as expected. (BZ#1067030)

• Previously, Augeas did not recognize certain types of cgroup controllers used

in the /etc/cgconfig.conf file. As a consequence, the file was not parsed. With
this update, Augeas can now parse files containing these controller names, as
well as the /etc/cgconfig.conf file. (BZ#1112543)

In addition, this update adds the following enhancement:

• Lenses to parse the /etc/chrony.conf configuration file and the /etc/shadow

password file have been added to Augeas. (BZ#1071947, BZ#1145249)

Users of augeas are advised to upgrade to these updated packages, which fix
these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 1067030 - [RFE] IPv6 support for /etc/exports
• BZ - 1071947 - [RFE] chrony lense
• BZ - 1075162 - Automounter lens cannot parse hostnames containing hyphens
• BZ - 1083022 - Augeas cannot parse default /etc/sysconfig/dirsrv.systemd
• BZ - 1091143 - aug_save() reports success saving system config files even though calling process is unprivileged
• BZ - 1100076 - Enter into augtool interactive mode, commands: touch, insert and move can not be completed by pressing "TAB"
• BZ - 1100077 - Some commands which can find in the augtool interactive model do not documented in augtool man page
• BZ - 1100106 - augtool builtin command `dump-xml` can not save the XML to a given file
• BZ - 1100547 - Augeas cannot parse default /usr/lib/systemd/system/slapd.service
• BZ - 1100549 - Augeas cannot parse default /etc/default/rmt
• BZ - 1100550 - Augeas cannot parse default /etc/sysconfig/debug
• BZ - 1100551 - Augeas cannot parse default /etc/httpd/conf.d/mod_security.conf
• BZ - 1102623 - Lens conflict with /etc/nagios/nrpe.cfg, @NagiosCfg and @Nrpe could be used to load this file
• BZ - 1102629 - Augeas cannot parse default /etc/ld.so.conf.d/kernel-2.6.32-431.el6.x86_64.conf and /etc/ld.so.conf.d/kernel-2.6.32-431.el6.x86_64.debug.conf
• BZ - 1112543 - augeas cgconfig lens fails if blkio is used
• BZ - 1121527 - augeas aug lens bug for /etc/services currently doesn't handle colon in service_name
• BZ - 1129386 - Augeas cannot parse /etc/rsyslog.conf with TCP hosts
• BZ - 1129388 - Permit IPV6 hostnames in rsyslog.conf
• BZ - 1138402 - Augeas cannot parse default /etc/rsyslog.conf
• BZ - 1138508 - Augeas cannot parse default /lib/systemd/system/snmptrapd.service and /lib/systemd/system/snmpd.service
• BZ - 1139298 - Augeas cannot parse or set 'ssh' in kdump.conf
• BZ - 1139498 - Augeas cannot parse default /lib/systemd/system/anaconda-noshell.service
• BZ - 1143954 - Man page is rebuilt intermittently during rpmbuild, causing multilib failures
• BZ - 1144651 - Using the wrong lens to parse /etc/sysconfig/iptables.save
• BZ - 1145249 - Please backport the upstream shadow.aug
• BZ - 1145495 - Make the LVM lens able to handle /etc/lvm/lvm.conf
• BZ - 1166582 - Backport /boot/*/device.map fix to augeas
• BZ - 1175856 - Augeas does not support fence_kdump* options in kdump.conf

CVEs

(none)

References

(none)