RHBA-2015:0471 - Bug Fix Advisory

Topic

Updated initscripts packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 7.

Description

The initscripts packages contain basic system scripts to boot the system, change
runlevels, activate and deactivate most network interfaces, and shut down the
system cleanly.

Bug fixes:

• The rename_device utility did not correctly remove comments from lines

containing the HWADDR definition. This bug has been fixed and rename_device now
works as expected. (BZ#1027945)

• Bonding options were applied in the order specified in the ifcfg file. The

bonding mode must be always specified before other options, therefore, the read
values have been reordered to ensure successful bonding. (BZ#1040485)

• The regular expression in the initscripts code was matching characters that

were not path separators. Consequently, the files and directories listed in the
/etc/rwtab file were mounted as read-only on the file system. This update fixes
the regular expression,
and /etc/rwtab entries are now correctly mounted as read-write. (BZ#1097453)

• The NIC coming up on layer 2 was not handled appropriately, which caused a

race condition. Consequently, the ifup-eth scripts failed to determine if a
duplicate IP address existed. The timeout can now be set with the "arping -w"
command, and duplicate IP addresses are detected as expected. (BZ#1099488)

• The ifup-eth script did not properly wait for attached devices to switch to

forwarding mode. Consequently, the network bridge interface started by the virsh
iface-start command terminated when turning on STP. The ifup-eth script has been
modified, and bridges no longer fail when STP is enabled. (BZ#1105012)

• Before performing duplicate address check on an alias device, the operstate

flag is checked to make sure the parent device is running. This update
supplements this procedure with also checking the carrier flag. (BZ#1110899)

• Creation of network bonds failed when the new bond name was a substring of an

existing bond. This update fixes the network-functions script and the bug no
longer occurs. (BZ#1136339)

• Certain network device drivers did not accept ethtool commands right after

they appeared in the user space. Consequently, the current setting of the
specified device driver was not applied and an error message was returned. This
update adds the ETHTOOL_DELAY variable, to make sure the ethtool utility waits
before it applies the settings. (BZ#1138687)

• The ipcalc utility handled netmask parameters incorrectly using the "-c"

option. As a consequence, invalid Classless Inter-domain Routing (CIDR) was
ignored and netmask in allowed format was not accepted. The updated "-c" option
works correctly. (BZ#1138717)

• Due to a race condition, the "multicast_router" and "hash_max" BRIDGING_OPTS

options failed to apply when creating the bridge. With this update,
"multicast_router" and "hash_max" are applied after the bridge is up, and
BRIDGING_OPTS options now work as intended. (BZ#1138719)

• The sysctl utility uses "." as the path delimiter while VLAN interfaces use it

as the ID delimiter. This caused all sysctl calls on a VLAN interface to
terminate with no output, causing issues with IPv6 auto-configuration feature.
Several scripts of the iniscripts package have been patched and the sysctl calls
no longer hang on VLAN. (BZ#1139560)

Enhancements:

• Support for team network devices has been added to initscripts. (BZ#1082525)
• The bridge configuration options have been enhanced by adding a possibility to

set bridge priorities and aging in a standardized way. (BZ#1099487)

• This update adds IPv6 support for Generic Routing Encapsulation (GRE) tunnels

to initscripts. (BZ#1138578)

• Previously, the only way to set up VLAN ID was through the name of the new

virtual device (vlan10 or eth0.10). With this update, the ID can be specified by
the VID option in ifcfg file. (BZ#1139639)

Users of initscripts are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 1027945 - /lib/udev/rename_device unable to handle HWADDR with comments
• BZ - 1071969 - rhel-domainname service should use DefaultDependencies=no
• BZ - 1074207 - Location of ctrl-alt-del.target
• BZ - 1082525 - Backport: network: add support for team devices
• BZ - 1097453 - Greedy regex in rhel-readonly matches non-path characters
• BZ - 1109916 - RHEL7: sys-unconfig does not properly shut down the system
• BZ - 1136339 - Creation of bonds with similar names fails
• BZ - 1138717 - ipcalc netmask handling is invalid
• BZ - 1149374 - wrong "/" permissions (should be 555)
• BZ - 1156102 - VLAN fails to initiliaze

CVEs

(none)

References

(none)