RHBA-2015:1328 - Bug Fix Advisory

Topic

Updated dracut packages that fix several bugs and add two enhancements are now
available for Red Hat Enterprise Linux 6.

Description

The dracut packages include an event-driven initramfs generator infrastructure
based on the udev device manager. The virtual file system, initramfs, is loaded
together with the kernel at boot time and initializes the system, so it can read
and boot from the root partition.

Bugs:

• Previously, the dracut utility incorrectly printed an error message if the

/tmp/net.$netif.override file did not exist. With this update, dracut verifies
whether /tmp/net.$netif.override exists before it attempts to read it, which
prevents the described error from occurring. (BZ#1198117)

• Prior to this update, the dracut logrotate configuration determined that the

"time" option had priority over the "size" option. Consequently, the dracut logs
were rotated only yearly regardless of their size. This update removes the
"time" option of the logrotate configuration, and the dracut logs now rotate
when the size exceeds 1 MB. (BZ#1005886)

• If "ip=ibft" was specified as a kernel command-line argument, but the

"ifname=<iface>:<mac>" parameter was not, dracut did not handle network
interfaces correctly. As a consequence, iSCSI disks were not connected to the
system, and thus the system failed to boot. With this update, dracut handles
"ip=ibft" as a kernel command-line argument, even without
"ifname=<iface>:<mac>", and iSCSI disks are now connected to the system
successfully resulting in successful system boot. (BZ#1069275)

• If the /etc/crypttab file did not contain a new line as the last character,

dracut failed to parse the last line of the file, and the encrypted disk could
not be unlocked. This update fixes dracut to handle /etc/crypttab without a new
line at the end, and the encrypted disk specified on the last line is now
handled as expected, requesting a password and unlocking the disk. (BZ#1085562)

• If the /etc/lvm/lvm.conf file had host tags defined, the initramfs virtual

file system did not insert the /etc/lvm/lvm_hostname.conf file during kernel
upgrade, which previously led to a boot failure. This update adds
/etc/lvm/lvm_hostname.conf along with /etc/lvm/lvm.conf, and the system now
boots with host tags as intended. (BZ#1130565)

• Previously, dracut did not parse the kernel command line correctly for some

iSCSI parameters, which led to iSCSI disks not being connected.
With this update, dracut parses the kernel command-line parameters for iSCSI
correctly, and iSCSI disks are now connected successfully. (BZ#1176671)

• Due to an internal change in the nss-softokn-freebl package,

dracut could not build an initramfs file in FIPS mode. To fix this bug,
nss-softokn-freebl delivers its own dracut module and dracut now requires
nss-softokn-freebl as a dependency. As a result, dracut can build FIPS-enabled
initramfs with all files. (BZ#1184142)

• When network parameters were specified on the kernel command line, dracut only

attempted to connect to iSCSI targets provided the network could be brought up.
Consequently, for misconfigured networks, iSCSI firmware settings or iSCSI
offload connections were not explored. To fix this bug, dracut now attempts to
connect to the iSCSI targets even if after a certain timeout no network
connection can be brought up. As a result, iSCSI targets can be connected even
for misconfigured kernel command-line network parameters. (BZ#1191721)

• Due to changes in FIPS requirements, a new deterministic random-byte generator

(drbg) was added to the kernel for FIPS purposes. With this update, dracut loads
drbg as other kernel modules in FIPS mode. (BZ#1193528)

Enhancements:

• With this update, dracut can boot from iSCSI on a network with VLANs

configured, where the VLAN settings are stored in the iBFT BIOS. (BZ#1111358)

• LVM thin volumes are now supported in initramfs. (BZ#1226905)

Users of dracut are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 1069275 - dracut-004-336 issues when ifname is not specified as kernel parameter
• BZ - 1085562 - dracut is unable to read crypttab if last line does not contain a newline
• BZ - 1184142 - RHEL 6.6 kernel will not boot with fips enabled

CVEs

(none)

References

(none)