Patch-ID# 145638-11


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security / sccheck patch for solaris 10 sc checks patch
Synopsis: Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle Solaris 10
Date: Jan/08/2018


Install Requirements: NA

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product: Oracle Solaris Cluster

Unbundled Release: 3.3

Xref: This patch available for Oracle Solaris 10 x86 as patch 145639

Topic: Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle Solaris 10

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
16347826
22273256
22996109
27092647
692801915624026
695618315646132
696591815653525
696641015653913
696810115655200
697539115661308
697607815661887
697645015662166
697645415662170
697968615664796
698079415665709
698079515665710
698079615665711
698079715665712
698079815665713
698079915665714
698080015665715
698080115665716
698080215665717
698358415668001
698411915668448
698412015668449
698412115668450
698412215668451
698412615668453
698413015668457
698413615668461
698413715668462
698413915668464
698414015668465
698414115668466
698833115671938
699175015674692
699456915677031
699457415677034
699457815677038
699458015677041
699458915677048
699459015677049
699459415677053
699537915677673
699538915677684
699679415678786
699680215678791
699814115679919
699814715679923
699814815679924
699815715679930
699816215679933
699816315679934
700045615681755
700283515683652
700489815685410
700816415688262
700962115689379
700977315689479
702408015700410
702408415700413
703051415704828
704145215713064
704426915715179
704581415716298
705341315721370
705869315724317
707221815731732
707262215731982
707349615732354
708335115737880
708810815740348
709384815743543
709589015744638
712775015764750
717345715795403
717559215797049
718303215802906


Changes incorporated in this version: 27092647

Patches accumulated and obsoleted by this patch: 146171-03 149424-01

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/usr/cluster/lib/cfgchk/agent_cfgchk.jar
/usr/cluster/lib/cfgchk/cfgchk
/usr/cluster/lib/cfgchk/cfgchk_aux.dat
/usr/cluster/lib/cfgchk/cfgchk_checks.jar
/usr/cluster/lib/cfgchk/cfgchk_lib
/usr/cluster/lib/cfgchk/cfgchk_test_checks.jar
/usr/cluster/lib/cfgchk/resources/cfgchk.properties
/usr/cluster/lib/cfgchk/validate_wrapper

Problem Description:

27092647 Solaris Cluster does not use installed Java 7 JDK versions
 
(from 145638-10)
 
22273256 Solaris Cluster should have own Java version setting
22996109 problem with sccheck-checks
 
(from 145638-09)
 
16347826 need to add all changed binaries to U2 patches
 
(from 145638-08)
 
        This revision accumulates feature point patch 149424-01 into OSC 3.3 U2.
 
(from 145638-07)
 
7127750 cluster check S6995379 isApplicable() incorrectly passes node with no NFS resources
 
(from 145638-06)
 
7095890 check S6980802 fails due to missing obsoleted patch
 
(from 145638-05)
 
7044269 non-cluster mode probs: S6984136, S6984141, S6995379, S6995389, S6998157, S6998141, S6994578, S6994590
 
(from 145638-04)
 
7030514 "cluster check" reporting S6998162 execution error when node(s) of the cluster are down
7041452 "cluster check" reporting S6980797 execution error when /etc/defaultdomain is missing
 
(from 145638-03)
 
6996802 cluster check S6708689 is failing: /usr/xpg4/bin/awk: insufficient memory for...
7024080 Check ID: S6998147 should not complain about /etc/system "ce" entry for S10U9 config or check failed
7024084 Check ID: S6708502 failed in ACFS config: process ologgerd
 
(from 145638-02)
 
6928019 SC wizard online help needs to specify that 11g Oracle DB needs to be running
6965918 DS wizards need to provide support for new 11gR2 SUNW.scalable_asm_diskgroup_proxy RT
6976078 missing step, Multiple-Owner Volume-Manager Framework RS/RG, in RAC wizard task table
6976450 Oracle database is not required during creation of RAC framework resource group
6976454 wizard step for configuring multi-owner volume manager framework refers to the wrong page number
6983584 need to add information to Oracle Solaris Cluster Manager online help for FBC 1550
 
        This revision also accumulates feature point patch 146171-03.
 
(from 145638-01)
 
6956183 ports are not released after cluster check command invocation
6975391 check S6708502 incorrectly reports vucmm_reconf RT process as unsupported
 
(from 146171-03)
 
6984120 new check: induce cluster transport network failure - single adapter. (2010/1880)
6984121 new check: perform cluster shutdown (2010/1880)
6984140 new check: perform node panic (2010/1880)
6994574 new check: fix for GLDv3 interfaces on cluster transport vulnerability applied? (2010/1880)
6996794 check S6708502 is incorrectly reporting RT processes as unsupported
6998147 are ce adapters on private network configured correctly?
7009621 instructions must not refer to the "old" company name
7009773 two checks have Execution Error in non-cluster mode
 
(from 146171-02)
 
6966410 new check: does /etc/hosts contain necesary hostnames? (2010/1880)
6968101 new check: perform resource group switchover (2010/1880)
6979686 new check: is the Common Agent Container enabled for startup? (2010/1880)
6980794 new check: is rpcbind local_only property set to 'false'? (2010/1880)
6980795 new check: is the nautopush value set correctly in /etc/system?
6980796 new check: is the tcp_listen property of Webconsole set to 'true'? (2010/1880)
6980797 new check: is node configured to be a NIS/NIS+ server? (2010/1880)
6980798 new check: is node configured to be a router? (2010/1880)
6980799 new check: is lwp_default_stksize set correctly in /etc/system? (2010/1880)
6980800 new check: is sharenfs set to 'off' for ZFS filesystems? (2010/1880)
6980801 new check: is the fix for rgmd memory leak vulnerability, CR 6808508, applied? (2010/1880)
6980802 new check: has the fix for the probe based IPMP vulnerability been applied? (2010/1880)
6984119 new check: is /var mounted using a partition separate from / (root)?  (2010/1880)
6984122 new check: are Solaris Cluster version, packages and patches the same on all nodes? (2010/1880)
6984126 new check: are the Solaris boot disk mirror definitions using DID device names? (2010/1880)
6984130 new check: are md devices under /globaldevices unique within the cluster? (2010/1880)
6984136 new check: does this cluster avoid NFS cross mounts between nodes? (2010/1880)
6984137 new check: has the zpool cachefile feature been compromised? (2010/1880)
6984139 new check: can the hostname be used for Oracle 10g RAC? (2010/1880)
6984141 new check: is the internal sppp0 network address defined in /etc/hosts? (2010/1880)
6988331 new check: has the fix for CR 6396272, boot problem, been applied (x86 only)? (2010/1880)
6991750 does /etc/hosts contain necessary logical hostnames of non-global-zones?
6994569 new check: are device major numbers consistent across all nodes for vxio, did, md? (2010/1880)
6994578 new check: are shared SVM disksets using DID devices? (2010/1880)
6994580 new check: has the minimum, required set of Solaris packages been installed? (2010/1880)
6994589 new check: are the Solaris and Solaris Cluster update releases compatible? (2010/1880)
6994590 new check: are local Solaris Volume Manager replicas configured correctly? (2010/1880)
6994594 new check: is the version of ORCLudlm consistent across the cluster or zone cluster? (2010/1880)
6995379 new check: define IP address 0.0.0.0 in /etc/hosts when IPMP groups use multiple NICs. (2010/1880)
6995389 new check: is the dman0 management network IP address defined in /etc/hosts? (2010/1880)
6998141 new check: are the disk slices for the local SVM replicas large enough? (2010/1880)
6998148 are ixge adapters on private network configured correctly?
6998157 are HAStoragePlus automountd and lofs settings compatible?
6998162 does the /globaldevices file system contain enough inodes?
6998163 new check: is ip_strict_dst_multihoming set correctly for Solaris Cluster? (2010/1880)
7000456 are ipge adapters on private network configured correctly?
7002835 new check: has the fix for the zone management vulnerability been applied? (2010/1880)
7008164 umbrella CR for project 2010/1880 EIS Validation checks
 
(from 146171-01)
 
        Feature point patches combine copies of released fixes with new
        features.  This feature point patch ended up containing only copies
        of previously-released fixes with nothing new added.
 
(from 149424-01)
 
7004898 changes needed to checks under 'cluster check' for S11
7045814 M6994594 check fails w/ execution error on cluster running RAC in ZC when ZC is not booted
7053413 cluster check S6708689 violated with Grid Infrastructure for Clusters and 11gR2 SIDB
7058693 S6708606 failed with execution error on all nodes
7072218 need check if UUID of active BE is identical for nodes that host failover zones on S11
7072622 need check for zpool failmode setup to issue warning for the default "wait"
7073496 Cluster check code changes to align with the movement of nsswitch to SMF
7083351 S6980794 failed with execution error on all nodes
7088108 new check: check if clprivnet0 hostnames are in /etc/hosts.allow with active tcpwrapper
7093848 Cfgchk module needs to get nodename in a new way
7173457 new check needed to be added which should check the Resource Type methods ownerships
7175592 checks S6980801, S6994580, S6994589 & S7072622 fail with execution error
7183032 cluster check S6708502 incorrectly flagging symrdf & /usr/cluster/lib/sc/repl/srdf RT processes


Patch Installation Instructions:
--------------------------------
 
There are three (3) possible procedures for installing patches on Oracle
Solaris Cluster. The proper method to use and any additional instructions
for this patch are specified below in the "Special Install Instructions"
section.
 
Refer to the chapter entitled "Patching Oracle Solaris Cluster Software and
Firmware" in the "Oracle Solaris Cluster System Administration Guide" for a
description of the different install processes and instructions on how to
install Oracle Solaris Cluster 3.3 patches.
 
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
commands provided with Oracle Solaris, to install and remove patches.


Special Install Instructions:
-----------------------------
 
NOTE 1:  Install this patch using one of the following patch install
         procedures found in the "Patching Oracle Software and Firmware"
         chapter of the "Oracle Solaris Cluster System Administration Guide:"
 
         * Non Rebooting Patch
         * Rebooting Patch (Node)
         * Rebooting Patch (Cluster and Firmware)
 
NOTE 2:  Revision -04 delivers features introduced during update 1.
 
NOTE 3:  Cacao needs to be restarted after the patch installation.
 
NOTE 4:  Revision -09 delivers features introduced during update 2.


README -- Last modified date: Monday, January 8, 2018