Patch-ID# 145639-11


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security / sccheck patch for oracle solaris 10_x86 sc checks patch
Synopsis: Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle Solaris 10_x86
Date: Jan/08/2018


Install Requirements: NA

Solaris Release: 10_x86

SunOS Release: 5.10_x86

Unbundled Product: Oracle Solaris Cluster

Unbundled Release: 3.3

Xref: This patch available for Oracle Solaris 10 SPARC as patch 145638

Topic: Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle Solaris 10_x86

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
16347826
22273256
22996109
27092647
695618315646132
696641015653913
696810115655200
697539115661308
697968615664796
698079415665709
698079515665710
698079615665711
698079715665712
698079815665713
698079915665714
698080015665715
698080115665716
698080215665717
698411915668448
698412015668449
698412115668450
698412215668451
698412615668453
698413015668457
698413615668461
698413715668462
698413915668464
698414015668465
698414115668466
698833115671938
699175015674692
699456915677031
699457415677034
699457815677038
699458015677041
699458915677048
699459015677049
699459415677053
699537915677673
699538915677684
699679415678786
699680215678791
699814115679919
699814715679923
699814815679924
699815715679930
699816215679933
699816315679934
700045615681755
700283515683652
700489815685410
700816415688262
700962115689379
700977315689479
702408015700410
702408415700413
703051415704828
704145215713064
704426915715179
704581415716298
705341315721370
705869315724317
707221815731732
707262215731982
707349615732354
708335115737880
708810815740348
709384815743543
709589015744638
712775015764750
717345715795403
717559215797049
718303215802906


Changes incorporated in this version: 27092647

Patches accumulated and obsoleted by this patch: 146172-03 149425-01

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/usr/cluster/lib/cfgchk/agent_cfgchk.jar
/usr/cluster/lib/cfgchk/cfgchk
/usr/cluster/lib/cfgchk/cfgchk_aux.dat
/usr/cluster/lib/cfgchk/cfgchk_checks.jar
/usr/cluster/lib/cfgchk/cfgchk_lib
/usr/cluster/lib/cfgchk/cfgchk_test_checks.jar
/usr/cluster/lib/cfgchk/resources/cfgchk.properties
/usr/cluster/lib/cfgchk/validate_wrapper

Problem Description:

27092647 Solaris Cluster does not use installed Java 7 JDK versions
 
(from 145639-10)
 
22273256 Solaris Cluster should have own Java version setting
22996109 problem with sccheck-checks
 
(from 145639-09)
 
16347826 need to add all changed binaries to U2 patches
 
(from 145639-08)
 
        This revision accumulates feature point patch 149425-01 into OSC 3.3 U2.
 
(from 145639-07)
 
7127750 cluster check S6995379 isApplicable() incorrectly passes node with no NFS resources
 
(from 145639-06)
 
7095890 check S6980802 fails due to missing obsoleted patch
 
(from 145639-05)
 
7044269 non-cluster mode probs: S6984136, S6984141, S6995379, S6995389, S6998157, S6998141, S6994578, S6994590
 
(from 145639-04)
 
7030514 "cluster check" reporting S6998162 execution error when node(s) of the cluster are down
7041452 "cluster check" reporting S6980797 execution error when /etc/defaultdomain is missing
 
(from 145639-03)
 
6996802 cluster check S6708689 is failing: /usr/xpg4/bin/awk: insufficient memory for...
7024080 Check ID: S6998147 should not complain about /etc/system "ce" entry for S10U9 config or check failed
7024084 Check ID: S6708502 failed in ACFS config: process ologgerd
 
(from 145639-02)
 
        This revision accumulates feature point patch 146172-03.
 
(from 145639-01)
 
6956183 ports are not released after cluster check command invocation
6975391 check S6708502 incorrectly reports vucmm_reconf RT process as unsupported
 
(from 146172-03)
 
6984120 new check: induce cluster transport network failure - single adapter. (2010/1880)
6984121 new check: perform cluster shutdown (2010/1880)
6984140 new check: perform node panic (2010/1880)
6994574 new check: fix for GLDv3 interfaces on cluster transport vulnerability applied? (2010/1880)
6996794 check S6708502 is incorrectly reporting RT processes as unsupported
6998147 are ce adapters on private network configured correctly?
7009621 instructions must not refer to the "old" company name
7009773 two checks have Execution Error in non-cluster mode
 
(from 146172-02)
 
6966410 new check: does /etc/hosts contain necesary hostnames? (2010/1880)
6968101 new check: perform resource group switchover (2010/1880)
6979686 new check: is the Common Agent Container enabled for startup? (2010/1880)
6980794 new check: is rpcbind local_only property set to 'false'? (2010/1880)
6980795 new check: is the nautopush value set correctly in /etc/system?
6980796 new check: is the tcp_listen property of Webconsole set to 'true'? (2010/1880)
6980797 new check: is node configured to be a NIS/NIS+ server? (2010/1880)
6980798 new check: is node configured to be a router? (2010/1880)
6980799 new check: is lwp_default_stksize set correctly in /etc/system? (2010/1880)
6980800 new check: is sharenfs set to 'off' for ZFS filesystems? (2010/1880)
6980801 new check: is the fix for rgmd memory leak vulnerability, CR 6808508, applied? (2010/1880)
6980802 new check: has the fix for the probe based IPMP vulnerability been applied? (2010/1880)
6984119 new check: is /var mounted using a partition separate from / (root)?  (2010/1880)
6984122 new check: are Solaris Cluster version, packages and patches the same on all nodes? (2010/1880)
6984126 new check: are the Solaris boot disk mirror definitions using DID device names? (2010/1880)
6984130 new check: are md devices under /globaldevices unique within the cluster? (2010/1880)
6984136 new check: does this cluster avoid NFS cross mounts between nodes? (2010/1880)
6984137 new check: has the zpool cachefile feature been compromised? (2010/1880)
6984139 new check: can the hostname be used for Oracle 10g RAC? (2010/1880)
6984141 new check: is the internal sppp0 network address defined in /etc/hosts? (2010/1880)
6988331 new check: has the fix for CR 6396272, boot problem, been applied (x86 only)? (2010/1880)
6991750 does /etc/hosts contain necessary logical hostnames of non-global-zones?
6994569 new check: are device major numbers consistent across all nodes for vxio, did, md? (2010/1880)
6994578 new check: are shared SVM disksets using DID devices? (2010/1880)
6994580 new check: has the minimum, required set of Solaris packages been installed? (2010/1880)
6994589 new check: are the Solaris and Solaris Cluster update releases compatible? (2010/1880)
6994590 new check: are local Solaris Volume Manager replicas configured correctly? (2010/1880)
6994594 new check: is the version of ORCLudlm consistent across the cluster or zone cluster? (2010/1880)
6995379 new check: define IP address 0.0.0.0 in /etc/hosts when IPMP groups use multiple NICs. (2010/1880)
6995389 new check: is the dman0 management network IP address defined in /etc/hosts? (2010/1880)
6998141 new check: are the disk slices for the local SVM replicas large enough? (2010/1880)
6998148 are ixge adapters on private network configured correctly?
6998157 are HAStoragePlus automountd and lofs settings compatible?
6998162 does the /globaldevices file system contain enough inodes?
6998163 new check: is ip_strict_dst_multihoming set correctly for Solaris Cluster? (2010/1880)
7000456 are ipge adapters on private network configured correctly?
7002835 new check: has the fix for the zone management vulnerability been applied? (2010/1880)
7008164 umbrella CR for project 2010/1880 EIS Validation checks
 
(from 146172-01)
 
        Feature point patches combine copies of released fixes with new
        features.  This feature point patch ended up containing only copies
        of previously-released fixes with nothing new added.
 
(from 149425-01)
 
7004898 changes needed to checks under 'cluster check' for S11
7045814 M6994594 check fails w/ execution error on cluster running RAC in ZC when ZC is not booted
7053413 cluster check S6708689 violated with Grid Infrastructure for Clusters and 11gR2 SIDB
7058693 S6708606 failed with execution error on all nodes
7072218 need check if UUID of active BE is identical for nodes that host failover zones on S11
7072622 need check for zpool failmode setup to issue warning for the default "wait"
7073496 Cluster check code changes to align with the movement of nsswitch to SMF
7083351 S6980794 failed with execution error on all nodes
7088108 new check: check if clprivnet0 hostnames are in /etc/hosts.allow with active tcpwrapper
7093848 Cfgchk module needs to get nodename in a new way
7173457 new check needed to be added which should check the Resource Type methods ownerships
7175592 checks S6980801, S6994580, S6994589 & S7072622 fail with execution error
7183032 cluster check S6708502 incorrectly flagging symrdf & /usr/cluster/lib/sc/repl/srdf RT processes


Patch Installation Instructions:
--------------------------------
 
There are three (3) possible procedures for installing patches on Oracle
Solaris Cluster. The proper method to use and any additional instructions
for this patch are specified below in the "Special Install Instructions"
section.
 
Refer to the chapter entitled "Patching Oracle Solaris Cluster Software and
Firmware" in the "Oracle Solaris Cluster System Administration Guide" for a
description of the different install processes and instructions on how to
install Oracle Solaris Cluster 3.3 patches.
 
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
commands provided with Oracle Solaris, to install and remove patches.


Special Install Instructions:
-----------------------------
 
NOTE 1:  Install this patch using one of the following patch install
         procedures found in the "Patching Oracle Software and Firmware"
         chapter of the "Oracle Solaris Cluster System Administration Guide:"
 
         * Non Rebooting Patch
         * Rebooting Patch (Node)
         * Rebooting Patch (Cluster and Firmware)
 
NOTE 2:  Revision -04 delivers features introduced during update 1.
 
NOTE 3:  Cacao needs to be restarted after the patch installation.
 
NOTE 4:  Revision -09 delivers features introduced during update 2.


README -- Last modified date: Monday, January 8, 2018