Introduction
Scanner
- preupgrade-assistant-2.0.1-1.el6
- preupgrade-assistant-contents-0.6.7-1.el6
Target info
Targets
|
Addresses
|
Platforms
|
Results overview
Rule Results Summary
pass | fixed | fail | needs inspection | needs action | error | not selected | not checked | not applicable | informational | unknown | total |
32 | 7 | 1 | 7 | 6 | 0 | 0 | 0 | 40 | 21 | 0 | 114 |
Rule results summary
Results details
Result for Configuration Files to Review
Result: needs_inspection
Rule ID: xccdf_preupg_rule_backup_NoverifyConfigs_noverifycfg
Time: 2014-10-22 04:48
This module stores some system configuration files that can have been modified by the user when it is not possible to automatically upgrade them.
Remediation instructions
Some packages do not track the possible performed changes to system configuration files; therefore, it cannot be easily determined if the files have been modified by the user or not. In order to allow for later examination, all configuration files not handled by the migration scripts are stored in the dirtyconf/ directory. The list of the stored files is available in the ./kickstart/noverifycfg file. The user is advised to verify the functionality of configuration files stored by this tool after a successful upgrade.
INPLACERISK: SLIGHT: We detected some files where modifications are not tracked in the rpms. You may need to check their functionality after successful upgrade.
Result for File Lists for Manual Migration
Result: needs_inspection
Rule ID: xccdf_preupg_rule_backup_UntrackedFiles_untracked
Time: 2014-10-22 04:48
This module generates lists of files, such as temporary, application, and user data files, which are not automatically migrated.
Remediation instructions
Some user data, such as user home directories and temporary files, are not tracked by the RPM database. This data will not be automatically migrated. To assist you with migrating the data, this module has generated the following three files.* The ./kickstart/untrackedsystem file lists the regular files on the system that will not be migrated. The list does not contain files mounted over the network, files created by runtime system operations, files in temporary locations, and user files in the /home/ or /root/ directory.
* The ./kickstart/untrackeduser file lists the regular local files in the /home/ and /root/ directories that will not be migrated. If the /home/ and /root/ directories are on a file system mounted over the network, this file can be empty.
* The ./kickstart/untrackedexpected file lists the regular files and symlinks created by runtime system operations (for example handling runlevels, alternatives and active SELinux modules). Most likely you don't need to care about them, list is available just for completeness.
* The ./kickstart/untrackedtemporary file lists all temporary local files on the system that will not be migrated. This is essentially everything in the /cgroup/, /tmp/, and /var/ directories. Most likely you don't need to care about them, list is available just for completeness.
It is recommended that you backup all data before proceeding with the upgrade to Red Hat Enterprise Linux 7. This data can be quite large.
If you are performing an in-place upgrade, this data should remain in its current location after the upgrade. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7. You should verify that all data was successfully maintained.
If you are performing a migration upgrade, this data must be backed up to another storage medium. You will need to copy the data you wish to have on the new installation back into place after the upgrade is complete. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7.
INPLACERISK: SLIGHT: We detected some files untracked by rpms. Some of these may need manual check/migration after redhat-upgrade-tool and/or can cause conflicts or troubles during the installation. Try to reduce unnecessary untracked files before running redhat-upgrade-tool.
Result for several kernel networking drivers not available in Red Hat Enterprise Linux 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedNetworkDrivers_obsoletedNetworkDrivers
Time: 2014-10-22 04:48
Several kernel networking drivers were removed from Red Hat Enterprise Linux 7.
Result for several kernel storage drivers not available in Red Hat Enterprise Linux 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedStorageDrivers_obsoletedStorageDrivers
Time: 2014-10-22 04:48
Several kernel storage drivers were deprecated or removed in Red Hat Enterprise Linux 7.
Result for Compatibility Between iptables and ip6tables
Result: informational
Rule ID: xccdf_preupg_rule_networking_iptables_check_script
Time: 2014-10-22 04:48
The firewalld service is now the default firewall service.
File(s) affected:
/etc/sysconfig/iptables
/etc/sysconfig/ip6tables
Remediation instructions
If you are migrating from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7, verify whether you have the iptables-services packages installed after performing the upgrade by running the "rpm -q iptables-services" command as root. Also, verify that iptables and ip6tables services are enabled by running the "systemctl is-enabled iptables" and "systemctl is-enabled ip6tables" commands as root.For more details about migrating the firewall service from Red Hat Enterprise Linux 6, see the section about the firewalld service in the Red Hat Enterprise Linux 7 Migration Planning guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Migration_Planning_Guide/.
If you perform a clean installation of Red Hat Enterprise Linux 7, the firewalld service will be installed on your system instead of iptables and ip6tables.
For further details about the firewalld service, see the section about firewalls in Red Hat Enterprise Linux 7 Security Guide. You can access the guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/.
INFO iptables: Creating /root/preupgrade/postupgrade.d/reenable-iptables
WARNING iptables: Please read Remediation instructions.
Result for Check NFSv2
Result: informational
Rule ID: xccdf_preupg_rule_networking_nfsv2_check
Time: 2014-10-22 04:48
NFSv2 is not supported since RHEL 7. Therefore check if exists configuration which requires directly NFSv2 and fix it if it's possible.
Remediation instructions
NFS protocol version 2 is not supported since RHEL7.-----------------------------------------------------
Result for Check AuthorizedKeysCommand
Result: pass
Rule ID: xccdf_preupg_rule_networking_openssh_check
Time: 2014-10-22 04:48
AuthorizedKeysCommand and AuthorizedKeysCommandUser are not accepted if they are under Match section.
Result for Reusable Configuration Files
Result: pass
Rule ID: xccdf_preupg_rule_others_NoVersionChangeEtc_nochange
Time: 2014-10-22 04:48
The module provides a list of the configuration files that can be reused in Red Hat Enterprise Linux 7.
Result for Check changed config files
Result: needs_inspection
Rule ID: xccdf_preupg_rule_others_configchanges_check
Time: 2014-10-22 04:48
Print modified config noreplace files which can generate .rpmnew (or .rpmsave) files. Specially check audit.rules which is generated by /sbin/augenrules since RHEL-6.6.
Remediation instructions
It's recommended check these config files after upgrade on RHEL7:/etc/pam.d/fingerprint-auth
/etc/pam.d/password-auth
/etc/pam.d/smartcard-auth
/etc/pam.d/system-auth
INPLACERISK: SLIGHT: Some config files are changed and .rpmnew files will be generated.
Result for VCS repositories
Result: informational
Rule ID: xccdf_preupg_rule_others_vcsrepos_check_script
Time: 2014-10-22 04:48
Find Versin Control System repositories in /home and /root - git, svn, cvs, bzr.
Remediation instructions
VCS repositories not found.Result for Print removed and moved utilities
Result: needs_inspection
Rule ID: xccdf_preupg_rule_packages_GenericUtilities_check
Time: 2014-10-22 04:48
Print utilities which were removed from packages, moved into another package or changed destination directory.
Remediation instructions
Some utilities were removed, moved between packages of change path.Please, check your scripts for possible problems. Below are appended brief lists.
If you want see details, please look at another contents.
Lists don't contain utilities from removed packages, which are not replaced
by another packages. Likewise don't contain utilities which are moved into
packages which replace or obsolete original packages.
Replaced utilities:
/bin/iptables-xml-1.4.7 (iptables) — iptables-xml
/sbin/iptables-1.4.7 (iptables) — iptables
/sbin/iptables-multi-1.4.7 (iptables) — iptables-multi
/sbin/iptables-restore-1.4.7 (iptables) — iptables-restore
/sbin/iptables-save-1.4.7 (iptables) — iptables-save
/sbin/ip6tables-1.4.7 (iptables-ipv6) — ip6tables
/sbin/ip6tables-multi-1.4.7 (iptables-ipv6) — ip6tables-multi
/sbin/ip6tables-restore-1.4.7 (iptables-ipv6) — ip6tables-restore
/sbin/ip6tables-save-1.4.7 (iptables-ipv6) — ip6tables-save
/usr/bin/python2.6 (python) — python2.7
/usr/bin/easy_install-2.6 (python-setuptools) — easy_install-2.7
/sbin/udevd (udev) — /usr/lib/systemd/systemd-udevd
Removed utilities (some removed utilities have still alternative):
/usr/bin/ck-history (ConsoleKit)
/usr/bin/ck-launch-session (ConsoleKit)
/usr/bin/ck-list-sessions (ConsoleKit)
/usr/sbin/ck-log-system-restart (ConsoleKit)
/usr/sbin/ck-log-system-start (ConsoleKit)
/usr/sbin/ck-log-system-stop (ConsoleKit)
/usr/sbin/console-kit-daemon (ConsoleKit)
/usr/bin/abrt-dedup-client (abrt-addon-ccpp) — the server side no longer exists
/usr/bin/btparser (btparser) — see man satyr:satyr
/usr/bin/local-getcert (certmonger)
/usr/sbin/cpuspeed (cpuspeed)
/usr/bin/berkeley_db_svc (db4-utils)
/usr/bin/db_codegen (db4-utils)
/sbin/fsck.ext4dev (e2fsprogs) — not needed
/sbin/mkfs.ext4dev (e2fsprogs) — not needed
/usr/bin/volname (eject) — use blkid instead
/usr/bin/.fipscheck.hmac (fipscheck)
/usr/bin/gdbtui (gdb)
/usr/bin/update-gdk-pixbuf-loaders (gdk-pixbuf2)
/usr/bin/bdftops (ghostscript)
/usr/bin/dumphint (ghostscript)
/usr/bin/pdfopt (ghostscript)
/usr/bin/pv.sh (ghostscript)
/usr/bin/update-gio-modules (glib2)
/usr/sbin/tzdata-update (glibc-common)
/usr/bin/gpgkey2ssh (gnupg2)
/sbin/grub (grub)
/sbin/grub-crypt (grub)
/sbin/grub-install (grub)
/sbin/grub-md5-crypt (grub)
/sbin/grub-terminfo (grub)
/usr/bin/mbchk (grub)
/sbin/umount.hal (hal)
/usr/bin/hal-device (hal)
/usr/bin/hal-disable-polling (hal)
/usr/bin/hal-find-by-capability (hal)
/usr/bin/hal-find-by-property (hal)
/usr/bin/hal-get-property (hal)
/usr/bin/hal-is-caller-locked-out (hal)
/usr/bin/hal-lock (hal)
/usr/bin/hal-set-property (hal)
/usr/bin/hal-setup-keymap (hal)
/usr/bin/lshal (hal)
/usr/sbin/hald (hal)
/usr/sbin/httpd.event (httpd)
/usr/sbin/httpd.worker (httpd)
/sbin/fstab-decode (initscripts)
/sbin/getkey (initscripts)
/sbin/securetty (initscripts)
/sbin/setsysfont (initscripts)
/usr/sbin/togglesebool (libselinux-utils)
/usr/bin/man2html (man) — man -H, see more "man man" and "man groff"
/usr/sbin/makewhatis (man)
/sbin/microcode_ctl (microcode_ctl)
/sbin/mingetty (mingetty) — obsoleted by agetty:util-linux
/sbin/insmod.static (module-init-tools) — not needed in kmod
/sbin/nfs_cache_getent (nfs-utils) — not needed anymore by kernel
/usr/bin/.ssh.hmac (openssh-clients)
/usr/sbin/.sshd.hmac (openssh-server)
/usr/bin/dprofpp (perl) — you can install Devel-DProf from CPAN
/usr/bin/perl5.10.1 (perl) — newer version
/usr/bin/lwp-rget (perl-libwww-perl) — not maintained anymore
/usr/bin/rhgb-client (plymouth) — use plymouth
/usr/sbin/open_init_pty (policycoreutils) — not needed anymore due to systemd
/usr/sbin/run_init (policycoreutils) — not needed anymore due to systemd
/usr/bin/assistant_adp (qt-x11)
/sbin/readahead (readahead)
/sbin/readahead-collector (readahead)
/usr/bin/rpmargs (rpmdevtools) — fakeroot is removed
/usr/bin/rpmelfsym (rpmdevtools) — fakeroot is removed
/usr/bin/rpmfile (rpmdevtools) — fakeroot is removed
/usr/bin/rpmpeek (rpmdevtools) — fakeroot is removed
/usr/bin/rpmsodiff (rpmdevtools) — fakeroot is removed
/usr/bin/rpmsoname (rpmdevtools) — fakeroot is removed
/usr/bin/findsmb (samba-client) — low usage, but might be added at later
/usr/bin/seekwatcher (seekwatcher) — use iowatcher
/usr/bin/theora_player.bin (theora-tools)
/sbin/scsi_id (udev)
/sbin/start_udev (udev)
/sbin/initctl (upstart) — functionality implemented in systemd
/sbin/reload (upstart) — functionality implemented in systemd
/sbin/restart (upstart) — functionality implemented in systemd
/sbin/start (upstart) — functionality implemented in systemd
/sbin/status (upstart) — functionality implemented in systemd
/sbin/stop (upstart) — functionality implemented in systemd
/sbin/mount.tmpfs (util-linux-ng) — see man 8 mount
/usr/bin/ddate (util-linux-ng) — useless
/usr/bin/floppy (util-linux-ng) — obsolete
/usr/bin/lslogins (util-linux-ng)
/usr/sbin/tunelp (util-linux-ng) — obsolete
/sbin/vconfig (vconfig) — see man ip from iproute
/usr/sbin/ypserv_test (yp-tools) — low usage
Utilities moved between packages (with same location):
/bin/su (coreutils) -> (util-linux)
/sbin/runuser (coreutils) -> (util-linux)
/bin/cgclassify (libcgroup) -> (libcgroup-tools)
/bin/cgcreate (libcgroup) -> (libcgroup-tools)
/bin/cgdelete (libcgroup) -> (libcgroup-tools)
/bin/cgexec (libcgroup) -> (libcgroup-tools)
/bin/cgget (libcgroup) -> (libcgroup-tools)
/bin/cgset (libcgroup) -> (libcgroup-tools)
/bin/cgsnapshot (libcgroup) -> (libcgroup-tools)
/bin/lscgroup (libcgroup) -> (libcgroup-tools)
/bin/lssubsys (libcgroup) -> (libcgroup-tools)
/sbin/cgclear (libcgroup) -> (libcgroup-tools)
/sbin/cgconfigparser (libcgroup) -> (libcgroup-tools)
/sbin/cgrulesengd (libcgroup) -> (libcgroup-tools)
/sbin/matchpathcon (libselinux) -> (libselinux-utils)
/bin/mountpoint (sysvinit-tools) -> (util-linux)
/sbin/sulogin (sysvinit-tools) -> (util-linux)
INPLACERISK: SLIGHT: Some utilities were removed, moved between packages or change path.
Result for Packages not signed by Red Hat
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_NonRHSignedPkg_nonrhpkg
Time: 2014-10-22 04:48
Packages not signed by Red Hat will not be upgraded
Remediation instructions
Packages which are not signed with the official Red Hat keys will not be upgraded. These packages are typically provided by third parties or have been modified in some way. There is a high risk of incompatibility with these packages as they have not been verified by Red Hat. For upgrade assistance, contact the vendors of these packages.You can find a list of all unsigned packages including the vendor names in the kickstart/nonrhpkgs file.
INPLACERISK: HIGH: We detected some non-RH signed packages, you can find the list in /root/preupgrade/./kickstart/nonrhpkgs. You need to handle them yourself!
Result for Obsoleted rpms
Result: needs_inspection
Rule ID: xccdf_preupg_rule_packages_ObsoletedPackages_ObsoletedPkg
Time: 2014-10-22 04:48
Some rpms were obsoleted from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package obsoletes from your set of Red Hat packages.
Remediation instructions
Some of the packages were obsoleted between RHEL 6 and RHEL 7. This meansRed Hat provides some alternative for them, but these alternatives may be
not 100% compatible - thus we don't replace them automatically. For some of
the obsoletes you will get the incompatibilities from separate preupgrade
contents and you can adjust your workflow according to the changes. Sometimes,
package might be replaced by several others.
Following packages were obsoleted by different ones:
ConsoleKit was obsoleted by systemd
btparser was obsoleted by satyr
cpuspeed was obsoleted by kernel-tools,kernel
eggdbus was obsoleted by glib2
grub was obsoleted by grub2
hal was obsoleted by systemd
mingetty was obsoleted by util-linux
mysql-libs was obsoleted by mariadb-libs
pam_passwdqc was obsoleted by libpwquality
readahead was obsoleted by systemd
seekwatcher was obsoleted by iowatcher
udev was obsoleted by systemd
upstart was obsoleted by systemd
vconfig was obsoleted by iproute
If some NonRH signed package requires these packages, you may need to check if the
alternative solution provided by Red Hat does work for you or get the missing package
from different sources than RHEL. You need to install these new packages yourself
after the assessment, as Red Hat can't assess the compatibility for you.
INPLACERISK: MEDIUM: We detected some packages installed on the system were removed (obsoleted) between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them.
Result for Removed Options in coreutils
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_coreutils_removedoptions
Time: 2014-10-22 04:48
Some options and binary files were removed from the coreutils packages between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Remediation instructions
A number of options and binary files have been removed from the coreutils packages in Red Hat Enterprise Linux 7. The functionality of some scripts can be affected.This is a complete list of removed options and binary files, including the solutions and new options:
* For the "factor" invocation, the "--verbose" option has been renamed to "--debug".
* For the "install" invocation, the "--preserve_context" option has been removed. The "--preserve-context" option can be used instead.
* For the "nl" invocation, the "--page-increment" option, which was deprecated in Red Hat Enterprise Linux 6, has been removed. The "--line-increment" option can be used instead.
* The "runuser" and "su" binaries have been moved to the util-linux package.
* For the "stat" invocation, the "--context" option and its short form, "-Z", have been removed. SELinux context is now a part of the stat default output format.
* For the "mkdir", "mknod", "mkfifo", "cp", and "install" invocations, the "-Z" option no longer accepts any arguments and automatically sets the default SELinux setting context. To set a specific context, the "--context=[context]" option has to be used.
* For the "touch" invocation, the deprecated "--file" option has been removed. The "--reference" option can be used instead.
Please verify that your scripts have been updated to work with these changes.
Result for Removed options in gawk binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_gawk_removedoptions
Time: 2014-10-22 04:48
Some options and binaries were removed from gawk package between RHEL 6 and RHEL 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were removed from gawk package binaries between RHEL 6and RHEL 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.
awk/gawk/pgawk: --compat - option was removed, alternative is
--traditional
--copyleft - option was removed, alternative is
--copyright/-C
--gen-po - option was replaced by --gen-pot option
--usage
-D - short form of --parsedebug was changed to -Y
Please check that your scripts are aware of these changes.
Result for Removed options in grep binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_grep_check
Time: 2014-10-22 04:48
Some commandline options are removed or deprecated in packages. Print list of changes.
Remediation instructions
Option "-K" was removed from grep, egrep and fgrep utilities on RHEL 7 system.This option wasn't docummented before on RHEL 6.
Result for Removed options in netstat binary
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_nettools_removedoptions
Time: 2014-10-22 04:48
Some options were removed from netstat binary between RHEL 6 and RHEL 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were removed from netstat binary of net-tools package betweenRHEL 6 and RHEL 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.
netstat : -T/--notrim renamed to -W/--wide
Please check that your scripts are aware of these changes.
Result for Removed options in quota tools
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_quota_removedoptions
Time: 2014-10-22 04:48
Some options have been renamed at quota tools between Red Hat Enterprise 6 and 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were renamed at quota tools between Red Hat Enterprise Linux6 and 7. This may break functionality of some of your scripts. The changes
are:
/usr/bin/quota: Option --nfs-all was corrected to --all-nfs in the usage help
output. Both versions still recognize the --all-nfs option.
/usr/sbin/quota_nld: Option --no-daemon was renamed to --foreground. Short
option -F is unchanged. This is not an issue if you run quota_nld as daemon,
e.g. via init script.
/usr/sbin/repquota: Option --batch-translation was corrected to --cache in the
usage help output. Both versions still recognize the --cache option.
/usr/sbin/repquota: Option --no-batch-translation was corrected to --no-cache
in the usage help output. Both versions still recognize the --no-cache option.
Please check that your scripts are aware of these changes.
Result for Removed or deprecated options in util-linux (util-linux-ng) binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_util-linux_check
Time: 2014-10-22 04:48
Some commandline options are removed or deprecated in some packages. Print list of changes for util-linux.
Remediation instructions
Some options were removed or deprecated from util-linux-ng (on RHEL 7is renamed back to util-linux) package binaries between RHEL 6 and RHEL 7.
This may break functionality of some of your scripts. All option removals
with solutions are listed bellow.
blkid:
-w - options is deprecated (undocumented on RHEL7)
fallocate:
--lenght - replaced by --length
findmnt
--fsroot - replaced by --nofsroot
losetup:
-s - short option removed, available only --show
mount:
-p, --pass-fd - options are deprecated (undcummented on RHEL7)
partx:
--gpt - undocumented and removed
readprofile:
-t - removed
sfdisk:
-? - replaced by -h
blkid,fsck,hexdump,hwclock,mkfs,mount,renice:
-v is deprecated and replaced by -V
(print version)
Result for Removed rpms
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_RemovedPackages_RemovedPkg
Time: 2014-10-22 04:48
Some rpms were removed from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package removals from your set of Red Hat packages.
Remediation instructions
Some of the packages were removed between RHEL 6 and RHEL 7. This may breakthe upgrade for some of your packages. We are not aware of any compatible
replacement for these packages.
Following packages are no longer available:
ConsoleKit-libs
MAKEDEV
atmel-firmware
b43-fwcutter
b43-openfwwf
busybox
cas
dash
fakeroot
fakeroot-libs
hal-info
hal-libs
ipw2100-firmware
ipw2200-firmware
lcms-libs
libgssglue
libnih
libtopology
mesa-dri1-drivers
pcmciautils
python-crypto
python-iwlib
python-paramiko
python-simplejson
setools-libs-python
system-config-network-tui
wireless-tools
zd1211-firmware
If some NonRH signed package requires these packages, you may need to ask your
vendor to provide alternative solution or get the missing package from
different sources than RHEL.
INPLACERISK: HIGH: After upgrading to RHEL 7 there are still some el6 packages left. Add --cleanup-post option to redhat-upgrade-tool if you want to remove them automatically.
INPLACERISK: MEDIUM: We detected some packages installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them.
Result for Replaced rpms
Result: fixed
Rule ID: xccdf_preupg_rule_packages_ReplacedPackages_ReplacedPkg
Time: 2014-10-22 04:48
Some rpms were replaced between RHEL 6 and RHEL 7. This content checks for the package replacements from your set of Red Hat packages and generates the list of RH packages/yum groups for RHEL 7 kickstart.
Remediation instructions
Some of the packages were replaced between RHEL 6 and RHEL 7. This meanspackage with different name provides 100% compatible functionality, so we
can replace them automatically in the package set.
For some of the replacements provides were not handled by the packages,
therefore preupgrade asistant migrates them after the upgrade if necessary.
Following packages were replaced:
Red_Hat_Enterprise_Linux-Release_Notes-6-en-US was replaced by Red_Hat_Enterprise_Linux-Release_Notes-7-en-US
bfa-firmware was replaced by linux-firmware
coreutils-libs was replaced by coreutils
cryptsetup-luks-libs was replaced by cryptsetup-libs
cryptsetup-luks was replaced by cryptsetup
db4-devel was replaced by libdb-devel
db4-utils was replaced by libdb-utils
db4 was replaced by libdb
dracut-kernel was replaced by dracut
eject was replaced by util-linux
iptables-ipv6 was replaced by iptables-services
jpackage-utils was replaced by javapackages-tools
kernel-firmware was replaced by linux-firmware
libudev was replaced by systemd-libs
libusb1 was replaced by libusbx
man was replaced by man-db
mesa-dri-filesystem was replaced by mesa-filesystem
module-init-tools was replaced by kmod
nfs-utils-lib was replaced by libnfsidmap
perl-Compress-Zlib was replaced by perl-IO-Compress
perl-IO-Compress-Base was replaced by perl-IO-Compress
perl-IO-Compress-Bzip2 was replaced by perl-IO-Compress
perl-IO-Compress-Zlib was replaced by perl-IO-Compress
procps was replaced by procps-ng
ql2100-firmware was replaced by linux-firmware
ql2200-firmware was replaced by linux-firmware
ql23xx-firmware was replaced by linux-firmware
ql2400-firmware was replaced by linux-firmware
ql2500-firmware was replaced by linux-firmware
qt-sqlite was replaced by qt
redhat-lsb-compat was replaced by redhat-lsb-core
redhat-lsb-graphics was replaced by redhat-lsb-desktop
rt61pci-firmware was replaced by linux-firmware
rt73usb-firmware was replaced by linux-firmware
samba4-libs was replaced by samba-libs
util-linux-ng was replaced by util-linux
xorg-x11-drv-ati-firmware was replaced by linux-firmware
yum-plugin-downloadonly was replaced by yum
yum-plugin-security was replaced by yum
If some NonRH signed package requires these packages, you still may want
to monitor them closely. Although the replacement should be compatible,
it can have some minor differences expectable even in the case of common
application lifecycle.
Result for GMP library incompatibilities
Result: informational
Rule ID: xccdf_preupg_rule_packages_gmp_check_script
Time: 2014-10-22 04:48
Incompatibilities between GMP 4 and GMP 5.1 libraries.
Remediation instructions
GMP 5.1 is compatible with GMP 4 in major features. Incompatible changes affect only functions, which should not be used by user applications at all:- mpn_bdivmod function
- BSDMP-like interface libmp.so
Result for optional channel problems
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_optional-channel_optional
Time: 2014-10-22 04:48
detects upgrade problems with RHEL optional channel
Remediation instructions
Either you have directly enabled some of the Red Hat Enterprise Linux 6'optional' yum repositories on your system, or you have installed some packages
which have been moved from "base" to "optional" repository in Red Hat Enterprise
Linux 7. This will very likely cause fail during upgrade of your system.
Please, provide additional yum repository to redhat-upgrade-tool to make
packages residing in RHEL 7 optional channel updated. For this purpose, use
following additional option for redhat-upgrade-tool:
--addrepo rhel-7-optional=<path to the optional repository>
Optionally, you could remove all packages which reside in RHEL 7 optional
repository before you start the system upgrade.
INPLACERISK: HIGH: RHEL Optional channel 'rhel-6-server-optional-rpms' is enabled on your system.
DEBUG [unknown]: checking problems from Server
INPLACERISK: HIGH: Packages [libreport-plugin-kerneloops groff apr-util-ldap flac system-config-firewall-tui libproxy-python libreport-compat libreport-plugin-logger samba-winbind-clients liboil xz-lzma-compat libproxy-bin] have been moved to Server Optional channel.
Result for package downgrades
Result: fixed
Rule ID: xccdf_preupg_rule_packages_pkgdowngrades_pkgdowngrades
Time: 2014-10-22 04:48
detects package downgrades from RHEL6 to RHEL7
Remediation instructions
Some packages installed on your system have broken upgrade path from Red HatEnterprise Linux version 6 to version 7 (the version of package is lower in
newer Enterprise Linux).
This does not cause fail of redhat-upgrade-tool run and it could
potentially left system in inconsistent state (mixed RHEL 6 and RHEL 7
packages installed). Pre-upgrade scripts makes best effort to force
redhat-upgrade-tool in-place upgrade process install packages with broken
upgrade path but you should be aware of that and know what is happening.
Optionally, if possible, you may remove packages in question from RHEL 6
system.
Result for SELinux Custom Policy
Result: fixed
Rule ID: xccdf_preupg_rule_selinux_CustomPolicy_check
Time: 2014-10-22 04:48
Solve problem with custom SE policy modules after migration
Remediation instructions
Custom SELinux policy modules couldn't be found by sesearch. This is fixed by removing selinux module sandbox.pp which is repalced by sandboxX.pp and is disabled by default on RHEL7 systems.This solve some other issues between sandbox.pp and sandboxX.pp too. So module
is removed be default now by postcript: /root/preupgrade/postupgrade.d/fix_SELinuxCustomPolicy.sh
Result for restore custom selinux configuration
Result: fixed
Rule ID: xccdf_preupg_rule_selinux_RestoreConfig_restoreConfig
Time: 2014-10-22 04:48
Content with postupgrade script that restores custom selinux configuration.
Remediation instructions
Custom SELinux configuration options managed by semanage command are lost after upgrade. This preupgrade assistant content stores the custom configuration options, restores them once the upgrade is complete and issues the SELinux relabel mechanism upon the next reboot to accomodate the possible changes that might have been raised by these modifications. No manual user action is necessary upon upgrade.Result for General
Result: needs_action
Rule ID: xccdf_preupg_rule_selinux_general_check
Time: 2014-10-22 04:48
There has to be some steps performed in order to have working SELinux on RHEL 7.
Remediation instructions
We have detected that you are using SELinux. There were changes in policies which require to apply custom command before upgrade process. In order to have working SELinux on Red Hat Enterprise Linux 7, you HAVE TO run command prior to running redhat-upgrade-tool:semodule -r sandbox
INPLACERISK: HIGH: There were changes in SELinux policies between RHEL 6 and RHEL 7. Please, check solution in order to resolve this issue.
Result for CUPS Browsing/BrowsePoll configuration
Result: fixed
Rule ID: xccdf_preupg_rule_services_cupsbrowsing_cupsbrowsing
Time: 2014-10-22 04:48
The CUPS Browsing and BrowsePoll configuration directives have been removed from CUPS. A replacement is provided in the form of the cups-browsed service.
File(s) affected:
/etc/cups/cupsd.conf
Remediation instructions
The CUPS Browsing and BrowsePoll configuration directives are no longer handled by CUPS itself. Instead, CUPS uses DNS-SD to advertise print queues on the network. Discovery is performed by the applications. GTK+ applications do this as part of the print dialog implementation. To use DNS-SD, enable the "avahi" service and make sure to allow mDNS (UDP port 5353) through the firewall.
If this solution is not suitable for your site you can continue to use CUPS Browsing as before by using the cups-browsed service. The browsing configuration has been migrated to cleanconf/etc/cups/cups-browsed.conf and the cups-browsed service will be enabled after upgrade.
Result for CVS Package Split
Result: informational
Rule ID: xccdf_preupg_rule_services_cvs_checkscript
Time: 2014-10-22 04:48
Some Concurrent Versions System (CVS) tools and documentation have been moved into separate packages and are no longer provided by the cvs packages.
Remediation instructions
The Concurrent Versions System (CVS) server and client have not been changed significantly and should be fully compatible. However, some tools and documentation have been moved to other packages which could concern some users.The rcs2log and contrib utilities have been moved into the new cvs-contrib packages in order to remove the cvs packages dependency on perl and reduce the size of the cvs packages. If you require the rcs2log and contrib tools, you can install the packages manually by running the "yum install cvs-contrib" command as root.
Additional documentation, such as books concerning CVS tools in the PDF format and revision control system (RCS) specification files, has been moved into the new cvs-doc package to reduce the size of the cvs packages. If you want to access this additional documentation, install the package manually by running the "yum install cvs-doc" command as root. The manual and Texinfo pages are still included in the cvs packages.
These utilities and the supplemental documentation are not used by the CVS client or server. Their absence does not pose a risk when upgrading the cvs packages.
Result for httpd configuration compatibility check
Result: informational
Rule ID: xccdf_preupg_rule_services_httpd_check_script
Time: 2014-10-22 04:48
Checks httpd configuration compatibility
File(s) affected:
/etc/httpd/conf/httpd.conf
Remediation instructions
* httpd.conf does not include conf.modules.d/*.conf. This directory will beincluded automatically.
* httpd.conf loads modules which are loaded in conf.modules.d/*conf
in new httpd version. Following modules will be therefore removed from
httpd.conf:
modules\/mod_actions.so
modules\/mod_alias.so
modules\/mod_auth_basic.so
modules\/mod_auth_digest.so
modules\/mod_authn_anon.so
modules\/mod_authn_dbm.so
modules\/mod_authn_file.so
modules\/mod_authz_dbm.so
modules\/mod_authz_groupfile.so
modules\/mod_authz_host.so
modules\/mod_authz_owner.so
modules\/mod_authz_user.so
modules\/mod_autoindex.so
modules\/mod_cache.so
modules\/mod_deflate.so
modules\/mod_dir.so
modules\/mod_env.so
modules\/mod_expires.so
modules\/mod_ext_filter.so
modules\/mod_headers.so
modules\/mod_include.so
modules\/mod_info.so
modules\/mod_log_config.so
modules\/mod_logio.so
modules\/mod_mime_magic.so
modules\/mod_mime.so
modules\/mod_negotiation.so
modules\/mod_rewrite.so
modules\/mod_setenvif.so
modules\/mod_status.so
modules\/mod_substitute.so
modules\/mod_suexec.so
modules\/mod_userdir.so
modules\/mod_version.so
modules\/mod_vhost_alias.so
modules\/mod_dav.so
modules\/mod_dav_fs.so
modules\/mod_proxy.so
modules\/mod_proxy_ajp.so
modules\/mod_proxy_balancer.so
modules\/mod_proxy_connect.so
modules\/mod_proxy_ftp.so
modules\/mod_proxy_http.so
modules\/mod_disk_cache.so
modules\/mod_cgi.so
modules\/mod_ldap.so
modules\/mod_authnz_ldap.so
modules\/mod_speling.so
modules\/mod_usertrack.so
* httpd.conf loads default modules which have been removed in new version
of httpd. Following modules will be therefore removed from httpd.conf:
modules\/mod_authn_alias.so
modules\/mod_authn_default.so
modules\/mod_authz_default.so
* httpd config files contain deprecated Access control directives Order, Allow,
Deny, and Satisfy. The old access control idioms should be replaced
by the new authentication mechanisms, although for compatibility with old
configurations, the new module mod_access_compat is provided and loaded by
default.
Read more on http://httpd.apache.org/docs/2.4/upgrading.html to find out solutions for these problems.
This section of solution text shows the difference between this system
configuration of httpd and the default httpd 2.2 configuration:
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_alias_module modules/mod_authn_alias.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule include_module modules/mod_include.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule logio_module modules/mod_logio.so
LoadModule env_module modules/mod_env.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule expires_module modules/mod_expires.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule headers_module modules/mod_headers.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule mime_module modules/mod_mime.so
LoadModule dav_module modules/mod_dav.so
LoadModule status_module modules/mod_status.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule info_module modules/mod_info.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule dir_module modules/mod_dir.so
LoadModule actions_module modules/mod_actions.so
LoadModule speling_module modules/mod_speling.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule alias_module modules/mod_alias.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule cache_module modules/mod_cache.so
LoadModule suexec_module modules/mod_suexec.so
LoadModule disk_cache_module modules/mod_disk_cache.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule version_module modules/mod_version.so
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cache_module modules/mod_cache.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
LoadModule expires_module modules/mod_expires.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule headers_module modules/mod_headers.so
LoadModule include_module modules/mod_include.so
LoadModule info_module modules/mod_info.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule logio_module modules/mod_logio.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule mime_module modules/mod_mime.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule status_module modules/mod_status.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule suexec_module modules/mod_suexec.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule version_module modules/mod_version.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule dav_module modules/mod_dav.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule disk_cache_module modules/mod_disk_cache.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule speling_module modules/mod_speling.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule authn_alias_module modules/mod_authn_alias.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule speling_module modules/mod_speling.so
LoadModule usertrack_module modules/mod_usertrack.so
/etc/httpd//conf/httpd.conf: Order allow,deny
/etc/httpd//conf/httpd.conf:# Order allow,deny
/etc/httpd//conf/httpd.conf:# Order deny,allow
/etc/httpd//conf/httpd.conf: Order allow,deny
/etc/httpd//conf/httpd.conf: Order allow,deny
/etc/httpd//conf/httpd.conf: Order allow,deny
/etc/httpd//conf/httpd.conf: Order allow,deny
/etc/httpd//conf/httpd.conf:# Order deny,allow
/etc/httpd//conf/httpd.conf:# Order deny,allow
/etc/httpd//conf/httpd.conf:# Order deny,allow
/etc/httpd//conf.d/99-preup-httpd.conf: Order allow,deny
Result for NTP configuration
Result: pass
Rule ID: xccdf_preupg_rule_services_ntp_configuration_ntp
Time: 2014-10-22 04:48
Save ntp and ntpdate configuration files which are not tracked by rpm.
File(s) affected:
/etc/ntp.conf
/etc/ntp/step-tickers
Result for Information on time-sync.target
Result: pass
Rule ID: xccdf_preupg_rule_services_ntp_timesync_timesync
Time: 2014-10-22 04:48
Check if ntpdate service is enabled and print information on starting services with clock set
Result for OpenSSH sshd_config migration content
Result: pass
Rule ID: xccdf_preupg_rule_services_openssh_sshd_openssh-sshd
Time: 2014-10-22 04:48
This content has a aim to convert /etc/ssh/sshd_config file from openssh-server package
File(s) affected:
/etc/ssh/sshd_config
Result for OpenSSH sysconfig migration content
Result: fixed
Rule ID: xccdf_preupg_rule_services_openssh_sysconfig_openssh-sysconfig
Time: 2014-10-22 04:48
This content has a aim to convert /etc/sysconfig/sshd file from openssh-server package
File(s) affected:
/etc/sysconfig/sshd
Remediation instructions
/etc/sysconfig/sshd will not be a shell script in RHEL 7 anymore so all 'export VARIABLE=VALUE' has to be changed to 'VARIABLE=VALUE'.# sed -i 's/^export //' /etc/sysconfig/sshd
There is the /root/preupgrade/cleanconf//etc/sysconfig/sshd with the fixed configuration.
Result for Configuration for quota_nld service
Result: pass
Rule ID: xccdf_preupg_rule_services_quota_nld_configuration_checkscript
Time: 2014-10-22 04:48
Back configuration for quota_nld service up
File(s) affected:
/etc/sysconfig/quota_nld
Result for Disk quota netlink message daemon moved into quota-nld package
Result: pass
Rule ID: xccdf_preupg_rule_services_quota_nld_new_package_checkscript
Time: 2014-10-22 04:48
Install quota-nld package if the quota_nld service is enabled
Result for Detect LUKS devices using Whirlpool for password hash.
Result: pass
Rule ID: xccdf_preupg_rule_storage_cryptsetup-luks_detect-whirlpool-hash
Time: 2014-10-22 04:48
'Whirlpool hash implementation in libgcrypt of version <= 1.5.3 is broken. This content checks current system for presence of LUKS devices possibly using the bogus hash. In target system libgcrypt library is patched to use correct implementation so after reboot the freshly updated system may remain with LUKS devices imposibble to unlock.'
File(s) affected:
/etc/crypttab
Result for Luks encrypted partition
Result: pass
Rule ID: xccdf_preupg_rule_storage_luks_check
Time: 2014-10-22 04:48
Checks whether partition is crypted by CRYPTO-LUKS.
Result for State of LVM2 services.
Result: fixed
Rule ID: xccdf_preupg_rule_storage_lvm2-services_check_lvm2_services
Time: 2014-10-22 04:48
Some services are important for proper LVM functionality. This content checks for current state of existing services and makes sure the state is preserved over upgrade. Also, some systemd units should be enabled by default to allow for service's on-demand activation if needed.
Remediation instructions
RHEL7 uses systemd for service management. When upgrading from RHEL6,we need to be sure that certain services (systemd units) are enabled
or prepared for on-demand activation.
The LVM2 monitoring service inherits the old state, which means that if
the 'lvm2-monitor' service was enabled in RHEL6, it will also be enabled
in RHEL7 (lvm2-monitor.service) and vice versa.
In addition to that these systemd units are enabled to allow for on-demand
service activation:
dm-event.socket
lvm2-lvmetad.socket
The dm-event.socket is used for on-demand activation of dm-event.service.
This is an essential part of device-mapper monitoring feature (which also
covers monitoring of LVM devices).
The lvm2-lvmetad.socket is used for on-demand activation of lvm2-lvmetad.service
which starts the lvmetad - LVM metadata daemon that is used to cache LVM
metadata so LVM commands don't need to scan devices all the time and they
can reuse cached metadata. This functionality is used by default in RHEL7.
Result for Configuration for warnquota tool
Result: pass
Rule ID: xccdf_preupg_rule_storage_warnquota_configuration_checkscript
Time: 2014-10-22 04:48
Back configuration for warnquota tool up
File(s) affected:
/etc/quotagrpadmins
/etc/quotatab
/etc/warnquota.conf
Result for Disk quota tool warnquota moved into quota-warnquota package
Result: informational
Rule ID: xccdf_preupg_rule_storage_warnquota_new_package_checkscript
Time: 2014-10-22 04:48
Install quota-warnquota if need warnquota tool
Remediation instructions
Quota tool warnquota(8) has been moved from "quota" package into"quota-warnquota" package.
If you used warnquota on the old system, please install quota-warnquota
package with this command on the new system:
# yum --assumeyes install quota-warnquota
Please do not forget to check warnquota configutation files
(/etc/quotagrpadmins, /etc/quotatab, and /etc/warnquota.conf) before using
the tool.
Please do not forget to install a cron job to execute the warnquota tool
periodically, if you used it on the the old system.
Result for Check for Add-On availability
Result: pass
Rule ID: xccdf_preupg_rule_system_AddOns_addons
Time: 2014-10-22 04:48
Content checks availability of High Availability, ResilientStorage and LoadBalancer Add-Ons.
Result for Architecture Support
Result: pass
Rule ID: xccdf_preupg_rule_system_Architecture_architecture
Time: 2014-10-22 04:48
Red Hat Enterprise Linux 7 does not support installations on 32-bit architectures, and performing an in-place upgrade is not possible on 32-bit systems.
Result for Binary rebuilds
Result: pass
Rule ID: xccdf_preupg_rule_system_BinariesRebuild_check
Time: 2014-10-22 04:48
Check all binaries installed on the assessment system which needs to be rebuilded on the target system
Result for Debuginfo packages
Result: pass
Rule ID: xccdf_preupg_rule_system_Debuginfo_debuginfo
Time: 2014-10-22 04:48
This content checks for debuginfo packages and inform about potential risks for in-place upgrade.
Result for Read Only FHS directories
Result: pass
Rule ID: xccdf_preupg_rule_system_FHS_ReadOnlyFHS_check_script
Time: 2014-10-22 04:48
Check that critical directories of Filesystem Hierarchy Standard are not mounted read-only.
Result for Check FHS for /var incompabilities.
Result: informational
Rule ID: xccdf_preupg_rule_system_FHS_Run_check
Time: 2014-10-22 04:48
Since RHEL 7 are some changes in FHS, which could be in conflicts with old system (e.g. movement /var/run -> /run).
Remediation instructions
Since RHEL 7 exists '/run' directory where tmpfs is mounted for runtime data.Original '/var/run' is symlink to this directory and likewise '/var/lock' points
to the '/run/lock/' now. '/run' directory is emptied on reboot, so all runtime
files must be created on boot again. See RHEL 7 Migration Planning Guidelines.
Result for In-place Upgrade Requirements for the /usr/ Directory
Result: pass
Rule ID: xccdf_preupg_rule_system_FHS_UsrPartition_usr
Time: 2014-10-22 04:48
This module determines if the /usr/ directory is located on a separate partition.
Result for Cluster and High Availability
Result: pass
Rule ID: xccdf_preupg_rule_system_HA-Cluster_ha-cluster_hacluster
Time: 2014-10-22 04:48
Content checks Cluster and High Availability solutions for upgrade.
Result for File Systems, Partitions and Mounts Configuration Review
Result: informational
Rule ID: xccdf_preupg_rule_system_PartitionMounts_partmounts
Time: 2014-10-22 04:48
This module describes the new default file system and stores the partitions and mounts configuration.
Remediation instructions
Red Hat Enterprise Linux 7 now uses the XFS file system as the default file system instead of the ext4 file system. If you intend to migrate the system to another machine or create a new file system, you can consider using XFS instead of ext4. Users who use a Kickstart installation can consider modifying the Kickstart configuration to use XFS.Additionally, information about the partitions and mounts configuration has been saved in the /root/preupgrade/kickstart/ directory. This information can be useful to users who choose to perform a system migration or convert their file systems to XFS.
Result for Sonamebumped libs
Result: informational
Rule ID: xccdf_preupg_rule_system_SonameBump_SonameBump
Time: 2014-10-22 04:48
If the dynamic library breaks the API/ABI compatibility, it is supposed to change its soname. This content checks for the soname bumps between RHEL 6 and RHEL 7 in your Red Hat packages.
Remediation instructions
Application developed in C may use dynamic libraries (.so files) to reuse thecommon functions/symbols in the binary. If the library bumped its soname (
changed major version, API/ABI incompatibility), application that depends on
it may not run.
Some of the libraries changed the soname version between Red Hat Enterprise
Linux 6 and Red Hat Enterprise Linux 7.
From your RHEL 6 packages, following libraries changed soname:
libanonymous.so.2 from cyrus-sasl-lib changed to libanonymous.so.3
libbind9.so.80 from bind-libs changed to libbind9.so.90
libcryptsetup.so.1 from cryptsetup-luks-libs changed to libcryptsetup.so.4
libdns.so.81 from bind-libs changed to libdns.so.100
libdricore9.2.0-devel.so.1 from mesa-dri-drivers changed to libdricore9.2.2.so.1
libdrm_nouveau.so.1 from libdrm changed to libdrm_nouveau.so.2
libffi.so.5 from libffi changed to libffi.so.6
libgdbm.so.2 from gdbm changed to libgdbm.so.4
libgmp.so.3 from gmp changed to libgmp.so.10
libgnutls.so.26 from gnutls changed to libgnutls.so.28
libgnutlsxx.so.26 from gnutls changed to libgnutlsxx.so.28
libgs.so.8 from ghostscript changed to libgs.so.9
libgssapiv2.so.2 from cyrus-sasl-gssapi changed to libgssapiv2.so.3
libini_config.so.2 from libini_config changed to libini_config.so.3
libisc.so.83 from bind-libs changed to libisc.so.95
libisccc.so.80 from bind-libs changed to libisccc.so.90
libisccfg.so.82 from bind-libs changed to libisccfg.so.90
libkdb5.so.6 from krb5-libs changed to libkdb5.so.7
liblogin.so.2 from cyrus-sasl-plain changed to liblogin.so.3
libltaudit.so.0.5.9 from latrace changed to libltaudit.so.0.5.11
liblwres.so.80 from bind-libs changed to liblwres.so.90
libmysqlclient.so.16 from mysql-libs changed to libmysqlclient.so.18
libopenjpeg.so.2 from openjpeg-libs changed to libopenjpeg.so.1
libpcre.so.0 from pcre changed to libpcre.so.1
libplain.so.2 from cyrus-sasl-plain changed to libplain.so.3
libpoppler.so.5 from poppler changed to libpoppler.so.37
libproxy.so.0 from libproxy changed to libproxy.so.1
librpm.so.1 from rpm-libs changed to librpm.so.3
librpmbuild.so.1 from rpm-libs changed to librpmbuild.so.3
librpmio.so.1 from rpm-libs changed to librpmio.so.3
libsasl2.so.2 from cyrus-sasl-lib changed to libsasl2.so.3
libsasldb.so.2 from cyrus-sasl-lib changed to libsasldb.so.3
libtasn1.so.3 from libtasn1 changed to libtasn1.so.6
libtiff.so.3 from libtiff changed to libtiff.so.5
libtiffxx.so.3 from libtiff changed to libtiffxx.so.5
libudev.so.0 from libudev changed to libudev.so.1
libverto.so.0 from krb5-libs changed to libverto.so.1
libxtables.so.4 from iptables changed to libxtables.so.10
We checked the requirements in Non-RH signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you will
need to rebuild such package/application against new library.
Red Hat Enterprise Linux applications available on the RHEL 7 will handle
these bumps automatically by the update/migration to new Red Hat Enterprise
Linux as they were already built against these libraries.
INPLACERISK: MEDIUM: We detected some soname bumps in the libraries installed on the system. This may break the functionality of some of your 3rd party applications. They may need rebuild. Please check their requirements.
Result for SonameKept Reusable Dynamic Libraries
Result: informational
Rule ID: xccdf_preupg_rule_system_SonameKept_SonameKept
Time: 2014-10-22 04:48
This module provides an overview of the dynamic libraries from Red Hat Enterprise Linux 6 that can be reused in Red Hat Enterprise Linux 7, as the dynamic libraries remain compatible with both the application programming interface (API) and the application binary interface (ABI).
Remediation instructions
Applications developed in the C programming language can use dynamic libraries (.so files) to reuse common functions and symbols in the binary. When the library changes its soname in a major version, the binaries normally need to be rebuilt for the new system. Some libraries have not changed their soname between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 so it could be possible to reuse third party applications which use only these libraries without rebuilding.You can find the list of the unchanged dynamic libraries and their package names in the following file: ./kickstart/NoSonameBumpLibs
If it is not clear what libraries the third party binary or RPM uses, it is possible to use the ldd utility for the C binary, or run the "rpm -q --whatrequires SONAME" command for the whole RPM package. No problems are expected to occur if there are only .so files listed in the NoSonameBumpLibs file and unversioned shared libraries.
Result for Removed .so libs
Result: informational
Rule ID: xccdf_preupg_rule_system_SonameRemoval_SonameRemoval
Time: 2014-10-22 04:49
Dynamic libraries are used provides symbols/functions to binaries. Some of the libraries were removed between RHEL 6 and RHEL 7. This content checks for the .so libraries removal between RHEL 6 and RHEL 7 in your Red Hat packages.
Remediation instructions
Application developed in C may use dynamic libraries (.so files) to reuse thecommon functions/symbols in the binary. If the library is missing, application
will not run. Some of the libraries were removed between RHEL 6 and RHEL 7.
From your Red Hat Enterprise Linux 6 packages, following libraries disappeared:
libck-connector.so.0 from ConsoleKit-libs
libnih-dbus.so.1 from libnih
libnih.so.1 from libnih
_apol.so.4 from setools-libs-python
_poldiff.so.1 from setools-libs-python
_qpol.so.1 from setools-libs-python
_seaudit.so.4 from setools-libs-python
_sefs.so.4 from setools-libs-python
libQtAssistantClient.so.4 from qt-x11
libabrt_web.so.0 from libreport
libatlas.so.3 from atlas
libbtparser.so.2 from btparser
libcblas.so.3 from atlas
libck-connector.so.0 from ConsoleKit-libs
libclapack.so.3 from atlas
libcupsdriver.so.1 from cups-libs
libdrm_nouveau2.so.2 from libdrm
libeggdbus-1.so.0 from eggdbus
libevent-1.4.so.2 from libevent
libevent_core-1.4.so.2 from libevent
libevent_extra-1.4.so.2 from libevent
libf77blas.so.3 from atlas
libgnutls-extra.so.26 from gnutls
libgpgme-pth.so.11 from gpgme
libgssglue.so.1 from libgssglue
libhal-storage.so.1 from hal-libs
libhal.so.1 from hal-libs
libhunspell-1.2.so.0 from hunspell
libiw.so.29 from wireless-tools
libldif-2.4.so.2 from openldap
libmp.so.3 from gmp
libmysqlclient_r.so.16 from mysql-libs
libnih-dbus.so.1 from libnih
libnih.so.1 from libnih
libpangox-1.0.so.0 from pango
libparted-2.1.so.0 from parted
libpolkit-backend-1.so.0 from polkit
libptcblas.so.3 from atlas
libptf77blas.so.3 from atlas
libpython2.6.so.1.0 from python-libs
librpcsecgss.so.3 from nfs-utils-lib
libtopology.so.0 from libtopology
libusbpp-0.1.so.4 from libusb
libverto-k5ev.so.0 from krb5-libs
pam_ck_connector.so from ConsoleKit-libs
AES.so from python-crypto
ANSI_X3.110.so from glibc
ARC2.so from python-crypto
ARC4.so from python-crypto
ARMSCII-8.so from glibc
ASMO_449.so from glibc
B.so from perl
BIG5.so from glibc
BIG5HKSCS.so from glibc
BRF.so from glibc
Base64.so from perl
Blowfish.so from python-crypto
Byte.so from perl
Bzip2.so from perl-Compress-Raw-Bzip2
CAST.so from python-crypto
CN.so from perl
CP10007.so from glibc
CP1125.so from glibc
CP1250.so from glibc
CP1251.so from glibc
CP1252.so from glibc
CP1253.so from glibc
CP1254.so from glibc
CP1255.so from glibc
CP1256.so from glibc
CP1257.so from glibc
CP1258.so from glibc
CP737.so from glibc
CP775.so from glibc
CP932.so from glibc
CSN_369103.so from glibc
CWI.so from glibc
Call.so from perl
Cwd.so from perl
DBI.so from perl-DBI
DB_File.so from perl
DEC-MCS.so from glibc
DES.so from python-crypto
DES3.so from python-crypto
DProf.so from perl
Dumper.so from perl
EBCDIC-AT-DE-A.so from glibc
EBCDIC-AT-DE.so from glibc
EBCDIC-CA-FR.so from glibc
EBCDIC-DK-NO-A.so from glibc
EBCDIC-DK-NO.so from glibc
EBCDIC-ES-A.so from glibc
EBCDIC-ES-S.so from glibc
EBCDIC-ES.so from glibc
EBCDIC-FI-SE-A.so from glibc
EBCDIC-FI-SE.so from glibc
EBCDIC-FR.so from glibc
EBCDIC-IS-FRISS.so from glibc
EBCDIC-IT.so from glibc
EBCDIC-PT.so from glibc
EBCDIC-UK.so from glibc
EBCDIC-US.so from glibc
EBCDIC.so from perl
ECMA-CYRILLIC.so from glibc
EUC-CN.so from glibc
EUC-JISX0213.so from glibc
EUC-JP-MS.so from glibc
EUC-JP.so from glibc
EUC-KR.so from glibc
EUC-TW.so from glibc
Encode.so from perl
Expat.so from perl-XML-Parser
FastCalc.so from perl
Fcntl.so from perl
FieldHash.so from perl
GB18030.so from glibc
GBBIG5.so from glibc
GBGBK.so from glibc
GBK.so from glibc
GDBM_File.so from perl
GEORGIAN-ACADEMY.so from glibc
GEORGIAN-PS.so from glibc
GOST_19768-74.so from glibc
GREEK-CCITT.so from glibc
GREEK7-OLD.so from glibc
GREEK7.so from glibc
Glob.so from perl
HP-GREEK8.so from glibc
HP-ROMAN8.so from glibc
HP-ROMAN9.so from glibc
HP-THAI8.so from glibc
HP-TURKISH8.so from glibc
HiRes.so from perl-Time-HiRes
Hostname.so from perl
IBM037.so from glibc
IBM038.so from glibc
IBM1004.so from glibc
IBM1008.so from glibc
IBM1008_420.so from glibc
IBM1025.so from glibc
IBM1026.so from glibc
IBM1046.so from glibc
IBM1047.so from glibc
IBM1097.so from glibc
IBM1112.so from glibc
IBM1122.so from glibc
IBM1123.so from glibc
IBM1124.so from glibc
IBM1129.so from glibc
IBM1130.so from glibc
IBM1132.so from glibc
IBM1133.so from glibc
IBM1137.so from glibc
IBM1140.so from glibc
IBM1141.so from glibc
IBM1142.so from glibc
IBM1143.so from glibc
IBM1144.so from glibc
IBM1145.so from glibc
IBM1146.so from glibc
IBM1147.so from glibc
IBM1148.so from glibc
IBM1149.so from glibc
IBM1153.so from glibc
IBM1154.so from glibc
IBM1155.so from glibc
IBM1156.so from glibc
IBM1157.so from glibc
IBM1158.so from glibc
IBM1160.so from glibc
IBM1161.so from glibc
IBM1162.so from glibc
IBM1163.so from glibc
IBM1164.so from glibc
IBM1166.so from glibc
IBM1167.so from glibc
IBM12712.so from glibc
IBM1364.so from glibc
IBM1371.so from glibc
IBM1388.so from glibc
IBM1390.so from glibc
IBM1399.so from glibc
IBM16804.so from glibc
IBM256.so from glibc
IBM273.so from glibc
IBM274.so from glibc
IBM275.so from glibc
IBM277.so from glibc
IBM278.so from glibc
IBM280.so from glibc
IBM281.so from glibc
IBM284.so from glibc
IBM285.so from glibc
IBM290.so from glibc
IBM297.so from glibc
IBM420.so from glibc
IBM423.so from glibc
IBM424.so from glibc
IBM437.so from glibc
IBM4517.so from glibc
IBM4899.so from glibc
IBM4909.so from glibc
IBM4971.so from glibc
IBM500.so from glibc
IBM5347.so from glibc
IBM803.so from glibc
IBM850.so from glibc
IBM851.so from glibc
IBM852.so from glibc
IBM855.so from glibc
IBM856.so from glibc
IBM857.so from glibc
IBM860.so from glibc
IBM861.so from glibc
IBM862.so from glibc
IBM863.so from glibc
IBM864.so from glibc
IBM865.so from glibc
IBM866.so from glibc
IBM866NAV.so from glibc
IBM868.so from glibc
IBM869.so from glibc
IBM870.so from glibc
IBM871.so from glibc
IBM874.so from glibc
IBM875.so from glibc
IBM880.so from glibc
IBM891.so from glibc
IBM901.so from glibc
IBM902.so from glibc
IBM903.so from glibc
IBM9030.so from glibc
IBM904.so from glibc
IBM905.so from glibc
IBM9066.so from glibc
IBM918.so from glibc
IBM921.so from glibc
IBM922.so from glibc
IBM930.so from glibc
IBM932.so from glibc
IBM933.so from glibc
IBM935.so from glibc
IBM937.so from glibc
IBM939.so from glibc
IBM943.so from glibc
IBM9448.so from glibc
IEC_P27-1.so from glibc
INIS-8.so from glibc
INIS-CYRILLIC.so from glibc
INIS.so from glibc
IO.so from perl
ISIRI-3342.so from glibc
ISO-2022-CN-EXT.so from glibc
ISO-2022-CN.so from glibc
ISO-2022-JP-3.so from glibc
ISO-2022-JP.so from glibc
ISO-2022-KR.so from glibc
ISO-IR-197.so from glibc
ISO-IR-209.so from glibc
ISO646.so from glibc
ISO8859-1.so from glibc
ISO8859-10.so from glibc
ISO8859-11.so from glibc
ISO8859-13.so from glibc
ISO8859-14.so from glibc
ISO8859-15.so from glibc
ISO8859-16.so from glibc
ISO8859-2.so from glibc
ISO8859-3.so from glibc
ISO8859-4.so from glibc
ISO8859-5.so from glibc
ISO8859-6.so from glibc
ISO8859-7.so from glibc
ISO8859-8.so from glibc
ISO8859-9.so from glibc
ISO8859-9E.so from glibc
ISO_10367-BOX.so from glibc
ISO_11548-1.so from glibc
ISO_2033.so from glibc
ISO_5427-EXT.so from glibc
ISO_5427.so from glibc
ISO_5428.so from glibc
ISO_6937-2.so from glibc
ISO_6937.so from glibc
JOHAB.so from glibc
JP.so from perl
KOI-8.so from glibc
KOI8-R.so from glibc
KOI8-RU.so from glibc
KOI8-T.so from glibc
KOI8-U.so from glibc
KR.so from perl
LATIN-GREEK-1.so from glibc
LATIN-GREEK.so from glibc
Langinfo.so from perl
MAC-CENTRALEUROPE.so from glibc
MAC-IS.so from glibc
MAC-SAMI.so from glibc
MAC-UK.so from glibc
MACINTOSH.so from glibc
MD2.so from python-crypto
MD4.so from python-crypto
MD5.so from perl
MIK.so from glibc
NATS-DANO.so from glibc
NATS-SEFI.so from glibc
NDBM_File.so from perl
Normalize.so from perl
Opcode.so from perl
POSIX.so from perl
PPPort.so from perl
PT154.so from glibc
Peek.so from perl
Piece.so from perl-Time-Piece
RIPEMD.so from python-crypto
RK1048.so from glibc
SAMI-WS2.so from glibc
SDBM_File.so from perl
SHA.so from perl-Digest-SHA
SHA256.so from python-crypto
SHIFT_JISX0213.so from glibc
SJIS.so from glibc
SSL.so from pyOpenSSL
SSLeay.so from perl-Crypt-SSLeay
Socket.so from perl
Soundex.so from perl
Storable.so from perl
Symbol.so from perl
SysV.so from perl
Syslog.so from perl
T.61.so from glibc
TCVN5712-1.so from glibc
TIS-620.so from glibc
TSCII.so from glibc
TW.so from perl
UHC.so from glibc
UNICODE.so from glibc
UTF-16.so from glibc
UTF-32.so from glibc
UTF-7.so from glibc
Unicode.so from perl
Util.so from perl
VISCII.so from glibc
X11.so from ghostscript
XOR.so from python-crypto
Zlib.so from perl-Compress-Raw-Zlib
__m2crypto.so from m2crypto
_audit.so from audit-libs-python
_backend_agg.so from python-matplotlib
_backend_gdk.so from python-matplotlib
_bisectmodule.so from python-libs
_bsddb.so from python-libs
_bytesio.so from python-libs
_cairo.so from pycairo
_capi.so from numpy
_certificate.so from python-rhsm
_cntr.so from python-matplotlib
_codecs_cn.so from python-libs
_codecs_hk.so from python-libs
_codecs_iso2022.so from python-libs
_codecs_jp.so from python-libs
_codecs_kr.so from python-libs
_codecs_tw.so from python-libs
_collectionsmodule.so from python-libs
_compiled_base.so from numpy
_cryptmodule.so from python-libs
_csv.so from python-libs
_ctypes.so from python-libs
_curses.so from python-libs
_curses_panel.so from python-libs
_dbus_bindings.so from dbus-python
_dbus_glib_bindings.so from dbus-python
_delaunay.so from python-matplotlib
_dotblas.so from numpy
_elementtree.so from python-libs
_fastmath.so from python-crypto
_fileio.so from python-libs
_functoolsmodule.so from python-libs
_gio.so from pygobject2
_glib.so from pygobject2
_gobject.so from pygobject2
_gpgme.so from pygpgme
_gtkagg.so from python-matplotlib
_hashlib.so from python-libs
_heapq.so from python-libs
_hotshot.so from python-libs
_image.so from python-matplotlib
_json.so from python-libs
_ldap.so from python-ldap
_localemodule.so from python-libs
_lsprof.so from python-libs
_multibytecodecmodule.so from python-libs
_multiprocessing.so from python-libs
_path.so from python-matplotlib
_png.so from python-matplotlib
_pyreport.so from libreport-python
_randommodule.so from python-libs
_reportclient.so from libreport-python
_rpmbmodule.so from rpm-python
_rpmmodule.so from rpm-python
_seinfo.so from setools-libs-python
_selinux.so from libselinux-python
_semanage.so from libsemanage-python
_sesearch.so from setools-libs-python
_snackmodule.so from newt-python
_socketmodule.so from python-libs
_sort.so from numpy
_speedups.so from python-simplejson
_sqlite3.so from python-libs
_sqlitecache.so from yum-metadata-parser
_ssl.so from python-libs
_struct.so from python-libs
_weakref.so from python-libs
acutilmodule.so from authconfig
ad.so from samba-winbind
adex.so from samba-winbind
apr_ldap-1.so from apr-util-ldap
arraymodule.so from python-libs
asq.so from libldb
attrs.so from perl
audioop.so from python-libs
audit2why.so from libselinux-python
auparse.so from audit-libs-python
autorid.so from samba-winbind
binascii.so from python-libs
bz2.so from python-libs
cPickle.so from python-libs
cStringIO.so from python-libs
cmathmodule.so from python-libs
config_direct.so from libproxy
config_envvar.so from libproxy
config_file.so from libproxy
config_wpad.so from libproxy
crypto.so from pyOpenSSL
datetime.so from python-libs
dbm.so from python-libs
default_encoding_utf8.so from ipa-python
default_encoding_utf8.so from policycoreutils-python
details.so from plymouth
dlmodule.so from python-libs
dmidecodemod.so from python-dmidecode
drm.so from plymouth
encoding.so from perl
ethtool.so from python-ethtool
etree.so from python-lxml
fcntlmodule.so from python-libs
fftpack_lite.so from numpy
frame-buffer.so from plymouth
ft2font.so from python-matplotlib
future_builtins.so from python-libs
gcore.so from crash-gcore-command
gdbmmodule.so from python-libs
grpmodule.so from python-libs
gudev.so from python-gudev
hash.so from samba-winbind
ignore_domain.so from libproxy
ignore_ip.so from libproxy
imageop.so from python-libs
imfile.so from rsyslog
imklog.so from rsyslog
immark.so from rsyslog
impstats.so from rsyslog
imptcp.so from rsyslog
imtcp.so from rsyslog
imudp.so from rsyslog
imuxsock.so from rsyslog
itertoolsmodule.so from python-libs
iwlib.so from python-iwlib
kerberos.so from python-kerberos
krbVmodule.so from python-krbV
lapack_lite.so from numpy
libLLVM-3.4-mesa.so from mesa-private-llvm
libbfd-2.20.51.0.2-5.42.el6.so from binutils
libcapi.so from openssl
libfakeroot-0.so from fakeroot-libs
libgettextlib-0.17.so from gettext
libgettextsrc-0.17.so from gettext
libgstvideo4linux.so from gstreamer-plugins-base
libip6t_set.so from iptables-ipv6
libipt_SET.so from iptables
libipt_addrtype.so from iptables
libipt_ecn.so from iptables
libipt_set.so from iptables
libjavagtk.so from java-1.7.0-openjdk
libnullbackend.so from polkit
libopcodes-2.20.51.0.2-5.42.el6.so from binutils
libpadlock.so from openssl
libphonon_gstreamer.so from phonon-backend-gstreamer
libpkexec-action-lookup.so from polkit
libproc-3.2.8.so from procps
libpulsecommon-0.9.21.so from pulseaudio-libs
libstdbuf.so from coreutils-libs
linuxaudiodev.so from python-libs
lmnet.so from rsyslog
lmnetstrms.so from rsyslog
lmnsd_ptcp.so from rsyslog
lmregexp.so from rsyslog
lmstrmsrv.so from rsyslog
lmtcpclt.so from rsyslog
lmtcpsrv.so from rsyslog
lmzlibw.so from rsyslog
lookup_file.so from autofs
lookup_hesiod.so from autofs
lookup_hosts.so from autofs
lookup_ldap.so from autofs
lookup_multi.so from autofs
lookup_nisplus.so from autofs
lookup_program.so from autofs
lookup_sss.so from autofs
lookup_userhome.so from autofs
lookup_yp.so from autofs
m_xt.so from iproute
mathmodule.so from python-libs
memberof.so from sssd-common
mga_dri.so from mesa-dri1-drivers
mmapmodule.so from python-libs
mod_actions.so from httpd
mod_alias.so from httpd
mod_asis.so from httpd
mod_auth_basic.so from httpd
mod_auth_digest.so from httpd
mod_authn_alias.so from httpd
mod_authn_anon.so from httpd
mod_authn_dbd.so from httpd
mod_authn_dbm.so from httpd
mod_authn_default.so from httpd
mod_authn_file.so from httpd
mod_authnz_ldap.so from httpd
mod_authz_dbm.so from httpd
mod_authz_default.so from httpd
mod_authz_groupfile.so from httpd
mod_authz_host.so from httpd
mod_authz_owner.so from httpd
mod_authz_user.so from httpd
mod_autoindex.so from httpd
mod_cache.so from httpd
mod_cern_meta.so from httpd
mod_cgi.so from httpd
mod_cgid.so from httpd
mod_dav.so from httpd
mod_dav_fs.so from httpd
mod_dbd.so from httpd
mod_deflate.so from httpd
mod_dir.so from httpd
mod_disk_cache.so from httpd
mod_dumpio.so from httpd
mod_env.so from httpd
mod_expires.so from httpd
mod_ext_filter.so from httpd
mod_filter.so from httpd
mod_headers.so from httpd
mod_ident.so from httpd
mod_include.so from httpd
mod_info.so from httpd
mod_ldap.so from httpd
mod_log_config.so from httpd
mod_log_forensic.so from httpd
mod_logio.so from httpd
mod_mime.so from httpd
mod_mime_magic.so from httpd
mod_negotiation.so from httpd
mod_proxy.so from httpd
mod_proxy_ajp.so from httpd
mod_proxy_balancer.so from httpd
mod_proxy_connect.so from httpd
mod_proxy_ftp.so from httpd
mod_proxy_http.so from httpd
mod_proxy_scgi.so from httpd
mod_reqtimeout.so from httpd
mod_rewrite.so from httpd
mod_setenvif.so from httpd
mod_speling.so from httpd
mod_status.so from httpd
mod_substitute.so from httpd
mod_suexec.so from httpd
mod_unique_id.so from httpd
mod_userdir.so from httpd
mod_usertrack.so from httpd
mod_version.so from httpd
mod_vhost_alias.so from httpd
mod_wsgi.so from mod_wsgi
mount_afs.so from autofs
mount_autofs.so from autofs
mount_bind.so from autofs
mount_changer.so from autofs
mount_ext2.so from autofs
mount_generic.so from autofs
mount_nfs.so from autofs
mro.so from perl
mtrand.so from numpy
multiarray.so from numpy
multiarray_tests.so from numpy
network_networkmanager.so from libproxy
nismodule.so from python-libs
nsswitch.so from nfs-utils-lib
nxutils.so from python-matplotlib
objectify.so from python-lxml
ommail.so from rsyslog
omprog.so from rsyslog
omruleset.so from rsyslog
omtesting.so from rsyslog
omuxsock.so from rsyslog
operator.so from python-libs
ossaudiodev.so from python-libs
p11-kit-trust.so from p11-kit-trust
paged_results.so from libldb
paged_searches.so from libldb
pam_access.so from pam
pam_cap.so from libcap
pam_chroot.so from pam
pam_ck_connector.so from ConsoleKit-libs
pam_console.so from pam
pam_cracklib.so from pam
pam_debug.so from pam
pam_deny.so from pam
pam_echo.so from pam
pam_env.so from pam
pam_exec.so from pam
pam_faildelay.so from pam
pam_faillock.so from pam
pam_filter.so from pam
pam_fprintd.so from fprintd-pam
pam_ftp.so from pam
pam_group.so from pam
pam_issue.so from pam
pam_keyinit.so from pam
pam_krb5.so from pam_krb5
pam_lastlog.so from pam
pam_limits.so from pam
pam_listfile.so from pam
pam_localuser.so from pam
pam_loginuid.so from pam
pam_mail.so from pam
pam_mkhomedir.so from pam
pam_motd.so from pam
pam_namespace.so from pam
pam_nologin.so from pam
pam_oddjob_mkhomedir.so from oddjob-mkhomedir
pam_passwdqc.so from pam_passwdqc
pam_permit.so from pam
pam_postgresok.so from pam
pam_pwhistory.so from pam
pam_rhosts.so from pam
pam_rootok.so from pam
pam_securetty.so from pam
pam_selinux.so from pam
pam_sepermit.so from pam
pam_shells.so from pam
pam_smbpass.so from samba-common
pam_sss.so from sssd-client
pam_stress.so from pam
pam_succeed_if.so from pam
pam_tally2.so from pam
pam_time.so from pam
pam_timestamp.so from pam
pam_tty_audit.so from pam
pam_umask.so from pam
pam_unix.so from pam
pam_userdb.so from pam
pam_warn.so from pam
pam_wheel.so from pam
pam_winbind.so from samba-winbind-clients
pam_xauth.so from pam
pango-arabic-fc.so from pango
pango-arabic-lang.so from pango
pango-basic-x.so from pango
pango-hangul-fc.so from pango
pango-hebrew-fc.so from pango
pango-indic-fc.so from pango
pango-indic-lang.so from pango
pango-khmer-fc.so from pango
pango-syriac-fc.so from pango
pango-thai-fc.so from pango
pango-thai-lang.so from pango
pango-tibetan-fc.so from pango
parse_amd.so from autofs
parse_hesiod.so from autofs
parse_sun.so from autofs
parsermodule.so from python-libs
pmlastmsg.so from rsyslog
pycurl.so from python-pycurl
pyexpat.so from python-libs
pyhbac.so from libipa_hbac-python
pysss.so from sssd-common
pysss_murmur.so from sssd-common
r128_dri.so from mesa-dri1-drivers
r300_dri.so from mesa-dri-drivers
r600_dri.so from mesa-dri-drivers
radeonsi_dri.so from mesa-dri-drivers
rand.so from pyOpenSSL
rdn_name.so from libldb
re.so from perl
readline.so from python-libs
resource.so from python-libs
rid.so from samba-winbind
sample.so from libldb
savage_dri.so from mesa-dri1-drivers
scalar.so from perl
scalarmath.so from numpy
selectmodule.so from python-libs
server_sort.so from libldb
shared.so from perl
skel.so from libldb
smixer-ac97.so from alsa-lib
smixer-hda.so from alsa-lib
smixer-sbase.so from alsa-lib
spwdmodule.so from python-libs
sssd_krb5_locator_plugin.so from sssd-client
sssd_pac_plugin.so from sssd-client
staplog.so from systemtap-runtime
static.so from nfs-utils-lib
stropmodule.so from python-libs
syslog.so from python-libs
talloc.so from pytalloc
tdb.so from libldb
tdb2.so from samba-winbind
termios.so from python-libs
text.so from plymouth
threads.so from perl
timemodule.so from python-libs
timingmodule.so from python-libs
trace.so from crash-trace-command
ttconv.so from python-matplotlib
umath.so from numpy
umath_tests.so from numpy
umich_ldap.so from nfs-utils-lib
unichrome_dri.so from mesa-dri1-drivers
unicodedata.so from python-libs
unix.so from pygobject2
vgpreload_core-amd64-linux.so from valgrind
vgpreload_core-x86-linux.so from valgrind
vgpreload_drd-amd64-linux.so from valgrind
vgpreload_drd-x86-linux.so from valgrind
vgpreload_exp-dhat-amd64-linux.so from valgrind
vgpreload_exp-dhat-x86-linux.so from valgrind
vgpreload_exp-sgcheck-amd64-linux.so from valgrind
vgpreload_exp-sgcheck-x86-linux.so from valgrind
vgpreload_helgrind-amd64-linux.so from valgrind
vgpreload_helgrind-x86-linux.so from valgrind
vgpreload_massif-amd64-linux.so from valgrind
vgpreload_massif-x86-linux.so from valgrind
vgpreload_memcheck-amd64-linux.so from valgrind
vgpreload_memcheck-x86-linux.so from valgrind
via.so from perl
wpad_dns.so from libproxy
wpad_dnsdevolution.so from libproxy
xxsubtype.so from python-libs
zlibmodule.so from python-libs
We checked the requirements in Non-RH signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you may need
to get the .so library from different place or search for an alternative.
INPLACERISK: MEDIUM: We detected some .so libraries installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of some of your 3rd party applications.
Result for Red Hat Enterprise Linux supported variants
Result: pass
Rule ID: xccdf_preupg_rule_system_SupportedVariants_server
Time: 2014-10-22 04:49
Upgrade is supported only for Red Hat Enterprise Linux Server or ComputeNode variant.
Result for Check the system version
Result: fail
Rule ID: xccdf_preupg_rule_system_SystemVersion_check
Time: 2014-10-22 04:49
Check if the system is last released version
Remediation instructions
For right migration you need latest release of RHEL6 system. Please, updateyour system to the last RHEL6 release and then run preupgrade-assistant again.
INPLACERISK: EXTREME: This is not latest RHEL6 release!
Result for CA certificate bundles modified
Result: pass
Rule ID: xccdf_preupg_rule_system_ca-certificates_checkbundles
Time: 2014-10-22 04:49
Later versions of RHEL include a shared store for certificate authorities. Additional trusted certificate authorities must be placed in the new location rather that modifying the distributed certificate authority bundles. The Preupgrade assistant cannot automatically identify how certificate bundles have been modified on this system.
Result for Developer Tool Set packages
Result: pass
Rule ID: xccdf_preupg_rule_system_dts_dts
Time: 2014-10-22 04:49
Content checks whether Red Hat Developer Tool Set packages are installed.
Result for Check for GRUB splash.xpm.gz file
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_grub_grub
Time: 2014-10-22 04:49
Content checks whether splash.xpm.gz file exists and backups them
Remediation instructions
Grub package is used as loader of linux system.Preupgrade assistant will backup file /boot/grub/splash.xpm.gz
and restore restore them after inplace upgrade to /boot/grub directory.
Modification of boot parameters is not possible without that file.
INPLACERISK: SLIGHT: File splash.xpm.gz was backuped for inplace upgrade case and editing grub options
Result for Hyper-V
Result: pass
Rule ID: xccdf_preupg_rule_system_hyperv_check
Time: 2014-10-22 04:49
Check if this system runs on Hyper-V.
Result for Content for enabling and disabling services based on RHEL 6 system
Result: needs_action
Rule ID: xccdf_preupg_rule_system_initscripts_control_check
Time: 2014-10-22 04:49
The content checks what services are enabled or disabled on assessment system and if the services will be enabled or disabled on RHEL 7 system.
Remediation instructions
The content detects some services who are disabled by default on Red Hat Enterprise Linux 7 system.
INPLACERISK: HIGH: The service autofs on RHEL 7 is disabled by default. Enable them via commands: systemctl enable autofs && systemctl start autofs.service .
INPLACERISK: HIGH: The service blk-availability on RHEL 7 is disabled by default. Enable them via commands: systemctl enable blk-availability && systemctl start blk-availability.service .
INPLACERISK: HIGH: The service certmonger on RHEL 7 is disabled by default. Enable them via commands: systemctl enable certmonger && systemctl start certmonger.service .
INPLACERISK: MEDIUM: The name cups-lpd was changed on RHEL 7 to one of these services: cups-lpd.socket cups-lpd@.service
INPLACERISK: HIGH: The service haldaemon on RHEL 7 is disabled by default. Enable them via commands: systemctl enable haldaemon && systemctl start haldaemon.service .
INPLACERISK: HIGH: The service ip6tables on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ip6tables && systemctl start ip6tables.service .
INPLACERISK: HIGH: The service mcelogd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable mcelogd && systemctl start mcelogd.service .
INPLACERISK: HIGH: The service messagebus on RHEL 7 is disabled by default. Enable them via commands: systemctl enable messagebus && systemctl start messagebus.service .
INPLACERISK: HIGH: The service netfs on RHEL 7 is disabled by default. Enable them via commands: systemctl enable netfs && systemctl start netfs.service .
INPLACERISK: HIGH: The service network on RHEL 7 is disabled by default. Enable them via commands: systemctl enable network && systemctl start network.service .
INPLACERISK: HIGH: The service nfslock on RHEL 7 is disabled by default. Enable them via commands: systemctl enable nfslock && systemctl start nfslock.service .
INPLACERISK: HIGH: The service portreserve on RHEL 7 is disabled by default. Enable them via commands: systemctl enable portreserve && systemctl start portreserve.service .
INPLACERISK: HIGH: The service postfix on RHEL 7 is disabled by default. Enable them via commands: systemctl enable postfix && systemctl start postfix.service .
INPLACERISK: HIGH: The service rhsmcertd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rhsmcertd && systemctl start rhsmcertd.service .
INPLACERISK: HIGH: The service rpcgssd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rpcgssd && systemctl start rpcgssd.service .
INPLACERISK: HIGH: The service udev-post on RHEL 7 is disabled by default. Enable them via commands: systemctl enable udev-post && systemctl start udev-post.service .
Result for Check for ethernet interface naming
Result: pass
Rule ID: xccdf_preupg_rule_system_initscripts_ifcfg_check
Time: 2014-10-22 04:49
The content checks if network interface names set through /etc/sysconfig/network-scripts/ifcfg-* files are compatible with device naming in Red Hat Enterprise Linux 7.
Result for User modification in /etc/rc.local and /etc/rc.d/rc.local
Result: pass
Rule ID: xccdf_preupg_rule_system_initscripts_rc-local_rclocal
Time: 2014-10-22 04:49
The content checks whether user modifies files /etc/rc.local and /etc/rc.d/rc.local
Result for cgroups configuration compatibility check
Result: needs_action
Rule ID: xccdf_preupg_rule_system_libcgroup_cgroups
Time: 2014-10-22 04:49
Checks libcgroup configuration files
File(s) affected:
/etc/cgconfig.conf
/etc/cgrules.conf
/etc/cgconfig.d
Remediation instructions
In previous versions of Red Hat Enterprise Linux, system administrators builtcustom cgroup hierarchies with use of the cgconfig command from the libcgroup
package. This package is now deprecated. There is only special situation,
in which libgroups should be used.
Red Hat Enterprise Linux 7 moves the resource management settings from the
process level to the application level by binding the cgroup hierarchy
with the systemd unit hierarchy. Therefore, you can manage the cgroup tree
with systemctl commands.
For more details see Red Hat Enterprise Linux 7 Resource Management Guide,
Chapter 2 (Using Control Groups):
https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_Control_Groups.html
Chapter 3 (Using libcgroup Tools)
https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_libcgroup_Tools.html
INPLACERISK: HIGH: additional libcgroup configuration files were created (/etc/cgconfig.d)
Result for Plugable authentication modules (PAM)
Result: pass
Rule ID: xccdf_preupg_rule_system_pam_pam
Time: 2014-10-22 04:49
Content checks for no-longer supported pluggable authentication modules
Result for Foreign Perl modules
Result: informational
Rule ID: xccdf_preupg_rule_system_perl_check
Time: 2014-10-22 04:50
Find Perl modules which need to be checked for proper functionality with newer Perl version on the Red Hat Enterprise Linux 7 system because they are not distributed by Red Hat
Remediation instructions
Perl was updated from version 5.10 to version 5.16. Please read Perlsection in the Red Hat Enterprise Linux 7 Developer Guide for more details.
Following Perl module files located in system Perl paths are either not
handled by any package or not signed by Red Hat:
Result for PolicyKit (alias polkit) config files
Result: informational
Rule ID: xccdf_preupg_rule_system_polkit_check
Time: 2014-10-22 04:50
PolicyKit has important changes of config files. Check modyfied and owns config files.
Remediation instructions
PolicyKit (alias polkit) doesn't use *.conf *.pkla file. Everything is inside*.rules files instead, which contains rules written in javascript (See more in
Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide, chapter 4).
Result for Python 2.7.5
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_python_check
Time: 2014-10-22 04:50
This module provides you with a list of packages that need to be rebuilt for version 2.7.5 of the Python programming language that is shipped with Red Hat Enterprise Linux 7.
Remediation instructions
This solution text contains a list of packages that need to be rebuilt for Python 2.7.5, which is shipped with Red Hat Enterprise Linux 7.Red Hat Enterprise Linux 7 contains Python version 2.7.5. For information about the differences from older versions and for further details, see https://access.redhat.com/site/articles/676453.
The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by Red Hat. These packages need to be rebuilt and reinstalled in order to work with Python 2.7.5. You can find more details at https://access.redhat.com/site/articles/676453.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/report is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/reportclient is not owned by any RPM package.
Result for SCL collections
Result: pass
Rule ID: xccdf_preupg_rule_system_scl-collection_scl
Time: 2014-10-22 04:50
Content checks whether RHSCL are installed
Result for Red Hat Subscription Manager
Result: pass
Rule ID: xccdf_preupg_rule_system_subscription-manager_check
Time: 2014-10-22 04:50
This module adds new option to the configuration file, if it is not there already.
Result for System kickstart
Result: pass
Rule ID: xccdf_preupg_rule_system_system-kickstart_ks
Time: 2014-10-22 04:50
Copy system kickstart from /root/ to directory with results
Result for YUM
Result: informational
Rule ID: xccdf_preupg_rule_system_yum_yum
Time: 2014-10-22 04:50
Content checks YUM configuration file
Remediation instructions
In RHEL 7 functionality of yum-plugin-downloadonly is a part of yum core.In RHEL 7 functionality of yum-plugin-security is a part of yum core.
After the upgrade it will be impossible to undo/redo/rollback to pre-upgrade yum transactions. Please run 'yum history new' after the upgrade to start a new history file.
The way yum groups work has changed in RHEL 7. By default yum treats groups as objects now. Please refer to the documentation for more information.
Result for Check for usage of dangerous ranges of UID and GIDs
Result: pass
Rule ID: xccdf_preupg_rule_usrmgmt_DangerousRanges_dangerousranges
Time: 2014-10-22 04:50
This module checks for IDs in the 0-199 range used without reservations. This module also checks for IDs which need to be moved from the 501-999 range prior to migration.
Result for Incorrect usage of reserved UID/GIDs
Result: pass
Rule ID: xccdf_preupg_rule_usrmgmt_ReservedIDs_reservedids
Time: 2014-10-22 04:50
Reserved user and group IDs by setup package changed between the RHEL 6 and RHEL 7. This may in some cases cause the unfunctionality of your system after the migration. This check should mitigate the risks.
Result for Check libuser.conf
Result: pass
Rule ID: xccdf_preupg_rule_usrmgmt_libuser_check
Time: 2014-10-22 04:50
Check for rejected configuration in /etc/libuser.conf about combination ldap module with others, due to ambiguity in password handling.