Introduction

Scanner

  • preupgrade-assistant-2.0.3-10.el6
  • preupgrade-assistant-contents-0.6.25-1.el6

Target info

Targets

  • qeos-46.lab.eng.rdu2.redhat.com

Addresses

  • 127.0.0.1
  • 172.16.36.46
  • 10.8.53.24
  • 0:0:0:0:0:0:0:1
  • fe80:0:0:0:f816:3eff:fe3c:5908

Platforms

  • cpe:/o:redhat:enterprise_linux:6
  • cpe:/o:redhat:enterprise_linux:6

Results overview

Rule Results Summary

pass fixed fail needs inspection needs action error not selected not checked not applicable informational unknown total
32 6 0 11 7 0 0 0 51 24 0 131
Title Result
Replaced rpms fixed
package downgrades fixed
SELinux Custom Policy fixed
OpenSSH sysconfig migration content fixed
State of LVM2 services. fixed
Workaround for crashing grubby. fixed
Compatibility Between iptables and ip6tables informational
Check NFSv2 informational
Postfix configuration compatibility check informational
Rsyslog configuration icompatibility informational
VCS repositories informational
Removed Options in coreutils informational
Removed options in gawk binaries informational
Removed options in grep binaries informational
Removed options in netstat binary informational
Removed options in quota tools informational
Removed or deprecated options in util-linux (util-linux-ng) binaries informational
GMP library incompatibilities informational
httpd configuration compatibility check informational
Disk quota tool warnquota moved into quota-warnquota package informational
Read Only FHS directories informational
Check FHS for /var incompabilities. informational
File Systems, Partitions and Mounts Configuration Review informational
Removable media in fstab informational
Sonamebumped libs informational
SonameKept Reusable Dynamic Libraries informational
Foreign Perl modules informational
PolicyKit (alias polkit) config files informational
UEFI bootloader informational
YUM informational
Packages not signed by Red Hat needs_action
Removed rpms needs_action
optional channel problems needs_action
General needs_action
Removed .so libs needs_action
Content for enabling and disabling services based on RHEL 6 system needs_action
Check system requirements needs_action
Configuration Files to Review needs_inspection
File Lists for Manual Migration needs_inspection
Check openssh-keycat needs_inspection
Check changed config files needs_inspection
Print removed and moved utilities needs_inspection
Obsoleted rpms needs_inspection
Binary rebuilds needs_inspection
Check for GRUB splash.xpm.gz file needs_inspection
Check for ethernet interface naming needs_inspection
Python 2.7.5 needs_inspection
Save repositories for kickstart needs_inspection
several kernel networking drivers not available in Red Hat Enterprise Linux 7 pass
several kernel storage drivers not available in Red Hat Enterprise Linux 7 pass
Check AuthorizedKeysCommand pass
Reusable Configuration Files pass
Check packages from other variants pass
NTP configuration pass
Information on time-sync.target pass
OpenSSH sshd_config migration content pass
Configuration for quota_nld service pass
Disk quota netlink message daemon moved into quota-nld package pass
Check rsync pass
Detect LUKS devices using Whirlpool for password hash. pass
Luks encrypted partition pass
Configuration for warnquota tool pass
Check for Add-On availability pass
Architecture Support pass
Debuginfo packages pass
In-place Upgrade Requirements for the /usr/ Directory pass
Cluster and High Availability pass
Check the system version pass
CA certificate bundles modified pass
Developer Tool Set packages pass
Obsoleted HAL (Hardware Abstraction Layer) pass
Hyper-V pass
User modification in /etc/rc.local and /etc/rc.d/rc.local pass
Plugable authentication modules (PAM) pass
SCL collections pass
Red Hat Subscription Manager pass
System kickstart pass
Check for usage of dangerous ranges of UID and GIDs pass
Incorrect usage of reserved UID/GIDs pass
Check libuser.conf pass

Results details

Result for Configuration Files to Review

Result: needs_inspection

Rule ID: xccdf_preupg_rule_backup_NoverifyConfigs_noverifycfg

Time: 2015-06-17 16:20

This module stores some system configuration files that can have been modified by the user when it is not possible to automatically upgrade them.

Remediation instructions

Some packages do not track the possible performed changes to system configuration files; therefore, it cannot be easily determined if the files have been modified by the user or not. In order to allow for later examination, all configuration files not handled by the migration scripts are stored in the dirtyconf/ directory. The list of the stored files is available in the ./kickstart/noverifycfg file. The user is advised to verify the functionality of configuration files stored by this tool after a successful upgrade.

              
INPLACERISK: SLIGHT: We detected some files where modifications are not tracked in the rpms. You may need to check their functionality after successful upgrade.

            

Result for File Lists for Manual Migration

Result: needs_inspection

Rule ID: xccdf_preupg_rule_backup_UntrackedFiles_untracked

Time: 2015-06-17 16:20

This module generates lists of files, such as temporary, application, and user data files, which are not automatically migrated.

Remediation instructions

Some user data, such as user home directories and temporary files, are not tracked by the RPM database. This data will not be automatically migrated. To assist you with migrating the data, this module has generated the following three files.

* The ./kickstart/untrackedsystem file lists the regular files on the system that will not be migrated. The list does not contain files mounted over the network, files created by runtime system operations, files in temporary locations, and user files in the /home/ or /root/ directory.

* The ./kickstart/untrackeduser file lists the regular local files in the /home/ and /root/ directories that will not be migrated. If the /home/ and /root/ directories are on a file system mounted over the network, this file can be empty.

* The ./kickstart/untrackedexpected file lists the regular files and symlinks created by runtime system operations (for example handling runlevels, alternatives and active SELinux modules). Most likely you don't need to care about them, list is available just for completeness.

* The ./kickstart/untrackedtemporary file lists all temporary local files on the system that will not be migrated. This is essentially everything in the /cgroup/, /tmp/, and /var/ directories. Most likely you don't need to care about them, list is available just for completeness.

It is recommended that you backup all data before proceeding with the upgrade to Red Hat Enterprise Linux 7. This data can be quite large.

If you are performing an in-place upgrade, this data should remain in its current location after the upgrade. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7. You should verify that all data was successfully maintained.

If you are performing a migration upgrade, this data must be backed up to another storage medium. You will need to copy the data you wish to have on the new installation back into place after the upgrade is complete. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7.

              
INPLACERISK: SLIGHT: We detected some files untracked by rpms. Some of these may need manual check/migration after redhat-upgrade-tool and/or can cause conflicts or troubles during the installation. Try to reduce unnecessary untracked files before running redhat-upgrade-tool.

            

Result for several kernel networking drivers not available in Red Hat Enterprise Linux 7

Result: pass

Rule ID: xccdf_preupg_rule_drivers_ObsoletedNetworkDrivers_obsoletedNetworkDrivers

Time: 2015-06-17 16:20

Several kernel networking drivers were removed from Red Hat Enterprise Linux 7.

Result for several kernel storage drivers not available in Red Hat Enterprise Linux 7

Result: pass

Rule ID: xccdf_preupg_rule_drivers_ObsoletedStorageDrivers_obsoletedStorageDrivers

Time: 2015-06-17 16:20

Several kernel storage drivers were deprecated or removed in Red Hat Enterprise Linux 7.

Result for Compatibility Between iptables and ip6tables

Result: informational

Rule ID: xccdf_preupg_rule_networking_iptables_check_script

Time: 2015-06-17 16:20

The firewalld service is now the default firewall service.

File(s) affected:

  • /etc/sysconfig/iptables

  • /etc/sysconfig/ip6tables

Remediation instructions

If you are migrating from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7, verify whether you have the iptables-services packages installed after performing the upgrade by running the "rpm -q iptables-services" command as root. Also, verify that iptables and ip6tables services are enabled by running the "systemctl is-enabled iptables" and "systemctl is-enabled ip6tables" commands as root.

For more details about migrating the firewall service from Red Hat Enterprise Linux 6, see the section about the firewalld service in the Red Hat Enterprise Linux 7 Migration Planning guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Migration_Planning_Guide/.

If you perform a clean installation of Red Hat Enterprise Linux 7, the firewalld service will be installed on your system instead of iptables and ip6tables.

For further details about the firewalld service, see the section about firewalls in Red Hat Enterprise Linux 7 Security Guide. You can access the guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/.

              
INFO iptables: Creating /root/preupgrade/postupgrade.d/reenable-iptables
WARNING iptables: Please read Remediation instructions.

            

Result for Check NFSv2

Result: informational

Rule ID: xccdf_preupg_rule_networking_nfsv2_check

Time: 2015-06-17 16:20

NFSv2 is not supported since RHEL 7. Therefore check if exists configuration which requires directly NFSv2 and fix it if it's possible.

Remediation instructions

NFS protocol version 2 is not supported since RHEL7.
-----------------------------------------------------

Result for Check AuthorizedKeysCommand

Result: pass

Rule ID: xccdf_preupg_rule_networking_openssh_check

Time: 2015-06-17 16:20

AuthorizedKeysCommand and AuthorizedKeysCommandUser are not accepted if they are under Match section.

Result for Check openssh-keycat

Result: needs_inspection

Rule ID: xccdf_preupg_rule_networking_openssh-keycat_check

Time: 2015-06-17 16:20

ssh-keycat is moved to own subpackage

Remediation instructions

ssh-keycat files (below) are moved to new package 'openssh-keycat':
/etc/pam.d/ssh-keycat
/usr/libexec/openssh/ssh-keycat
/usr/share/doc/openssh-server-5.3p1/HOWTO.ssh-keycat

If you want ssh-keycat anymore, you need install openssh-keycat package.

              
INPLACERISK: MEDIUM: ssh-keycat files are moved to openssh-keycat

            

Result for Postfix configuration compatibility check

Result: informational

Rule ID: xccdf_preupg_rule_networking_postfix_check_script

Time: 2015-06-17 16:20

Checks postfix configuration compatibility

File(s) affected:

  • /etc/postfix/main.cf

Remediation instructions

Please upgrade your configuration by: postfix upgrade-configuration

If you plan to use postscreen daemon, please restart postfix service by:
systemctl restart postfix

There is new smtpd_relay_restrictions parameter with the built-in
default settings:

smtpd_relay_restrictions =
permit_mynetworks
permit_sasl_authenticated
defer_unauth_destination

This safety net prevents open relay problems due to mistakes
with spam filter rules in smtpd_recipient_restrictions.

If your site has a complex mail relay policy configured under
smtpd_recipient_restrictions, this safety net may defer mail that
Postfix should accept.

To fix this safety net, take one of the following actions:

- Set smtpd_relay_restrictions empty, and keep using the existing
mail relay authorization policy in smtpd_recipient_restrictions.

- Copy the existing mail relay authorization policy from
smtpd_recipient_restrictions to smtpd_relay_restrictions.

There is no need to change the value of smtpd_recipient_restrictions.

Result for Reusable Configuration Files

Result: pass

Rule ID: xccdf_preupg_rule_others_NoVersionChangeEtc_nochange

Time: 2015-06-17 16:20

The module provides a list of the configuration files that can be reused in Red Hat Enterprise Linux 7.

Result for Check changed config files

Result: needs_inspection

Rule ID: xccdf_preupg_rule_others_configchanges_check

Time: 2015-06-17 16:20

Print modified config noreplace files which can generate .rpmnew (or .rpmsave) files. Specially check audit.rules which is generated by /sbin/augenrules since RHEL-6.6.

Remediation instructions

It's recommended check these config files after upgrade on RHEL7:

/root/.bashrc
/etc/libuser.conf
/etc/yum.conf

              
error: file /root/preupgrade/RHEL6_7/others/configchanges/etc/yum.repos.d/epel-testing.repo: No such file or directory
/root/preupgrade/RHEL6_7/others/configchanges/check.sh: line 53: & 16 : syntax error: operand expected (error token is "& 16 ")
INPLACERISK: SLIGHT: Some config files are changed and .rpmnew files will be generated.

            

Result for Rsyslog configuration icompatibility

Result: informational

Rule ID: xccdf_preupg_rule_others_rsyslog_check

Time: 2015-06-17 16:20

There is a change with journal (and thus socket logging) and some other incompatibilities in v7 as compared with older v5 version of rsyslog.

Remediation instructions


See [0] and [1] for more information about new logging system on RHEL-7 and solutions
of possible compatibility problems.

[0] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/s1-interaction_of_rsyslog_and_journal.html
[1] http://www.rsyslog.com/doc/v7-stable/compatibility/index.html

Result for VCS repositories

Result: informational

Rule ID: xccdf_preupg_rule_others_vcsrepos_check_script

Time: 2015-06-17 16:20

Find Versin Control System repositories in /home and /root - git, svn, cvs, bzr.

Remediation instructions

VCS repositories not found.

Result for Print removed and moved utilities

Result: needs_inspection

Rule ID: xccdf_preupg_rule_packages_GenericUtilities_check

Time: 2015-06-17 16:20

Print utilities which were removed from packages, moved into another package or changed destination directory.

Remediation instructions

Some utilities were removed, moved between packages of change path.
Please, check your scripts for possible problems. Below are appended brief lists.
If you want see details, please look at another contents.

Lists don't contain utilities from removed packages, which are not replaced
by another packages. Likewise don't contain utilities which are moved into
packages which replace or obsolete original packages.

Replaced utilities:
/bin/iptables-xml-1.4.7 (iptables) — iptables-xml
/sbin/iptables-1.4.7 (iptables) — iptables
/sbin/iptables-multi-1.4.7 (iptables) — iptables-multi
/sbin/iptables-restore-1.4.7 (iptables) — iptables-restore
/sbin/iptables-save-1.4.7 (iptables) — iptables-save
/sbin/ip6tables-1.4.7 (iptables-ipv6) — ip6tables
/sbin/ip6tables-multi-1.4.7 (iptables-ipv6) — ip6tables-multi
/sbin/ip6tables-restore-1.4.7 (iptables-ipv6) — ip6tables-restore
/sbin/ip6tables-save-1.4.7 (iptables-ipv6) — ip6tables-save
/usr/bin/python2.6 (python) — python2.7
/usr/bin/easy_install-2.6 (python-setuptools) — easy_install-2.7
/sbin/udevd (udev) — /usr/lib/systemd/systemd-udevd

Removed utilities (some removed utilities have still alternative):
/usr/bin/ck-history (ConsoleKit)
/usr/bin/ck-launch-session (ConsoleKit)
/usr/bin/ck-list-sessions (ConsoleKit)
/usr/sbin/ck-log-system-restart (ConsoleKit)
/usr/sbin/ck-log-system-start (ConsoleKit)
/usr/sbin/ck-log-system-stop (ConsoleKit)
/usr/sbin/console-kit-daemon (ConsoleKit)
/usr/sbin/packagekitd (PackageKit)
/usr/bin/abrt-dedup-client (abrt-addon-ccpp) — the server side no longer exists
/usr/bin/btparser (btparser) — see man satyr:satyr
/usr/bin/ca-legacy (ca-certificates)
/usr/sbin/cpuspeed (cpuspeed)
/usr/bin/berkeley_db_svc (db4-utils)
/usr/bin/db_codegen (db4-utils)
/sbin/fsck.ext4dev (e2fsprogs) — not needed
/sbin/mkfs.ext4dev (e2fsprogs) — not needed
/usr/bin/volname (eject) — use blkid instead
/usr/bin/.fipscheck.hmac (fipscheck)
/usr/bin/protoize (gcc)
/usr/bin/unprotoize (gcc)
/usr/bin/gdbtui (gdb)
/usr/bin/update-gdk-pixbuf-loaders (gdk-pixbuf2)
/usr/bin/update-gio-modules (glib2)
/usr/sbin/tzdata-update (glibc-common)
/usr/bin/gpgkey2ssh (gnupg2)
/sbin/grub (grub)
/sbin/grub-crypt (grub)
/sbin/grub-install (grub)
/sbin/grub-md5-crypt (grub)
/sbin/grub-terminfo (grub)
/usr/bin/mbchk (grub)
/sbin/umount.hal (hal)
/usr/bin/hal-device (hal)
/usr/bin/hal-disable-polling (hal)
/usr/bin/hal-find-by-capability (hal)
/usr/bin/hal-find-by-property (hal)
/usr/bin/hal-get-property (hal)
/usr/bin/hal-is-caller-locked-out (hal)
/usr/bin/hal-lock (hal)
/usr/bin/hal-set-property (hal)
/usr/bin/hal-setup-keymap (hal)
/usr/bin/lshal (hal)
/usr/sbin/hald (hal)
/usr/sbin/httpd.event (httpd)
/usr/sbin/httpd.worker (httpd)
/sbin/fstab-decode (initscripts)
/sbin/getkey (initscripts)
/sbin/securetty (initscripts)
/sbin/setsysfont (initscripts)
/usr/sbin/togglesebool (libselinux-utils)
/usr/bin/man2html (man) — man -H, see more "man man" and "man groff"
/usr/sbin/makewhatis (man)
/usr/bin/mcmfmt (mc) — removed by upstream
/sbin/microcode_ctl (microcode_ctl)
/sbin/mingetty (mingetty) — obsoleted by agetty:util-linux
/sbin/insmod.static (module-init-tools) — not needed in kmod
/sbin/nfs_cache_getent (nfs-utils) — not needed anymore by kernel
/usr/bin/.ssh.hmac (openssh-clients)
/usr/sbin/.sshd.hmac (openssh-server)
/usr/bin/dprofpp (perl) — you can install Devel-DProf from CPAN
/usr/bin/perl5.10.1 (perl) — newer version
/usr/bin/lwp-rget (perl-libwww-perl) — not maintained anymore
/usr/bin/rhgb-client (plymouth) — use plymouth
/usr/sbin/open_init_pty (policycoreutils) — not needed anymore due to systemd
/usr/sbin/run_init (policycoreutils) — not needed anymore due to systemd
/usr/bin/chardetect (python-chardet)
/sbin/readahead (readahead)
/sbin/readahead-collector (readahead)
/usr/bin/rpmargs (rpmdevtools) — fakeroot is removed
/usr/bin/rpmelfsym (rpmdevtools) — fakeroot is removed
/usr/bin/rpmfile (rpmdevtools) — fakeroot is removed
/usr/bin/rpmpeek (rpmdevtools) — fakeroot is removed
/usr/bin/rpmsodiff (rpmdevtools) — fakeroot is removed
/usr/bin/rpmsoname (rpmdevtools) — fakeroot is removed
/sbin/scsi_id (udev)
/sbin/start_udev (udev)
/sbin/initctl (upstart) — functionality implemented in systemd
/sbin/reload (upstart) — functionality implemented in systemd
/sbin/restart (upstart) — functionality implemented in systemd
/sbin/start (upstart) — functionality implemented in systemd
/sbin/status (upstart) — functionality implemented in systemd
/sbin/stop (upstart) — functionality implemented in systemd
/sbin/mount.tmpfs (util-linux-ng) — see man 8 mount
/usr/bin/ddate (util-linux-ng) — useless
/usr/bin/floppy (util-linux-ng) — obsolete
/usr/sbin/tunelp (util-linux-ng) — obsolete
/sbin/vconfig (vconfig) — see man ip from iproute

Utilities moved between packages (with same location):
/bin/su (coreutils) -> (util-linux)
/sbin/runuser (coreutils) -> (util-linux)
/sbin/matchpathcon (libselinux) -> (libselinux-utils)
/bin/mountpoint (sysvinit-tools) -> (util-linux)
/sbin/sulogin (sysvinit-tools) -> (util-linux)

              
INPLACERISK: SLIGHT: Some utilities were removed, moved between packages or change path.

            

Result for Check packages from other variants

Result: pass

Rule ID: xccdf_preupg_rule_packages_InterVariants_check

Time: 2015-06-17 16:20

Packages from different variants could be installed on system. Print these packages which are from other variants.

Result for Packages not signed by Red Hat

Result: needs_action

Rule ID: xccdf_preupg_rule_packages_NonRHSignedPkg_nonrhpkg

Time: 2015-06-17 16:20

Packages not signed by Red Hat will not be upgraded

Remediation instructions

Packages which are not signed with the official Red Hat keys will not be upgraded. These packages are typically provided by third parties or have been modified in some way. There is a high risk of incompatibility with these packages as they have not been verified by Red Hat. For upgrade assistance, contact the vendors of these packages.

You can find a list of all unsigned packages including the vendor names in the kickstart/nonrhpkgs file.


              
INPLACERISK: HIGH: We detected some non-RH signed packages, you can find the list in /root/preupgrade/./kickstart/nonrhpkgs. You need to handle them yourself!

            

Result for Obsoleted rpms

Result: needs_inspection

Rule ID: xccdf_preupg_rule_packages_ObsoletedPackages_ObsoletedPkg

Time: 2015-06-17 16:20

Some rpms were obsoleted from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package obsoletes from your set of Red Hat packages.

Remediation instructions

Some of the packages were obsoleted between RHEL 6 and RHEL 7. This means
Red Hat provides some alternative for them, but these alternatives may be
not 100% compatible - thus we don't replace them automatically. For some of
the obsoletes you will get the incompatibilities from separate preupgrade
contents and you can adjust your workflow according to the changes. Sometimes,
package might be replaced by several others.

Following packages were obsoleted by different ones:
ConsoleKit was obsoleted by systemd
PackageKit-gtk-module was obsoleted by PackageKit-gtk3-module
btparser was obsoleted by satyr
cpuspeed was obsoleted by kernel-tools,kernel
eggdbus was obsoleted by glib2
grub was obsoleted by grub2
hal was obsoleted by systemd
mingetty was obsoleted by util-linux
mysql-libs was obsoleted by mariadb-libs
pam_passwdqc was obsoleted by libpwquality
readahead was obsoleted by systemd
udev was obsoleted by systemd
upstart was obsoleted by systemd
vconfig was obsoleted by iproute

If some NonRH signed package requires these packages, you may need to check if the
alternative solution provided by Red Hat does work for you or get the missing package
from different sources than RHEL. You need to install these new packages yourself
after the assessment, as Red Hat can't assess the compatibility for you.

              
INPLACERISK: MEDIUM: We detected some packages installed on the system were removed (obsoleted) between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them.

            

Result for Removed Options in coreutils

Result: informational

Rule ID: xccdf_preupg_rule_packages_RemovedOptions_coreutils_removedoptions

Time: 2015-06-17 16:20

Some options and binary files were removed from the coreutils packages between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Remediation instructions

A number of options and binary files have been removed from the coreutils packages in Red Hat Enterprise Linux 7. The functionality of some scripts can be affected.

This is a complete list of removed options and binary files, including the solutions and new options:

* For the "factor" invocation, the "--verbose" option has been renamed to "--debug".
* For the "install" invocation, the "--preserve_context" option has been removed. The "--preserve-context" option can be used instead.
* For the "nl" invocation, the "--page-increment" option, which was deprecated in Red Hat Enterprise Linux 6, has been removed. The "--line-increment" option can be used instead.
* The "runuser" and "su" binaries have been moved to the util-linux package.
* For the "stat" invocation, the "--context" option and its short form, "-Z", have been removed. SELinux context is now a part of the stat default output format.
* For the "mkdir", "mknod", "mkfifo", "cp", and "install" invocations, the "-Z" option no longer accepts any arguments and automatically sets the default SELinux setting context. To set a specific context, the "--context=[context]" option has to be used.
* For the "touch" invocation, the deprecated "--file" option has been removed. The "--reference" option can be used instead.

Please verify that your scripts have been updated to work with these changes.

Result for Removed options in gawk binaries

Result: informational

Rule ID: xccdf_preupg_rule_packages_RemovedOptions_gawk_removedoptions

Time: 2015-06-17 16:20

Some options and binaries were removed from gawk package between RHEL 6 and RHEL 7. This informative content lists the incompatibilities.

Remediation instructions

Some options were removed from gawk package binaries between RHEL 6
and RHEL 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.

awk/gawk/pgawk: --compat - option was removed, alternative is
--traditional
--copyleft - option was removed, alternative is
--copyright/-C
--gen-po - option was replaced by --gen-pot option
--usage
-D - short form of --parsedebug was changed to -Y

Please check that your scripts are aware of these changes.

Result for Removed options in grep binaries

Result: informational

Rule ID: xccdf_preupg_rule_packages_RemovedOptions_grep_check

Time: 2015-06-17 16:20

Some commandline options are removed or deprecated in packages. Print list of changes.

Remediation instructions

Option "-K" was removed from grep, egrep and fgrep utilities on RHEL 7 system.
This option wasn't docummented before on RHEL 6.

Result for Removed options in netstat binary

Result: informational

Rule ID: xccdf_preupg_rule_packages_RemovedOptions_nettools_removedoptions

Time: 2015-06-17 16:20

Some options were removed from netstat binary between RHEL 6 and RHEL 7. This informative content lists the incompatibilities.

Remediation instructions

Some options were removed from netstat binary of net-tools package between
RHEL 6 and RHEL 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.

netstat : -T/--notrim renamed to -W/--wide

Please check that your scripts are aware of these changes.

Result for Removed options in quota tools

Result: informational

Rule ID: xccdf_preupg_rule_packages_RemovedOptions_quota_removedoptions

Time: 2015-06-17 16:20

Some options have been renamed at quota tools between Red Hat Enterprise 6 and 7. This informative content lists the incompatibilities.

Remediation instructions

Some options were renamed at quota tools between Red Hat Enterprise Linux
6 and 7. This may break functionality of some of your scripts. The changes
are:

/usr/bin/quota: Option --nfs-all was corrected to --all-nfs in the usage help
output. Both versions still recognize the --all-nfs option.

/usr/sbin/quota_nld: Option --no-daemon was renamed to --foreground. Short
option -F is unchanged. This is not an issue if you run quota_nld as daemon,
e.g. via init script.

/usr/sbin/repquota: Option --batch-translation was corrected to --cache in the
usage help output. Both versions still recognize the --cache option.

/usr/sbin/repquota: Option --no-batch-translation was corrected to --no-cache
in the usage help output. Both versions still recognize the --no-cache option.

Please check that your scripts are aware of these changes.

Result for Removed or deprecated options in util-linux (util-linux-ng) binaries

Result: informational

Rule ID: xccdf_preupg_rule_packages_RemovedOptions_util-linux_check

Time: 2015-06-17 16:20

Some commandline options are removed or deprecated in some packages. Print list of changes for util-linux.

Remediation instructions

Some options were removed or deprecated from util-linux-ng (on RHEL 7
is renamed back to util-linux) package binaries between RHEL 6 and RHEL 7.
This may break functionality of some of your scripts. All option removals
with solutions are listed bellow.

blkid:
-w - options is deprecated (undocumented on RHEL7)

fallocate:
--lenght - replaced by --length

findmnt
--fsroot - replaced by --nofsroot

losetup:
-s - short option removed, available only --show

mount:
-p, --pass-fd - options are deprecated (undcummented on RHEL7)

partx:
--gpt - undocumented and removed

readprofile:
-t - removed

sfdisk:
-? - replaced by -h

blkid,fsck,hexdump,hwclock,mkfs,mount,renice:
-v is deprecated and replaced by -V
(print version)

Result for Removed rpms

Result: needs_action

Rule ID: xccdf_preupg_rule_packages_RemovedPackages_RemovedPkg

Time: 2015-06-17 16:20

Some rpms were removed from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package removals from your set of Red Hat packages.

Remediation instructions

Some of the packages were removed between RHEL 6 and RHEL 7. This may break
the upgrade for some of your packages. We are not aware of any compatible
replacement for these packages.

Following packages are no longer available:
ConsoleKit-libs
MAKEDEV
atmel-firmware
b43-fwcutter
b43-openfwwf
busybox
cloog-ppl
dash
fakeroot
fakeroot-libs
hal-info
hal-libs
ipw2100-firmware
ipw2200-firmware
libertas-usb8388-firmware
libgssglue
libnih
pcmciautils
ppl
python-argparse
python-iwlib
system-config-network-tui
wireless-tools
zd1211-firmware

If some NonRH signed package requires these packages, you may need to ask your
vendor to provide alternative solution or get the missing package from
different sources than RHEL.

              
INPLACERISK: HIGH: After upgrading to RHEL 7 there are still some el6 packages left. Add --cleanup-post option to redhat-upgrade-tool if you want to remove them automatically.
INPLACERISK: MEDIUM: We detected some packages installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them.

            

Result for Replaced rpms

Result: fixed

Rule ID: xccdf_preupg_rule_packages_ReplacedPackages_ReplacedPkg

Time: 2015-06-17 16:20

Some rpms were replaced between RHEL 6 and RHEL 7. This content checks for the package replacements from your set of Red Hat packages and generates the list of RH packages/yum groups for RHEL 7 kickstart.

Remediation instructions

Some of the packages were replaced between RHEL 6 and RHEL 7. This means
package with different name provides 100% compatible functionality, so we
can replace them automatically in the package set.
For some of the replacements provides were not handled by the packages,
therefore preupgrade asistant migrates them after the upgrade if necessary.

Following packages were replaced:
Red_Hat_Enterprise_Linux-Release_Notes-6-en-US was replaced by Red_Hat_Enterprise_Linux-Release_Notes-7-en-US
bfa-firmware was replaced by linux-firmware
coreutils-libs was replaced by coreutils
cryptsetup-luks-libs was replaced by cryptsetup-libs
cryptsetup-luks was replaced by cryptsetup
db4-utils was replaced by libdb-utils
db4 was replaced by libdb
dracut-kernel was replaced by dracut
eject was replaced by util-linux
iptables-ipv6 was replaced by iptables-services
kernel-firmware was replaced by linux-firmware
libudev was replaced by systemd-libs
libusb1 was replaced by libusbx
man was replaced by man-db
module-init-tools (required by NonRH signed package(s):qa-tools ) was replaced by kmod
nfs-utils-lib was replaced by libnfsidmap
perl-Compress-Zlib was replaced by perl-IO-Compress
perl-IO-Compress-Base was replaced by perl-IO-Compress
perl-IO-Compress-Zlib was replaced by perl-IO-Compress
procps (required by NonRH signed package(s):qa-tools ) was replaced by procps-ng
ql2100-firmware was replaced by linux-firmware
ql2200-firmware was replaced by linux-firmware
ql23xx-firmware was replaced by linux-firmware
ql2400-firmware was replaced by linux-firmware
ql2500-firmware was replaced by linux-firmware
rt61pci-firmware was replaced by linux-firmware
rt73usb-firmware was replaced by linux-firmware
util-linux-ng was replaced by util-linux
xorg-x11-drv-ati-firmware was replaced by linux-firmware
yum-plugin-security was replaced by yum

If some NonRH signed package requires these packages, you still may want
to monitor them closely. Although the replacement should be compatible,
it can have some minor differences expectable even in the case of common
application lifecycle.

Result for GMP library incompatibilities

Result: informational

Rule ID: xccdf_preupg_rule_packages_gmp_check_script

Time: 2015-06-17 16:20

Incompatibilities between GMP 4 and GMP 5.1 libraries.

Remediation instructions

GMP 5.1 is compatible with GMP 4 in major features. Incompatible changes affect only functions, which should not be used by user applications at all:
- mpn_bdivmod function
- BSDMP-like interface libmp.so

Result for optional channel problems

Result: needs_action

Rule ID: xccdf_preupg_rule_packages_optional-channel_optional

Time: 2015-06-17 16:20

detects upgrade problems with RHEL optional channel

Remediation instructions

Either you have directly enabled some of the Red Hat Enterprise Linux 6
'optional' yum repositories on your system, or you have installed some packages
which have been moved from "base" to "optional" repository in Red Hat Enterprise
Linux 7. This will very likely cause fail during upgrade of your system.

Please, provide additional yum repository to redhat-upgrade-tool to make
packages residing in RHEL 7 optional channel updated. For this purpose, use
following additional option for redhat-upgrade-tool:

--addrepo rhel-7-optional=<path to the optional repository>

Optionally, you could remove all packages which reside in RHEL 7 optional
repository before you start the system upgrade.

              
DEBUG [unknown]: checking problems from Server
INPLACERISK: HIGH: Packages [xz-lzma-compat perl-YAML-Syck libreport-compat libproxy-bin libproxy-python apr-util-ldap libreport-plugin-logger PackageKit-yum-plugin system-config-firewall-tui groff aspell libreport-plugin-kerneloops] have been moved to Server Optional channel.

            

Result for package downgrades

Result: fixed

Rule ID: xccdf_preupg_rule_packages_pkgdowngrades_pkgdowngrades

Time: 2015-06-17 16:20

detects package downgrades from RHEL6 to RHEL7

Remediation instructions

Some packages installed on your system have broken upgrade path from Red Hat
Enterprise Linux version 6 to version 7 (the version of package is lower in
newer Enterprise Linux).

This does not cause fail of redhat-upgrade-tool run and it could
potentially left system in inconsistent state (mixed RHEL 6 and RHEL 7
packages installed). Pre-upgrade scripts makes best effort to force
redhat-upgrade-tool in-place upgrade process install packages with broken
upgrade path but you should be aware of that and know what is happening.

Optionally, if possible, you may remove packages in question from RHEL 6
system.

Result for SELinux Custom Policy

Result: fixed

Rule ID: xccdf_preupg_rule_selinux_CustomPolicy_check

Time: 2015-06-17 16:20

Solve problem with custom SE policy modules after migration

Remediation instructions

Custom SELinux policy modules couldn't be found by sesearch. This is fixed by removing selinux module sandbox.pp which is repalced by sandboxX.pp and is disabled by default on RHEL7 systems.

This solve some other issues between sandbox.pp and sandboxX.pp too. So module
is removed be default now by postcript: /root/preupgrade/postupgrade.d/fix_SELinuxCustomPolicy.sh

Result for General

Result: needs_action

Rule ID: xccdf_preupg_rule_selinux_general_check

Time: 2015-06-17 16:20

There has to be some steps performed in order to have working SELinux on RHEL 7.

Remediation instructions

We have detected that you are using SELinux. There were changes in policies which require to apply custom command before upgrade process. In order to have working SELinux on Red Hat Enterprise Linux 7, you HAVE TO run command prior to running redhat-upgrade-tool:
semodule -r sandbox

              
INPLACERISK: HIGH: There were changes in SELinux policies between RHEL 6 and RHEL 7. Please, check solution in order to resolve this issue.

            

Result for httpd configuration compatibility check

Result: informational

Rule ID: xccdf_preupg_rule_services_httpd_check_script

Time: 2015-06-17 16:20

Checks httpd configuration compatibility

File(s) affected:

  • /etc/httpd/conf/httpd.conf

Remediation instructions

* httpd.conf does not include conf.modules.d/*.conf. This directory will be
included automatically.

* httpd.conf loads modules which are loaded in conf.modules.d/*conf
in new httpd version. Following modules will be therefore removed from
httpd.conf:

modules\/mod_actions.so
modules\/mod_alias.so
modules\/mod_auth_basic.so
modules\/mod_auth_digest.so
modules\/mod_authn_anon.so
modules\/mod_authn_dbm.so
modules\/mod_authn_file.so
modules\/mod_authz_dbm.so
modules\/mod_authz_groupfile.so
modules\/mod_authz_host.so
modules\/mod_authz_owner.so
modules\/mod_authz_user.so
modules\/mod_autoindex.so
modules\/mod_cache.so
modules\/mod_deflate.so
modules\/mod_dir.so
modules\/mod_env.so
modules\/mod_expires.so
modules\/mod_ext_filter.so
modules\/mod_headers.so
modules\/mod_include.so
modules\/mod_info.so
modules\/mod_log_config.so
modules\/mod_logio.so
modules\/mod_mime_magic.so
modules\/mod_mime.so
modules\/mod_negotiation.so
modules\/mod_rewrite.so
modules\/mod_setenvif.so
modules\/mod_status.so
modules\/mod_substitute.so
modules\/mod_suexec.so
modules\/mod_userdir.so
modules\/mod_version.so
modules\/mod_vhost_alias.so
modules\/mod_dav.so
modules\/mod_dav_fs.so
modules\/mod_proxy.so
modules\/mod_proxy_ajp.so
modules\/mod_proxy_balancer.so
modules\/mod_proxy_connect.so
modules\/mod_proxy_ftp.so
modules\/mod_proxy_http.so
modules\/mod_disk_cache.so
modules\/mod_cgi.so
modules\/mod_ldap.so
modules\/mod_authnz_ldap.so
modules\/mod_speling.so
modules\/mod_usertrack.so

* httpd.conf loads default modules which have been removed in new version
of httpd. Following modules will be therefore removed from httpd.conf:

modules\/mod_authn_alias.so
modules\/mod_authn_default.so
modules\/mod_authz_default.so

* httpd config files contain deprecated Access control directives Order, Allow,
Deny, and Satisfy. The old access control idioms should be replaced
by the new authentication mechanisms, although for compatibility with old
configurations, the new module mod_access_compat is provided and loaded by
default.

Read more on http://httpd.apache.org/docs/2.4/upgrading.html to find out solutions for these problems.

This section of solution text shows the difference between this system
configuration of httpd and the default httpd 2.2 configuration:

--- httpd.conf 2015-05-13 10:13:21.000000000 -0400
+++ /etc/httpd//conf/httpd.conf 2015-03-03 12:01:17.000000000 -0500
@@ -630,7 +630,7 @@
AddIcon /icons/uuencoded.gif .uu
AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
AddIcon /icons/tex.gif .tex
-AddIcon /icons/bomb.gif core
+AddIcon /icons/bomb.gif /core

AddIcon /icons/back.gif ..
AddIcon /icons/hand.right.gif README

              
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_alias_module modules/mod_authn_alias.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule include_module modules/mod_include.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule logio_module modules/mod_logio.so
LoadModule env_module modules/mod_env.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule expires_module modules/mod_expires.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule headers_module modules/mod_headers.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule mime_module modules/mod_mime.so
LoadModule dav_module modules/mod_dav.so
LoadModule status_module modules/mod_status.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule info_module modules/mod_info.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule dir_module modules/mod_dir.so
LoadModule actions_module modules/mod_actions.so
LoadModule speling_module modules/mod_speling.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule alias_module modules/mod_alias.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule cache_module modules/mod_cache.so
LoadModule suexec_module modules/mod_suexec.so
LoadModule disk_cache_module modules/mod_disk_cache.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule version_module modules/mod_version.so
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cache_module modules/mod_cache.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
LoadModule expires_module modules/mod_expires.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule headers_module modules/mod_headers.so
LoadModule include_module modules/mod_include.so
LoadModule info_module modules/mod_info.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule logio_module modules/mod_logio.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule mime_module modules/mod_mime.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule status_module modules/mod_status.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule suexec_module modules/mod_suexec.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule version_module modules/mod_version.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule dav_module modules/mod_dav.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule disk_cache_module modules/mod_disk_cache.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule speling_module modules/mod_speling.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule authn_alias_module modules/mod_authn_alias.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule speling_module modules/mod_speling.so
LoadModule usertrack_module modules/mod_usertrack.so
/etc/httpd//conf/httpd.conf:    Order allow,deny
/etc/httpd//conf/httpd.conf:#        Order allow,deny
/etc/httpd//conf/httpd.conf:#        Order deny,allow
/etc/httpd//conf/httpd.conf:    Order allow,deny
/etc/httpd//conf/httpd.conf:    Order allow,deny
/etc/httpd//conf/httpd.conf:    Order allow,deny
/etc/httpd//conf/httpd.conf:        Order allow,deny
/etc/httpd//conf/httpd.conf:#    Order deny,allow
/etc/httpd//conf/httpd.conf:#    Order deny,allow
/etc/httpd//conf/httpd.conf:#    Order deny,allow
/etc/httpd//conf.d/99-preup-httpd.conf:            Order allow,deny

            

Result for NTP configuration

Result: pass

Rule ID: xccdf_preupg_rule_services_ntp_configuration_ntp

Time: 2015-06-17 16:20

Save ntp and ntpdate configuration files which are not tracked by rpm.

File(s) affected:

  • /etc/ntp.conf

  • /etc/ntp/step-tickers

Result for Information on time-sync.target

Result: pass

Rule ID: xccdf_preupg_rule_services_ntp_timesync_timesync

Time: 2015-06-17 16:20

Check if ntpdate service is enabled and print information on starting services with clock set

Result for OpenSSH sshd_config migration content

Result: pass

Rule ID: xccdf_preupg_rule_services_openssh_sshd_openssh-sshd

Time: 2015-06-17 16:20

This content has a aim to convert /etc/ssh/sshd_config file from openssh-server package

File(s) affected:

  • /etc/ssh/sshd_config

Result for OpenSSH sysconfig migration content

Result: fixed

Rule ID: xccdf_preupg_rule_services_openssh_sysconfig_openssh-sysconfig

Time: 2015-06-17 16:20

This content has a aim to convert /etc/sysconfig/sshd file from openssh-server package

File(s) affected:

  • /etc/sysconfig/sshd

Remediation instructions

/etc/sysconfig/sshd will not be a shell script in RHEL 7 anymore so all 'export VARIABLE=VALUE' has to be changed to 'VARIABLE=VALUE'.

# sed -i 's/^export //' /etc/sysconfig/sshd

There is the /root/preupgrade/cleanconf//etc/sysconfig/sshd with the fixed configuration.

Result for Configuration for quota_nld service

Result: pass

Rule ID: xccdf_preupg_rule_services_quota_nld_configuration_checkscript

Time: 2015-06-17 16:20

Back configuration for quota_nld service up

File(s) affected:

  • /etc/sysconfig/quota_nld

Result for Disk quota netlink message daemon moved into quota-nld package

Result: pass

Rule ID: xccdf_preupg_rule_services_quota_nld_new_package_checkscript

Time: 2015-06-17 16:20

Install quota-nld package if the quota_nld service is enabled

Result for Check rsync

Result: pass

Rule ID: xccdf_preupg_rule_services_rsync_check

Time: 2015-06-17 16:20

There is now problem with rsync socket activation on RHEL-7.

Result for Detect LUKS devices using Whirlpool for password hash.

Result: pass

Rule ID: xccdf_preupg_rule_storage_cryptsetup-luks_detect-whirlpool-hash

Time: 2015-06-17 16:20

'Whirlpool hash implementation in libgcrypt of version <= 1.5.3 is broken. This content checks current system for presence of LUKS devices possibly using the bogus hash. In target system libgcrypt library is patched to use correct implementation so after reboot the freshly updated system may remain with LUKS devices imposibble to unlock.'

File(s) affected:

  • /etc/crypttab

Result for Luks encrypted partition

Result: pass

Rule ID: xccdf_preupg_rule_storage_luks_check

Time: 2015-06-17 16:20

Checks whether partition is crypted by CRYPTO-LUKS.

Result for State of LVM2 services.

Result: fixed

Rule ID: xccdf_preupg_rule_storage_lvm2-services_check_lvm2_services

Time: 2015-06-17 16:20

Some services are important for proper LVM functionality. This content checks for current state of existing services and makes sure the state is preserved over upgrade. Also, some systemd units should be enabled by default to allow for service's on-demand activation if needed.

Remediation instructions

RHEL7 uses systemd for service management. When upgrading from RHEL6,
we need to be sure that certain services (systemd units) are enabled
or prepared for on-demand activation.

The LVM2 monitoring service inherits the old state, which means that if
the 'lvm2-monitor' service was enabled in RHEL6, it will also be enabled
in RHEL7 (lvm2-monitor.service) and vice versa.

In addition to that these systemd units are enabled to allow for on-demand
service activation:
dm-event.socket
lvm2-lvmetad.socket

The dm-event.socket is used for on-demand activation of dm-event.service.
This is an essential part of device-mapper monitoring feature (which also
covers monitoring of LVM devices).

The lvm2-lvmetad.socket is used for on-demand activation of lvm2-lvmetad.service
which starts the lvmetad - LVM metadata daemon that is used to cache LVM
metadata so LVM commands don't need to scan devices all the time and they
can reuse cached metadata. This functionality is used by default in RHEL7.

Result for Configuration for warnquota tool

Result: pass

Rule ID: xccdf_preupg_rule_storage_warnquota_configuration_checkscript

Time: 2015-06-17 16:20

Back configuration for warnquota tool up

File(s) affected:

  • /etc/quotagrpadmins

  • /etc/quotatab

  • /etc/warnquota.conf

Result for Disk quota tool warnquota moved into quota-warnquota package

Result: informational

Rule ID: xccdf_preupg_rule_storage_warnquota_new_package_checkscript

Time: 2015-06-17 16:20

Install quota-warnquota if need warnquota tool

Remediation instructions

Quota tool warnquota(8) has been moved from "quota" package into
"quota-warnquota" package.

If you used warnquota on the old system, please install quota-warnquota
package with this command on the new system:

# yum --assumeyes install quota-warnquota

Please do not forget to check warnquota configutation files
(/etc/quotagrpadmins, /etc/quotatab, and /etc/warnquota.conf) before using
the tool.

Please do not forget to install a cron job to execute the warnquota tool
periodically, if you used it on the the old system.

Result for Check for Add-On availability

Result: pass

Rule ID: xccdf_preupg_rule_system_AddOns_addons

Time: 2015-06-17 16:20

Content checks availability of High Availability, ResilientStorage and LoadBalancer Add-Ons.

Result for Architecture Support

Result: pass

Rule ID: xccdf_preupg_rule_system_Architecture_architecture

Time: 2015-06-17 16:20

Red Hat Enterprise Linux 7 does not support installations on 32-bit architectures, and performing an in-place upgrade is not possible on 32-bit systems.

Result for Binary rebuilds

Result: needs_inspection

Rule ID: xccdf_preupg_rule_system_BinariesRebuild_check

Time: 2015-06-17 16:21

Check all binaries installed on the assessment system which needs to be rebuilded on the target system

Remediation instructions

This content generates the list of binaries which needs to be rebuilt

You can find the list at:
kickstart/binaries

              
INPLACERISK: SLIGHT: Some scripts untracked by RPM were discovered on the system and may not work properly after upgrade.

            

Result for Debuginfo packages

Result: pass

Rule ID: xccdf_preupg_rule_system_Debuginfo_debuginfo

Time: 2015-06-17 16:21

This content checks for debuginfo packages and inform about potential risks for in-place upgrade.

Result for Read Only FHS directories

Result: informational

Rule ID: xccdf_preupg_rule_system_FHS_ReadOnlyFHS_check_script

Time: 2015-06-17 16:21

Check that critical directories of Filesystem Hierarchy Standard are not mounted read-only.

Remediation instructions

Read-only paths in Filesystem Hierarchy Standard might cause in-place-upgrade to fail.

              
INPLACERISK: MEDIUM: Mount point /mnt/redhat is mounted read-only.
INPLACERISK: MEDIUM: Mount point /mnt/qa is mounted read-only.
INFO filesystem: Checking if /etc/mtab contains paths: ('/usr', '/var', '/var/run', '/var/lock')

            

Result for Check FHS for /var incompabilities.

Result: informational

Rule ID: xccdf_preupg_rule_system_FHS_Run_check

Time: 2015-06-17 16:21

Since RHEL 7 are some changes in FHS, which could be in conflicts with old system (e.g. movement /var/run -> /run).

Remediation instructions

Since RHEL 7 exists '/run' directory where tmpfs is mounted for runtime data.
Original '/var/run' is symlink to this directory and likewise '/var/lock' points
to the '/run/lock/' now. '/run' directory is emptied on reboot, so all runtime
files must be created on boot again. See RHEL 7 Migration Planning Guidelines.

Result for In-place Upgrade Requirements for the /usr/ Directory

Result: pass

Rule ID: xccdf_preupg_rule_system_FHS_UsrPartition_usr

Time: 2015-06-17 16:21

This module determines if the /usr/ directory is located on a separate partition.

Result for Cluster and High Availability

Result: pass

Rule ID: xccdf_preupg_rule_system_HA-Cluster_ha-cluster_hacluster

Time: 2015-06-17 16:21

Content checks Cluster and High Availability solutions for upgrade.

Result for File Systems, Partitions and Mounts Configuration Review

Result: informational

Rule ID: xccdf_preupg_rule_system_PartitionMounts_partmounts

Time: 2015-06-17 16:21

This module describes the new default file system and stores the partitions and mounts configuration.

Remediation instructions

Red Hat Enterprise Linux 7 now uses the XFS file system as the default file system instead of the ext4 file system. If you intend to migrate the system to another machine or create a new file system, you can consider using XFS instead of ext4. Users who use a Kickstart installation can consider modifying the Kickstart configuration to use XFS.

Additionally, information about the partitions and mounts configuration has been saved in the /root/preupgrade/kickstart/ directory. This information can be useful to users who choose to perform a system migration or convert their file systems to XFS.

Result for Removable media in fstab

Result: informational

Rule ID: xccdf_preupg_rule_system_RemovableMedia_check_script

Time: 2015-06-17 16:21

Warn about removable media preventing boot

Remediation instructions

If there are any removable media listed in /etc/fstab, it is necessary to add "nofail" flag to each one of them. Red Hat Enterprise Linux 7 will fail to boot if the medium is not present and "nofail" is not specified. It is not possible to check this automatically with 100% confidence. Please check your /etc/fstab.

Result for Sonamebumped libs

Result: informational

Rule ID: xccdf_preupg_rule_system_SonameBump_SonameBump

Time: 2015-06-17 16:21

If the dynamic library breaks the API/ABI compatibility, it is supposed to change its soname. This content checks for the soname bumps between RHEL 6 and RHEL 7 in your Red Hat packages.

Remediation instructions

Application developed in C may use dynamic libraries (.so files) to reuse the
common functions/symbols in the binary. If the library bumped its soname (
changed major version, API/ABI incompatibility), application that depends on
it may not run.
Some of the libraries changed the soname version between Red Hat Enterprise
Linux 6 and Red Hat Enterprise Linux 7.

From your RHEL 6 packages, following libraries changed soname:

libanonymous.so.2 from cyrus-sasl-lib changed to libanonymous.so.3
libarchive.so.2 from libarchive changed to libarchive.so.13
libbind9.so.80 from bind-libs changed to libbind9.so.90
libcryptsetup.so.1 from cryptsetup-luks-libs changed to libcryptsetup.so.4
libdns.so.81 from bind-libs changed to libdns.so.100
libdrm_nouveau.so.1 from libdrm changed to libdrm_nouveau.so.2
libffi.so.5 from libffi changed to libffi.so.6
libgdbm.so.2 from gdbm changed to libgdbm.so.4
libgmp.so.3 from gmp changed to libgmp.so.10
libgnutls.so.26 from gnutls changed to libgnutls.so.28
libgnutlsxx.so.26 from gnutls changed to libgnutlsxx.so.28
libisc.so.83 from bind-libs changed to libisc.so.95
libisccc.so.80 from bind-libs changed to libisccc.so.90
libisccfg.so.82 from bind-libs changed to libisccfg.so.90
libkdb5.so.6 from krb5-libs changed to libkdb5.so.7
liblogin.so.2 from cyrus-sasl-plain changed to liblogin.so.3
liblwres.so.80 from bind-libs changed to liblwres.so.90
libmpfr.so.1 from mpfr changed to libmpfr.so.4
libmysqlclient.so.16 from mysql-libs changed to libmysqlclient.so.18
libpackagekit-glib2.so.12 from PackageKit-glib changed to libpackagekit-glib2.so.16
libpcre.so.0 from pcre changed to libpcre.so.1
libplain.so.2 from cyrus-sasl-plain changed to libplain.so.3
libproxy.so.0 from libproxy changed to libproxy.so.1
librpm.so.1 from rpm-libs changed to librpm.so.3
librpmbuild.so.1 from rpm-libs changed to librpmbuild.so.3
librpmio.so.1 from rpm-libs changed to librpmio.so.3
libsasl2.so.2 from cyrus-sasl-lib changed to libsasl2.so.3
libsasldb.so.2 from cyrus-sasl-lib changed to libsasldb.so.3
libtasn1.so.3 from libtasn1 changed to libtasn1.so.6
libtiff.so.3 from libtiff changed to libtiff.so.5
libtiffxx.so.3 from libtiff changed to libtiffxx.so.5
libudev.so.0 from libudev changed to libudev.so.1
libverto.so.0 from krb5-libs changed to libverto.so.1
libxtables.so.4 from iptables changed to libxtables.so.10

We checked the requirements in Non-RH signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you will
need to rebuild such package/application against new library.
Red Hat Enterprise Linux applications available on the RHEL 7 will handle
these bumps automatically by the update/migration to new Red Hat Enterprise
Linux as they were already built against these libraries.

              
INPLACERISK: MEDIUM:  We detected some soname bumps in the libraries installed on the system. This may break the functionality of some of your 3rd party applications. They may need rebuild. Please check their requirements.

            

Result for SonameKept Reusable Dynamic Libraries

Result: informational

Rule ID: xccdf_preupg_rule_system_SonameKept_SonameKept

Time: 2015-06-17 16:21

This module provides an overview of the dynamic libraries from Red Hat Enterprise Linux 6 that can be reused in Red Hat Enterprise Linux 7, as the dynamic libraries remain compatible with both the application programming interface (API) and the application binary interface (ABI).

Remediation instructions

Applications developed in the C programming language can use dynamic libraries (.so files) to reuse common functions and symbols in the binary. When the library changes its soname in a major version, the binaries normally need to be rebuilt for the new system. Some libraries have not changed their soname between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 so it could be possible to reuse third party applications which use only these libraries without rebuilding.

You can find the list of the unchanged dynamic libraries and their package names in the following file: ./kickstart/NoSonameBumpLibs

If it is not clear what libraries the third party binary or RPM uses, it is possible to use the ldd utility for the C binary, or run the "rpm -q --whatrequires SONAME" command for the whole RPM package. No problems are expected to occur if there are only .so files listed in the NoSonameBumpLibs file and unversioned shared libraries.

Result for Removed .so libs

Result: needs_action

Rule ID: xccdf_preupg_rule_system_SonameRemoval_SonameRemoval

Time: 2015-06-17 16:22

Dynamic libraries are used provides symbols/functions to binaries. Some of the libraries were removed between RHEL 6 and RHEL 7. This content checks for the .so libraries removal between RHEL 6 and RHEL 7 in your Red Hat packages.

Remediation instructions

Application developed in C may use dynamic libraries (.so files) to reuse the
common functions/symbols in the binary. If the library is missing, application
will not run. Some of the libraries were removed between RHEL 6 and RHEL 7.
From your Red Hat Enterprise Linux 6 packages, following libraries disappeared:

libck-connector.so.0 from ConsoleKit-libs
libnih-dbus.so.1 from libnih
libnih.so.1 from libnih
libabrt_web.so.0 from libreport
libbtparser.so.2 from btparser
libck-connector.so.0 from ConsoleKit-libs
libcloog.so.0 from cloog-ppl
libcupsdriver.so.1 from cups-libs
libdrm_nouveau2.so.2 from libdrm
libeggdbus-1.so.0 from eggdbus
libevent-1.4.so.2 from libevent
libevent_core-1.4.so.2 from libevent
libevent_extra-1.4.so.2 from libevent
libgnutls-extra.so.26 from gnutls
libgpgme-pth.so.11 from gpgme
libgssglue.so.1 from libgssglue
libhal-storage.so.1 from hal-libs
libhal.so.1 from hal-libs
libhunspell-1.2.so.0 from hunspell
libiw.so.29 from wireless-tools
libldif-2.4.so.2 from openldap
libmp.so.3 from gmp
libmysqlclient_r.so.16 from mysql-libs
libnih-dbus.so.1 from libnih
libnih.so.1 from libnih
libpackagekit-glib.so.12 from PackageKit-glib
libpangox-1.0.so.0 from pango
libparted-2.1.so.0 from parted
libpolkit-backend-1.so.0 from polkit
libppl.so.7 from ppl
libppl_c.so.2 from ppl
libpython2.6.so.1.0 from python-libs
librpcsecgss.so.3 from nfs-utils-lib
libusbpp-0.1.so.4 from libusb
libverto-k5ev.so.0 from krb5-libs
_speedups.so from python-jinja2 (required by NonRH signed package(s):beaker-client )
pam_ck_connector.so from ConsoleKit-libs
ANSI_X3.110.so from glibc
ARMSCII-8.so from glibc
ASMO_449.so from glibc
B.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
BIG5.so from glibc
BIG5HKSCS.so from glibc
BRF.so from glibc
Base64.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Byte.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
CN.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
CP10007.so from glibc
CP1125.so from glibc
CP1250.so from glibc
CP1251.so from glibc
CP1252.so from glibc
CP1253.so from glibc
CP1254.so from glibc
CP1255.so from glibc
CP1256.so from glibc
CP1257.so from glibc
CP1258.so from glibc
CP737.so from glibc
CP775.so from glibc
CP932.so from glibc
CSN_369103.so from glibc
CWI.so from glibc
Call.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Cwd.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
DB_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
DEC-MCS.so from glibc
DProf.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Dumper.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
EBCDIC-AT-DE-A.so from glibc
EBCDIC-AT-DE.so from glibc
EBCDIC-CA-FR.so from glibc
EBCDIC-DK-NO-A.so from glibc
EBCDIC-DK-NO.so from glibc
EBCDIC-ES-A.so from glibc
EBCDIC-ES-S.so from glibc
EBCDIC-ES.so from glibc
EBCDIC-FI-SE-A.so from glibc
EBCDIC-FI-SE.so from glibc
EBCDIC-FR.so from glibc
EBCDIC-IS-FRISS.so from glibc
EBCDIC-IT.so from glibc
EBCDIC-PT.so from glibc
EBCDIC-UK.so from glibc
EBCDIC-US.so from glibc
EBCDIC.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
ECMA-CYRILLIC.so from glibc
EUC-CN.so from glibc
EUC-JISX0213.so from glibc
EUC-JP-MS.so from glibc
EUC-JP.so from glibc
EUC-KR.so from glibc
EUC-TW.so from glibc
Encode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Expat.so from perl-XML-Parser (required by NonRH signed package(s):tps-devel )
FastCalc.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Fcntl.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
FieldHash.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
GB18030.so from glibc
GBBIG5.so from glibc
GBGBK.so from glibc
GBK.so from glibc
GDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
GEORGIAN-ACADEMY.so from glibc
GEORGIAN-PS.so from glibc
GOST_19768-74.so from glibc
GREEK-CCITT.so from glibc
GREEK7-OLD.so from glibc
GREEK7.so from glibc
Glob.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
HP-GREEK8.so from glibc
HP-ROMAN8.so from glibc
HP-ROMAN9.so from glibc
HP-THAI8.so from glibc
HP-TURKISH8.so from glibc
Hostname.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
IBM037.so from glibc
IBM038.so from glibc
IBM1004.so from glibc
IBM1008.so from glibc
IBM1008_420.so from glibc
IBM1025.so from glibc
IBM1026.so from glibc
IBM1046.so from glibc
IBM1047.so from glibc
IBM1097.so from glibc
IBM1112.so from glibc
IBM1122.so from glibc
IBM1123.so from glibc
IBM1124.so from glibc
IBM1129.so from glibc
IBM1130.so from glibc
IBM1132.so from glibc
IBM1133.so from glibc
IBM1137.so from glibc
IBM1140.so from glibc
IBM1141.so from glibc
IBM1142.so from glibc
IBM1143.so from glibc
IBM1144.so from glibc
IBM1145.so from glibc
IBM1146.so from glibc
IBM1147.so from glibc
IBM1148.so from glibc
IBM1149.so from glibc
IBM1153.so from glibc
IBM1154.so from glibc
IBM1155.so from glibc
IBM1156.so from glibc
IBM1157.so from glibc
IBM1158.so from glibc
IBM1160.so from glibc
IBM1161.so from glibc
IBM1162.so from glibc
IBM1163.so from glibc
IBM1164.so from glibc
IBM1166.so from glibc
IBM1167.so from glibc
IBM12712.so from glibc
IBM1364.so from glibc
IBM1371.so from glibc
IBM1388.so from glibc
IBM1390.so from glibc
IBM1399.so from glibc
IBM16804.so from glibc
IBM256.so from glibc
IBM273.so from glibc
IBM274.so from glibc
IBM275.so from glibc
IBM277.so from glibc
IBM278.so from glibc
IBM280.so from glibc
IBM281.so from glibc
IBM284.so from glibc
IBM285.so from glibc
IBM290.so from glibc
IBM297.so from glibc
IBM420.so from glibc
IBM423.so from glibc
IBM424.so from glibc
IBM437.so from glibc
IBM4517.so from glibc
IBM4899.so from glibc
IBM4909.so from glibc
IBM4971.so from glibc
IBM500.so from glibc
IBM5347.so from glibc
IBM803.so from glibc
IBM850.so from glibc
IBM851.so from glibc
IBM852.so from glibc
IBM855.so from glibc
IBM856.so from glibc
IBM857.so from glibc
IBM860.so from glibc
IBM861.so from glibc
IBM862.so from glibc
IBM863.so from glibc
IBM864.so from glibc
IBM865.so from glibc
IBM866.so from glibc
IBM866NAV.so from glibc
IBM868.so from glibc
IBM869.so from glibc
IBM870.so from glibc
IBM871.so from glibc
IBM874.so from glibc
IBM875.so from glibc
IBM880.so from glibc
IBM891.so from glibc
IBM901.so from glibc
IBM902.so from glibc
IBM903.so from glibc
IBM9030.so from glibc
IBM904.so from glibc
IBM905.so from glibc
IBM9066.so from glibc
IBM918.so from glibc
IBM921.so from glibc
IBM922.so from glibc
IBM930.so from glibc
IBM932.so from glibc
IBM933.so from glibc
IBM935.so from glibc
IBM937.so from glibc
IBM939.so from glibc
IBM943.so from glibc
IBM9448.so from glibc
IEC_P27-1.so from glibc
INIS-8.so from glibc
INIS-CYRILLIC.so from glibc
INIS.so from glibc
IO.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
ISIRI-3342.so from glibc
ISO-2022-CN-EXT.so from glibc
ISO-2022-CN.so from glibc
ISO-2022-JP-3.so from glibc
ISO-2022-JP.so from glibc
ISO-2022-KR.so from glibc
ISO-IR-197.so from glibc
ISO-IR-209.so from glibc
ISO646.so from glibc
ISO8859-1.so from glibc
ISO8859-10.so from glibc
ISO8859-11.so from glibc
ISO8859-13.so from glibc
ISO8859-14.so from glibc
ISO8859-15.so from glibc
ISO8859-16.so from glibc
ISO8859-2.so from glibc
ISO8859-3.so from glibc
ISO8859-4.so from glibc
ISO8859-5.so from glibc
ISO8859-6.so from glibc
ISO8859-7.so from glibc
ISO8859-8.so from glibc
ISO8859-9.so from glibc
ISO8859-9E.so from glibc
ISO_10367-BOX.so from glibc
ISO_11548-1.so from glibc
ISO_2033.so from glibc
ISO_5427-EXT.so from glibc
ISO_5427.so from glibc
ISO_5428.so from glibc
ISO_6937-2.so from glibc
ISO_6937.so from glibc
JOHAB.so from glibc
JP.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
KOI-8.so from glibc
KOI8-R.so from glibc
KOI8-RU.so from glibc
KOI8-T.so from glibc
KOI8-U.so from glibc
KR.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
LATIN-GREEK-1.so from glibc
LATIN-GREEK.so from glibc
Langinfo.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
MAC-CENTRALEUROPE.so from glibc
MAC-IS.so from glibc
MAC-SAMI.so from glibc
MAC-UK.so from glibc
MACINTOSH.so from glibc
MD5.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
MIK.so from glibc
NATS-DANO.so from glibc
NATS-SEFI.so from glibc
NDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Normalize.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Opcode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
POSIX.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
PPPort.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
PT154.so from glibc
Peek.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
RK1048.so from glibc
SAMI-WS2.so from glibc
SDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
SHIFT_JISX0213.so from glibc
SJIS.so from glibc
SSL.so from pyOpenSSL
Socket.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Soundex.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Storable.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Symbol.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
SysV.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Syslog.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
T.61.so from glibc
TCVN5712-1.so from glibc
TIS-620.so from glibc
TSCII.so from glibc
TW.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
UHC.so from glibc
UNICODE.so from glibc
UTF-16.so from glibc
UTF-32.so from glibc
UTF-7.so from glibc
Unicode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Util.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
VISCII.so from glibc
Zlib.so from perl-Compress-Raw-Zlib
__m2crypto.so from m2crypto
_bisectmodule.so from python-libs
_bsddb.so from python-libs
_bytesio.so from python-libs
_certificate.so from python-rhsm (required by NonRH signed package(s):redhat-upgrade-tool )
_codecs_cn.so from python-libs
_codecs_hk.so from python-libs
_codecs_iso2022.so from python-libs
_codecs_jp.so from python-libs
_codecs_kr.so from python-libs
_codecs_tw.so from python-libs
_collectionsmodule.so from python-libs
_cryptmodule.so from python-libs
_csv.so from python-libs
_ctypes.so from python-libs
_curses.so from python-libs
_curses_panel.so from python-libs
_dbus_bindings.so from dbus-python
_dbus_glib_bindings.so from dbus-python
_elementtree.so from python-libs
_fileio.so from python-libs
_functoolsmodule.so from python-libs
_gio.so from pygobject2
_glib.so from pygobject2
_gobject.so from pygobject2
_gpgme.so from pygpgme
_hashlib.so from python-libs
_heapq.so from python-libs
_hotshot.so from python-libs
_json.so from python-libs
_localemodule.so from python-libs
_lsprof.so from python-libs
_multibytecodecmodule.so from python-libs
_multiprocessing.so from python-libs
_pyabrt.so from abrt-python
_pyreport.so from libreport-python
_randommodule.so from python-libs
_reportclient.so from libreport-python
_rpmbmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant-contents preupgrade-assistant )
_rpmmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant-contents preupgrade-assistant )
_snackmodule.so from newt-python
_socketmodule.so from python-libs
_sqlite3.so from python-libs
_sqlitecache.so from yum-metadata-parser
_ssl.so from python-libs
_struct.so from python-libs
_weakref.so from python-libs
acutilmodule.so from authconfig
apr_ldap-1.so from apr-util-ldap
arraymodule.so from python-libs
attrs.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
audioop.so from python-libs
binascii.so from python-libs
bz2.so from python-libs
cPickle.so from python-libs
cStringIO.so from python-libs
cmathmodule.so from python-libs
config_direct.so from libproxy
config_envvar.so from libproxy
config_file.so from libproxy
config_wpad.so from libproxy
context-filter.so from aspell (required by NonRH signed package(s):qa-tools )
crypto.so from pyOpenSSL
datetime.so from python-libs
dbm.so from python-libs
details.so from plymouth
dlmodule.so from python-libs
dmidecodemod.so from python-dmidecode
drm.so from plymouth
email-filter.so from aspell (required by NonRH signed package(s):qa-tools )
encoding.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
ethtool.so from python-ethtool
etree.so from python-lxml (required by NonRH signed package(s):beaker-client )
fcntlmodule.so from python-libs
frame-buffer.so from plymouth
future_builtins.so from python-libs
gdbmmodule.so from python-libs
grpmodule.so from python-libs
gudev.so from python-gudev
ignore_domain.so from libproxy
ignore_ip.so from libproxy
imageop.so from python-libs
imfile.so from rsyslog
imklog.so from rsyslog
immark.so from rsyslog
impstats.so from rsyslog
imptcp.so from rsyslog
imtcp.so from rsyslog
imudp.so from rsyslog
imuxsock.so from rsyslog
itertoolsmodule.so from python-libs
iwlib.so from python-iwlib
krbVmodule.so from python-krbV (required by NonRH signed package(s):beaker-redhat beaker-client )
libbfd-2.20.51.0.2-5.43.el6.so from binutils
libcapi.so from openssl
libebl_aarch64-0.161.so from elfutils-libs
libebl_alpha-0.161.so from elfutils-libs
libebl_arm-0.161.so from elfutils-libs
libebl_i386-0.161.so from elfutils-libs
libebl_ia64-0.161.so from elfutils-libs
libebl_ppc-0.161.so from elfutils-libs
libebl_ppc64-0.161.so from elfutils-libs
libebl_s390-0.161.so from elfutils-libs
libebl_sh-0.161.so from elfutils-libs
libebl_sparc-0.161.so from elfutils-libs
libebl_tilegx-0.161.so from elfutils-libs
libebl_x86_64-0.161.so from elfutils-libs
libexpect5.44.1.15.so from expect
libfakeroot-0.so from fakeroot-libs
libip6t_SET.so from iptables-ipv6
libip6t_set.so from iptables-ipv6
libipt_SET.so from iptables
libipt_addrtype.so from iptables
libipt_ecn.so from iptables
libipt_set.so from iptables
libnullbackend.so from polkit
libopcodes-2.20.51.0.2-5.43.el6.so from binutils
libpackagekit-action-lookup.so from PackageKit
libpadlock.so from openssl
libpkexec-action-lookup.so from polkit
libproc-3.2.8.so from procps (required by NonRH signed package(s):qa-tools )
libstdbuf.so from coreutils-libs
linuxaudiodev.so from python-libs
lmnet.so from rsyslog
lmnetstrms.so from rsyslog
lmnsd_ptcp.so from rsyslog
lmregexp.so from rsyslog
lmstrmsrv.so from rsyslog
lmtcpclt.so from rsyslog
lmtcpsrv.so from rsyslog
lmzlibw.so from rsyslog
m_xt.so from iproute
mathmodule.so from python-libs
mmapmodule.so from python-libs
mod_actions.so from httpd
mod_alias.so from httpd
mod_asis.so from httpd
mod_auth_basic.so from httpd
mod_auth_digest.so from httpd
mod_authn_alias.so from httpd
mod_authn_anon.so from httpd
mod_authn_dbd.so from httpd
mod_authn_dbm.so from httpd
mod_authn_default.so from httpd
mod_authn_file.so from httpd
mod_authnz_ldap.so from httpd
mod_authz_dbm.so from httpd
mod_authz_default.so from httpd
mod_authz_groupfile.so from httpd
mod_authz_host.so from httpd
mod_authz_owner.so from httpd
mod_authz_user.so from httpd
mod_autoindex.so from httpd
mod_cache.so from httpd
mod_cern_meta.so from httpd
mod_cgi.so from httpd
mod_cgid.so from httpd
mod_dav.so from httpd
mod_dav_fs.so from httpd
mod_dbd.so from httpd
mod_deflate.so from httpd
mod_dir.so from httpd
mod_disk_cache.so from httpd
mod_dumpio.so from httpd
mod_env.so from httpd
mod_expires.so from httpd
mod_ext_filter.so from httpd
mod_filter.so from httpd
mod_headers.so from httpd
mod_ident.so from httpd
mod_include.so from httpd
mod_info.so from httpd
mod_ldap.so from httpd
mod_log_config.so from httpd
mod_log_forensic.so from httpd
mod_logio.so from httpd
mod_mime.so from httpd
mod_mime_magic.so from httpd
mod_negotiation.so from httpd
mod_proxy.so from httpd
mod_proxy_ajp.so from httpd
mod_proxy_balancer.so from httpd
mod_proxy_connect.so from httpd
mod_proxy_ftp.so from httpd
mod_proxy_http.so from httpd
mod_proxy_scgi.so from httpd
mod_reqtimeout.so from httpd
mod_rewrite.so from httpd
mod_setenvif.so from httpd
mod_speling.so from httpd
mod_status.so from httpd
mod_substitute.so from httpd
mod_suexec.so from httpd
mod_unique_id.so from httpd
mod_userdir.so from httpd
mod_usertrack.so from httpd
mod_version.so from httpd
mod_vhost_alias.so from httpd
mod_wsgi.so from mod_wsgi (required by NonRH signed package(s):preupgrade-assistant-ui )
mro.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
network_networkmanager.so from libproxy
nismodule.so from python-libs
nroff-filter.so from aspell (required by NonRH signed package(s):qa-tools )
nsswitch.so from nfs-utils-lib
objectify.so from python-lxml (required by NonRH signed package(s):beaker-client )
ommail.so from rsyslog
omprog.so from rsyslog
omruleset.so from rsyslog
omtesting.so from rsyslog
omuxsock.so from rsyslog
operator.so from python-libs
ossaudiodev.so from python-libs
p11-kit-trust.so from p11-kit-trust
pam_access.so from pam
pam_cap.so from libcap
pam_chroot.so from pam
pam_ck_connector.so from ConsoleKit-libs
pam_console.so from pam
pam_cracklib.so from pam
pam_debug.so from pam
pam_deny.so from pam
pam_echo.so from pam
pam_env.so from pam
pam_exec.so from pam
pam_faildelay.so from pam
pam_faillock.so from pam
pam_filter.so from pam
pam_fprintd.so from fprintd-pam
pam_ftp.so from pam
pam_group.so from pam
pam_issue.so from pam
pam_keyinit.so from pam
pam_lastlog.so from pam
pam_limits.so from pam
pam_listfile.so from pam
pam_localuser.so from pam
pam_loginuid.so from pam
pam_mail.so from pam
pam_mkhomedir.so from pam
pam_motd.so from pam
pam_namespace.so from pam
pam_nologin.so from pam
pam_passwdqc.so from pam_passwdqc
pam_permit.so from pam
pam_postgresok.so from pam
pam_pwhistory.so from pam
pam_rhosts.so from pam
pam_rootok.so from pam
pam_securetty.so from pam
pam_selinux.so from pam
pam_sepermit.so from pam
pam_shells.so from pam
pam_stress.so from pam
pam_succeed_if.so from pam
pam_tally2.so from pam
pam_time.so from pam
pam_timestamp.so from pam
pam_tty_audit.so from pam
pam_umask.so from pam
pam_unix.so from pam
pam_userdb.so from pam
pam_warn.so from pam
pam_wheel.so from pam
pam_xauth.so from pam
pango-arabic-fc.so from pango
pango-arabic-lang.so from pango
pango-basic-x.so from pango
pango-hangul-fc.so from pango
pango-hebrew-fc.so from pango
pango-indic-fc.so from pango
pango-indic-lang.so from pango
pango-khmer-fc.so from pango
pango-syriac-fc.so from pango
pango-thai-fc.so from pango
pango-thai-lang.so from pango
pango-tibetan-fc.so from pango
parsermodule.so from python-libs
pmlastmsg.so from rsyslog
pycurl.so from python-pycurl
pyexpat.so from python-libs
rand.so from pyOpenSSL
re.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
readline.so from python-libs
resource.so from python-libs
scalar.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
selectmodule.so from python-libs
sgml-filter.so from aspell (required by NonRH signed package(s):qa-tools )
shared.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
smixer-ac97.so from alsa-lib
smixer-hda.so from alsa-lib
smixer-sbase.so from alsa-lib
spwdmodule.so from python-libs
staplog.so from systemtap-runtime
static.so from nfs-utils-lib
stropmodule.so from python-libs
syslog.so from python-libs
termios.so from python-libs
tex-filter.so from aspell (required by NonRH signed package(s):qa-tools )
texinfo-filter.so from aspell (required by NonRH signed package(s):qa-tools )
text.so from plymouth
threads.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
timemodule.so from python-libs
timingmodule.so from python-libs
umich_ldap.so from nfs-utils-lib
unicodedata.so from python-libs
unix.so from pygobject2
via.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
wpad_dns.so from libproxy
wpad_dnsdevolution.so from libproxy
xxsubtype.so from python-libs
zlibmodule.so from python-libs

We checked the requirements in Non-RH signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you may need
to get the .so library from different place or search for an alternative.

              
INPLACERISK: HIGH: Library python-jinja2 (required by NonRH signed package(s):beaker-client ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl-XML-Parser (required by NonRH signed package(s):tps-devel ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library python-rhsm (required by NonRH signed package(s):redhat-upgrade-tool ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library rpm-python (required by NonRH signed package(s):preupgrade-assistant-contents preupgrade-assistant ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library rpm-python (required by NonRH signed package(s):preupgrade-assistant-contents preupgrade-assistant ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library python-lxml (required by NonRH signed package(s):beaker-client ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library python-krbV (required by NonRH signed package(s):beaker-redhat beaker-client ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library procps (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library mod_wsgi (required by NonRH signed package(s):preupgrade-assistant-ui ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library python-lxml (required by NonRH signed package(s):beaker-client ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
_speedups.so from python-jinja2 (required by NonRH signed package(s):beaker-client )
B.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Base64.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Byte.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
CN.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Call.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Cwd.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
DB_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
DProf.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Dumper.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
EBCDIC.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Encode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Expat.so from perl-XML-Parser (required by NonRH signed package(s):tps-devel )
FastCalc.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Fcntl.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
FieldHash.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
GDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Glob.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Hostname.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
IO.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
JP.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
KR.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Langinfo.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
MD5.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
NDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Normalize.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Opcode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
POSIX.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
PPPort.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Peek.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
SDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Socket.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Soundex.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Storable.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Symbol.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
SysV.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Syslog.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
TW.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Unicode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
Util.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
_certificate.so from python-rhsm (required by NonRH signed package(s):redhat-upgrade-tool )
_rpmbmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant-contents preupgrade-assistant )
_rpmmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant-contents preupgrade-assistant )
attrs.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
context-filter.so from aspell (required by NonRH signed package(s):qa-tools )
email-filter.so from aspell (required by NonRH signed package(s):qa-tools )
encoding.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
etree.so from python-lxml (required by NonRH signed package(s):beaker-client )
krbVmodule.so from python-krbV (required by NonRH signed package(s):beaker-redhat beaker-client )
libproc-3.2.8.so from procps (required by NonRH signed package(s):qa-tools )
mod_wsgi.so from mod_wsgi (required by NonRH signed package(s):preupgrade-assistant-ui )
mro.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
nroff-filter.so from aspell (required by NonRH signed package(s):qa-tools )
objectify.so from python-lxml (required by NonRH signed package(s):beaker-client )
re.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
scalar.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
sgml-filter.so from aspell (required by NonRH signed package(s):qa-tools )
shared.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
tex-filter.so from aspell (required by NonRH signed package(s):qa-tools )
texinfo-filter.so from aspell (required by NonRH signed package(s):qa-tools )
threads.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
via.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents )
INPLACERISK: MEDIUM:  We detected some .so libraries installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of some of your 3rd party applications.

            

Result for Check the system version

Result: pass

Rule ID: xccdf_preupg_rule_system_SystemVersion_check

Time: 2015-06-17 16:22

Check if the system is last released version

Result for CA certificate bundles modified

Result: pass

Rule ID: xccdf_preupg_rule_system_ca-certificates_checkbundles

Time: 2015-06-17 16:22

Later versions of RHEL include a shared store for certificate authorities. Additional trusted certificate authorities must be placed in the new location rather that modifying the distributed certificate authority bundles. The Preupgrade assistant cannot automatically identify how certificate bundles have been modified on this system.

Result for Developer Tool Set packages

Result: pass

Rule ID: xccdf_preupg_rule_system_dts_dts

Time: 2015-06-17 16:22

Content checks whether Red Hat Developer Tool Set packages are installed.

Result for Check for GRUB splash.xpm.gz file

Result: needs_inspection

Rule ID: xccdf_preupg_rule_system_grub_grub

Time: 2015-06-17 16:22

Content checks whether splash.xpm.gz file exists and backups them

Remediation instructions

Grub package is used as loader of linux system.

Preupgrade assistant will backup file /boot/grub/splash.xpm.gz
and restore restore them after inplace upgrade to /boot/grub directory.

Modification of boot parameters is not possible without that file.

              
INPLACERISK: SLIGHT: File splash.xpm.gz was backuped for inplace upgrade case and editing grub options

            

Result for Workaround for crashing grubby.

Result: fixed

Rule ID: xccdf_preupg_rule_system_grubby_check

Time: 2015-06-17 16:22

Workaround for crashing grubby. Fill initrd in /boot/grub/grub.conf by a postupgrade script.

Remediation instructions

This content works around crashing grubby. It modifies /boot/grub/grub.conf by adding initrd.

Result for Obsoleted HAL (Hardware Abstraction Layer)

Result: pass

Rule ID: xccdf_preupg_rule_system_hal_check_script

Time: 2015-06-17 16:22

Check for packages dependent on hal.

Result for Hyper-V

Result: pass

Rule ID: xccdf_preupg_rule_system_hyperv_check

Time: 2015-06-17 16:22

Check if this system runs on Hyper-V.

Result for Content for enabling and disabling services based on RHEL 6 system

Result: needs_action

Rule ID: xccdf_preupg_rule_system_initscripts_control_check

Time: 2015-06-17 16:22

The content checks what services are enabled or disabled on assessment system and if the services will be enabled or disabled on RHEL 7 system.

Remediation instructions

The content detects some services who are disabled by default on Red Hat Enterprise Linux 7 system.

              
INPLACERISK: HIGH: The service blk-availability on RHEL 7 is disabled by default. Enable them via commands: systemctl enable blk-availability && systemctl start blk-availability.service .
INPLACERISK: HIGH: The service haldaemon on RHEL 7 is disabled by default. Enable them via commands: systemctl enable haldaemon && systemctl start haldaemon.service .
INPLACERISK: HIGH: The service ip6tables on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ip6tables && systemctl start ip6tables.service .
INPLACERISK: HIGH: The service messagebus on RHEL 7 is disabled by default. Enable them via commands: systemctl enable messagebus && systemctl start messagebus.service .
INPLACERISK: HIGH: The service netfs on RHEL 7 is disabled by default. Enable them via commands: systemctl enable netfs && systemctl start netfs.service .
INPLACERISK: HIGH: The service network on RHEL 7 is disabled by default. Enable them via commands: systemctl enable network && systemctl start network.service .
INPLACERISK: HIGH: The service nfslock on RHEL 7 is disabled by default. Enable them via commands: systemctl enable nfslock && systemctl start nfslock.service .
INPLACERISK: HIGH: The service postfix on RHEL 7 is disabled by default. Enable them via commands: systemctl enable postfix && systemctl start postfix.service .
INPLACERISK: HIGH: The service rhsmcertd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rhsmcertd && systemctl start rhsmcertd.service .
INPLACERISK: HIGH: The service rpcgssd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rpcgssd && systemctl start rpcgssd.service .
INPLACERISK: HIGH: The service udev-post on RHEL 7 is disabled by default. Enable them via commands: systemctl enable udev-post && systemctl start udev-post.service .

            

Result for Check for ethernet interface naming

Result: needs_inspection

Rule ID: xccdf_preupg_rule_system_initscripts_ifcfg_check_script

Time: 2015-06-17 16:22

The content checks if network interface names set through /etc/sysconfig/network-scripts/ifcfg-* files are compatible with device naming in Red Hat Enterprise Linux 7.

Remediation instructions

Red Hat Enterprise Linux 7 still offers possibility to specifying names for network interface by setting DEVICE and HWADDR options in /etc/sysconfig/network-scripts/ifcfg-* configuration files. Unfortunally udev does not support swapping interface names anymore. In the case that you set ethX names to multiple network card and kernel discovers them in different order, udev rule 60-net.rules will most likely fail.

It is highly recommended to rename such interfaces or remove DEVICE line from ifcfg configuration files.

Red Hat Enterprise Linux 7 also introduces predictable network interface device names: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/

              
INPLACERISK: SLIGHT: /etc/sysconfig/network-scripts/ifcfg-eth0 is old style ethX name without HWADDR, its name can change after upgrade.
DEBUG initscripts: checking ifcfg-lo, name: lo hwaddr: False
DEBUG initscripts: checking ifcfg-eth0, name: eth0 hwaddr: False

            

Result for User modification in /etc/rc.local and /etc/rc.d/rc.local

Result: pass

Rule ID: xccdf_preupg_rule_system_initscripts_rc-local_rclocal

Time: 2015-06-17 16:22

The content checks whether user modifies files /etc/rc.local and /etc/rc.d/rc.local

Result for Plugable authentication modules (PAM)

Result: pass

Rule ID: xccdf_preupg_rule_system_pam_pam

Time: 2015-06-17 16:22

Content checks for no-longer supported pluggable authentication modules

Result for Foreign Perl modules

Result: informational

Rule ID: xccdf_preupg_rule_system_perl_check

Time: 2015-06-17 16:24

Find Perl modules which need to be checked for proper functionality with newer Perl version on the Red Hat Enterprise Linux 7 system because they are not distributed by Red Hat

Remediation instructions

Perl was updated from version 5.10 to version 5.16. Please read Perl
section in the Red Hat Enterprise Linux 7 Developer Guide for more details.

Following Perl module files located in system Perl paths are either not
handled by any package or not signed by Red Hat:

Result for PolicyKit (alias polkit) config files

Result: informational

Rule ID: xccdf_preupg_rule_system_polkit_check

Time: 2015-06-17 16:24

PolicyKit has important changes of config files. Check modyfied and owns config files.

Remediation instructions

PolicyKit (alias polkit) doesn't use *.conf *.pkla file. Everything is inside
*.rules files instead, which contains rules written in javascript (See more in
Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide, chapter 4).

Result for Python 2.7.5

Result: needs_inspection

Rule ID: xccdf_preupg_rule_system_python_check

Time: 2015-06-17 16:24

This module provides you with a list of packages that need to be rebuilt for version 2.7.5 of the Python programming language that is shipped with Red Hat Enterprise Linux 7.

Remediation instructions

This solution text contains a list of packages that need to be rebuilt for Python 2.7.5, which is shipped with Red Hat Enterprise Linux 7.

Red Hat Enterprise Linux 7 contains Python version 2.7.5. For information about the differences from older versions and for further details, see https://access.redhat.com/site/articles/676453.

The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by Red Hat. These packages need to be rebuilt and reinstalled in order to work with Python 2.7.5. You can find more details at https://access.redhat.com/site/articles/676453.

              
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Babel-0.9.4-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/babel is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/backports is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/bkr is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/bkr-20.1-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/bkr.client-20.1-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/kobo is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/prettytable-0.6.1-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preup is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preup_ui is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preupgrade_assistant-0.11.12-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preuputils is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_upgrade_tool is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/rhts is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/snake is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/report is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/reportclient is not owned by any RPM package.

            

Result for Save repositories for kickstart

Result: needs_inspection

Rule ID: xccdf_preupg_rule_system_repositories_check

Time: 2015-06-17 16:24

Content checks enabled repositories. Name and baseurl are stored to file available-repos in kickstart directory.

Remediation instructions

The content stores enabled repositories for kickstart issues in file ./kickstart/available-repos

During kickstart generation these repositories are added to kickstart script.

              
INPLACERISK: SLIGHT: Repo beaker-harness is enabled.
INPLACERISK: SLIGHT: Repo rhel-source is not enabled.
INPLACERISK: SLIGHT: Repo rhel-source-beta is not enabled.
INPLACERISK: SLIGHT: Repo beaker-client is enabled.
INPLACERISK: SLIGHT: Repo beaker-client-testing is not enabled.
INPLACERISK: SLIGHT: Repo rhel is enabled.
INPLACERISK: SLIGHT: Repo rhel-opt is enabled.
INPLACERISK: SLIGHT: Repo qa-tools is enabled.
INPLACERISK: SLIGHT: Repo qa-tools-testing is not enabled.
INPLACERISK: SLIGHT: Repo epel is not enabled.
INPLACERISK: SLIGHT: Repo epel-debuginfo is not enabled.
INPLACERISK: SLIGHT: Repo epel-source is not enabled.
INPLACERISK: SLIGHT: Repo rhel-debuginfo is not enabled.
INPLACERISK: SLIGHT: Repo rhel-opt-debuginfo is not enabled.
INPLACERISK: SLIGHT: Repo preupgrade-assistant is enabled.
INPLACERISK: SLIGHT: Repo beaker-tasks is not enabled.
INPLACERISK: SLIGHT: Enabled repo files for kickstart generation are stored /root/preupgrade/kickstart/available-repos.

            

Result for Check system requirements

Result: needs_action

Rule ID: xccdf_preupg_rule_system_requirements_check

Time: 2015-06-17 16:24

Check if system comply minimum requirements

Remediation instructions

Minimum required diskspace is: 10GB ( 10737418240 B )
Get diskspace

/usr:
(only for migration process)
Estimated needed free space: 1827453 kB
Estimated safe free space: 2101563 kB
Available free space: 2891556 kB

/var:
(only for migration process)
Estimated needed free space: 1827453 kB
Estimated safe free space: 2101563 kB
Available free space: 2891556 kB

              
INPLACERISK: HIGH: Diskspace is lower then minimum requirements for correct run of new system!

            

Result for SCL collections

Result: pass

Rule ID: xccdf_preupg_rule_system_scl-collection_scl

Time: 2015-06-17 16:24

Content checks whether RHSCL are installed

Result for Red Hat Subscription Manager

Result: pass

Rule ID: xccdf_preupg_rule_system_subscription-manager_check

Time: 2015-06-17 16:24

This module adds new option to the configuration file, if it is not there already.

Result for System kickstart

Result: pass

Rule ID: xccdf_preupg_rule_system_system-kickstart_ks

Time: 2015-06-17 16:24

Copy system kickstart from /root/ to directory with results

Result for UEFI bootloader

Result: informational

Rule ID: xccdf_preupg_rule_system_uefi_check

Time: 2015-06-17 16:24

It is necessary to migrate UEFI systems to grub2-efi

Remediation instructions

This system does not use EFI. Preupgrade Assistant will not replace your current bootloader automatically, it is too dangerous. If you wish to use GRUB2, do it manually after the upgrade using grub2-install and grub2-mkconfig.

Result for YUM

Result: informational

Rule ID: xccdf_preupg_rule_system_yum_yum

Time: 2015-06-17 16:24

Content checks YUM configuration file

Remediation instructions

In RHEL 7 functionality of yum-plugin-security is a part of yum core.

After the upgrade it will be impossible to undo/redo/rollback to pre-upgrade yum transactions. Please run 'yum history new' after the upgrade to start a new history file.

The way yum groups work has changed in RHEL 7. By default yum treats groups as objects now. Please refer to the documentation for more information.

Result for Check for usage of dangerous ranges of UID and GIDs

Result: pass

Rule ID: xccdf_preupg_rule_usrmgmt_DangerousRanges_dangerousranges

Time: 2015-06-17 16:24

This module checks for IDs in the 0-199 range used without reservations. This module also checks for IDs which need to be moved from the 501-999 range prior to migration.

Result for Incorrect usage of reserved UID/GIDs

Result: pass

Rule ID: xccdf_preupg_rule_usrmgmt_ReservedIDs_reservedids

Time: 2015-06-17 16:24

Reserved user and group IDs by setup package changed between the RHEL 6 and RHEL 7. This may in some cases cause the unfunctionality of your system after the migration. This check should mitigate the risks.

Result for Check libuser.conf

Result: pass

Rule ID: xccdf_preupg_rule_usrmgmt_libuser_check

Time: 2015-06-17 16:24

Check for rejected configuration in /etc/libuser.conf about combination ldap module with others, due to ambiguity in password handling.