Introduction
Scanner
- preupgrade-assistant-2.1.4-6.el6
- preupgrade-assistant-contents-0.6.43-1.el6
Target info
Targets
|
Addresses
|
Platforms
|
Results overview
Rule Results Summary
pass | fixed | fail | needs inspection | needs action | error | not selected | not checked | not applicable | informational | unknown | total |
31 | 8 | 0 | 12 | 9 | 0 | 0 | 0 | 49 | 24 | 0 | 133 |
Rule results summary
Results details
Result for Configuration Files to Review
Result: needs_inspection
Rule ID: xccdf_preupg_rule_backup_NoverifyConfigs_noverifycfg
Time: 2016-02-02 08:57
This module stores some system configuration files that can have been modified by the user when it is not possible to automatically upgrade them.
Remediation instructions
Some packages do not track the possible performed changes to system configuration files; therefore, it cannot be easily determined if the files have been modified by the user or not. In order to allow for later examination, all configuration files not handled by the migration scripts are stored in the dirtyconf/ directory. The list of the stored files is available in the ./kickstart/noverifycfg file. The user is advised to verify the functionality of configuration files stored by this tool after a successful upgrade.
INPLACERISK: SLIGHT: We detected some files where modifications are not tracked in the rpms. You may need to check their functionality after successful upgrade.
Result for File Lists for Manual Migration
Result: needs_inspection
Rule ID: xccdf_preupg_rule_backup_UntrackedFiles_untracked
Time: 2016-02-02 08:57
This module generates lists of files, such as temporary, application, and user data files, which are not automatically migrated.
Remediation instructions
Some user data, such as user home directories and temporary files, are not tracked by the RPM database. This data will not be automatically migrated. To assist you with migrating the data, this module has generated the following three files.
* The ./kickstart/untrackedsystem file lists the regular files on the system that will not be migrated. The list does not contain files mounted over the network, files created by runtime system operations, files in temporary locations, and user files in the /home/ or /root/ directory.
* The ./kickstart/untrackeduser file lists the regular local files in the /home/ and /root/ directories that will not be migrated. If the /home/ and /root/ directories are on a file system mounted over the network, this file can be empty.
* The ./kickstart/untrackedexpected file lists the regular files and symlinks created by runtime system operations (for example handling runlevels, alternatives and active SELinux modules). Most likely you don't need to care about them, list is available just for completeness.
* The ./kickstart/untrackedtemporary file lists all temporary local files on the system that will not be migrated. This is essentially everything in the /cgroup/, /tmp/, and /var/ directories. Most likely you don't need to care about them, list is available just for completeness.
It is recommended that you backup all data before proceeding with the upgrade to Red Hat Enterprise Linux 7. This data can be quite large.
If you are performing an in-place upgrade, this data should remain in its current location after the upgrade. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7. You should verify that all data was successfully maintained.
If you are performing a migration upgrade, this data must be backed up to another storage medium. You will need to copy the data you wish to have on the new installation back into place after the upgrade is complete. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7.
INPLACERISK: SLIGHT: We detected some files untracked by rpms. Some of these may need manual check/migration after redhat-upgrade-tool and/or can cause conflicts or troubles during the installation. Try to reduce unnecessary untracked files before running redhat-upgrade-tool.
Result for POWER6 processors are unsupported on ppc in Red Hat Enterprise Linux 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletePOWER6Processors_powerprocessor
Time: 2016-02-02 08:57
POWER6 processors are unsupported on ppc architecture in Red Hat Enterprise Linux 7.
Result for several kernel networking drivers not available in Red Hat Enterprise Linux 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedNetworkDrivers_obsoletedNetworkDrivers
Time: 2016-02-02 08:57
Several kernel networking drivers were removed from Red Hat Enterprise Linux 7.
Result for several kernel storage drivers not available in Red Hat Enterprise Linux 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedStorageDrivers_obsoletedStorageDrivers
Time: 2016-02-02 08:57
Several kernel storage drivers were deprecated or removed in Red Hat Enterprise Linux 7.
Result for Compatibility Between iptables and ip6tables
Result: informational
Rule ID: xccdf_preupg_rule_networking_iptables_check_script
Time: 2016-02-02 08:57
The firewalld service is now the default firewall service.
File(s) affected:
/etc/sysconfig/iptables
/etc/sysconfig/ip6tables
Remediation instructions
If you are migrating from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7, verify whether you have the iptables-services packages installed after performing the upgrade by running the "rpm -q iptables-services" command as root. Also, verify that iptables and ip6tables services are enabled by running the "systemctl is-enabled iptables" and "systemctl is-enabled ip6tables" commands as root.
For more details about migrating the firewall service from Red Hat Enterprise Linux 6, see the section about the firewalld service in the Red Hat Enterprise Linux 7 Migration Planning guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Migration_Planning_Guide/.
If you perform a clean installation of Red Hat Enterprise Linux 7, the firewalld service will be installed on your system instead of iptables and ip6tables.
For further details about the firewalld service, see the section about firewalls in Red Hat Enterprise Linux 7 Security Guide. You can access the guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/.
INFO iptables: Creating /root/preupgrade/postupgrade.d/reenable-iptables
WARNING iptables: Please read Remediation instructions.
Result for Check NFSv2
Result: informational
Rule ID: xccdf_preupg_rule_networking_nfsv2_check
Time: 2016-02-02 08:57
NFSv2 is not supported since RHEL 7. Therefore check if exists configuration which requires directly NFSv2 and fix it if it's possible.
Remediation instructions
NFS protocol version 2 is not supported since RHEL7.
-----------------------------------------------------
Result for Check ssh configuration file and fix ssh keys
Result: fixed
Rule ID: xccdf_preupg_rule_networking_openssh_check
Time: 2016-02-02 08:57
AuthorizedKeysCommand and AuthorizedKeysCommandUser are not accepted if they are under Match section. Server's ssh keys have different permissions and group on RHEL 7.
Remediation instructions
Private server's ssh keys inside /etc/ssh have different group and permissions
on RHEL 7 system. These keys will be fixed by postupgrade script.
Result for Check openssh-keycat
Result: needs_inspection
Rule ID: xccdf_preupg_rule_networking_openssh-keycat_check
Time: 2016-02-02 08:57
ssh-keycat is moved to own subpackage
Remediation instructions
ssh-keycat files (below) are moved to new package 'openssh-keycat':
/etc/pam.d/ssh-keycat
/usr/libexec/openssh/ssh-keycat
/usr/share/doc/openssh-server-5.3p1/HOWTO.ssh-keycat
If you want ssh-keycat anymore, you need install openssh-keycat package.
INPLACERISK: MEDIUM: ssh-keycat files are moved to openssh-keycat
Result for Postfix configuration compatibility check
Result: informational
Rule ID: xccdf_preupg_rule_networking_postfix_check_script
Time: 2016-02-02 08:57
Checks postfix configuration compatibility
File(s) affected:
/etc/postfix/main.cf
Remediation instructions
Please upgrade your configuration by: postfix upgrade-configuration
If you plan to use postscreen daemon, please restart postfix service by:
systemctl restart postfix
There is new smtpd_relay_restrictions parameter with the built-in
default settings:
smtpd_relay_restrictions =
permit_mynetworks
permit_sasl_authenticated
defer_unauth_destination
This safety net prevents open relay problems due to mistakes
with spam filter rules in smtpd_recipient_restrictions.
If your site has a complex mail relay policy configured under
smtpd_recipient_restrictions, this safety net may defer mail that
Postfix should accept.
To fix this safety net, take one of the following actions:
- Set smtpd_relay_restrictions empty, and keep using the existing
mail relay authorization policy in smtpd_recipient_restrictions.
- Copy the existing mail relay authorization policy from
smtpd_recipient_restrictions to smtpd_relay_restrictions.
There is no need to change the value of smtpd_recipient_restrictions.
Result for Sendmail configuration compatibility check
Result: pass
Rule ID: xccdf_preupg_rule_networking_sendmail_check_script
Time: 2016-02-02 08:57
Checks sendmail configuration compatibility
File(s) affected:
/etc/sysconfig/sendmail
Result for Reusable Configuration Files
Result: pass
Rule ID: xccdf_preupg_rule_others_NoVersionChangeEtc_nochange
Time: 2016-02-02 08:57
The module provides a list of the configuration files that can be reused in Red Hat Enterprise Linux 7.
Result for Check changed config files
Result: needs_inspection
Rule ID: xccdf_preupg_rule_others_configchanges_check
Time: 2016-02-02 08:57
Print modified config noreplace files which can generate .rpmnew (or .rpmsave) files. Specially check audit.rules which is generated by /sbin/augenrules since RHEL-6.6.
Remediation instructions
It's recommended check these config files after upgrade on RHEL7:
/etc/pam.d/fingerprint-auth
/etc/pam.d/password-auth
/etc/pam.d/smartcard-auth
/etc/pam.d/system-auth
/etc/beah.conf
/etc/beah_beaker.conf
/etc/securetty
/etc/sysconfig/readahead
/etc/inittab
/etc/sysconfig/init
INPLACERISK: SLIGHT: Some config files are changed and .rpmnew files will be generated.
Result for Rsyslog configuration icompatibility
Result: informational
Rule ID: xccdf_preupg_rule_others_rsyslog_check
Time: 2016-02-02 08:57
There is a change with journal (and thus socket logging) and some other incompatibilities in v7 as compared with older v5 version of rsyslog.
Remediation instructions
See [0] and [1] for more information about new logging system on RHEL-7 and solutions
of possible compatibility problems.
[0] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/s1-interaction_of_rsyslog_and_journal.html
[1] http://www.rsyslog.com/doc/v7-stable/compatibility/index.html
Result for VCS repositories
Result: informational
Rule ID: xccdf_preupg_rule_others_vcsrepos_check_script
Time: 2016-02-02 08:57
Find Versin Control System repositories in /home and /root - git, svn, cvs, bzr.
Remediation instructions
Result for Print removed and moved utilities
Result: needs_inspection
Rule ID: xccdf_preupg_rule_packages_GenericUtilities_check
Time: 2016-02-02 08:57
Print utilities which were removed from packages, moved into another package or changed destination directory.
Remediation instructions
Some utilities were removed, moved between packages of change path.
Please, check your scripts for possible problems. Below are appended brief lists.
If you want see details, please look at another contents.
Lists don't contain utilities from removed packages, which are not replaced
by another packages. Likewise don't contain utilities which are moved into
packages which replace or obsolete original packages.
Replaced utilities:
/usr/bin/aclocal-1.11 (automake) — aclocal
/usr/bin/automake-1.11 (automake) — automake
/usr/bin/emacs-23.1 (emacs) — emacs-24.3
/bin/iptables-xml-1.4.7 (iptables) — iptables-xml
/sbin/iptables-1.4.7 (iptables) — iptables
/sbin/iptables-multi-1.4.7 (iptables) — iptables-multi
/sbin/iptables-restore-1.4.7 (iptables) — iptables-restore
/sbin/iptables-save-1.4.7 (iptables) — iptables-save
/sbin/ip6tables-1.4.7 (iptables-ipv6) — ip6tables
/sbin/ip6tables-multi-1.4.7 (iptables-ipv6) — ip6tables-multi
/sbin/ip6tables-restore-1.4.7 (iptables-ipv6) — ip6tables-restore
/sbin/ip6tables-save-1.4.7 (iptables-ipv6) — ip6tables-save
/usr/bin/rsvg (librsvg2) — librsvg-convert:librsvg2-tools
/usr/bin/rsvg-view (librsvg2) — rsvg-view-3:librsvg2-tools
/usr/bin/python2.6 (python) — python2.7
/usr/bin/easy_install-2.6 (python-setuptools) — easy_install-2.7
/sbin/udevd (udev) — /usr/lib/systemd/systemd-udevd
Removed utilities (some removed utilities have still alternative):
/usr/bin/ck-history (ConsoleKit)
/usr/bin/ck-launch-session (ConsoleKit)
/usr/bin/ck-list-sessions (ConsoleKit)
/usr/sbin/ck-log-system-restart (ConsoleKit)
/usr/sbin/ck-log-system-start (ConsoleKit)
/usr/sbin/ck-log-system-stop (ConsoleKit)
/usr/sbin/console-kit-daemon (ConsoleKit)
/usr/bin/abrt-dedup-client (abrt-addon-ccpp) — the server side no longer exists
/usr/bin/abrt-cli-root (abrt-tui)
/usr/sbin/cpuspeed (cpuspeed)
/usr/bin/berkeley_db_svc (db4-utils)
/usr/bin/db_codegen (db4-utils)
/usr/bin/doxytag (doxygen)
/sbin/fsck.ext4dev (e2fsprogs) — not needed
/sbin/mkfs.ext4dev (e2fsprogs) — not needed
/usr/bin/volname (eject) — use blkid instead
/usr/bin/b2m (emacs-common) — removed
/usr/bin/rcs-checkin (emacs-common) — removed by upstream
/usr/bin/.fipscheck.hmac (fipscheck)
/usr/bin/protoize (gcc)
/usr/bin/unprotoize (gcc)
/usr/bin/gdbtui (gdb)
/usr/bin/update-gdk-pixbuf-loaders (gdk-pixbuf2)
/usr/bin/bdftops (ghostscript)
/usr/bin/dumphint (ghostscript)
/usr/bin/pdfopt (ghostscript)
/usr/bin/pv.sh (ghostscript)
/usr/bin/update-gio-modules (glib2)
/usr/sbin/tzdata-update (glibc-common)
/usr/bin/gpgkey2ssh (gnupg2)
/sbin/grub (grub)
/sbin/grub-crypt (grub)
/sbin/grub-install (grub)
/sbin/grub-md5-crypt (grub)
/sbin/grub-terminfo (grub)
/usr/bin/mbchk (grub)
/sbin/umount.hal (hal)
/usr/bin/hal-device (hal)
/usr/bin/hal-disable-polling (hal)
/usr/bin/hal-find-by-capability (hal)
/usr/bin/hal-find-by-property (hal)
/usr/bin/hal-get-property (hal)
/usr/bin/hal-is-caller-locked-out (hal)
/usr/bin/hal-lock (hal)
/usr/bin/hal-set-property (hal)
/usr/bin/hal-setup-keymap (hal)
/usr/bin/lshal (hal)
/usr/sbin/hald (hal)
/sbin/fstab-decode (initscripts)
/sbin/getkey (initscripts)
/sbin/securetty (initscripts)
/sbin/setsysfont (initscripts)
/usr/sbin/togglesebool (libselinux-utils)
/usr/bin/man2html (man) — man -H, see more "man man" and "man groff"
/usr/sbin/makewhatis (man)
/usr/bin/mcmfmt (mc) — removed by upstream
/sbin/microcode_ctl (microcode_ctl)
/sbin/mingetty (mingetty) — obsoleted by agetty:util-linux
/sbin/insmod.static (module-init-tools) — not needed in kmod
/sbin/nfs_cache_getent (nfs-utils) — not needed anymore by kernel
/usr/bin/.ssh.hmac (openssh-clients)
/usr/sbin/.sshd.hmac (openssh-server)
/usr/bin/dprofpp (perl) — you can install Devel-DProf from CPAN
/usr/bin/perl5.10.1 (perl) — newer version
/usr/bin/lwp-rget (perl-libwww-perl) — not maintained anymore
/usr/bin/rhgb-client (plymouth) — use plymouth
/usr/sbin/open_init_pty (policycoreutils) — not needed anymore due to systemd
/usr/sbin/run_init (policycoreutils) — not needed anymore due to systemd
/usr/bin/mktap (python-twisted-core) — removed by upstream - broken in trunk
/usr/bin/assistant_adp (qt-x11)
/sbin/readahead (readahead)
/sbin/readahead-collector (readahead)
/usr/bin/rpmargs (rpmdevtools) — fakeroot is removed
/usr/bin/rpmelfsym (rpmdevtools) — fakeroot is removed
/usr/bin/rpmfile (rpmdevtools) — fakeroot is removed
/usr/bin/rpmpeek (rpmdevtools) — fakeroot is removed
/usr/bin/rpmsodiff (rpmdevtools) — fakeroot is removed
/usr/bin/rpmsoname (rpmdevtools) — fakeroot is removed
/sbin/scsi_id (udev)
/sbin/start_udev (udev)
/sbin/initctl (upstart) — functionality implemented in systemd
/sbin/reload (upstart) — functionality implemented in systemd
/sbin/restart (upstart) — functionality implemented in systemd
/sbin/start (upstart) — functionality implemented in systemd
/sbin/status (upstart) — functionality implemented in systemd
/sbin/stop (upstart) — functionality implemented in systemd
/sbin/mount.tmpfs (util-linux-ng) — see man 8 mount
/usr/bin/ddate (util-linux-ng) — useless
/usr/bin/floppy (util-linux-ng) — obsolete
/usr/sbin/tunelp (util-linux-ng) — obsolete
/sbin/vconfig (vconfig) — see man ip from iproute
Utilities moved between packages (with same location):
/bin/su (coreutils) -> (util-linux)
/sbin/runuser (coreutils) -> (util-linux)
/bin/cgclassify (libcgroup) -> (libcgroup-tools)
/bin/cgcreate (libcgroup) -> (libcgroup-tools)
/bin/cgdelete (libcgroup) -> (libcgroup-tools)
/bin/cgexec (libcgroup) -> (libcgroup-tools)
/bin/cgget (libcgroup) -> (libcgroup-tools)
/bin/cgset (libcgroup) -> (libcgroup-tools)
/bin/cgsnapshot (libcgroup) -> (libcgroup-tools)
/bin/lscgroup (libcgroup) -> (libcgroup-tools)
/bin/lssubsys (libcgroup) -> (libcgroup-tools)
/sbin/cgclear (libcgroup) -> (libcgroup-tools)
/sbin/cgconfigparser (libcgroup) -> (libcgroup-tools)
/sbin/cgrulesengd (libcgroup) -> (libcgroup-tools)
/sbin/matchpathcon (libselinux) -> (libselinux-utils)
/sbin/blkdeactivate (lvm2) -> (device-mapper)
/bin/mountpoint (sysvinit-tools) -> (util-linux)
/sbin/sulogin (sysvinit-tools) -> (util-linux)
INPLACERISK: SLIGHT: Some utilities were removed, moved between packages or change path.
Result for Check packages from other variants
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_InterVariants_check
Time: 2016-02-02 08:57
Packages from different variants could be installed on system. Print these packages which are from other variants.
Remediation instructions
Some Red Hat signed packages are appointed for different variant RHEL systems.
In this case we don't support inplace upgrade to new RHEL-7 systems with these packages.
These packages will be probably removed:
ConsoleKit
ConsoleKit-libs
MAKEDEV
ORBit2
PyXML
Red_Hat_Enterprise_Linux-Release_Notes-6-en-US
SOAPpy
alsa-utils
apr
apr-util
atk-devel
atmel-firmware
autoconf
automake
b43-fwcutter
b43-openfwwf
bfa-firmware
bison
busybox
byacc
cairo-devel
cloog-ppl
coreutils-libs
cpuspeed
cryptsetup-luks
cryptsetup-luks-libs
cscope
ctags
cvs
cyrus-sasl-devel
dash
db4
db4-cxx
db4-devel
db4-utils
dbus-devel
diffstat
doxygen
dracut-kernel
eggdbus
eject
emacs
emacs-common
expect
fakeroot
fakeroot-libs
flex
fontconfig-devel
foomatic
foomatic-db
foomatic-db-filesystem
foomatic-db-ppds
freetype-devel
gcc-c++
gcc-gfortran
gdk-pixbuf2-devel
gettext-devel
gettext-libs
git
glib2-devel
groff
grub
gtk2-devel
hal
hal-info
hal-libs
indent
intltool
iptables-ipv6
ipw2100-firmware
ipw2200-firmware
jna
jpackage-utils
kernel-firmware
keyutils-libs-devel
krb5-devel
lcms-libs
libICE-devel
libIDL
libSM-devel
libX11-devel
libXau-devel
libXcomposite-devel
libXcursor-devel
libXdamage-devel
libXext-devel
libXfixes-devel
libXft-devel
libXi-devel
libXinerama-devel
libXmu-devel
libXp-devel
libXrandr-devel
libXrender-devel
libXt-devel
libXtst-devel
libXxf86vm-devel
libart_lgpl
libcom_err-devel
libdrm-devel
libertas-usb8388-firmware
libgcj
libgsf
libgssglue
libjpeg-turbo-devel
libmng-devel
libnih
liboil
libotf
libpng-devel
libproxy-bin
libproxy-python
libreport-compat
libreport-plugin-kerneloops
libreport-plugin-logger
libselinux-devel
libsepol-devel
libstdc++-devel
libtool
libudev
libusb1
libvirt-devel
libvirt-java
libvirt-java-devel
libxcb-devel
libxml2-devel
m17n-db
m17n-db-datafiles
m17n-lib
man
mc
mesa-dri-filesystem
mesa-dri1-drivers
mesa-libGL-devel
mesa-libGLU
mesa-libGLU-devel
mesa-libGLw
mesa-libGLw-devel
mingetty
module-init-tools
mysql-libs
nc
ncurses-devel
neon
nfs-utils-lib
nspr-devel
nss-devel
nss-softokn-devel
nss-softokn-freebl-devel
nss-util-devel
numactl
openldap-devel
openmotif
openmotif-devel
openscap
openscap-scanner
openscap-utils
openssl-devel
pakchois
pam-devel
pam_passwdqc
pango-devel
patchutils
pcmciautils
perl-Compress-Zlib
perl-Error
perl-Git
perl-IO-Compress-Base
perl-IO-Compress-Zlib
pixman-devel
portreserve
ppl
procmail
procps
python-argparse
python-fpconst
python-iwlib
python-twisted-core
python-twisted-web
python-zope-filesystem
python-zope-interface
ql2100-firmware
ql2200-firmware
ql23xx-firmware
ql2400-firmware
ql2500-firmware
qt-devel
qt-sqlite
qt3
qt3-devel
rcs
readahead
redhat-lsb
redhat-lsb-compat
redhat-lsb-graphics
redhat-lsb-printing
redhat-release-server
redhat-rpm-config
rpm-build
rpmdevtools
rt61pci-firmware
rt73usb-firmware
screen
sendmail
subversion
swig
system-config-firewall-tui
system-config-network-tui
tcl
udev
upstart
util-linux-ng
vconfig
wireless-tools
xorg-x11-docs
xorg-x11-drv-ati-firmware
xorg-x11-proto-devel
xz-lzma-compat
yum-plugin-security
zd1211-firmware
zlib-devel
ls: cannot access /root/preupgrade/RHEL6_7/common/default-kept-pkgs: No such file or directory
INPLACERISK: HIGH: You have installed Red Hat signed packages for different variant of RHEL system!
Result for Packages not signed by Red Hat
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_NonRHSignedPkg_nonrhpkg
Time: 2016-02-02 08:57
Packages not signed by Red Hat will not be upgraded
Remediation instructions
Packages which are not signed with the official Red Hat keys will not be upgraded. These packages are typically provided by third parties or have been modified in some way. There is a high risk of incompatibility with these packages as they have not been verified by Red Hat. For upgrade assistance, contact the vendors of these packages.
You can find a list of all unsigned packages including the vendor names in the kickstart/nonrhpkgs file.
INPLACERISK: HIGH: We detected some non-RH signed packages, you can find the list in /root/preupgrade/./kickstart/nonrhpkgs. You need to handle them yourself!
Result for Obsoleted rpms
Result: needs_inspection
Rule ID: xccdf_preupg_rule_packages_ObsoletedPackages_ObsoletedPkg
Time: 2016-02-02 08:57
Some rpms were obsoleted from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package obsoletes from your set of Red Hat packages.
Remediation instructions
Some packages were obsoleted between RHEL 6 and RHEL 7.
Red Hat provides alternatives for them, but these
alternatives may not be 100% compatible. Because of this,
we don't replace them automatically.
For some of the obsoleted packages you will get the
incompatibilities list from separate preupgrade
contents and you can adjust your migration or upgrade
as required.
Sometimes, the functionality of a package requires
more than one new package to acheive the same
functionality.
Please Note: All packages from the debug repositories
are skipped and Red Hat recommends that you remove
them before upgrade.
The following packages are obsoleted and replaced by
new ones:
ConsoleKit was obsoleted by systemd
cpuspeed was obsoleted by kernel-tools,kernel
eggdbus was obsoleted by glib2
grub was obsoleted by grub2
hal was obsoleted by systemd
mingetty was obsoleted by util-linux
mysql-libs was obsoleted by mariadb-libs
nc was obsoleted by nmap-ncat
pam_passwdqc was obsoleted by libpwquality
readahead was obsoleted by systemd
udev was obsoleted by systemd
upstart was obsoleted by systemd
vconfig was obsoleted by iproute
If a Non Red Hat signed package requires these packages, you may need to check if the alternative solution provided by Red Hat works for you. You may need to get the missing package from a source other than the RHEL repositories.
You will need to install these new packages yourself after the assessment, as Red Hat cannot assess the suitablility of the replacements for your workload.
INPLACERISK: MEDIUM: Some packages installed on the system were removed (obsoleted) between RHEL 6 and RHEL 7. This may break the functionality of packages depending on them.
Result for Removed Options in coreutils
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_coreutils_removedoptions
Time: 2016-02-02 08:57
Some options and binary files were removed from the coreutils packages between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Remediation instructions
A number of options and binary files have been removed from the coreutils packages in Red Hat Enterprise Linux 7. The functionality of some scripts can be affected.
This is a complete list of removed options and binary files, including the solutions and new options:
* For the "factor" invocation, the "--verbose" option has been renamed to "--debug".
* For the "install" invocation, the "--preserve_context" option has been removed. The "--preserve-context" option can be used instead.
* For the "nl" invocation, the "--page-increment" option, which was deprecated in Red Hat Enterprise Linux 6, has been removed. The "--line-increment" option can be used instead.
* The "runuser" and "su" binaries have been moved to the util-linux package.
* For the "stat" invocation, the "--context" option and its short form, "-Z", have been removed. SELinux context is now a part of the stat default output format.
* For the "mkdir", "mknod", "mkfifo", "cp", and "install" invocations, the "-Z" option no longer accepts any arguments and automatically sets the default SELinux setting context. To set a specific context, the "--context=[context]" option has to be used.
* For the "touch" invocation, the deprecated "--file" option has been removed. The "--reference" option can be used instead.
Please verify that your scripts have been updated to work with these changes.
Result for Removed options in gawk binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_gawk_removedoptions
Time: 2016-02-02 08:57
Some options and binaries were removed from gawk package between RHEL 6 and RHEL 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were removed from gawk package binaries between RHEL 6
and RHEL 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.
awk/gawk/pgawk: --compat - option was removed, alternative is
--traditional
--copyleft - option was removed, alternative is
--copyright/-C
--gen-po - option was replaced by --gen-pot option
--usage
-D - short form of --parsedebug was changed to -Y
Please check that your scripts are aware of these changes.
Result for Removed options in grep binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_grep_check
Time: 2016-02-02 08:57
Some commandline options are removed or deprecated in packages. Print list of changes.
Remediation instructions
Option "-K" was removed from grep, egrep and fgrep utilities on RHEL 7 system.
This option wasn't docummented before on RHEL 6.
Result for Removed options in netstat binary
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_nettools_removedoptions
Time: 2016-02-02 08:57
Some options were removed from netstat binary between RHEL 6 and RHEL 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were removed from netstat binary of net-tools package between
RHEL 6 and RHEL 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.
netstat : -T/--notrim renamed to -W/--wide
Please check that your scripts are aware of these changes.
Result for Removed options in quota tools
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_quota_removedoptions
Time: 2016-02-02 08:57
Some options have been renamed at quota tools between Red Hat Enterprise 6 and 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were renamed at quota tools between Red Hat Enterprise Linux
6 and 7. This may break functionality of some of your scripts. The changes
are:
/usr/bin/quota: Option --nfs-all was corrected to --all-nfs in the usage help
output. Both versions still recognize the --all-nfs option.
/usr/sbin/quota_nld: Option --no-daemon was renamed to --foreground. Short
option -F is unchanged. This is not an issue if you run quota_nld as daemon,
e.g. via init script.
/usr/sbin/repquota: Option --batch-translation was corrected to --cache in the
usage help output. Both versions still recognize the --cache option.
/usr/sbin/repquota: Option --no-batch-translation was corrected to --no-cache
in the usage help output. Both versions still recognize the --no-cache option.
Please check that your scripts are aware of these changes.
Result for Removed or deprecated options in util-linux (util-linux-ng) binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_util-linux_check
Time: 2016-02-02 08:57
Some commandline options are removed or deprecated in some packages. Print list of changes for util-linux.
Remediation instructions
Some options were removed or deprecated from util-linux-ng (on RHEL 7
is renamed back to util-linux) package binaries between RHEL 6 and RHEL 7.
This may break functionality of some of your scripts. All option removals
with solutions are listed bellow.
blkid:
-w - options is deprecated (undocumented on RHEL7)
fallocate:
--lenght - replaced by --length
findmnt
--fsroot - replaced by --nofsroot
losetup:
-s - short option removed, available only --show
mount:
-p, --pass-fd - options are deprecated (undcummented on RHEL7)
partx:
--gpt - undocumented and removed
readprofile:
-t - removed
sfdisk:
-? - replaced by -h
blkid,fsck,hexdump,hwclock,mkfs,mount,renice:
-v is deprecated and replaced by -V
(print version)
Result for Removed rpms
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_RemovedPackages_RemovedPkg
Time: 2016-02-02 08:57
Some rpms were removed from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package removals from your set of Red Hat packages.
Remediation instructions
Some of the packages were removed between RHEL 6 and RHEL 7. This may break
the upgrade for some of your packages. We are not aware of any compatible
replacement for these packages.
Following packages are no longer available:
ConsoleKit-libs
MAKEDEV
SOAPpy
atmel-firmware
b43-fwcutter
b43-openfwwf
kexec-tools
gcc
dracut
rpmdevtools
fakeroot
hal
hal
ipw2100-firmware
ipw2200-firmware
lcms-libs
libertas-usb8388-firmware
libgcj
nfs-utils-lib
libnih
mesa-dri-drivers
pcmciautils
ppl
nfs-utils
system-config-network-tui
python-zope-interface
system-config-network-tui
python-iwlib
zd1211-firmware
If some NonRH signed package requires these packages, you may need to ask your
vendor to provide alternative solution or get the missing package from
different sources than RHEL.
INPLACERISK: HIGH: After upgrading to RHEL 7 there are still some el6 packages left. Add --cleanup-post option to redhat-upgrade-tool if you want to remove them automatically.
INPLACERISK: MEDIUM: We detected some packages installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them.
Result for Replaced rpms
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_ReplacedPackages_ReplacedPkg
Time: 2016-02-02 08:58
Some rpms were replaced between RHEL 6 and RHEL 7. This content checks for the package replacements from your set of Red Hat packages and generates the list of replaced RH packages for RHEL 7 kickstart.
Remediation instructions
Between RHEL 6 and RHEL 7, some packages have either been replaced or
renamed. Replacement packages are compatible with previous versions.
In some cases, preupgrade assistant will migrate the package after the
upgrade has completed.
Please Note: This tool will not check debug repositories. Red Hat
recommends that all debuginfo packages are removed before upgrade and
manually reinstalled as required on the upgraded system.
The following packages were replaced:
redhat-lsb-graphics was replaced by redhat-lsb-desktop
perl-Compress-Zlib was replaced by perl-IO-Compress
db4-utils was replaced by libdb-utils
Red_Hat_Enterprise_Linux-Release_Notes-6-en-US was replaced by Red_Hat_Enterprise_Linux-Release_Notes-7-en-US
man was replaced by man-db
db4-cxx was replaced by libdb-cxx (optional channel in RHEL 7)
xorg-x11-drv-ati-firmware was replaced by linux-firmware
rt73usb-firmware was replaced by linux-firmware
perl-IO-Compress-Base was replaced by perl-IO-Compress
jpackage-utils was replaced by javapackages-tools
openmotif was replaced by motif
cryptsetup-luks-libs was replaced by cryptsetup-libs
dracut-kernel was replaced by dracut
qt-sqlite was replaced by qt
mesa-dri-filesystem was replaced by mesa-filesystem
perl-IO-Compress-Zlib was replaced by perl-IO-Compress
db4 was replaced by libdb
procps was replaced by procps-ng
db4-devel was replaced by libdb-devel
module-init-tools was replaced by kmod
libusb1 was replaced by libusbx
nfs-utils-lib was replaced by libnfsidmap
iptables-ipv6 was replaced by iptables-services
kernel-firmware was replaced by linux-firmware
bfa-firmware was replaced by linux-firmware
yum-plugin-security was replaced by yum
ql2400-firmware was replaced by linux-firmware
ql2100-firmware was replaced by linux-firmware
ql2500-firmware was replaced by linux-firmware
rt61pci-firmware was replaced by linux-firmware
ql2200-firmware was replaced by linux-firmware
util-linux-ng was replaced by util-linux
cryptsetup-luks was replaced by cryptsetup
redhat-lsb-compat was replaced by redhat-lsb-core
m17n-db-datafiles was replaced by m17n-db-extras (optional channel in RHEL 7)
openmotif-devel was replaced by motif-devel
libudev was replaced by systemd-libs
eject was replaced by util-linux
ql23xx-firmware was replaced by linux-firmware
coreutils-libs was replaced by coreutils
If a Non Red Hat signed package requires these packages, you may want
to monitor them closely. Although the replacement should be compatible,
it may have some minor differences, even in the case of common
application lifecycles.
One or more replacement packages are available only in other repositories.
You need to provide these repositories to make the upgrade or migration successful.
Be aware, that for in-place upgrades, only the optional repository is supported.
Packages from other repositories should be removed first.
For this purpose, if you want to upgrade, use the following additional option
to redhat-upgrade-tool:
--addrepo rhel-7-optional=<path to the optional repository>
Alternatively, you could remove all packages where the replacement is
part of the RHEL 7 Optional repository before you start the system upgrade.
If you want to migrate, you will need register your machine with subscription-manager
after the first boot of your new system and attach subscriptions that provide:
Red Hat Enterprise Linux 7 Server (RPMs)
Then you must enable any equivalent repositories (if they are disabled) and
install any needed packages.
For this purpose, you can run a prepared script:
/root/preupgrade/kickstart/noauto_postupgrade.d/install_rpmlist.sh /root/preupgrade/kickstart/RHRHEL7rpmlist_replaced-notbase
which will install any remaining packages from these repositories.
Please Note: The repositories listed above may not be exhaustive and we
are unable to confirm whther further repositories are needed for some
packages. This problem is already under consideration for a future fix.
INPLACERISK: HIGH: Package db4-cxx replacement moved to optional channel between RHEL 6 and RHEL 7. You need to enable this channel for upgrade.
INPLACERISK: HIGH: Package m17n-db-datafiles replacement moved to optional channel between RHEL 6 and RHEL 7. You need to enable this channel for upgrade.
INPLACERISK: SLIGHT: Some packages installed on the system changed their name between RHEL 6 and RHEL 7. Although they should be compatible, monitoring after the update is recommended.
Result for GMP library incompatibilities
Result: informational
Rule ID: xccdf_preupg_rule_packages_gmp_check_script
Time: 2016-02-02 08:58
Incompatibilities between GMP 4 and GMP 5.1 libraries.
Remediation instructions
GMP 6 is compatible with GMP 4 in major features. Incompatible changes affect only functions, which should not be used by user applications at all:
- mpn_bdivmod function
- BSDMP-like interface libmp.so
Result for Packages providing 'java' changed
Result: informational
Rule ID: xccdf_preupg_rule_packages_java-provide_checkscript
Time: 2016-02-02 08:58
Install java after upgrade if java is currently installed
Remediation instructions
In Red Hat Enterprise Linux 7, different rpm packages provide 'java' than in Red Hat Enterprise Linux 6. This can cause missing 'java' virtual provide on upgraded system and break 3rd party packages that depend on 'java'. Postupgrade script will install java after upgrade.
Result for RHEL not-base channels required
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_notbase-channel_check
Time: 2016-02-02 08:58
Detects upgrade problems with RHEL 'not-base' channels
Remediation instructions
Some installed packages are either from outside of the base channel for Red Hat Enterprise Linux 6, or replaced by a package in a RHEL 7 non base channel. Repositories such as 'Optional' will cause this message.
This will probably cause a failure in the upgrade of your system.
The following packages are affected:
SOAPpy (optional channel)
groff (optional channel)
liboil (optional channel)
libproxy-bin (optional channel)
libproxy-python (optional channel)
libreport-compat (optional channel)
libreport-plugin-kerneloops (optional channel)
libreport-plugin-logger (optional channel)
openscap-engine-sce (optional channel)
python-fpconst (optional channel)
python-twisted-core (optional channel)
python-twisted-web (optional channel)
python-zope-interface (optional channel)
system-config-firewall-tui (optional channel)
xz-lzma-compat (optional channel)
To enable the updating of packages that are now located in the RHEL 7 Optional repository, please provide the location of the Optional channel repository to redhat-upgrade-tool.
The syntax for the additional parameter is:
--addrepo rhel-7-optional=<path to the optional repository>
Alternatively, you could remove all packages which reside in the RHEL 7 Optional repository before starting the system upgrade.
One or more packages are available only in other repositories.
If you want to install them later, you will need to attach subscriptions that provide:
Red Hat Enterprise Linux 7 Server (RPMs)
Then you must enable any equivalent repositories (if they are disabled) and install any needed packages.
For this purpose, you can run a prepared script:
/root/preupgrade/kickstart/noauto_postupgrade.d/install_rpmlist.sh <some-rpmlist-file>
Please Note: The repositories listed above may not be exhaustive and we
are unable to confirm whther further repositories are needed for some
packages. This problem is already under consideration for a future fix.
INPLACERISK: HIGH: Package SOAPpy moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package groff moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package liboil moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package libproxy-bin moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package libproxy-python moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package libreport-compat moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package libreport-plugin-kerneloops moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package libreport-plugin-logger moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package openscap-engine-sce is available in The Optional channel.
INPLACERISK: HIGH: Package python-fpconst moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package python-twisted-core moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package python-twisted-web moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package python-zope-interface moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package system-config-firewall-tui moved to the Optional channel between RHEL 6 and RHEL 7.
INPLACERISK: HIGH: Package xz-lzma-compat moved to the Optional channel between RHEL 6 and RHEL 7.
Result for package downgrades
Result: fixed
Rule ID: xccdf_preupg_rule_packages_pkgdowngrades_pkgdowngrades
Time: 2016-02-02 08:58
detects package downgrades from RHEL6 to RHEL7
Remediation instructions
Some packages installed on your system have broken upgrade path from Red Hat
Enterprise Linux version 6 to version 7 (the version of package is lower in
newer Enterprise Linux).
This does not cause fail of redhat-upgrade-tool run and it could
potentially left system in inconsistent state (mixed RHEL 6 and RHEL 7
packages installed). Pre-upgrade scripts makes best effort to force
redhat-upgrade-tool in-place upgrade process install packages with broken
upgrade path but you should be aware of that and know what is happening.
Optionally, if possible, you may remove packages in question from RHEL 6
system.
Result for SELinux Custom Policy
Result: fixed
Rule ID: xccdf_preupg_rule_selinux_CustomPolicy_check
Time: 2016-02-02 08:58
Solve problem with custom SE policy modules after migration
Remediation instructions
Custom SELinux policy modules couldn't be found by sesearch. This is fixed by removing selinux module sandbox.pp which is repalced by sandboxX.pp and is disabled by default on RHEL7 systems.
This solve some other issues between sandbox.pp and sandboxX.pp too. So module
is removed be default now by postcript: /root/preupgrade/postupgrade.d/fix_SELinuxCustomPolicy.sh
Result for General
Result: needs_action
Rule ID: xccdf_preupg_rule_selinux_general_check
Time: 2016-02-02 08:58
There has to be some steps performed in order to have working SELinux on RHEL 7.
Remediation instructions
We have detected that you are using SELinux. There were changes in policies which require to apply custom command before upgrade process. In order to have working SELinux on Red Hat Enterprise Linux 7, you HAVE TO run command prior to running redhat-upgrade-tool:
semodule -r sandbox
INPLACERISK: HIGH: There were changes in SELinux policies between RHEL 6 and RHEL 7. Please, check solution in order to resolve this issue.
Result for CUPS Browsing/BrowsePoll configuration
Result: fixed
Rule ID: xccdf_preupg_rule_services_cupsbrowsing_cupsbrowsing
Time: 2016-02-02 08:58
The CUPS Browsing and BrowsePoll configuration directives have been removed from CUPS. A replacement is provided in the form of the cups-browsed service.
File(s) affected:
/etc/cups/cupsd.conf
Remediation instructions
The Browsing and BrowsePoll configuration directives have been removed from CUPS. The cups-browsed service replaces these two directives. This module identifies possible incompatibilities in the configuration file.
The browsing configuration using the CUPS Browsing protocol has been migrated to the cleanconf/etc/cups/cups-browsed.conf file, and the cups-browsed service will be enabled after upgrade.
Result for CVS Package Split
Result: informational
Rule ID: xccdf_preupg_rule_services_cvs_checkscript
Time: 2016-02-02 08:58
Some Concurrent Versions System (CVS) tools and documentation have been moved into separate packages and are no longer provided by the cvs packages.
Remediation instructions
The Concurrent Versions System (CVS) server and client have not been changed significantly and should be fully compatible. However, some tools and documentation have been moved to other packages which could concern some users.
The rcs2log and contrib utilities have been moved into the new cvs-contrib packages in order to remove the cvs packages dependency on perl and reduce the size of the cvs packages. If you require the rcs2log and contrib tools, you can install the packages manually by running the "yum install cvs-contrib" command as root.
Additional documentation, such as books concerning CVS tools in the PDF format and revision control system (RCS) specification files, has been moved into the new cvs-doc package to reduce the size of the cvs packages. If you want to access this additional documentation, install the package manually by running the "yum install cvs-doc" command as root. The manual and Texinfo pages are still included in the cvs packages.
These utilities and the supplemental documentation are not used by the CVS client or server. Their absence does not pose a risk when upgrading the cvs packages.
Result for NTP configuration
Result: pass
Rule ID: xccdf_preupg_rule_services_ntp_configuration_ntp
Time: 2016-02-02 08:58
Save ntp and ntpdate configuration files which are not tracked by rpm.
File(s) affected:
/etc/ntp.conf
/etc/ntp/step-tickers
Result for Information on time-sync.target
Result: informational
Rule ID: xccdf_preupg_rule_services_ntp_timesync_timesync
Time: 2016-02-02 08:58
Check if ntpdate service is enabled and print information on starting services with clock set
Remediation instructions
The ntpdate service is enabled on this system. In RHEL7 the system services are
managed by systemd, which starts services in parallel unless an ordering
dependency is specified. If you have a service that needs to be started after
the system clock was set by ntpdate, in RHEL7 you will need to add
"After=time-sync.target" to the systemd unit file of the service.
The time-sync target is provided also by other services available in RHEL7.
They they can be used as a replacement of the ntpdate service. The services are
ntp-wait from package ntp-perl (which waits until the ntpd service has
synchronized the clock), sntp service from package sntp, and chrony-wait
service from package chrony (which waits until the chronyd service has
synchronized the clock).
Please see RHEL7 System Administrator's Guide for more information.
Result for OpenSSH sshd_config migration content
Result: pass
Rule ID: xccdf_preupg_rule_services_openssh_sshd_openssh-sshd
Time: 2016-02-02 08:58
This content has a aim to convert /etc/ssh/sshd_config file from openssh-server package
File(s) affected:
/etc/ssh/sshd_config
Result for OpenSSH sysconfig migration content
Result: fixed
Rule ID: xccdf_preupg_rule_services_openssh_sysconfig_openssh-sysconfig
Time: 2016-02-02 08:58
This content has a aim to convert /etc/sysconfig/sshd file from openssh-server package
File(s) affected:
/etc/sysconfig/sshd
Remediation instructions
/etc/sysconfig/sshd will not be a shell script in RHEL 7 anymore so all 'export VARIABLE=VALUE' has to be changed to 'VARIABLE=VALUE'.
# sed -i 's/^export //' /etc/sysconfig/sshd
There is the /root/preupgrade/cleanconf//etc/sysconfig/sshd with the fixed configuration.
Result for Configuration for quota_nld service
Result: pass
Rule ID: xccdf_preupg_rule_services_quota_nld_configuration_checkscript
Time: 2016-02-02 08:58
Back configuration for quota_nld service up
File(s) affected:
/etc/sysconfig/quota_nld
Result for Disk quota netlink message daemon moved into quota-nld package
Result: pass
Rule ID: xccdf_preupg_rule_services_quota_nld_new_package_checkscript
Time: 2016-02-02 08:58
Install quota-nld package if the quota_nld service is enabled
Result for Detect LUKS devices using Whirlpool for password hash.
Result: pass
Rule ID: xccdf_preupg_rule_storage_cryptsetup-luks_detect-whirlpool-hash
Time: 2016-02-02 08:58
'Whirlpool hash implementation in libgcrypt of version <= 1.5.3 is broken. This content checks current system for presence of LUKS devices possibly using the bogus hash. In target system libgcrypt library is patched to use correct implementation so after reboot the freshly updated system may remain with LUKS devices imposibble to unlock.'
File(s) affected:
/etc/crypttab
Result for State of LVM2 services.
Result: fixed
Rule ID: xccdf_preupg_rule_storage_lvm2-services_check_lvm2_services
Time: 2016-02-02 08:58
Some services are important for proper LVM functionality. This content checks for current state of existing services and makes sure the state is preserved over upgrade. Also, some systemd units should be enabled by default to allow for service's on-demand activation if needed.
Remediation instructions
RHEL7 uses systemd for service management. When upgrading from RHEL6,
we need to be sure that certain services (systemd units) are enabled
or prepared for on-demand activation.
The LVM2 monitoring service inherits the old state, which means that if
the 'lvm2-monitor' service was enabled in RHEL6, it will also be enabled
in RHEL7 (lvm2-monitor.service) and vice versa.
In addition to that these systemd units are enabled to allow for on-demand
service activation:
dm-event.socket
lvm2-lvmetad.socket
The dm-event.socket is used for on-demand activation of dm-event.service.
This is an essential part of device-mapper monitoring feature (which also
covers monitoring of LVM devices).
The lvm2-lvmetad.socket is used for on-demand activation of lvm2-lvmetad.service
which starts the lvmetad - LVM metadata daemon that is used to cache LVM
metadata so LVM commands don't need to scan devices all the time and they
can reuse cached metadata. This functionality is used by default in RHEL7.
Result for Configuration for warnquota tool
Result: pass
Rule ID: xccdf_preupg_rule_storage_warnquota_configuration_checkscript
Time: 2016-02-02 08:58
Back configuration for warnquota tool up
File(s) affected:
/etc/quotagrpadmins
/etc/quotatab
/etc/warnquota.conf
Result for Disk quota tool warnquota moved into quota-warnquota package
Result: informational
Rule ID: xccdf_preupg_rule_storage_warnquota_new_package_checkscript
Time: 2016-02-02 08:58
Install quota-warnquota if need warnquota tool
Remediation instructions
Quota tool warnquota(8) has been moved from "quota" package into
"quota-warnquota" package.
If you used warnquota on the old system, please install quota-warnquota
package with this command on the new system:
# yum --assumeyes install quota-warnquota
Please do not forget to check warnquota configutation files
(/etc/quotagrpadmins, /etc/quotatab, and /etc/warnquota.conf) before using
the tool.
Please do not forget to install a cron job to execute the warnquota tool
periodically, if you used it on the the old system.
Result for Check for Add-On availability
Result: pass
Rule ID: xccdf_preupg_rule_system_AddOns_addons
Time: 2016-02-02 08:58
Content checks availability of High Availability, ResilientStorage and LoadBalancer Add-Ons.
Result for Architecture Support
Result: pass
Rule ID: xccdf_preupg_rule_system_Architecture_architecture
Time: 2016-02-02 08:58
Red Hat Enterprise Linux 7 does not support installations on 32-bit architectures, and performing an in-place upgrade is not possible on 32-bit systems.
Result for Binary rebuilds
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_BinariesRebuild_check
Time: 2016-02-02 08:58
Check all binaries installed on the assessment system which needs to be rebuilded on the target system
Remediation instructions
This content generates the list of binaries which needs to be rebuilt
You can find the list at:
kickstart/binaries
INPLACERISK: SLIGHT: Some scripts untracked by RPM were discovered on the system and may not work properly after upgrade.
Result for Debuginfo packages
Result: pass
Rule ID: xccdf_preupg_rule_system_Debuginfo_debuginfo
Time: 2016-02-02 08:59
This content checks for debuginfo packages and inform about potential risks for in-place upgrade.
Result for Read Only FHS directories
Result: pass
Rule ID: xccdf_preupg_rule_system_FHS_ReadOnlyFHS_check_script
Time: 2016-02-02 08:59
Check that critical directories of Filesystem Hierarchy Standard are not mounted read-only.
Result for Check FHS for /var incompabilities.
Result: informational
Rule ID: xccdf_preupg_rule_system_FHS_Run_check
Time: 2016-02-02 08:59
Since RHEL 7 are some changes in FHS, which could be in conflicts with old system (e.g. movement /var/run -> /run).
Remediation instructions
Since RHEL 7 exists '/run' directory where tmpfs is mounted for runtime data.
Original '/var/run' is symlink to this directory and likewise '/var/lock' points
to the '/run/lock/' now. '/run' directory is emptied on reboot, so all runtime
files must be created on boot again. See RHEL 7 Migration Planning Guidelines.
Result for In-place Upgrade Requirements for the /usr/ Directory
Result: pass
Rule ID: xccdf_preupg_rule_system_FHS_UsrPartition_usr
Time: 2016-02-02 08:59
This module determines if the /usr/ directory is located on a separate partition.
Result for Cluster and High Availability
Result: pass
Rule ID: xccdf_preupg_rule_system_HA-Cluster_ha-cluster_hacluster
Time: 2016-02-02 08:59
Content checks Cluster and High Availability solutions for upgrade.
Result for File Systems, Partitions and Mounts Configuration Review
Result: informational
Rule ID: xccdf_preupg_rule_system_PartitionMounts_partmounts
Time: 2016-02-02 08:59
This module describes the new default file system and stores the partitions and mounts configuration.
Remediation instructions
Red Hat Enterprise Linux 7 now uses the XFS file system as the default file system instead of the ext4 file system. If you intend to migrate the system to another machine or create a new file system, you can consider using XFS instead of ext4. Users who use a Kickstart installation can consider modifying the Kickstart configuration to use XFS.
Additionally, information about the partitions and mounts configuration has been saved in the /root/preupgrade/kickstart/ directory. This information can be useful to users who choose to perform a system migration or convert their file systems to XFS.
Result for Removable media in fstab
Result: informational
Rule ID: xccdf_preupg_rule_system_RemovableMedia_check_script
Time: 2016-02-02 08:59
Warn about removable media preventing boot
Remediation instructions
If there are any removable media listed in /etc/fstab, it is necessary to add "nofail" flag to each one of them. Red Hat Enterprise Linux 7 will fail to boot if the medium is not present and "nofail" is not specified. It is not possible to check this automatically with 100% confidence. Please check your /etc/fstab.
Result for Sonamebumped libs
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_SonameBump_SonameBump
Time: 2016-02-02 08:59
If the dynamic library breaks the API/ABI compatibility, it is supposed to change its soname. This content checks for the soname bumps between RHEL 6 and RHEL 7 in your Red Hat packages.
Remediation instructions
Application developed in C may use dynamic libraries (.so files) to reuse the
common functions/symbols in the binary. If the library bumped its soname (
changed major version, API/ABI incompatibility), application that depends on
it may not run.
Some of the libraries changed the soname version between Red Hat Enterprise
Linux 6 and Red Hat Enterprise Linux 7.
From your RHEL 6 packages, following libraries changed soname:
libanonymous.so.2 from cyrus-sasl-plain changed to libanonymous.so.3
libbind9.so.80 from bind-utils changed to libbind9.so.90
libcrammd5.so.2 from libvirt-client changed to libcrammd5.so.3
libcryptsetup.so.1 from cryptsetup-luks changed to libcryptsetup.so.4
libdigestmd5.so.2 from libvirt-client changed to libdigestmd5.so.3
libdns.so.81 from bind-utils changed to libdns.so.100
libdrm_nouveau.so.1 from libdrm-devel changed to libdrm_nouveau.so.2
libffi.so.5 from jna changed to libffi.so.6
libgdbm.so.2 from gdbm-devel changed to libgdbm.so.4
libgmp.so.3 from coreutils changed to libgmp.so.10
libgnutls.so.26 from gnutls-utils changed to libgnutls.so.28
libgnutlsxx.so.26 from gnutls-utils changed to libgnutlsxx.so.28
libgs.so.8 from foomatic changed to libgs.so.9
libisc.so.83 from bind-utils changed to libisc.so.95
libisccc.so.80 from bind-utils changed to libisccc.so.90
libisccfg.so.82 from bind-utils changed to libisccfg.so.90
libkadm5srv_mit.so.8 from krb5-devel changed to libkadm5srv_mit.so.9
libkdb5.so.6 from krb5-devel changed to libkdb5.so.8
liblogin.so.2 from cyrus-sasl-plain changed to liblogin.so.3
liblwres.so.80 from bind-utils changed to liblwres.so.90
liblzma.so.0 from xz changed to liblzma.so.5
libmpfr.so.1 from mpfr changed to libmpfr.so.4
libmysqlclient.so.16 from postfix changed to libmysqlclient.so.18
libpcre.so.0 from postfix changed to libpcre.so.1
libplain.so.2 from cyrus-sasl-plain changed to libplain.so.3
libpoppler.so.5 from poppler-utils changed to libpoppler.so.46
libproxy.so.0 from libproxy-python changed to libproxy.so.1
librpm.so.1 from rpm-libs changed to librpm.so.3
librpmbuild.so.1 from rpm-libs changed to librpmbuild.so.3
librpmio.so.1 from rpm-libs changed to librpmio.so.3
libsasl2.so.2 from cyrus-sasl-plain changed to libsasl2.so.3
libsasldb.so.2 from cyrus-sasl-plain changed to libsasldb.so.3
libtasn1.so.3 from libtasn1 changed to libtasn1.so.6
libudev.so.0 from device-mapper changed to libudev.so.1
libverto.so.0 from krb5-devel changed to libverto.so.1
libyajl.so.1 from yajl changed to libyajl.so.2
We checked the requirements in Non-RH signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you will
need to rebuild such package/application against new library.
Red Hat Enterprise Linux applications available on the RHEL 7 will handle
these bumps automatically by the update/migration to new Red Hat Enterprise
Linux as they were already built against these libraries.
INPLACERISK: MEDIUM: We detected some soname bumps in the libraries installed on the system. This may break the functionality of some of your 3rd party applications. They may need rebuild. Please check their requirements.
Result for SonameKept Reusable Dynamic Libraries
Result: informational
Rule ID: xccdf_preupg_rule_system_SonameKept_SonameKept
Time: 2016-02-02 08:59
This module provides an overview of the dynamic libraries from Red Hat Enterprise Linux 6 that can be reused in Red Hat Enterprise Linux 7, as the dynamic libraries remain compatible with both the application programming interface (API) and the application binary interface (ABI).
Remediation instructions
Applications developed in the C programming language can use dynamic libraries (.so files) to reuse common functions and symbols in the binary. When the library changes its soname in a major version, the binaries normally need to be rebuilt for the new system. Some libraries have not changed their soname between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 so it could be possible to reuse third party applications which use only these libraries without rebuilding.
You can find the list of the unchanged dynamic libraries and their package names in the following file: ./kickstart/NoSonameBumpLibs
If it is not clear what libraries the third party binary or RPM uses, it is possible to use the ldd utility for the C binary, or run the "rpm -q --whatrequires SONAME" command for the whole RPM package. No problems are expected to occur if there are only .so files listed in the NoSonameBumpLibs file and unversioned shared libraries.
Result for Removed .so libs
Result: needs_action
Rule ID: xccdf_preupg_rule_system_SonameRemoval_SonameRemoval
Time: 2016-02-02 09:00
Dynamic libraries are used provides symbols/functions to binaries. Some of the libraries were removed between RHEL 6 and RHEL 7. This content checks for the .so libraries removal between RHEL 6 and RHEL 7 in your Red Hat packages.
Remediation instructions
Application developed in C may use dynamic libraries (.so files) to reuse the
common functions/symbols in the binary. If the library is missing, application
will not run. Some of the libraries were removed between RHEL 6 and RHEL 7.
From your Red Hat Enterprise Linux 6 packages, following libraries disappeared:
/builddir/build/BUILD/jna-3.2.4/build-d64/native/libjnidispatch.so from libvirt-java
ANSI_X3.110.so from prelink
ARMSCII-8.so from prelink
ASMO_449.so from prelink
B.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
BIG5.so from prelink
BIG5HKSCS.so from prelink
BRF.so from prelink
Base64.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Byte.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
CN.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
CP10007.so from prelink
CP1125.so from prelink
CP1250.so from prelink
CP1251.so from prelink
CP1252.so from prelink
CP1253.so from prelink
CP1254.so from prelink
CP1255.so from prelink
CP1256.so from prelink
CP1257.so from prelink
CP1258.so from prelink
CP737.so from prelink
CP775.so from prelink
CP932.so from prelink
CSN_369103.so from prelink
CWI.so from prelink
Call.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Cwd.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
DB_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
DEC-MCS.so from prelink
DProf.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Dumper.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
EBCDIC-AT-DE-A.so from prelink
EBCDIC-AT-DE.so from prelink
EBCDIC-CA-FR.so from prelink
EBCDIC-DK-NO-A.so from prelink
EBCDIC-DK-NO.so from prelink
EBCDIC-ES-A.so from prelink
EBCDIC-ES-S.so from prelink
EBCDIC-ES.so from prelink
EBCDIC-FI-SE-A.so from prelink
EBCDIC-FI-SE.so from prelink
EBCDIC-FR.so from prelink
EBCDIC-IS-FRISS.so from prelink
EBCDIC-IT.so from prelink
EBCDIC-PT.so from prelink
EBCDIC-UK.so from prelink
EBCDIC-US.so from prelink
EBCDIC.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
ECMA-CYRILLIC.so from prelink
EUC-CN.so from prelink
EUC-JISX0213.so from prelink
EUC-JP-MS.so from prelink
EUC-JP.so from prelink
EUC-KR.so from prelink
EUC-TW.so from prelink
Encode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Everything_module.so from ORBit2
Expat.so from perl-XML-Parser
FastCalc.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Fcntl.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
FieldHash.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
GB18030.so from prelink
GBBIG5.so from prelink
GBGBK.so from prelink
GBK.so from prelink
GDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
GEORGIAN-ACADEMY.so from prelink
GEORGIAN-PS.so from prelink
GOST_19768-74.so from prelink
GREEK-CCITT.so from prelink
GREEK7-OLD.so from prelink
GREEK7.so from prelink
Glob.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
HP-GREEK8.so from prelink
HP-ROMAN8.so from prelink
HP-ROMAN9.so from prelink
HP-THAI8.so from prelink
HP-TURKISH8.so from prelink
Hostname.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
IBM037.so from prelink
IBM038.so from prelink
IBM1004.so from prelink
IBM1008.so from prelink
IBM1008_420.so from prelink
IBM1025.so from prelink
IBM1026.so from prelink
IBM1046.so from prelink
IBM1047.so from prelink
IBM1097.so from prelink
IBM1112.so from prelink
IBM1122.so from prelink
IBM1123.so from prelink
IBM1124.so from prelink
IBM1129.so from prelink
IBM1130.so from prelink
IBM1132.so from prelink
IBM1133.so from prelink
IBM1137.so from prelink
IBM1140.so from prelink
IBM1141.so from prelink
IBM1142.so from prelink
IBM1143.so from prelink
IBM1144.so from prelink
IBM1145.so from prelink
IBM1146.so from prelink
IBM1147.so from prelink
IBM1148.so from prelink
IBM1149.so from prelink
IBM1153.so from prelink
IBM1154.so from prelink
IBM1155.so from prelink
IBM1156.so from prelink
IBM1157.so from prelink
IBM1158.so from prelink
IBM1160.so from prelink
IBM1161.so from prelink
IBM1162.so from prelink
IBM1163.so from prelink
IBM1164.so from prelink
IBM1166.so from prelink
IBM1167.so from prelink
IBM12712.so from prelink
IBM1364.so from prelink
IBM1371.so from prelink
IBM1388.so from prelink
IBM1390.so from prelink
IBM1399.so from prelink
IBM16804.so from prelink
IBM256.so from prelink
IBM273.so from prelink
IBM274.so from prelink
IBM275.so from prelink
IBM277.so from prelink
IBM278.so from prelink
IBM280.so from prelink
IBM281.so from prelink
IBM284.so from prelink
IBM285.so from prelink
IBM290.so from prelink
IBM297.so from prelink
IBM420.so from prelink
IBM423.so from prelink
IBM424.so from prelink
IBM437.so from prelink
IBM4517.so from prelink
IBM4899.so from prelink
IBM4909.so from prelink
IBM4971.so from prelink
IBM500.so from prelink
IBM5347.so from prelink
IBM803.so from prelink
IBM850.so from prelink
IBM851.so from prelink
IBM852.so from prelink
IBM855.so from prelink
IBM856.so from prelink
IBM857.so from prelink
IBM860.so from prelink
IBM861.so from prelink
IBM862.so from prelink
IBM863.so from prelink
IBM864.so from prelink
IBM865.so from prelink
IBM866.so from prelink
IBM866NAV.so from prelink
IBM868.so from prelink
IBM869.so from prelink
IBM870.so from prelink
IBM871.so from prelink
IBM874.so from prelink
IBM875.so from prelink
IBM880.so from prelink
IBM891.so from prelink
IBM901.so from prelink
IBM902.so from prelink
IBM903.so from prelink
IBM9030.so from prelink
IBM904.so from prelink
IBM905.so from prelink
IBM9066.so from prelink
IBM918.so from prelink
IBM921.so from prelink
IBM922.so from prelink
IBM930.so from prelink
IBM932.so from prelink
IBM933.so from prelink
IBM935.so from prelink
IBM937.so from prelink
IBM939.so from prelink
IBM943.so from prelink
IBM9448.so from prelink
IEC_P27-1.so from prelink
INIS-8.so from prelink
INIS-CYRILLIC.so from prelink
INIS.so from prelink
IO.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
ISIRI-3342.so from prelink
ISO-2022-CN-EXT.so from prelink
ISO-2022-CN.so from prelink
ISO-2022-JP-3.so from prelink
ISO-2022-JP.so from prelink
ISO-2022-KR.so from prelink
ISO-IR-197.so from prelink
ISO-IR-209.so from prelink
ISO646.so from prelink
ISO8859-1.so from prelink
ISO8859-10.so from prelink
ISO8859-11.so from prelink
ISO8859-13.so from prelink
ISO8859-14.so from prelink
ISO8859-15.so from prelink
ISO8859-16.so from prelink
ISO8859-2.so from prelink
ISO8859-3.so from prelink
ISO8859-4.so from prelink
ISO8859-5.so from prelink
ISO8859-6.so from prelink
ISO8859-7.so from prelink
ISO8859-8.so from prelink
ISO8859-9.so from prelink
ISO8859-9E.so from prelink
ISO_10367-BOX.so from prelink
ISO_11548-1.so from prelink
ISO_2033.so from prelink
ISO_5427-EXT.so from prelink
ISO_5427.so from prelink
ISO_5428.so from prelink
ISO_6937-2.so from prelink
ISO_6937.so from prelink
JOHAB.so from prelink
JP.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
KOI-8.so from prelink
KOI8-R.so from prelink
KOI8-RU.so from prelink
KOI8-T.so from prelink
KOI8-U.so from prelink
KR.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
LATIN-GREEK-1.so from prelink
LATIN-GREEK.so from prelink
Langinfo.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
MAC-CENTRALEUROPE.so from prelink
MAC-IS.so from prelink
MAC-SAMI.so from prelink
MAC-UK.so from prelink
MACINTOSH.so from prelink
MD5.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
MIK.so from prelink
NATS-DANO.so from prelink
NATS-SEFI.so from prelink
NDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Normalize.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Opcode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
POSIX.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
PPPort.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
PT154.so from prelink
Peek.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
RK1048.so from prelink
SAMI-WS2.so from prelink
SDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
SHIFT_JISX0213.so from prelink
SJIS.so from prelink
SSL.so from python-twisted-core
Socket.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Soundex.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Storable.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Symbol.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
SysV.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Syslog.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
T.61.so from prelink
TCVN5712-1.so from prelink
TIS-620.so from prelink
TSCII.so from prelink
TW.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
UHC.so from prelink
UNICODE.so from prelink
UTF-16.so from prelink
UTF-32.so from prelink
UTF-7.so from prelink
Unicode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
Util.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
VISCII.so from prelink
X11.so from foomatic
Zlib.so from perl-Compress-Raw-Zlib
__m2crypto.so from yum-rhn-plugin
_bisectmodule.so from python-libs
_bsddb.so from python-libs
_bytesio.so from python-libs
_c_urlarg.so from python-twisted-web
_certificate.so from redhat-upgrade-tool (required by NonRH signed package(s):redhat-upgrade-tool )
_client.so from subversion
_codecs_cn.so from python-libs
_codecs_hk.so from python-libs
_codecs_iso2022.so from python-libs
_codecs_jp.so from python-libs
_codecs_kr.so from python-libs
_codecs_tw.so from python-libs
_collectionsmodule.so from python-libs
_core.so from subversion
_cryptmodule.so from python-libs
_csv.so from python-libs
_ctypes.so from python-libs
_curses.so from python-libs
_curses_panel.so from python-libs
_dbus_bindings.so from system-config-network-tui
_dbus_glib_bindings.so from system-config-network-tui
_delta.so from subversion
_diff.so from subversion
_elementtree.so from python-libs
_epoll.so from python-twisted-web
_fileio.so from python-libs
_fs.so from subversion
_functoolsmodule.so from python-libs
_gio.so from subscription-manager
_glib.so from subscription-manager
_gobject.so from subscription-manager
_gpgme.so from yum
_hashlib.so from python-libs
_heapq.so from python-libs
_hotshot.so from python-libs
_json.so from python-libs
_localemodule.so from python-libs
_lsprof.so from python-libs
_multibytecodecmodule.so from python-libs
_multiprocessing.so from python-libs
_pyabrt.so from abrt
_pyreport.so from libreport
_ra.so from subversion
_randommodule.so from python-libs
_reportclient.so from libreport
_repos.so from subversion
_rpmbmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents )
_rpmmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents )
_snackmodule.so from authconfig
_socketmodule.so from python-libs
_sqlite3.so from python-libs
_sqlitecache.so from yum
_ssl.so from python-libs
_struct.so from python-libs
_wc.so from subversion
_weakref.so from python-libs
_zope_interface_coptimizations.so from python-twisted-core
acutilmodule.so from authconfig
arraymodule.so from python-libs
attrs.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
audioop.so from python-libs
binascii.so from python-libs
boolean.so from SOAPpy
bz2.so from python-libs
cPickle.so from python-libs
cStringIO.so from python-libs
cmathmodule.so from python-libs
config_direct.so from libproxy-python
config_envvar.so from libproxy-python
config_file.so from libproxy-python
config_wpad.so from libproxy-python
crypto.so from python-twisted-core
datetime.so from python-libs
dbm.so from python-libs
details.so from dracut
dlmodule.so from python-libs
dmidecodemod.so from subscription-manager
drm.so from dracut
encoding.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
ethtool.so from system-config-network-tui
etree.so from redhat-support-tool
fcntlmodule.so from python-libs
frame-buffer.so from dracut
future_builtins.so from python-libs
gdbmmodule.so from python-libs
grpmodule.so from python-libs
gudev.so from rhn-client-tools
ignore_domain.so from libproxy-python
ignore_ip.so from libproxy-python
imageop.so from python-libs
imfile.so from rsyslog
imklog.so from rsyslog
immark.so from rsyslog
impstats.so from rsyslog
imptcp.so from rsyslog
imtcp.so from rsyslog
imudp.so from rsyslog
imuxsock.so from rsyslog
itertoolsmodule.so from python-libs
iwlib.so from system-config-network-tui
libLLVM-3.4-mesa.so from mesa-private-llvm
libQtAssistantClient.so.4 from qt-x11
libabrt_web.so.0 from abrt
libbfd-2.20.51.0.2-5.43.el6.so from rpm-build
libcapi.so from openssl-devel
libck-connector.so.0 from ConsoleKit-libs
libcloog.so.0 from gcc
libcupsdriver.so.1 from cups
libdrm_nouveau2.so.2 from libdrm-devel
libebl_aarch64-0.161.so from abrt-addon-ccpp
libebl_alpha-0.161.so from abrt-addon-ccpp
libebl_arm-0.161.so from abrt-addon-ccpp
libebl_i386-0.161.so from abrt-addon-ccpp
libebl_ia64-0.161.so from abrt-addon-ccpp
libebl_ppc-0.161.so from abrt-addon-ccpp
libebl_ppc64-0.161.so from abrt-addon-ccpp
libebl_s390-0.161.so from abrt-addon-ccpp
libebl_sh-0.161.so from abrt-addon-ccpp
libebl_sparc-0.161.so from abrt-addon-ccpp
libebl_tilegx-0.161.so from abrt-addon-ccpp
libebl_x86_64-0.161.so from abrt-addon-ccpp
libeggdbus-1.so.0 from eggdbus
libevent-1.4.so.2 from nfs-utils
libevent_core-1.4.so.2 from nfs-utils
libevent_extra-1.4.so.2 from nfs-utils
libexpect5.44.1.15.so from expect
libfakeroot-0.so from fakeroot
libgcj-tools.so.10 from libgcj
libgcj.so.10 from libgcj
libgcj_bc.so.1 from libgcj
libgconfbackend-evoldap.so from libgsf
libgettextlib-0.17.so from libvirt-client
libgettextsrc-0.17.so from libvirt-client
libgij.so.10 from libgcj
libgjsmalsa.so from libgcj
libgnutls-extra.so.26 from gnutls-utils
libgpgme-pth.so.11 from gpgme
libgssglue.so.1 from nfs-utils-lib
libgstvideo4linux.so from gstreamer-plugins-base
libgtkpeer.so from libgcj
libhal-storage.so.1 from hal
libhal.so.1 from hal
libhunspell-1.2.so.0 from hunspell-en
libip6t_SET.so from system-config-firewall-base
libip6t_set.so from system-config-firewall-base
libipt_SET.so from system-config-firewall-base
libipt_addrtype.so from system-config-firewall-base
libipt_ecn.so from system-config-firewall-base
libipt_set.so from system-config-firewall-base
libiw.so.29 from python-iwlib
libjavamath.so from libgcj
liblcms.so.1 from lcms-libs
libldif-2.4.so.2 from postfix
libmp.so.3 from coreutils
libmysqlclient_r.so.16 from postfix
libnih-dbus.so.1 from libnih
libnih.so.1 from libnih
libnullbackend.so from polkit
libopcodes-2.20.51.0.2-5.43.el6.so from rpm-build
libpadlock.so from openssl-devel
libpangox-1.0.so.0 from pango-devel
libparted-2.1.so.0 from parted
libphonon_gstreamer.so from phonon-backend-gstreamer
libpkexec-action-lookup.so from polkit
libpolkit-backend-1.so.0 from polkit
libppl.so.7 from ppl
libppl_c.so.2 from ppl
libproc-3.2.8.so from readahead
libpython2.6.so.1.0 from python-libs
librpcsecgss.so.3 from nfs-utils
libstdbuf.so from coreutils
libsvg.so from emacs
libusbpp-0.1.so.4 from hal
libverto-k5ev.so.0 from krb5-devel
linuxaudiodev.so from python-libs
lmnet.so from rsyslog
lmnetstrms.so from rsyslog
lmnsd_ptcp.so from rsyslog
lmregexp.so from rsyslog
lmstrmsrv.so from rsyslog
lmtcpclt.so from rsyslog
lmtcpsrv.so from rsyslog
lmzlibw.so from rsyslog
m_xt.so from iproute
magic.so from redhat-access-insights
mathmodule.so from python-libs
mga_dri.so from mesa-dri-drivers
mmapmodule.so from python-libs
mro.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
network_networkmanager.so from libproxy-python
nismodule.so from python-libs
nsswitch.so from nfs-utils
objectify.so from redhat-support-tool
ommail.so from rsyslog
omprog.so from rsyslog
omruleset.so from rsyslog
omtesting.so from rsyslog
omuxsock.so from rsyslog
operator.so from python-libs
ossaudiodev.so from python-libs
p11-kit-trust.so from ca-certificates
pam_access.so from pam-devel
pam_cap.so from nfs-utils
pam_chroot.so from pam-devel
pam_ck_connector.so from ConsoleKit-libs
pam_console.so from pam-devel
pam_cracklib.so from pam-devel
pam_debug.so from pam-devel
pam_deny.so from pam-devel
pam_echo.so from pam-devel
pam_env.so from pam-devel
pam_exec.so from pam-devel
pam_faildelay.so from pam-devel
pam_faillock.so from pam-devel
pam_filter.so from pam-devel
pam_fprintd.so from fprintd-pam
pam_ftp.so from pam-devel
pam_group.so from pam-devel
pam_issue.so from pam-devel
pam_keyinit.so from pam-devel
pam_lastlog.so from pam-devel
pam_limits.so from pam-devel
pam_listfile.so from pam-devel
pam_localuser.so from pam-devel
pam_loginuid.so from pam-devel
pam_mail.so from pam-devel
pam_mkhomedir.so from pam-devel
pam_motd.so from pam-devel
pam_namespace.so from pam-devel
pam_nologin.so from pam-devel
pam_passwdqc.so from pam_passwdqc
pam_permit.so from pam-devel
pam_postgresok.so from pam-devel
pam_pwhistory.so from pam-devel
pam_rhosts.so from pam-devel
pam_rootok.so from pam-devel
pam_securetty.so from pam-devel
pam_selinux.so from pam-devel
pam_sepermit.so from pam-devel
pam_shells.so from pam-devel
pam_stress.so from pam-devel
pam_succeed_if.so from pam-devel
pam_tally2.so from pam-devel
pam_time.so from pam-devel
pam_timestamp.so from pam-devel
pam_tty_audit.so from pam-devel
pam_umask.so from pam-devel
pam_unix.so from pam-devel
pam_userdb.so from pam-devel
pam_warn.so from pam-devel
pam_wheel.so from pam-devel
pam_xauth.so from pam-devel
pango-arabic-fc.so from pango-devel
pango-arabic-lang.so from pango-devel
pango-basic-x.so from pango-devel
pango-hangul-fc.so from pango-devel
pango-hebrew-fc.so from pango-devel
pango-indic-fc.so from pango-devel
pango-indic-lang.so from pango-devel
pango-khmer-fc.so from pango-devel
pango-syriac-fc.so from pango-devel
pango-thai-fc.so from pango-devel
pango-thai-lang.so from pango-devel
pango-tibetan-fc.so from pango-devel
parsermodule.so from python-libs
pmlastmsg.so from rsyslog
pycurl.so from python-urlgrabber
pyexpat.so from python-libs
r128_dri.so from mesa-dri-drivers
raiser.so from python-twisted-web
rand.so from python-twisted-core
re.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
readline.so from python-libs
resource.so from python-libs
savage_dri.so from mesa-dri-drivers
scalar.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
selectmodule.so from python-libs
sgmlop.so from SOAPpy
shared.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
smixer-ac97.so from alsa-lib
smixer-hda.so from alsa-lib
smixer-sbase.so from alsa-lib
spwdmodule.so from python-libs
staplog.so from systemtap-client
static.so from nfs-utils
stropmodule.so from python-libs
svg_loader.so from emacs
syslog.so from python-libs
termios.so from python-libs
text.so from dracut
threads.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
timemodule.so from python-libs
timingmodule.so from python-libs
umich_ldap.so from nfs-utils
unichrome_dri.so from mesa-dri-drivers
unicodedata.so from python-libs
unix.so from subscription-manager
via.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents )
wpad_dns.so from libproxy-python
wpad_dnsdevolution.so from libproxy-python
xxsubtype.so from python-libs
zlibmodule.so from python-libs
We checked the requirements in Non-RH signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you may need
to get the .so library from different place or search for an alternative.
INPLACERISK: HIGH: Library B.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Base64.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Byte.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library CN.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Call.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Cwd.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library DB_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library DProf.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Dumper.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library EBCDIC.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Encode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library FastCalc.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Fcntl.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library FieldHash.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library GDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Glob.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Hostname.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library IO.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library JP.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library KR.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Langinfo.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library MD5.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library NDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Normalize.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Opcode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library POSIX.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library PPPort.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Peek.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library SDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Socket.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Soundex.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Storable.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Symbol.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library SysV.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Syslog.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library TW.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Unicode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library Util.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library _certificate.so from redhat-upgrade-tool (required by NonRH signed package(s):redhat-upgrade-tool ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library _rpmbmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library _rpmmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library attrs.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library encoding.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library mro.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library re.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library scalar.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library shared.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library threads.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: HIGH: Library via.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7
INPLACERISK: MEDIUM: We detected some .so libraries installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of some of your 3rd party applications.
Result for CGROUP_DAEMON in sysconfig scripts
Result: pass
Rule ID: xccdf_preupg_rule_system_SysconfigCgroupDaemon_check
Time: 2016-02-02 09:00
'Check script searches /etc/sysconfig/* for CGROUP_DAEMON variable'
Result for Check the system version
Result: pass
Rule ID: xccdf_preupg_rule_system_SystemVersion_check
Time: 2016-02-02 09:00
Check if the system is last released version
Result for CA certificate bundles modified
Result: pass
Rule ID: xccdf_preupg_rule_system_ca-certificates_checkbundles
Time: 2016-02-02 09:00
Later versions of RHEL include a shared store for certificate authorities. Additional trusted certificate authorities must be placed in the new location rather that modifying the distributed certificate authority bundles. The Preupgrade assistant cannot automatically identify how certificate bundles have been modified on this system.
Result for Developer Tool Set packages
Result: pass
Rule ID: xccdf_preupg_rule_system_dts_dts
Time: 2016-02-02 09:00
Content checks whether Red Hat Developer Tool Set packages are installed.
Result for Check for GRUB splash.xpm.gz file
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_grub_grub
Time: 2016-02-02 09:00
Content checks whether splash.xpm.gz file exists and backups them
Remediation instructions
Grub package is used as loader of linux system.
Preupgrade assistant will backup file /boot/grub/splash.xpm.gz
and restore restore them after inplace upgrade to /boot/grub directory.
Modification of boot parameters is not possible without that file.
INPLACERISK: SLIGHT: File splash.xpm.gz was backuped for inplace upgrade case and editing grub options
Result for Workaround for crashing grubby.
Result: fixed
Rule ID: xccdf_preupg_rule_system_grubby_check
Time: 2016-02-02 09:00
Workaround for crashing grubby. Fill initrd in /boot/grub/grub.conf by a postupgrade script.
Remediation instructions
This content works around crashing grubby. It modifies /boot/grub/grub.conf by adding initrd.
Result for Obsoleted HAL (Hardware Abstraction Layer)
Result: pass
Rule ID: xccdf_preupg_rule_system_hal_check_script
Time: 2016-02-02 09:01
Check for packages dependent on hal.
Result for Hyper-V
Result: pass
Rule ID: xccdf_preupg_rule_system_hyperv_check
Time: 2016-02-02 09:01
Check if this system runs on Hyper-V.
Result for Content for enabling and disabling services based on RHEL 6 system
Result: needs_action
Rule ID: xccdf_preupg_rule_system_initscripts_control_check
Time: 2016-02-02 09:01
The content checks what services are enabled or disabled on assessment system and if the services will be enabled or disabled on RHEL 7 system.
Remediation instructions
The content detects some services which are disabled by default on Red Hat Enterprise Linux 7 system.
INPLACERISK: MEDIUM: The service beah-beaker-backend is not installed by RedHat signed packages and will not be automatically enabled after in-place upgrade.
INPLACERISK: MEDIUM: The service beah-fwd-backend is not installed by RedHat signed packages and will not be automatically enabled after in-place upgrade.
INPLACERISK: MEDIUM: The service beah-srv is not installed by RedHat signed packages and will not be automatically enabled after in-place upgrade.
INPLACERISK: HIGH: The service blk-availability on RHEL 7 is disabled by default. Enable them via commands: systemctl enable blk-availability && systemctl start blk-availability.service .
INPLACERISK: MEDIUM: The name cups-lpd was changed on RHEL 7 to one of these services: cups-lpd.socket cups-lpd@.service
INPLACERISK: HIGH: The service haldaemon on RHEL 7 is disabled by default. Enable them via commands: systemctl enable haldaemon && systemctl start haldaemon.service .
INPLACERISK: HIGH: The service ip6tables on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ip6tables && systemctl start ip6tables.service .
INPLACERISK: HIGH: The service libvirt-guests on RHEL 7 is disabled by default. Enable them via commands: systemctl enable libvirt-guests && systemctl start libvirt-guests.service .
INPLACERISK: HIGH: The service messagebus on RHEL 7 is disabled by default. Enable them via commands: systemctl enable messagebus && systemctl start messagebus.service .
INPLACERISK: HIGH: The service netfs on RHEL 7 is disabled by default. Enable them via commands: systemctl enable netfs && systemctl start netfs.service .
INPLACERISK: HIGH: The service network on RHEL 7 is disabled by default. Enable them via commands: systemctl enable network && systemctl start network.service .
INPLACERISK: HIGH: The service nfslock on RHEL 7 is disabled by default. Enable them via commands: systemctl enable nfslock && systemctl start nfslock.service .
INPLACERISK: HIGH: The service ntpd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ntpd && systemctl start ntpd.service .
INPLACERISK: HIGH: The service ntpdate on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ntpdate && systemctl start ntpdate.service .
INPLACERISK: HIGH: The service portreserve on RHEL 7 is disabled by default. Enable them via commands: systemctl enable portreserve && systemctl start portreserve.service .
INPLACERISK: HIGH: The service rhsmcertd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rhsmcertd && systemctl start rhsmcertd.service .
INPLACERISK: HIGH: The service rpcgssd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rpcgssd && systemctl start rpcgssd.service .
INPLACERISK: HIGH: The service sendmail on RHEL 7 is disabled by default. Enable them via commands: systemctl enable sendmail && systemctl start sendmail.service .
INPLACERISK: HIGH: The service udev-post on RHEL 7 is disabled by default. Enable them via commands: systemctl enable udev-post && systemctl start udev-post.service .
INPLACERISK: MEDIUM: The service anamon is disabled and not handled by any package. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service beah-fakelc is disabled and not installed by RedHat signed packages. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service rhts-compat is disabled and not installed by RedHat signed packages. It will be disabled after an in-place upgrade.
Result for Check for ethernet interface naming
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_initscripts_ifcfg_check_script
Time: 2016-02-02 09:01
The content checks if network interface names set through /etc/sysconfig/network-scripts/ifcfg-* files are compatible with device naming in Red Hat Enterprise Linux 7.
Remediation instructions
Red Hat Enterprise Linux 7 still offers possibility to specifying names for network interface by setting DEVICE and HWADDR options in /etc/sysconfig/network-scripts/ifcfg-* configuration files. Unfortunally udev does not support swapping interface names anymore. In the case that you set ethX names to multiple network card and kernel discovers them in different order, udev rule 60-net.rules will most likely fail.
It is highly recommended to rename such interfaces or remove DEVICE line from ifcfg configuration files.
Red Hat Enterprise Linux 7 also introduces predictable network interface device names: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/
INPLACERISK: SLIGHT: You use one network device with old style 'ethX' name. This will work as long as you only have one but will break with multiple such devices.
INPLACERISK: MEDIUM: You use multiple network devices with old style 'ethX' names.
Result for User modification in /etc/rc.local and /etc/rc.d/rc.local
Result: pass
Rule ID: xccdf_preupg_rule_system_initscripts_rc-local_rclocal
Time: 2016-02-02 09:01
The content checks whether user modifies files /etc/rc.local and /etc/rc.d/rc.local
Result for cgroups configuration compatibility check
Result: needs_action
Rule ID: xccdf_preupg_rule_system_libcgroup_cgroups
Time: 2016-02-02 09:01
Checks libcgroup configuration files
File(s) affected:
/etc/cgconfig.conf
/etc/cgrules.conf
/etc/cgconfig.d
Remediation instructions
In previous versions of Red Hat Enterprise Linux, system administrators built
custom cgroup hierarchies with use of the cgconfig command from the libcgroup
package. This package is now deprecated. There is only special situation,
in which libgroups should be used.
Red Hat Enterprise Linux 7 moves the resource management settings from the
process level to the application level by binding the cgroup hierarchy
with the systemd unit hierarchy. Therefore, you can manage the cgroup tree
with systemctl commands.
For more details see Red Hat Enterprise Linux 7 Resource Management Guide,
Chapter 2 (Using Control Groups):
https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_Control_Groups.html
Chapter 3 (Using libcgroup Tools)
https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_libcgroup_Tools.html
INPLACERISK: HIGH: additional libcgroup configuration files were created (/etc/cgconfig.d)
Result for Plugable authentication modules (PAM)
Result: pass
Rule ID: xccdf_preupg_rule_system_pam_pam
Time: 2016-02-02 09:01
Content checks for no-longer supported pluggable authentication modules
Result for Foreign Perl modules
Result: informational
Rule ID: xccdf_preupg_rule_system_perl_check
Time: 2016-02-02 09:01
Find Perl modules which need to be checked for proper functionality with newer Perl version on the Red Hat Enterprise Linux 7 system because they are not distributed by Red Hat
Remediation instructions
Perl was updated from version 5.10 to version 5.16. Please read Perl
section in the Red Hat Enterprise Linux 7 Developer Guide for more details.
Following Perl module files located in system Perl paths are either not
handled by any package or not signed by Red Hat:
Result for PolicyKit (alias polkit) config files
Result: informational
Rule ID: xccdf_preupg_rule_system_polkit_check
Time: 2016-02-02 09:01
PolicyKit has important changes of config files. Check modyfied and owns config files.
Remediation instructions
PolicyKit (alias polkit) doesn't use *.conf *.pkla file. Everything is inside
*.rules files instead, which contains rules written in javascript (See more in
Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide, chapter 4).
Result for Python 2.7.5
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_python_check
Time: 2016-02-02 09:01
This module provides you with a list of packages that need to be rebuilt for version 2.7.5 of the Python programming language that is shipped with Red Hat Enterprise Linux 7.
Remediation instructions
This solution text contains a list of packages that need to be rebuilt for Python 2.7.5, which is shipped with Red Hat Enterprise Linux 7.
Red Hat Enterprise Linux 7 contains Python version 2.7.5. For information about the differences from older versions and for further details, see https://access.redhat.com/site/articles/676453.
The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by Red Hat. These packages need to be rebuilt and reinstalled in order to work with Python 2.7.5. You can find more details at https://access.redhat.com/site/articles/676453.
WARNING python: Package python-backportspython-backports-ssl_match_hostname is not installed on Red Hat Enterprise Linux system.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/backports is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/beah is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/beah-0.7.9.dev201508261529-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preup is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preupgrade_assistant-2.1.4-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preuputils is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_access_insights is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_upgrade_tool is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/rhts is owned by an RPM package that was not signed by Red Hat.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/report is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/reportclient is not owned by any RPM package.
Result for Save repositories for kickstart
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_repositories_check
Time: 2016-02-02 09:01
Content checks enabled repositories. Name and baseurl are stored to file available-repos in kickstart directory.
Remediation instructions
The content stores enabled repositories for kickstart issues in file ./kickstart/available-repos
During kickstart generation these repositories are added to kickstart script.
INPLACERISK: SLIGHT: Repo beaker-Server is enabled.
INPLACERISK: SLIGHT: Repo beaker-Server-SAP is enabled.
INPLACERISK: SLIGHT: Repo beaker-Server-optional-debuginfo is enabled.
INPLACERISK: SLIGHT: Repo beaker-Server-optional is enabled.
INPLACERISK: SLIGHT: Repo beaker-Server-debuginfo is enabled.
INPLACERISK: SLIGHT: Repo beaker-HighAvailability is enabled.
INPLACERISK: SLIGHT: Repo beaker-harness is enabled.
INPLACERISK: SLIGHT: Repo rhel-source is not enabled.
INPLACERISK: SLIGHT: Repo rhel-source-beta is not enabled.
INPLACERISK: SLIGHT: Repo preupgrade-assistant is enabled.
INPLACERISK: SLIGHT: Repo beaker-Server-SAP-debuginfo is enabled.
INPLACERISK: SLIGHT: Repo beaker-ResilientStorage is enabled.
INPLACERISK: SLIGHT: Repo beaker-tasks is enabled.
INPLACERISK: SLIGHT: Repo beaker-LoadBalancer is enabled.
INPLACERISK: SLIGHT: Repo beaker-Server-SAPHANA-debuginfo is enabled.
INPLACERISK: SLIGHT: Repo beaker-Server-SAPHANA is enabled.
INPLACERISK: SLIGHT: Repo beaker-ScalableFileSystem is enabled.
INPLACERISK: SLIGHT: Enabled repo files for kickstart generation are stored /root/preupgrade/kickstart/available-repos.
Result for Check system requirements
Result: pass
Rule ID: xccdf_preupg_rule_system_requirements_check
Time: 2016-02-02 09:01
Check if system comply minimum requirements
Result for SCL collections
Result: pass
Rule ID: xccdf_preupg_rule_system_scl-collection_scl
Time: 2016-02-02 09:01
Content checks whether RHSCL are installed
Result for Red Hat Subscription Manager
Result: pass
Rule ID: xccdf_preupg_rule_system_subscription-manager_check
Time: 2016-02-02 09:01
This module adds new option to the configuration file, if it is not there already.
Result for System kickstart
Result: pass
Rule ID: xccdf_preupg_rule_system_system-kickstart_ks
Time: 2016-02-02 09:01
Copy system kickstart from /root/ to directory with results
Result for UEFI bootloader
Result: informational
Rule ID: xccdf_preupg_rule_system_uefi_check
Time: 2016-02-02 09:01
It is necessary to migrate UEFI systems to grub2-efi
Remediation instructions
This system does not use EFI. Preupgrade Assistant will not replace your current bootloader automatically, it is too dangerous. If you wish to use GRUB2, do it manually after the upgrade using grub2-install and grub2-mkconfig.
Result for YUM
Result: informational
Rule ID: xccdf_preupg_rule_system_yum_yum
Time: 2016-02-02 09:01
Content checks YUM configuration file
Remediation instructions
In RHEL 7 functionality of yum-plugin-security is a part of yum core.
After the upgrade it will be impossible to undo/redo/rollback to pre-upgrade yum transactions. Please run 'yum history new' after the upgrade to start a new history file.
The way yum groups work has changed in RHEL 7. By default yum treats groups as objects now. Please refer to the documentation for more information.
Result for Check for usage of dangerous ranges of UID and GIDs
Result: fixed
Rule ID: xccdf_preupg_rule_usrmgmt_DangerousRanges_dangerousranges
Time: 2016-02-02 09:01
This module checks for IDs in the 0-199 range used without reservations. This module also checks for IDs which need to be moved from the 501-999 range prior to migration.
Remediation instructions
In Red Hat Enterprise Linux 6, the range reserved for system account IDs is 0-500 while in Red Hat Enterprise Linux 7 it is 0-999 which may cause troubles during migration. In addition, the 0-199 range is prohibited from use without a static ID reservation in the setup package. IDs which are in this range might be reserved and used later by a package and using them may cause malfunction of the package.
The following problems were found on your system:
Your system contains user or group ids in the range between 500 and 1000. Therefore we will keep the Red Hat Enterprise Linux 6 defaults (system accounts limit on id 499) to prevent mix up of system and user accounts. If you can easily migrate your user accounts above 1000, please do so and adjust /etc/login.defs file to the values used in Red Hat Enterprise Linux 7. It might be non-trivial task for some system setups, though.
Result for Incorrect usage of reserved UID/GIDs
Result: pass
Rule ID: xccdf_preupg_rule_usrmgmt_ReservedIDs_reservedids
Time: 2016-02-02 09:01
Reserved user and group IDs by setup package changed between the RHEL 6 and RHEL 7. This may in some cases cause the unfunctionality of your system after the migration. This check should mitigate the risks.
Result for Check libuser.conf
Result: pass
Rule ID: xccdf_preupg_rule_usrmgmt_libuser_check
Time: 2016-02-02 09:01
Check for rejected configuration in /etc/libuser.conf about combination ldap module with others, due to ambiguity in password handling.