sos-2.2-29.0.1.AXS4

Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers.

Security issues fixed with this release:

• CVE-2012-2664
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.

Fixed bugs:

• On machines with bridged network configurations, sosreport logged errors, printed a Python backtrace and failed collecting some bridge configuration information because of a mistake in the parsing of the "brctl" command's output. "brctl" parsing has been modified to fix those problems.

• In order to gather all libvirt logs under one directory, sos used a single path. However, on some systems, the libvirtd.log file could be located in the parent directory and thus avoid being collected. The sosreport utility has been modified to use a wildcard character matching both potential locations for libvirt log, therefore fixing this problem.

Enhancement:

• Added a new plugin to collect the necessary logs for the Gluster product.The files contained in the /etc/glusterd/ and /var/log/glusterfs/ directories are analyzed and their information collected.