vcs-rhel5_x86_64-VRTSvxfen-5.1SP1RP2P1a
Obsolete
The latest patch(es) : sfha-rhel5_x86_64-5.1SP1RP4 

 Basic information
Release type: P-patch
Release date: 2012-04-02
OS update support: None
Technote: None
Documentation: None
Popularity: 1573 viewed    downloaded
Download size: 425.51 KB
Checksum: 333267218

 Applies to one or more of the following products:
VirtualStore 5.1SP1 On RHEL5 x86-64
Cluster Server 5.1SP1 On RHEL5 x86-64
Storage Foundation Cluster File System 5.1SP1 On RHEL5 x86-64
Storage Foundation Cluster File System for Oracle RAC 5.1SP1 On RHEL5 x86-64
Storage Foundation for Oracle RAC 5.1SP1 On RHEL5 x86-64
Storage Foundation HA 5.1SP1 On RHEL5 x86-64

 Obsolete patches, incompatibilities, superseded patches, or other requirements:

This patch is obsolete. It is superseded by: Release date
sfha-rhel5_x86_64-5.1SP1RP4 2013-08-21
vcs-rhel5_x86_64-VRTSvxfen-5.1SP1RP3P2 (obsolete) 2013-01-14
vcs-rhel5_x86_64-VRTSvxfen-5.1SP1RP3P1 (obsolete) 2012-12-05
sfha-rhel5_x86_64-5.1SP1RP3 (obsolete) 2012-10-02
vcs-rhel5_x86_64-VRTSvxfen-5.1SP1RP2P2 (obsolete) 2012-05-21

This patch supersedes the following patches: Release date
vcs-rhel5_x86_64-VRTSvxfen-5.1SP1RP1P2 (obsolete) 2011-05-06
vcs-rhel5_x86_64-VRTSvxfen-5.1SP1RP1P1 (obsolete) 2011-03-18

This patch requires: Release date
sfha-rhel5_x86_64-5.1SP1RP2 (obsolete) 2011-09-28

 Fixes the following incidents:
2708638

 Patch ID:
VRTSvxfen-5.1.132.100-SP1RP2P1_RHEL5

Readme file
                          * * * READ ME * * *
             * * * Veritas Cluster Server 5.1 SP1 RP2 * * *
                         * * * P-patch 1a * * *
                         Patch Date: 2012-04-03


This document provides the following information:

   * PATCH NAME
   * PACKAGES AFFECTED BY THE PATCH
   * BASE PRODUCT VERSIONS FOR THE PATCH
   * OPERATING SYSTEMS SUPPORTED BY THE PATCH
   * INCIDENTS FIXED BY THE PATCH
   * INSTALLATION PRE-REQUISITES
   * INSTALLING THE PATCH
   * REMOVING THE PATCH


PATCH NAME
----------
Veritas Cluster Server 5.1 SP1 RP2 P-patch 1a


PACKAGES AFFECTED BY THE PATCH
------------------------------
VRTSvxfen


BASE PRODUCT VERSIONS FOR THE PATCH
-----------------------------------
   * Veritas Cluster Server 5.1 SP1
   * Veritas Storage Foundation for Oracle RAC 5.1 SP1
   * Veritas Storage Foundation Cluster File System 5.1 SP1
   * Veritas Storage Foundation High Availability 5.1 SP1
   * Veritas Storage Foundation Cluster File System for Oracle RAC 5.1 SP1
   * Symantec VirtualStore 5.1 SP1


OPERATING SYSTEMS SUPPORTED BY THE PATCH
----------------------------------------
RHEL5 x86-64


INCIDENTS FIXED BY THE PATCH
----------------------------
This patch fixes the following Symantec incidents:

Patch ID: 5.1.132.100

* 2708638 (Tracking ID: 2708619)

SYMPTOM:
If you set the scsi3_disk_policy attribute to dmp, you cannot enable the Veritas
fencing module (VxFEN).

DESCRIPTION:
When you set the scsi3_disk_policy attribute to dmp, the VxFEN module tries to
use the dmp device path to access the coordination disks. The dmp device path
refers to a disk partition. A recent kernel security fix prohibits the SCSI
ioctl system call to disk partitions. As a result the VxFEN configuration fails.
The recent kernel security fix that prohibits system calls to disk partitions is:
752375 - CVE-2011-4127 kernel: possible privilege escalation via SG_IO ioctl

RESOLUTION:
Symantec has updated the VxFEN source code to pick up the dmp device path that
contains the full disk name instead of a partition/slice.


INSTALLING THE PATCH
--------------------
Perform the following steps on each cluster node, one node at a time:

1. Stop VCS:
# hastop -local

2. Stop vxfen:
# /etc/init.d/vxfen stop

3. Apply the patch:
# rpm -Uvh VRTSvxfen-5.1.132.100-SP1RP2P1_RHEL5.x86_64.rpm

Verify that proper VRTSvxfen is installed:
# rpm -qi VRTSvxfen
Name        : VRTSvxfen                    Relocations: (not relocatable)
Version     : 5.1.132.100                       Vendor: Symantec Corporation
Release     : SP1RP2P1_RHEL5                Build Date: Thu 22 Mar 2012 12:56:05 PM IST
Install Date: Mon 02 Apr 2012 02:06:01 PM IST      Build Host: snapper53-64.engba.symantec.com
Group       : Applications/System           Source RPM: VRTSvxfen-5.1.132.100-SP1RP2P1_RHEL5.src.rpm
Size        : 1563301                          License: Symantec Proprietary
Signature   : (none)
Packager    : support@veritas.com
URL         : http://www.support.veritas.com
Summary     : Veritas I/O Fencing by Symantec
Description :
Supported kernel(s): 2.6.18-128.el5
Build Stamp        : Veritas-5.1.132.100-SP1RP2P1-2012-03-21_03.31.28

4. Start vxfen:
# /etc/init.d/vxfen start

5. Start VCS:
# hastart


REMOVING THE PATCH
------------------
1. Stop VCS:
# hastop -local

2. Stop vxfen:
# /etc/init.d/vxfen stop

3. Uninstall VRTSvxfen package:
# rpm -ev VRTSvxfen

4. Install previous version of VRTSvxfen package.

5. Start vxfen:
# /etc/init.d/vxfen start

6. Start VCS:
# hastart


SPECIAL INSTRUCTIONS
--------------------
NONE


OTHERS
------
NONE