Introduction
Scanner
- preupgrade-assistant-1.0.2-36.0.1.el6.centos
- preupgrade-assistant-contents-0.5.14-1.el6.centos
Target info
Targets
|
Addresses
|
Platforms
|
Results overview
Rule Results Summary
| pass | fixed | fail | needs inspection | needs action | error | not selected | not checked | not applicable | informational | unknown | total |
| 26 | 6 | 2 | 7 | 9 | 0 | 5 | 0 | 28 | 18 | 0 | 101 |
Rule results summary
Results details
Result for Configuration Files to Review
Result: needs_inspection
Rule ID: xccdf_preupg_rule_backup_NoverifyConfigs_noverifycfg
Time: 2019-10-20 02:11
This module stores some system configuration files that can have been modified by the user when it is not possible to automatically upgrade them.
Remediation instructions
Some packages do not track the possible performed changes to system configuration files; therefore, it cannot be easily determined if the files have been modified by the user or not. In order to allow for later examination, all configuration files not handled by the migration scripts are stored in the dirtyconf/ directory. The list of the stored files is available in the ./kickstart/noverifycfg file. The user is advised to verify the functionality of configuration files stored by this tool after a successful upgrade.
INPLACERISK: SLIGHT: We detected some files where modifications are not tracked in the rpms. You may need to check their functionality after successful upgrade.
Result for File Lists for Manual Migration
Result: needs_inspection
Rule ID: xccdf_preupg_rule_backup_UntrackedFiles_untracked
Time: 2019-10-20 02:11
This module generates lists of files, such as temporary, application, and user data files, which are not automatically migrated.
Remediation instructions
Some user data, such as user home directories and temporary files, are not tracked by the RPM database. This data will not be automatically migrated. To assist you with migrating the data, this module has generated the following three files.* The ./kickstart/untrackedsystem file lists the regular files on the system that will not be migrated. The list does not contain files mounted over the network, files created by runtime system operations, files in temporary locations, and user files in the /home/ or /root/ directory.
* The ./kickstart/untrackeduser file lists the regular local files in the /home/ and /root/ directories that will not be migrated. If the /home/ and /root/ directories are on a file system mounted over the network, this file can be empty.
* The ./kickstart/untrackedexpected file lists the regular files and symlinks created by runtime system operations (for example handling runlevels, alternatives and active SELinux modules). Most likely you don't need to care about them, list is available just for completeness.
* The ./kickstart/untrackedtemporary file lists all temporary local files on the system that will not be migrated. This is essentially everything in the /cgroup/, /tmp/, and /var/ directories. Most likely you don't need to care about them, list is available just for completeness.
It is recommended that you backup all data before proceeding with the upgrade to CentOS 7. This data can be quite large.
If you are performing an in-place upgrade, this data should remain in its current location after the upgrade. Configuration files and other data should be reviewed to determine if any modifications are needed for use with CentOS 7. You should verify that all data was successfully maintained.
If you are performing a migration upgrade, this data must be backed up to another storage medium. You will need to copy the data you wish to have on the new installation back into place after the upgrade is complete. Configuration files and other data should be reviewed to determine if any modifications are needed for use with CentOS 7.
INPLACERISK: SLIGHT: We detected some files untracked by rpms. Some of these may need manual check/migration after redhat-upgrade-tool and/or can cause conflicts or troubles during the installation. Try to reduce unnecessary untracked files before running redhat-upgrade-tool.
Result for MySQL configuration
Result: informational
Rule ID: xccdf_preupg_rule_databases_mysql_configuration_changes_configuration
Time: 2019-10-20 02:11
Check MySQL configuration
Remediation instructions
During in-place upgrade, the old MySQL 5.1 RPM package is uninstalled andthe new MariaDB 5.5 RPM package is installed, but RPM does not take this
operations as an update. Note that the MySQL RPM renames /etc/my.cnf to
/etc/my.cnf.rpmsave on uninstall.
After installing MariaDB you should do the following to restore your old
configuration options:
root> mv -vi /etc/my.cnf.rpmsave /etc/my.cnf
INFO mysql-libs,mysql: checking config file /etc/my.cnf
DEBUG mysql-libs,mysql: file /etc/my.cnf backed-up to /root/preupgrade/etc/my.cnf
INFO mysql-libs,mysql: No options problem in MySQL configuration found.
Result for Migration of the MySQL data stack
Result: pass
Rule ID: xccdf_preupg_rule_databases_mysql_data_migration_migration
Time: 2019-10-20 02:11
Migrate the MySQL data stack to the new version of MariaDB
Result for Changes related to moving from MySQL to MariaDB
Result: informational
Rule ID: xccdf_preupg_rule_databases_mysql_general_changes_general
Time: 2019-10-20 02:11
Mind that MySQL is replaced by MariaDB in default MySQL implementation
Remediation instructions
CentOS 6 contains MySQL 5.1 as a default MySQL implementation.CentOS 7 contains MariaDB 5.5 as a default MySQL implementation.
MariaDB is a community-developed drop-in replacement for MySQL.
For more information about MariaDB project, see MariaDB Upstream
Web http://mariadb.org/en/about/.
MariaDB upstream uses the same file names as original MySQL.
That means MariaDB shell is called mysql, MariaDB daemon is called
mysqld_safe and the client library is called libmysqlclient.so.
In order to keep MariaDB packages properly distinguished from original
MySQL packages, CentOS 7 uses MariaDB names where not necessary to follow
upstream. It means the following layout is used in CentOS 7:
- the MariaDB packages names are called mariadb, mariadb-libs, mariadb-server
and so on.
- only packages mariadb and mariadb-libs provide also RPM symbols "mysql"
and "mysql-libs"; the rest of packages don't provide alternative mysql names.
- the systemd unit file is called "mariadb.service"
- the log file is called mariadb.log and is located in /var/log/mariadb
directory by default. You can change the name and the location in the
/etc/my.cnf file after installation, but do not forget to adjust SELinux
accordingly.
- the logrotate script is called mariadb
Package mysql-server provides a SysV init script called mysqld.
Package mariadb-server provides a systemd unit file called mariadb.
All packages that need to start after mariadb daemon, need to use
correct name, which is mariadb.service.
No issues in services have been found, but rather check your services.
In case some service requires mysqld in CentOS 6 or it needs to start before
mysqld, set Require=mariadb.service and After=mariadb.service in CentOS 7 for
those services.
For more information about migration to MariaDB, see
https://access.redhat.com/site/articles/723833.
Result for GNOME Desktop Environment underwent several design modifications in CentOS 7 release
Result: fail
Rule ID: xccdf_preupg_rule_desktop_GNOME_gnome
Time: 2019-10-20 02:11
GNOME Desktop Environment underwent several design modifications in CentOS 7 release.
Remediation instructions
GNOME Desktop Environment as a part of the yum group 'Desktop' underwent serious redesign in its user interface as well as underlying technologies in CentOS 7. The users of the desktop environment need to be educated about these changes before upgrade. GNOME classic user interface is provided in CentOS 7 to lower the impact of this change but the interface still contains several discrepancies from the older version and the users need to be warned about them.The following packages from yum group 'Desktop' that provides GNOME Desktop Environment were detected to be installed in your system: NetworkManager-gnome control-center gdm gdm-user-switch-applet gnome-panel gnome-power-manager gnome-screensaver gnome-session gnome-terminal gvfs-archive gvfs-fuse gvfs-smb metacity nautilus notification-daemon polkit-gnome xdg-user-dirs-gtk yelp control-center-extra eog gdm-plugin-fingerprint gnome-applets gnome-media gnome-packagekit gnome-vfs2-smb gok orca vino
INPLACERISK: EXTREME: You have GNOME Desktop Environment session as an option in your X11 session manager. GNOME Desktop Environment as a part of the yum group 'Desktop' underwent serious redesign in its user interface as well as underlying technologies in CentOS 7.
Result for KDE Desktop Environment underwent several design modifications in CentOS 7 release
Result: fail
Rule ID: xccdf_preupg_rule_desktop_KDE_kde
Time: 2019-10-20 02:11
KDE Desktop Environment underwent several design modifications in CentOS 7 release.
Remediation instructions
KDE Desktop Environment as a part of the yum group 'KDE Desktop' underwent a redesign in its user interface as well as underlying technologies in CentOS 7. The users of the desktop environment need to be educated about these changes before the upgrade.The following packages from yum group 'KDE Desktop' that provides KDE Desktop Environment were detected to be installed in your system: kde-settings-pulseaudio kdeaccessibility kdeartwork-screensavers kdebase kdebase-workspace kdelibs xsettings-kde k3b kcoloredit kdeadmin kdegames kdegraphics kdemultimedia kdenetwork kdepim kdepim-runtime kdeplasma-addons kdeutils kdm kiconedit kipi-plugins kmid konq-plugins ksig ksshaskpass pinentry-qt
INPLACERISK: EXTREME: You have KDE Desktop Environment session as an option in your X11 session manager. KDE Desktop Environment as a part of the yum group 'KDE Desktop' underwent a redesign in its user interface as well as underlying technologies in CentOS 7.
Result for several graphic drivers not supported in CentOS 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedGraphicDrivers_obsoletedGraphicDrivers
Time: 2019-10-20 02:11
Several graphic drivers packages were deprecated or removed in CentOS 7.
Result for several input drivers not supported in CentOS 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedInputDrivers_obsoletedInputDrivers
Time: 2019-10-20 02:11
Several input drivers packages were deprecated or removed in CentOS 7.
Result for several kernel networking drivers not available in CentOS 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedNetworkDrivers_obsoletedNetworkDrivers
Time: 2019-10-20 02:11
Several kernel networking drivers were removed from CentOS 7.
Result for several kernel storage drivers not available in CentOS 7
Result: pass
Rule ID: xccdf_preupg_rule_drivers_ObsoletedStorageDrivers_obsoletedStorageDrivers
Time: 2019-10-20 02:11
Several kernel storage drivers were deprecated or removed in CentOS 7.
Result for BIND9 running in a chroot environment check.
Result: needs_inspection
Rule ID: xccdf_preupg_rule_networking_bind_bind-chroot_check_script
Time: 2019-10-20 02:11
The way how BIND9 running in a chroot environment is started changed between CentOS 6 and CentOS 7. This module checks if chroot environment specific packages for BIND9 have been installed and points the administrator to the Red Hat Knowledgebase article.
Remediation instructions
The way how BIND9 running in a chroot environment is started changedbetween CentOS 6 and CentOS 7.
For more information, please read the following Red Hat Knowledgebase
article located at Customer Portal:
https://access.redhat.com/site/node/770133/
The article describes:
- How BIND can be run in a chroot environment on CentOS 7
- What is the difference compared to CentOS 6
- Recommendations when running BIND in a chroot environment
INPLACERISK: SLIGHT: bind-chroot package has been detected
Result for BIND9 configuration compatibility check
Result: fixed
Rule ID: xccdf_preupg_rule_networking_bind_configuration_check_script
Time: 2019-10-20 02:11
Checks BIND9 configuration compatibility
File(s) affected:
/etc/named.conf
Remediation instructions
Some issues have been found in your BIND9 configuration.Use following solutions to fix them:
[FIXED] No 'pid-file' AND/OR 'session-keyfile' statement found:
-------------------------------------------------------
The directory used by named for runtime data has been moved from the BIND
default location, '/var/run/named/', to a new location '/run/named/'.
As a result, the PID file has been moved from the default location
'/var/run/named/named.pid' to the new location '/run/named/named.pid'.
In addition, the session-key file has been moved to '/run/named/session.key'.
These locations need to be specified by statements in the options section.
To fix this we added:
- 'pid-file "/run/named/named.pid";' statement into the options section of
your BIND9 configuration.
- 'session-keyfile "/run/named/session.key";' statement into the options
section of your BIND9 configuration.
The config file(s) have been completely fixed.
Written Fixed config file to '/root/preupgrade/cleanconf/etc/named.conf'
For more information, please see the BIND9 Administrator Reference
Manual located in '/usr/share/doc/bind-9.9.4/Bv9ARM.pdf' and 'DNS Servers'
section of CentOS 7 Networking Guide.
Result for DNSMASQ configuration compatibility check
Result: pass
Rule ID: xccdf_preupg_rule_networking_dnsmasq_check_script
Time: 2019-10-20 02:11
Checks DNSMASQ configuration compatibility
File(s) affected:
/etc/dnsmasq.conf
Result for Compatibility Between iptables and ip6tables
Result: informational
Rule ID: xccdf_preupg_rule_networking_iptables_check_script
Time: 2019-10-20 02:11
The firewalld service is now the default firewall service.
File(s) affected:
/etc/sysconfig/iptables
/etc/sysconfig/ip6tables
Remediation instructions
If you are migrating from CentOS 6 to CentOS 7, verify whether you have the iptables-services packages installed after performing the upgrade by running the "rpm -q iptables-services" command as root. Also, verify that iptables and ip6tables services are enabled by running the "systemctl is-enabled iptables" and "systemctl is-enabled ip6tables" commands as root.For more details about migrating the firewall service from CentOS 6, see the section about the firewalld service in the Red Hat Enterprise Linux 7 Migration Planning guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Migration_Planning_Guide/.
If you perform a clean installation of CentOS 7, the firewalld service will be installed on your system instead of iptables and ip6tables.
For further details about the firewalld service, see the section about firewalls in Red Hat Enterprise Linux 7 Security Guide. You can access the guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/.
INFO iptables: Creating /root/preupgrade/postupgrade.d/reenable-iptables
WARNING iptables: Please read Remediation instructions.
Result for Reusable Configuration Files
Result: pass
Rule ID: xccdf_preupg_rule_others_NoVersionChangeEtc_nochange
Time: 2019-10-20 02:11
The module provides a list of the configuration files that can be reused in CentOS 7.
Result for VCS repositories
Result: informational
Rule ID: xccdf_preupg_rule_others_vcsrepos_check_script
Time: 2019-10-20 02:11
Find Versin Control System repositories in /home and /root - git, svn, cvs, bzr.
Remediation instructions
Found GIT repositories:/home/jerryj/git/consulting
url = ssh://git@github.com/OpenSourceConsulting/consulting
Found SUBVERSION repositories:
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/.settings
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/.settings
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/java/com/hhi
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/java/com/hhi
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas/platform/bundle/sensor
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas/platform/bundle/sensor
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas/platform/bundle
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas/platform/bundle
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas/platform
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas/platform
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/java/com/hhi/vaas
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/java/com
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/java/com
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/java
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/java
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/resources-dev/config
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/resources-dev/config
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/resources-dev
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/resources-dev
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/resources-local/config
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/resources-local/config
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/resources-local
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/resources-local
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/resources-prd/config
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/resources-prd/config
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/resources-prd
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/resources-prd
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main/resources
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main/resources
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/main
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/main
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/test/java
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/test/java
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/test/resources
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/test/resources
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/src/test
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/src/test
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/classes
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/classes
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/generated-sources/annotations
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/generated-sources/annotations
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/generated-sources
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/generated-sources
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/compile/default-compile
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/compile/default-compile
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/compile
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/compile
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/testCompile/default-testCompile
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/testCompile/default-testCompile
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/testCompile
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/maven-status/maven-compiler-plugin/testCompile
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/maven-status
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/maven-status
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target
/home/jerryj/multicast/onboard-test/pilot_sensor-driver-bundle/target/test-classes
url = http://svn-hhivaas.ddns.net/samples/pilot_sensor-driver-bundle/target/test-classes
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/.settings
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/.settings
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java/com/hhi
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java/com/hhi
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform/bundle/adapter/net
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform/bundle/adapter/net
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform/bundle/adapter
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform/bundle/adapter
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform/bundle
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform/bundle
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas/platform
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java/com/hhi/vaas
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java/com
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java/com
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/java
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/java
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/resources-dev/config
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/resources-dev/config
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/resources-dev
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/resources-dev
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/resources-local/config
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/resources-local/config
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/resources-local
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/resources-local
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/resources-prd/config
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/resources-prd/config
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/resources-prd
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/resources-prd
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main/resources
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main/resources
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/main
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/main
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/test/java
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/test/java
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/test/resources/config
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/test/resources/config
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/test/resources
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/test/resources
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/src/test
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/src/test
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/classes
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/classes
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/cobertura
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/cobertura
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform/bundle/adapter/net
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform/bundle/adapter/net
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform/bundle/adapter
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform/bundle/adapter
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform/bundle
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform/bundle
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas/platform
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com/hhi/vaas
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/com
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/config
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/config
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura/META-INF
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura/META-INF
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes/cobertura
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes/cobertura
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-classes
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-classes
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-sources/annotations
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-sources/annotations
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/generated-sources
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/generated-sources
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/compile/default-compile
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/compile/default-compile
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/compile
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/compile
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/testCompile/default-testCompile
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/testCompile/default-testCompile
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/testCompile
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/maven-status/maven-compiler-plugin/testCompile
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/maven-status
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/maven-status
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/site/cobertura
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/site/cobertura
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/site
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/site
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/test-classes/config
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/test-classes/config
/home/jerryj/multicast/onboard-test/pilot_udp-adapter-bundle/target/test-classes
url = http://svn-hhivaas.ddns.net/samples/pilot_udp-adapter-bundle/target/test-classes
/home/jerryj/multicast/onboard-test/pushapps
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/pushapps
/home/jerryj/multicast/onboard-test
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/backup_queue/message/data
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/backup_queue/message/data
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/backup_queue/message/front_index
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/backup_queue/message/front_index
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/backup_queue/message/index
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/backup_queue/message/index
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/backup_queue/message/meta_data
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/backup_queue/message/meta_data
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/backup_queue/message
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/backup_queue/message
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/backup_queue
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/backup_queue
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/conf
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/conf
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/docs/cobertura
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/docs/cobertura
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/docs
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/docs
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/lib
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/lib
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0/logs
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0/logs
/home/jerryj/multicast/onboard-test/vdip-agent-0.5.0
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdip-agent-0.5.0
/home/jerryj/multicast/onboard-test/vdr
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/config
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/config
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/docs
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/docs
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/example
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/example
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/include/linux
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/include/linux
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/include
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/include
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/quick_tx
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux/quick_tx
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/kernel/linux
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/kernel
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/kernel
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/lib/.deps
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/lib/.deps
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/libopts/autoopts
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/libopts/autoopts
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/libopts/compat
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/libopts/compat
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/libopts/.deps
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/libopts/.deps
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/libopts/m4
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/libopts/m4
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/libopts
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/libopts
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/lib
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/lib
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/m4
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/m4
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/scripts
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/scripts
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/common/.deps
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/common/.deps
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/common
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/common
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/.deps
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/.deps
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/fragroute/.deps
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/fragroute/.deps
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/fragroute
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/fragroute
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/.deps
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/.deps
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_en10mb
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_en10mb
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_hdlc
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_hdlc
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_ieee80211
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_ieee80211
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_jnpr_ether
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_jnpr_ether
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_linuxsll
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_linuxsll
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_loop
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_loop
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_null
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_null
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_pppserial
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_pppserial
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_radiotap
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_radiotap
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_raw
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_raw
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_user
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins/dlt_user
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit/plugins
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/src/tcpedit
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/test
url = svn://svn-hhivaas.ddns.net/hhi/samples/onboard-test/vdr/tcpreplay-4.1.0/test
Result for Added and extended options for BIND9 configuration
Result: informational
Rule ID: xccdf_preupg_rule_packages_AddedOptions_bind_addedoptions
Time: 2019-10-20 02:11
Some useful options have been added or extended in the configuration of the Berkeley Internet Name Domain (BIND9) utility on CentOS 7. This module provides overview of the changes in the options between CentOS 6 and CentOS 7.
Remediation instructions
The following options have been extended or added to the BIND utility version 9.9.4:* inline-signing
This option can be used in zone Statement. If set to "yes", the unsecured zone, which is either loaded from the disk or transferred, is signed in real time and served as signed.
* request-ixfr
This option can now also be used in a zone block of the configuration. Setting this option overrides the global setting or the view setting for the respective zone.
* serial-update-method
This new option can be used to specify an automatic zone serial number for zones configured for a dynamic DNS (DDNS). The available options are "increment" for incrementing the serial number by one after each zone update, or "unixtime" for setting the serial number to the number of seconds since the UNIX epoch.
* also-notify
This option now has the same syntax as the zone's "master" option. This means it is now possible to specify which transaction signature (TSIG) key to use when sending an update to a remote server or to include an explicit named masters list.
* dnssec-loadkeys-interval
This new option can be used to set the frequency of the checks for new keys if the zone has been configured with the "auto-dnssec maintain;" option. The time is specified in minutes with the default value set to 60 minutes. The minimum value is 1 minute and the maximum is 1440 minutes (24 hours). Any greater value is silently reduced to 1440 minutes.
For more information, see the BIND9 Administrator Reference Manual located in the /usr/share/doc/bind-9.9.4/ directory.
Result for Added options in DNSMASQ configuration
Result: informational
Rule ID: xccdf_preupg_rule_packages_AddedOptions_dnsmasq_addedoptions
Time: 2019-10-20 02:11
Some useful options were added in DNSMASQ configuration between CentOS 6 and CentOS 7. This informative content lists such changes.
Remediation instructions
Some options in DNSMASQ configuration were added between CentOS 6 and CentOS 7.Some of these changes may be helpful in your DNSAMSQ configuration.
IPv6 support for DHCP has been added:
-------------------------------------
DNSMASQ version distributed in CentOS 7 now supports DHCPv6 protocol.
The DHCPv6 server provides the same set of functionality as the DHCPv4
server. In addition it supports:
- router advertisements
- feature which allows naming for clients which use DHCPv4 for IPv4 configuration,
and only stateless auto-configuration for IPv6 configuration.
- Address allocation (both DHCPv6 and Router Advertisements) from subnets
which are dynamically delegated via DHCPv6 prefix delegation.
New "--bind-dynamic" dnsmasq network mode has been added:
---------------------------------------------------------
New network mode "bind-dynamic" has been added into DNSMASQ version
distributed in CentOS 7.
The new network mode which is a hybrid between --bind-interfaces and the default.
Dnsmasq will bind to addresses of individual interfaces, allowing multiple dnsmasq
instances. If new interfaces or addresses appear on the system, it will automatically
bind to them and start listening (this behaviour is subject to any access-control
configuration). This makes dynamically created interfaces work in the same way
as the default.
The following configuration options have been added:
"--tag-if=set:<tag>[,set:<tag>[,tag:<tag>[,tag:<tag>]]]"
--------------------------------------------------------
The option "--tag-if" has been added to enable boolean operations on tags.
Any tag appearing as 'set:<tag>' is set if all the tags which appear as
'tag:<tag>' are set (or unset when 'tag:!<tag>' is used). If there is no
'tag:<tag>' after 'set:<tag>', tags are set unconditionally. It is possible
to use multiple 'set:' and 'tag:' arguments in any order.
"--tag-if" statements ares processed in the same order they appear in the
configuration, so if the <tag> in 'tag:<tag>' is a tag set by another
"--tag-if" statement, the statement which sets the <tag> must precede
the one which tests it.
"--dhcp-proxy[=<ip addr>]..."
-----------------------------
!!! IPv4 ONLY option !!!
A normal DHCP relay agent is only used to forward the initial parts of
the DHCP interaction to the DHCP server. Once the client is fully configured,
it communicates directly with the server.
A full DHCP relay server can use the (RFC 5107) 'serverid-override' option
to force the DHCP server to use the relay as a full proxy, with all packets
passing through it.
The option "--dhcp-proxy" has been added to provide an alternative method
of doing the same thing, for relays which don't support RFC 5107.
Given alone, it manipulates the server-id for all interactions via relays.
If a list of IP addresses is given, only interactions via relays with given
addresses are affected.
"--dhcp-generate-names=tag:<tag>[,tag:<tag>]"
---------------------------------------------
!!! IPv4 ONLY option !!!
The option "--dhcp-generate-names" has been added, which instructs dnsmasq
to generate a name for each DHCP client which does not otherwise have one.
The name is generated using the MAC address expressed in hexadecimal form,
separated by dashes.
Note that if the host provides a name, it will be preferred to the generated
one, unless "--dhcp-ignore-names" option is used.
"--max-ttl=<time>"
------------------
The option "--max-ttl=<time>" has been added to instruct dnsmasq to set
the maximum TTL value of the DNS answer, that will be passed to clients.
The specified maximum TTL will be set in the DNS answer to clients instead
of the true TTL value, if the true TTL value is higher. The true TTL value
is however kept in the cache to avoid flooding of upstream DNS servers.
"--rebind-localhost-ok"
-----------------------
The option "--rebind-localhost-ok" has been added to except 127.0.0.1/8
address range from rebinding checks. This address range is returned by
real-time black hole servers, so blocking it may disable these services.
"--rebind-domain-ok=[<domain>]|[[/<domain>/[<domain>/]"
-------------------------------------------------------
The "--rebind-domain-ok" option has been added to disable detection
and blocking of dns-rebind on queries to given domains. The argument
may be either a single domain, or multiple domains surrounded and
separated by '/'.
"--dhcp-sequential-ip"
----------------------
The option "--dhcp-sequential-ip" has been added to instruct DHCP server
to assign IP addresses to DHCP clients sequentially. The address allocation
starts from the lowest available address.
Note that in the sequential mode, clients which allow their lease to expire
are much more likely to get their IP address changed.
"--add-mac"
-----------
The option "--add-mac" has been added to enable adding the MAC address of the
DNS client to DNS queries which are forwarded to upstream servers. This may
be used for filtering purposes by the upstream server. The MAC address can
be added only if the DNS client is on the same subnet as the dnsmasq server.
Note that the mechanism used to achieve this (an EDNS0 option) is not yet
standardised, therefore it should be considered experimental. Also note that
exposing MAC addresses in this way may have SECURITY and PRIVACY implications.
"--tftp-lowercase"
------------------
The option "--tftp-lowercase" instructs the TFTP server to convert filenames
in TFTP requests to lowercase. This is useful for requests from machines which
use case-insensitive filesystem.
"--dhcp-client-update"
----------------------
By default dnsmasq sets a flag in the FQDN option, when giving a DHCP lease,
to tell the client not to attempt a DDNS update with its name and IP address.
This flag disables this default behaviour.
"--dhcp-duid=<enterprise-id>,<uid>"
-----------------------------------
!!! IPv6 ONLY option !!!
The option "--dhcp-duid" has been added to enable specification of the persistent
UID used by DHCPv6 server. This option is not normally required as dnsmasq creates
a DUID automatically when first needed. If used, this option provides dnsmasq
the data required to create a DUID-EN type DUID. The <enterprise-id> is assigned
by IANA, and the <uid> is a string of hexadecimal octets unique to a particular device.
"--host-record=<name>[,<name>....],[<IPv4-address>],[<IPv6-address>]"
--------------------------------------------------------------------
The option "--host-record" enables the user to add A, AAAA and PTR records to the DNS.
It adds one or more names to the DNS with associated IPv4 (A) and/or IPv6 (AAAA) records.
The same name may appear in multiple host-record statements. This will result in assignment
of multiple addresses to the same name. Only the first address creates a PTR record
linking the address to the name.
"--dns-rr=<name>,<RR-number>,[<hex data>]"
------------------------------------------
The option "--dns-rr" enabled dnsmasq to return an arbitrary DNS Resource Record.
The <RR-number> is the type of the record (which is always of the IN class). The value
of the record is given by the <hex data>, which may be of the form "01:23:45"
or "01 23 45" or "012345" or any mixture of these.
"--max-cache-ttl=<time>"
------------------------
The option "--max-cache-ttl" can be used to set the maximum TTL value of cached
DNS answers.
"--ipset=/<domain>/[domain/]<ipset>[,<ipset>]"
----------------------------------------------
The option "--ipset" can be used to place the resolved IP addresses of queries
for specified domains in the specified netfilter ipsets. These ipsets must already exist.
For more information please see ipset manpage ('man 8 ipset').
For more information, please see the DNSMASQ man page ('man 8 dnsmasq').
Result for Packages not signed by CentOS
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_NonCentOSSignedPkg_noncentospkg
Time: 2019-10-20 02:11
Packages not signed by CentOS will not be upgraded
Remediation instructions
Packages which are not signed with the official CentOS keys will not be upgraded. These packages are typically provided by third parties or have been modified in some way. There is a high risk of incompatibility with these packages as they have not been verified by CentOS. For upgrade assistance, contact the vendors of these packages.You can find a list of all unsigned packages including the vendor names in the kickstart/noncentospkgs file.
INPLACERISK: HIGH: We detected some non-CentOS signed packages, you can find the list in /root/preupgrade/./kickstart/noncentospkgs. You need to handle them yourself!
Result for Obsoleted rpms
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_ObsoletedPackages_ObsoletedPkg
Time: 2019-10-20 02:11
Some rpms were obsoleted from the set of the packages between CentOS 6 and CentOS 7. This content checks for the package obsoletes from your set of CentOS packages.
Remediation instructions
Some of the packages were obsoleted between CentOS 6 and CentOS 7. This meansCentOS provides some alternative for them, but these alternatives may be
not 100% compatible - thus we don't replace them automatically. For some of
the obsoletes you will get the incompatibilities from separate preupgrade
contents and you can adjust your workflow according to the changes. Sometimes,
package might be replaced by several others.
Following packages were obsoleted by different ones:
ConsoleKit (required by NonCentOS signed package(s):libfprint ) was obsoleted by systemd
PackageKit-gtk-module was obsoleted by PackageKit-gtk3-module
cpuspeed was obsoleted by kernel-tools,kernel
gdm-user-switch-applet was obsoleted by gnome-shell
gnome-applets was obsoleted by gnome-classic-session
grub was obsoleted by grub2
gvfs-obexftp (required by NonCentOS signed package(s):gnome-bluetooth ) was obsoleted by gnome-bluetooth
hal (required by NonCentOS signed package(s):libgpod libmtp system-setup-keyboard gnome-power-manager ) was obsoleted by systemd
mysql-libs was obsoleted by mariadb-libs
mysql-server was obsoleted by mariadb-server
mysql was obsoleted by mariadb
nc was obsoleted by nmap-ncat
pam_passwdqc was obsoleted by libpwquality
polkit-gnome was obsoleted by gnome-shell
udev (required by NonCentOS signed package(s):DeviceKit-power libmtp media-player-info openct pcmciautils iwl5150-firmware iwl100-firmware iwl6050-firmware iwl6000g2a-firmware aic94xx-firmware iwl6000-firmware iwl1000-firmware ) was obsoleted by systemd
udisks was obsoleted by udisks2
upstart (required by NonCentOS signed package(s):readahead ) was obsoleted by systemd
If some NonCentOS signed package requires these packages, you may need to check if the
alternative solution provided by CentOS does work for you or get the missing package
from different sources than CentOS. You need to install these new packages yourself
after the assessment, as CentOS can't assess the compatibility for you.
INPLACERISK: HIGH: Package ConsoleKit (required by NonCentOS signed package(s):libfprint ) removed (obsoleted) between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package gvfs-obexftp (required by NonCentOS signed package(s):gnome-bluetooth ) removed (obsoleted) between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package hal (required by NonCentOS signed package(s):libgpod libmtp system-setup-keyboard gnome-power-manager ) removed (obsoleted) between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package udev (required by NonCentOS signed package(s):DeviceKit-power libmtp media-player-info openct pcmciautils iwl5150-firmware iwl100-firmware iwl6050-firmware iwl6000g2a-firmware aic94xx-firmware iwl6000-firmware iwl1000-firmware ) removed (obsoleted) between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package upstart (required by NonCentOS signed package(s):readahead ) removed (obsoleted) between CentOS 6 and CentOS 7
INPLACERISK: MEDIUM: We detected some packages installed on the system were removed (obsoleted) between CentOS 6 and CentOS 7. This may break the functionality of the packages depending on them.
Result for Removed options in coreutils binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_coreutils_removedoptions
Time: 2019-10-20 02:11
Some options and binaries were removed from coreutils package between CentOS 6 and CentOS 7. This informative content lists the incompatibilities.
Remediation instructions
Some options and binaries were removed from coreutils package betweenCentOS 6 and CentOS 7. This may break functionality of some of your scripts.
All option/binaries removals with solutions are listed bellow.
factor : --verbose renamed to --debug
install : --preserve_context is removed, --preserve-context can be used
instead
nl : CentOS 6 deprecated option --page-increment removed, --line-increment
can be used instead
runuser and su binaries moved to util-linux rpm
stat: -Z / --context option support was removed, SELinux context is now
part of the default format. Formatting changed, though.
touch: undocumented and deprecated --file option support removed,
--reference should be used instead.
mkdir,mknod,mkfifo,cp,install: short -Z option no longer accepts the argument
and sets default SELinux context, --context=CTX long option has to be used
for setting context to CTX
Please check that your scripts are aware of these changes.
Result for Removed options in gawk binaries
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_gawk_removedoptions
Time: 2019-10-20 02:11
Some options and binaries were removed from gawk package between CentOS 6 and CentOS 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were removed from gawk package binaries between CentOS 6and CentOS 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.
awk/gawk/pgawk: --compat - option was removed, alternative is
--traditional
--copyleft - option was removed, alternative is
--copyright/-C
--gen-po - option was replaced by --gen-pot option
--usage
-D - short form of --parsedebug was changed to -Y
Please check that your scripts are aware of these changes.
Result for Removed options in netstat binary
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_nettools_removedoptions
Time: 2019-10-20 02:11
Some options were removed from netstat binary between CentOS 6 and CentOS 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were removed from netstat binary of net-tools package betweenCentOS 6 and CentOS 7. This may break functionality of some of your scripts.
All option removals with solutions are listed bellow.
netstat : -T/--notrim renamed to -W/--wide
Please check that your scripts are aware of these changes.
Result for Removed options in quota tools
Result: informational
Rule ID: xccdf_preupg_rule_packages_RemovedOptions_quota_removedoptions
Time: 2019-10-20 02:11
Some options have been renamed at quota tools between CentOS and 7. This informative content lists the incompatibilities.
Remediation instructions
Some options were renamed at quota tools between CentOS6 and 7. This may break functionality of some of your scripts. The changes
are:
/usr/bin/quota: Option --nfs-all was corrected to --all-nfs in the usage help
output. Both versions still recognize the --all-nfs option.
/usr/sbin/quota_nld: Option --no-daemon was renamed to --foreground. Short
option -F is unchanged. This is not an issue if you run quota_nld as daemon,
e.g. via init script.
/usr/sbin/repquota: Option --batch-translation was corrected to --cache in the
usage help output. Both versions still recognize the --cache option.
/usr/sbin/repquota: Option --no-batch-translation was corrected to --no-cache
in the usage help output. Both versions still recognize the --no-cache option.
Please check that your scripts are aware of these changes.
Result for Removed rpms
Result: needs_action
Rule ID: xccdf_preupg_rule_packages_RemovedPackages_RemovedPkg
Time: 2019-10-20 02:11
Some rpms were removed from the set of the packages between CentOS 6 and CentOS 7. This content checks for the package removals from your set of CentOS packages.
Remediation instructions
Some of the packages were removed between CentOS 6 and CentOS 7. This may breakthe upgrade for some of your packages. We are not aware of any compatible
replacement for these packages.
Following packages are no longer available:
ConsoleKit-libs
ConsoleKit-x11 (required by NonCentOS signed package(s):xorg-x11-xinit )
b43-openfwwf
brasero
brasero-libs
brasero-nautilus
busybox
gnome-desktop (required by NonCentOS signed package(s):gnome-screensaver )
gnome-disk-utility-libs
gnome-disk-utility-ui-libs
gnome-panel
gnome-panel-libs
gnome-themes (required by NonCentOS signed package(s):system-icon-theme metacity rhythmbox )
gtk2-engines
hal-info
hal-libs
hal-storage-addon (required by NonCentOS signed package(s):kdebase-runtime )
kde-settings-kdm
kdm
kipi-plugins
kipi-plugins-libs
libgail-gnome
libnih
plymouth-gdm-hooks
plymouth-theme-rings
plymouth-utils
python-paramiko (required by NonCentOS signed package(s):cas rho )
pywebkitgtk (required by NonCentOS signed package(s):rhythmbox )
system-config-network-tui
vte
webkitgtk
wireless-tools (required by NonCentOS signed package(s):python-iwlib )
xorg-x11-drv-acecad (required by NonCentOS signed package(s):xorg-x11-drivers )
xorg-x11-drv-aiptek (required by NonCentOS signed package(s):xorg-x11-drivers )
xorg-x11-drv-fpit (required by NonCentOS signed package(s):xorg-x11-drivers )
xorg-x11-drv-hyperpen (required by NonCentOS signed package(s):xorg-x11-drivers )
xorg-x11-drv-mutouch (required by NonCentOS signed package(s):xorg-x11-drivers )
xorg-x11-drv-penmount (required by NonCentOS signed package(s):xorg-x11-drivers )
If some NonCentOS signed package requires these packages, you may need to ask your
vendor to provide alternative solution or get the missing package from
different sources than RHEL.
INPLACERISK: HIGH: Package ConsoleKit-x11 (required by NonCentOS signed package(s):xorg-x11-xinit ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package gnome-desktop (required by NonCentOS signed package(s):gnome-screensaver ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package gnome-themes (required by NonCentOS signed package(s):system-icon-theme metacity rhythmbox ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package hal-storage-addon (required by NonCentOS signed package(s):kdebase-runtime ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package python-paramiko (required by NonCentOS signed package(s):cas rho ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package pywebkitgtk (required by NonCentOS signed package(s):rhythmbox ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package wireless-tools (required by NonCentOS signed package(s):python-iwlib ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package xorg-x11-drv-acecad (required by NonCentOS signed package(s):xorg-x11-drivers ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package xorg-x11-drv-aiptek (required by NonCentOS signed package(s):xorg-x11-drivers ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package xorg-x11-drv-fpit (required by NonCentOS signed package(s):xorg-x11-drivers ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package xorg-x11-drv-hyperpen (required by NonCentOS signed package(s):xorg-x11-drivers ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package xorg-x11-drv-mutouch (required by NonCentOS signed package(s):xorg-x11-drivers ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Package xorg-x11-drv-penmount (required by NonCentOS signed package(s):xorg-x11-drivers ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: After upgrading to CentOS 7 there are still some el6 packages left. Add --cleanup-post option to redhat-upgrade-tool if you want to remove them automatically.
INPLACERISK: MEDIUM: We detected some packages installed on the system were removed between CentOS 6 and CentOS 7. This may break the functionality of the packages depending on them.
Result for Replaced rpms
Result: fixed
Rule ID: xccdf_preupg_rule_packages_ReplacedPackages_ReplacedPkg
Time: 2019-10-20 02:11
Some rpms were replaced between CentOS 6 and CentOS 7. This content checks for the package replacements from your set of CentOS packages and generates the list of CentOS packages/yum groups for CentOS 7 kickstart.
Remediation instructions
Some of the packages were replaced between CentOS 6 and CentOS 7. This meanspackage with different name provides 100% compatible functionality, so we
can replace them automatically in the package set.
For some of the replacements provides were not handled by the packages,
therefore preupgrade asistant migrates them after the upgrade if necessary.
Following packages were replaced:
GConf2-gtk was replaced by GConf2
NetworkManager-gnome was replaced by nm-connection-editor
bfa-firmware was replaced by linux-firmware
control-center-extra was replaced by control-center
coreutils-libs was replaced by coreutils
cryptsetup-luks-libs was replaced by cryptsetup-libs
cryptsetup-luks was replaced by cryptsetup
db4-devel was replaced by libdb-devel
db4-utils was replaced by libdb-utils
db4 was replaced by libdb
dracut-kernel was replaced by dracut
gcalctool was replaced by gnome-calculator
gdm-plugin-fingerprint was replaced by gdm
gpxe-roms-qemu was replaced by ipxe-roms-qemu
iptables-ipv6 was replaced by iptables-services
jpackage-utils was replaced by javapackages-tools
kdebase-libs was replaced by kde-baseapps-libs
kdebase-workspace-libs was replaced by kde-workspace-libs
kdebase-workspace-wallpapers was replaced by kde-wallpapers
kdebase-workspace (required by NonCentOS signed package(s):kdemultimedia ) was replaced by kde-workspace
kdebase was replaced by kde-baseapps
kernel-firmware was replaced by linux-firmware
kpathsea was replaced by texlive-kpathsea
libudev was replaced by systemd-libs
libusb1 was replaced by libusbx
man was replaced by man-db
mesa-dri-filesystem was replaced by mesa-filesystem
module-init-tools was replaced by kmod
nfs-utils-lib was replaced by libnfsidmap
perl-Compress-Zlib was replaced by perl-IO-Compress
perl-IO-Compress-Base was replaced by perl-IO-Compress
perl-IO-Compress-Bzip2 was replaced by perl-IO-Compress
perl-IO-Compress-Zlib was replaced by perl-IO-Compress
polkit-desktop-policy was replaced by polkit
poppler-qt4 was replaced by poppler-qt
procps (required by NonCentOS signed package(s):readahead ) was replaced by procps-ng
python-virtinst was replaced by virt-manager
ql2400-firmware was replaced by linux-firmware
ql2500-firmware was replaced by linux-firmware
qt-sqlite was replaced by qt
redhat-lsb-compat was replaced by redhat-lsb-core
redhat-lsb-graphics was replaced by redhat-lsb-desktop
samba4-libs was replaced by samba-libs
sane-backends-libs-gphoto2 was replaced by sane-backends-drivers-cameras
util-linux-ng (required by NonCentOS signed package(s):febootstrap-supermin-helper ) was replaced by util-linux
vgabios was replaced by seavgabios-bin
xorg-x11-drv-apm (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-ast (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-modesetting
xorg-x11-drv-ati-firmware was replaced by linux-firmware
xorg-x11-drv-cirrus (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-modesetting
xorg-x11-drv-elographics (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-glint (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-i128 (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-i740 (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-mach64 (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-mga (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-modesetting
xorg-x11-drv-nv (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-nouveau
xorg-x11-drv-r128 (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-rendition (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-s3virge (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-savage (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-siliconmotion (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-sisusb (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-sis (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-tdfx (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-trident (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-voodoo (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
xorg-x11-drv-xgi (required by NonCentOS signed package(s):xorg-x11-drivers ) was replaced by xorg-x11-drv-vesa,xorg-x11-drv-fbdev
yum-plugin-security was replaced by yum
If some NonCentOS signed package requires these packages, you still may want
to monitor them closely. Although the replacement should be compatible,
it can have some minor differences expectable even in the case of common
application lifecycle.
Result for GMP library incompatibilities
Result: informational
Rule ID: xccdf_preupg_rule_packages_gmp_check_script
Time: 2019-10-20 02:11
Incompatibilities between GMP 4 and GMP 5.1 libraries.
Remediation instructions
GMP 5.1 is compatible with GMP 4 in major features. Incompatible changes affect only functions, which should not be used by user applications at all:- mpn_bdivmod function
- BSDMP-like interface libmp.so
Result for package downgrades
Result: fixed
Rule ID: xccdf_preupg_rule_packages_pkgdowngrades_pkgdowngrades
Time: 2019-10-20 02:11
detects package downgrades from CentOS6 to CentOS7
Remediation instructions
Some packages installed on your system have broken upgrade path fromCentOS version 6 to version 7 (the version of package is lower in
newer CentOS).
This does not cause fail of redhat-upgrade-tool run. Packages with broken
upgrade path are fixed by postupgrade script.
~> Optionally, if possible, you may remove packages in question from CentOS 6
system.
Result for General
Result: needs_action
Rule ID: xccdf_preupg_rule_selinux_general_check
Time: 2019-10-20 02:11
There has to be some steps performed in order to have working SELinux on CentOS 7.
Remediation instructions
We have detected that you are using SELinux. There were changes in policies which require to apply custom command before upgrade process. In order to have working SELinux on CentOS 7, you HAVE TO run command prior to running redhat-upgrade-tool:semodule -r sandbox
INPLACERISK: HIGH: There were changes in SELinux policies between CentOS 6 and CentOS 7. Please, check solution in order to resolve this issue.
Result for samba shared directories selinux
Result: informational
Rule ID: xccdf_preupg_rule_selinux_samba_check_script
Time: 2019-10-20 02:11
Samba shared directories that might need their selinux context restored.
Remediation instructions
We found some samba shared directories. These should be labelled as samba_shared_t, unless they are system directories, which should carry some another label. Since autorelabel will be performed after upgrade, please check if they are labelled correctly on the upgraded system.
INPLACERISK: MEDIUM: Found directory /data2/ in section [osc] in smb.conf
INPLACERISK: MEDIUM: ? /data2/
Result for CUPS Browsing/BrowsePoll configuration
Result: fixed
Rule ID: xccdf_preupg_rule_services_cupsbrowsing_cupsbrowsing
Time: 2019-10-20 02:11
The CUPS Browsing and BrowsePoll configuration directives have been removed from CUPS. A replacement is provided in the form of the cups-browsed service.
File(s) affected:
/etc/cups/cupsd.conf
Remediation instructions
The CUPS Browsing and BrowsePoll configuration directives are no longer handled by CUPS itself. Instead, CUPS uses DNS-SD to advertise print queues on the network. Discovery is performed by the applications. GTK+ applications do this as part of the print dialog implementation. To use DNS-SD, enable the "avahi" service and make sure to allow mDNS (UDP port 5353) through the firewall.
If this solution is not suitable for your site you can continue to use CUPS Browsing as before by using the cups-browsed service. The browsing configuration has been migrated to cleanconf/etc/cups/cups-browsed.conf and the cups-browsed service will be enabled after upgrade.
Result for CVS Package Split
Result: informational
Rule ID: xccdf_preupg_rule_services_cvs_checkscript
Time: 2019-10-20 02:11
Some Concurrent Versions System (CVS) tools and documentation have been moved into separate packages and are no longer provided by the cvs packages.
Remediation instructions
The Concurrent Versions System (CVS) server and client have not been changed significantly and should be fully compatible. However, some tools and documentation have been moved to other packages which could concern some users.The rcs2log and contrib utilities have been moved into the new cvs-contrib packages in order to remove the cvs packages dependency on perl and reduce the size of the cvs packages. If you require the rcs2log and contrib tools, you can install the packages manually by running the "yum install cvs-contrib" command as root.
Additional documentation, such as books concerning CVS tools in the PDF format and revision control system (RCS) specification files, has been moved into the new cvs-doc package to reduce the size of the cvs packages. If you want to access this additional documentation, install the package manually by running the "yum install cvs-doc" command as root. The manual and Texinfo pages are still included in the cvs packages.
These utilities and the supplemental documentation are not used by the CVS client or server. Their absence does not pose a risk when upgrading the cvs packages.
Result for bind-dyndb-ldap
Result: pass
Rule ID: xccdf_preupg_rule_services_ipa_bind-dyndb-ldap_check
Time: 2019-10-20 02:11
Check configuration file for bind-dyndb-ldap plug-in.
File(s) affected:
/etc/named.conf
Result for NTP configuration
Result: informational
Rule ID: xccdf_preupg_rule_services_ntp_configuration_ntp
Time: 2019-10-20 02:11
Save ntp and ntpdate configuration files which are not tracked by rpm.
File(s) affected:
/etc/ntp.conf
/etc/ntp/step-tickers
Remediation instructions
The CentOS6 ntp and ntpdate configuration can be used without changes on CentOS7.The following configuration files are modified, but not tracked by rpm,
or not included in the packages:
/etc/ntp.conf
The files have been saved to /root/preupgrade/cleanconf.
Configuration files tracked by rpm are saved to the same directory by rule
"Store modified config files for packages with unchanged version".
Please note that the NTP package installed by default in CentOS7 is chrony.
To switch back to ntp, run "yum install ntp" and "yum remove chrony".
Result for Information on time-sync.target
Result: pass
Rule ID: xccdf_preupg_rule_services_ntp_timesync_timesync
Time: 2019-10-20 02:11
Check if ntpdate service is enabled and print information on starting services with clock set
Result for OpenSSH sshd_config migration content
Result: pass
Rule ID: xccdf_preupg_rule_services_openssh_sshd_openssh-sshd
Time: 2019-10-20 02:11
This content has a aim to convert /etc/ssh/sshd_config file from openssh-server package
File(s) affected:
/etc/ssh/sshd_config
Result for OpenSSH sysconfig migration content
Result: fixed
Rule ID: xccdf_preupg_rule_services_openssh_sysconfig_openssh-sysconfig
Time: 2019-10-20 02:11
This content has a aim to convert /etc/sysconfig/sshd file from openssh-server package
File(s) affected:
/etc/sysconfig/sshd
Remediation instructions
/etc/sysconfig/sshd will not be a shell script in CentOS 7 anymore so all 'export VARIABLE=VALUE' has to be changed to 'VARIABLE=VALUE'.# sed -i 's/^export //' /etc/sysconfig/sshd
There is the /root/preupgrade/cleanconf//etc/sysconfig/sshd with the fixed configuration.
Result for Configuration for quota_nld service
Result: pass
Rule ID: xccdf_preupg_rule_services_quota_nld_configuration_checkscript
Time: 2019-10-20 02:11
Back configuration for quota_nld service up
File(s) affected:
/etc/sysconfig/quota_nld
Result for Disk quota netlink message daemon moved into quota-nld package
Result: pass
Rule ID: xccdf_preupg_rule_services_quota_nld_new_package_checkscript
Time: 2019-10-20 02:11
Install quota-nld package if the quota_nld service is enabled
Result for Luks encrypted partition
Result: pass
Rule ID: xccdf_preupg_rule_storage_luks_check
Time: 2019-10-20 02:11
Checks whether partition is crypted by CRYPTO-LUKS.
Result for State of LVM2 services.
Result: fixed
Rule ID: xccdf_preupg_rule_storage_lvm2-services_check_lvm2_services
Time: 2019-10-20 02:11
Some services are important for proper LVM functionality. This content checks for current state of existing services and makes sure the state is preserved over upgrade. Also, some systemd units should be enabled by default to allow for service's on-demand activation if needed.
Remediation instructions
CentOS7 uses systemd for service management. When upgrading from CentOS6,we need to be sure that certain services (systemd units) are enabled
or prepared for on-demand activation.
The LVM2 monitoring service inherits the old state, which means that if
the 'lvm2-monitor' service was enabled in CentOS6, it will also be enabled
in CentOS7 (lvm2-monitor.service) and vice versa.
In addition to that these systemd units are enabled to allow for on-demand
service activation:
dm-event.socket
lvm2-lvmetad.socket
The dm-event.socket is used for on-demand activation of dm-event.service.
This is an essential part of device-mapper monitoring feature (which also
covers monitoring of LVM devices).
The lvm2-lvmetad.socket is used for on-demand activation of lvm2-lvmetad.service
which starts the lvmetad - LVM metadata daemon that is used to cache LVM
metadata so LVM commands don't need to scan devices all the time and they
can reuse cached metadata. This functionality is used by default in CentOS7.
Result for Configuration for warnquota tool
Result: pass
Rule ID: xccdf_preupg_rule_storage_warnquota_configuration_checkscript
Time: 2019-10-20 02:11
Back configuration for warnquota tool up
File(s) affected:
/etc/quotagrpadmins
/etc/quotatab
/etc/warnquota.conf
Result for Disk quota tool warnquota moved into quota-warnquota package
Result: informational
Rule ID: xccdf_preupg_rule_storage_warnquota_new_package_checkscript
Time: 2019-10-20 02:11
Install quota-warnquota if need warnquota tool
Remediation instructions
Quota tool warnquota(8) has been moved from "quota" package into"quota-warnquota" package.
If you used warnquota on the old system, please install quota-warnquota
package with this command on the new system:
# yum --assumeyes install quota-warnquota
Please do not forget to check warnquota configutation files
(/etc/quotagrpadmins, /etc/quotatab, and /etc/warnquota.conf) before using
the tool.
Please do not forget to install a cron job to execute the warnquota tool
periodically, if you used it on the the old system.
Result for Architecture Support
Result: pass
Rule ID: xccdf_preupg_rule_system_Architecture_architecture
Time: 2019-10-20 02:11
CentOS 7 does not support installations on 32-bit architectures, and performing an in-place upgrade is not possible on 32-bit systems.
Result for Binary rebuilds
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_BinariesRebuild_check
Time: 2019-10-20 02:59
Check all binaries installed on the assessment system which needs to be rebuilded on the target system
Remediation instructions
This content generates the list of binaries which needs to be rebuiltYou can find the list at:
kickstart/binaries
/data2/D_Drive/Jboss Tunnign_Tool/visualvm_135/profiler/lib/deployed/jdk15/solaris-amd64/libprofilerinterface.so: /lib64/librt.so.1: version `SUNW_1.2' not found (required by /data2/D_Drive/Jboss Tunnign_Tool/visualvm_135/profiler/lib/deployed/jdk15/solaris-amd64/libprofilerinterface.so)
/data2/D_Drive/Jboss Tunnign_Tool/visualvm_135/profiler/lib/deployed/jdk16/solaris-amd64/libprofilerinterface.so: /lib64/librt.so.1: version `SUNW_1.2' not found (required by /data2/D_Drive/Jboss Tunnign_Tool/visualvm_135/profiler/lib/deployed/jdk16/solaris-amd64/libprofilerinterface.so)
ldd: exited with unknown exit code (139)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_date_time-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.15' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_date_time-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_date_time-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_date_time-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_date_time-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.21' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_date_time-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.8' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.20' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.21' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_filesystem-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_iostreams-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_iostreams-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_iostreams-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.21' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_iostreams-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_program_options-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.20' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_program_options-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_program_options-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_program_options-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_program_options-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.21' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_program_options-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.20' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.8' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.15' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.21' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_regex-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_system-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_system-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_system-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.21' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_system-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_thread-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_thread-gcc62-mt-1_62.so.1.62.0)
/data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_thread-gcc62-mt-1_62.so.1.62.0: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.21' not found (required by /data2/download/elk/hnc01_elasticsearch-5.6.2/elasticsearch-5.6.2/plugins/x-pack/platform/linux-x86_64/lib/libboost_thread-gcc62-mt-1_62.so.1.62.0)
/data2/was/jeus7/setup/lib_native/sunos_x64/libWebtoBAdmin.so: /lib64/libnsl.so.1: version `SUNW_0.7' not found (required by /data2/was/jeus7/setup/lib_native/sunos_x64/libWebtoBAdmin.so)
/data2/web/installfile/libltdl/.libs/libltdl.so.7.3.1: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /data2/web/installfile/libltdl/.libs/libltdl.so.7.3.1)
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpbridge: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpbridge)
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpcapinfo: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpcapinfo)
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpliveplay: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpliveplay)
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpprep: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpprep)
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpreplay: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpreplay)
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpreplay-edit: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcpreplay-edit)
/home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcprewrite: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /home/jerryj/multicast/onboard-test/vdr/tcpreplay-4.1.0/src/tcprewrite)
/WAS/jboss-eap-6.4/modules/system/layers/base/org/jboss/as/web/main/lib/linux-x86_64/libtcnative-1.so: /usr/lib64/libcrypto.so.10: version `OPENSSL_1.0.2' not found (required by /WAS/jboss-eap-6.4/modules/system/layers/base/org/jboss/as/web/main/lib/linux-x86_64/libtcnative-1.so)
INPLACERISK: SLIGHT: Some binaries untracked by RPM were discovered on the system and may need rebuild after upgrade.
INPLACERISK: SLIGHT: Some scripts untracked by RPM were discovered on the system and may not work properly after upgrade.
Result for Debuginfo packages
Result: pass
Rule ID: xccdf_preupg_rule_system_Debuginfo_debuginfo
Time: 2019-10-20 02:59
This content checks for debuginfo packages and inform about potential risks for in-place upgrade.
Result for Cluster and High Availability
Result: pass
Rule ID: xccdf_preupg_rule_system_HA-Cluster_ha-cluster_hacluster
Time: 2019-10-20 02:59
Content checks Cluster and High Availability solutions for upgrade.
Result for File Systems, Partitions and Mounts Configuration Review
Result: informational
Rule ID: xccdf_preupg_rule_system_PartitionMounts_partmounts
Time: 2019-10-20 02:59
This module describes the new default file system and stores the partitions and mounts configuration.
Remediation instructions
CentOS 7 now uses the XFS file system as the default file system instead of the ext4 file system. If you intend to migrate the system to another machine or create a new file system, you can consider using XFS instead of ext4. Users who use a Kickstart installation can consider modifying the Kickstart configuration to use XFS.Additionally, information about the partitions and mounts configuration has been saved in the /root/preupgrade/kickstart/ directory. This information can be useful to users who choose to perform a system migration or convert their file systems to XFS.
Result for Read Only FHS directories
Result: pass
Rule ID: xccdf_preupg_rule_system_ReadOnlyFHS_check_script
Time: 2019-10-20 02:59
Check that critical directories of Filesystem Hierarchy Standard are not mounted read-only.
Result for Sonamebumped libs
Result: needs_action
Rule ID: xccdf_preupg_rule_system_SonameBump_SonameBump
Time: 2019-10-20 02:59
If the dynamic library breaks the API/ABI compatibility, it is supposed to change its soname. This content checks for the soname bumps between CentOS 6 and CentOS 7 in your CentOS packages.
Remediation instructions
Application developed in C may use dynamic libraries (.so files) to reuse thecommon functions/symbols in the binary. If the library bumped its soname (
changed major version, API/ABI incompatibility), application that depends on
it may not run.
Some of the libraries changed the soname version between CentOS
6 and CentOS 7.
From your CentOS 6 packages, following libraries changed soname:
libMagickCore.so.2 from ImageMagick changed to libMagickCore.so.5
libMagickWand.so.2 from ImageMagick changed to libMagickWand.so.5
libanonymous.so.2 from cyrus-sasl-lib changed to libanonymous.so.3
libarchive.so.2 from libarchive changed to libarchive.so.13
libbind9.so.80 from bind-libs changed to libbind9.so.90
libboost_filesystem-mt.so.5 from boost-filesystem changed to libboost_filesystem-mt.so.1.53.0
libboost_filesystem.so.5 from boost-filesystem changed to libboost_filesystem.so.1.53.0
libboost_program_options-mt.so.5 from boost-program-options changed to libboost_program_options-mt.so.1.53.0
libboost_program_options.so.5 from boost-program-options changed to libboost_program_options.so.1.53.0
libboost_system-mt.so.5 from boost-system changed to libboost_system-mt.so.1.53.0
libboost_system.so.5 from boost-system changed to libboost_system.so.1.53.0
libcamel-1.2.so.19 from evolution-data-server changed to libcamel-1.2.so.43
libcrammd5.so.2 from cyrus-sasl-md5 changed to libcrammd5.so.3
libcryptsetup.so.1 from cryptsetup-luks-libs changed to libcryptsetup.so.4
libdigestmd5.so.2 from cyrus-sasl-md5 changed to libdigestmd5.so.3
libdns.so.81 from bind-libs changed to libdns.so.100
libdricore9.2.0-devel.so.1 from mesa-dri-drivers changed to libdricore9.2.2.so.1
libdrm_nouveau.so.1 from libdrm changed to libdrm_nouveau.so.2
libebackend-1.2.so.0 from evolution-data-server changed to libebackend-1.2.so.6
libebook-1.2.so.10 from evolution-data-server changed to libebook-1.2.so.14
libecal-1.2.so.8 from evolution-data-server changed to libecal-1.2.so.15
libedata-book-1.2.so.8 from evolution-data-server changed to libedata-book-1.2.so.17
libedata-cal-1.2.so.10 from evolution-data-server changed to libedata-cal-1.2.so.20
libedataserver-1.2.so.14 from evolution-data-server changed to libedataserver-1.2.so.17
libgdbm.so.2 from gdbm changed to libgdbm.so.4
libgmp.so.3 from gmp (required by NonCentOS signed package(s):mpfr ) changed to libgmp.so.10
libgnutls.so.26 from gnutls changed to libgnutls.so.28
libgnutlsxx.so.26 from gnutls changed to libgnutlsxx.so.28
libgphoto2.so.2 from libgphoto2 changed to libgphoto2.so.6
libgphoto2_port.so.0 from libgphoto2 changed to libgphoto2_port.so.10
libgs.so.8 from ghostscript (required by NonCentOS signed package(s):netpbm-progs ) changed to libgs.so.9
libgssapiv2.so.2 from cyrus-sasl-gssapi changed to libgssapiv2.so.3
libgstbasevideo-0.10.so.0 from gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed to libgstbasevideo-0.10.so.23
libgstphotography-0.10.so.0 from gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed to libgstphotography-0.10.so.23
libgstsignalprocessor-0.10.so.0 from gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed to libgstsignalprocessor-0.10.so.23
libicudata.so.42 from libicu changed to libicudata.so.50
libicui18n.so.42 from libicu changed to libicui18n.so.50
libicuio.so.42 from libicu changed to libicuio.so.50
libicule.so.42 from libicu changed to libicule.so.50
libiculx.so.42 from libicu changed to libiculx.so.50
libicutu.so.42 from libicu changed to libicutu.so.50
libicuuc.so.42 from libicu changed to libicuuc.so.50
libini_config.so.2 from libini_config changed to libini_config.so.3
libisc.so.83 from bind-libs changed to libisc.so.95
libisccc.so.80 from bind-libs changed to libisccc.so.90
libisccfg.so.82 from bind-libs changed to libisccfg.so.90
libkdb5.so.6 from krb5-libs (required by NonCentOS signed package(s):libgssglue ) changed to libkdb5.so.7
libkpathsea.so.4 from kpathsea changed to libkpathsea.so.6
liblogin.so.2 from cyrus-sasl-plain (required by NonCentOS signed package(s):kdepim ) changed to liblogin.so.3
liblwres.so.80 from bind-libs changed to liblwres.so.90
libmysqlclient.so.16 from mysql-libs changed to libmysqlclient.so.18
libnetsnmp.so.20 from net-snmp-libs changed to libnetsnmp.so.31
libnetsnmpagent.so.20 from net-snmp-libs changed to libnetsnmpagent.so.31
libnetsnmphelpers.so.20 from net-snmp-libs changed to libnetsnmphelpers.so.31
libnetsnmpmibs.so.20 from net-snmp-libs changed to libnetsnmpmibs.so.31
libnetsnmptrapd.so.20 from net-snmp-libs changed to libnetsnmptrapd.so.31
libnm-glib.so.2 from NetworkManager-glib changed to libnm-glib.so.4
libnm-util.so.1 from NetworkManager-glib changed to libnm-util.so.2
libopenjpeg.so.2 from openjpeg-libs changed to libopenjpeg.so.1
libpackagekit-glib2.so.12 from PackageKit-glib changed to libpackagekit-glib2.so.16
libpcre.so.0 from pcre (required by NonCentOS signed package(s):nginx ) changed to libpcre.so.1
libplain.so.2 from cyrus-sasl-plain (required by NonCentOS signed package(s):kdepim ) changed to libplain.so.3
libpoppler-glib.so.4 from poppler-glib changed to libpoppler-glib.so.8
libpoppler-qt4.so.3 from poppler-qt4 changed to libpoppler-qt4.so.4
libpoppler.so.5 from poppler changed to libpoppler.so.37
libproxy.so.0 from libproxy changed to libproxy.so.1
librpm.so.1 from rpm-libs changed to librpm.so.3
librpmbuild.so.1 from rpm-libs changed to librpmbuild.so.3
librpmio.so.1 from rpm-libs changed to librpmio.so.3
libsasl2.so.2 from cyrus-sasl-lib changed to libsasl2.so.3
libsasldb.so.2 from cyrus-sasl-lib changed to libsasldb.so.3
libtasn1.so.3 from libtasn1 changed to libtasn1.so.6
libtiff.so.3 from libtiff changed to libtiff.so.5
libtiffxx.so.3 from libtiff changed to libtiffxx.so.5
libudev.so.0 from libudev changed to libudev.so.1
libverto.so.0 from krb5-libs (required by NonCentOS signed package(s):libgssglue ) changed to libverto.so.1
libvpx.so.0 from libvpx changed to libvpx.so.1
libweather_ion.so.4 from kdebase-workspace-libs changed to libweather_ion.so.6
libxcb-icccm.so.1 from xcb-util changed to libxcb-icccm.so.4
libxtables.so.4 from iptables changed to libxtables.so.10
We checked the requirements in Non-CentOS signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you will
need to rebuild such package/application against new library.
CentOS applications available on the CentOS 7 will handle
these bumps automatically by the update/migration to new CentOS
as they were already built against these libraries.
INPLACERISK: HIGH: Library gmp (required by NonCentOS signed package(s):mpfr ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library ghostscript (required by NonCentOS signed package(s):netpbm-progs ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library krb5-libs (required by NonCentOS signed package(s):libgssglue ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library cyrus-sasl-plain (required by NonCentOS signed package(s):kdepim ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library pcre (required by NonCentOS signed package(s):nginx ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library cyrus-sasl-plain (required by NonCentOS signed package(s):kdepim ) changed soname between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library krb5-libs (required by NonCentOS signed package(s):libgssglue ) changed soname between CentOS 6 and CentOS 7
libgmp.so.3 from gmp (required by NonCentOS signed package(s):mpfr ) changed to libgmp.so.10
libgs.so.8 from ghostscript (required by NonCentOS signed package(s):netpbm-progs ) changed to libgs.so.9
libgstbasevideo-0.10.so.0 from gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed to libgstbasevideo-0.10.so.23
libgstphotography-0.10.so.0 from gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed to libgstphotography-0.10.so.23
libgstsignalprocessor-0.10.so.0 from gstreamer-plugins-bad-free (required by NonCentOS signed package(s):totem ) changed to libgstsignalprocessor-0.10.so.23
libkdb5.so.6 from krb5-libs (required by NonCentOS signed package(s):libgssglue ) changed to libkdb5.so.7
liblogin.so.2 from cyrus-sasl-plain (required by NonCentOS signed package(s):kdepim ) changed to liblogin.so.3
libpcre.so.0 from pcre (required by NonCentOS signed package(s):nginx ) changed to libpcre.so.1
libplain.so.2 from cyrus-sasl-plain (required by NonCentOS signed package(s):kdepim ) changed to libplain.so.3
libverto.so.0 from krb5-libs (required by NonCentOS signed package(s):libgssglue ) changed to libverto.so.1
INPLACERISK: MEDIUM: We detected some soname bumps in the libraries installed on the system. This may break the functionality of some of your 3rd party applications. They may need rebuild. Please check their requirements.
Result for SonameKept Reusable Dynamic Libraries
Result: informational
Rule ID: xccdf_preupg_rule_system_SonameKept_SonameKept
Time: 2019-10-20 02:59
This module provides an overview of the dynamic libraries from CentOS 6 that can be reused in CentOS 7, as the dynamic libraries remain compatible with both the application programming interface (API) and the application binary interface (ABI).
Remediation instructions
Applications developed in the C programming language can use dynamic libraries (.so files) to reuse common functions and symbols in the binary. When the library changes its soname in a major version, the binaries normally need to be rebuilt for the new system. Some libraries have not changed their soname between CentOS 6 and CentOS 7 so it could be possible to reuse third party applications which use only these libraries without rebuilding.You can find the list of the unchanged dynamic libraries and their package names in the following file: ./kickstart/NoSonameBumpLibs
If it is not clear what libraries the third party binary or RPM uses, it is possible to use the ldd utility for the C binary, or run the "rpm -q --whatrequires SONAME" command for the whole RPM package. No problems are expected to occur if there are only .so files listed in the NoSonameBumpLibs file and unversioned shared libraries.
Result for Removed .so libs
Result: needs_action
Rule ID: xccdf_preupg_rule_system_SonameRemoval_SonameRemoval
Time: 2019-10-20 02:59
Dynamic libraries are used provides symbols/functions to binaries. Some of the libraries were removed between CentOS 6 and CentOS 7. This content checks for the .so libraries removal between CentOS 6 and CentOS 7 in your CentOS packages.
Remediation instructions
Application developed in C may use dynamic libraries (.so files) to reuse thecommon functions/symbols in the binary. If the library is missing, application
will not run. Some of the libraries were removed between CentOS 6 and CentOS 7.
From your CentOS 6 packages, following libraries disappeared:
_codecs_iso2022.so from python-libs
db2.so.0 from krb5-libs (required by NonCentOS signed package(s):libgssglue )
ha_archive.so.0 from mysql-server
ha_blackhole.so.0 from mysql-server
ha_example.so.0 from mysql-server
ha_federated.so.0 from mysql-server
ha_innodb_plugin.so.0 from mysql-server
libI810XvMC.so.1 from xorg-x11-drv-intel (required by NonCentOS signed package(s):xorg-x11-drivers )
libQtAssistantClient.so.4 from qt-x11
libabrt_web.so.0 from libreport
libakonadiprivate.so.1 from akonadi
libbrasero-burn.so.0 from brasero-libs
libbrasero-media.so.0 from brasero-libs
libbrasero-utils.so.0 from brasero-libs
libcamel-provider-1.2.so.19 from evolution-data-server
libck-connector.so.0 from ConsoleKit-libs
libcupsdriver.so.1 from cups-libs
libdrm_nouveau2.so.2 from libdrm
libedataserverui-1.2.so.11 from evolution-data-server
libegroupwise-1.2.so.13 from evolution-data-server
libevdocument.so.1 from evince-libs
libevview.so.1 from evince-libs
libgdmsimplegreeter.so.1 from gdm-libs
libgdu-gtk.so.0 from gnome-disk-utility-ui-libs
libgdu.so.0 from gnome-disk-utility-libs
libgnome-desktop-2.so.11 from gnome-desktop (required by NonCentOS signed package(s):gnome-screensaver )
libgnome-window-settings.so.1 from control-center (required by NonCentOS signed package(s):orca )
libgnutls-extra.so.26 from gnutls
libgvfscommon-dnssd.so.0 from gvfs
libhal-storage.so.1 from hal-libs
libhal.so.1 from hal-libs
libipq.so.0 from iptables
libkipiplugins.so.1 from kipi-plugins-libs
libldif-2.4.so.2 from openldap (required by NonCentOS signed package(s):python-ldap )
libmp.so.3 from gmp (required by NonCentOS signed package(s):mpfr )
libmysqlclient_r.so.16 from mysql-libs
libnepomukqueryclient.so.4 from kdebase-workspace-libs
libnih-dbus.so.1 from libnih
libnih.so.1 from libnih
libnss_winbind.so.2 from samba-winbind-clients
libnss_wins.so.2 from samba-winbind-clients
libpackagekit-glib.so.12 from PackageKit-glib
libpanel-applet-2.so.0 from gnome-panel-libs
libpangox-1.0.so.0 from pango
libparted-2.1.so.0 from parted
libpolkit-backend-1.so.0 from polkit (required by NonCentOS signed package(s):python-slip-dbus rtkit DeviceKit-power )
libpolkit-gtk-1.so.0 from polkit-gnome
libpython2.6.so.1.0 from python-libs
librpcsecgss.so.3 from nfs-utils-lib
libsnmp.so.20 from net-snmp-libs
libstdc++-libc6.2-2.so.3 from libstdc++
libtime_solar.so.4 from kdebase-workspace-libs
libverto-k5ev.so.0 from krb5-libs (required by NonCentOS signed package(s):libgssglue )
libvte.so.9 from vte
libwebkit-1.0.so.2 from webkitgtk
libxcb-atom.so.1 from xcb-util
libxcb-aux.so.0 from xcb-util
libxcb-event.so.1 from xcb-util
libxcb-property.so.1 from xcb-util
libxcb-reply.so.1 from xcb-util
We checked the requirements in Non-CentOS signed packages, but for the non
rpm-packaged binaries, you should check the compatibility list yourself
by using e.g. ldd <binary> command.
If some of your application uses the library on the list above, you may need
to get the .so library from different place or search for an alternative.
INPLACERISK: HIGH: Library krb5-libs (required by NonCentOS signed package(s):libgssglue ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library xorg-x11-drv-intel (required by NonCentOS signed package(s):xorg-x11-drivers ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library gnome-desktop (required by NonCentOS signed package(s):gnome-screensaver ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library control-center (required by NonCentOS signed package(s):orca ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library openldap (required by NonCentOS signed package(s):python-ldap ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library gmp (required by NonCentOS signed package(s):mpfr ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library polkit (required by NonCentOS signed package(s):python-slip-dbus rtkit DeviceKit-power ) removed between CentOS 6 and CentOS 7
INPLACERISK: HIGH: Library krb5-libs (required by NonCentOS signed package(s):libgssglue ) removed between CentOS 6 and CentOS 7
db2.so.0 from krb5-libs (required by NonCentOS signed package(s):libgssglue )
libI810XvMC.so.1 from xorg-x11-drv-intel (required by NonCentOS signed package(s):xorg-x11-drivers )
libgnome-desktop-2.so.11 from gnome-desktop (required by NonCentOS signed package(s):gnome-screensaver )
libgnome-window-settings.so.1 from control-center (required by NonCentOS signed package(s):orca )
libldif-2.4.so.2 from openldap (required by NonCentOS signed package(s):python-ldap )
libmp.so.3 from gmp (required by NonCentOS signed package(s):mpfr )
libpolkit-backend-1.so.0 from polkit (required by NonCentOS signed package(s):python-slip-dbus rtkit DeviceKit-power )
libverto-k5ev.so.0 from krb5-libs (required by NonCentOS signed package(s):libgssglue )
INPLACERISK: MEDIUM: We detected some .so libraries installed on the system were removed between CentOS 6 and CentOS 7. This may break the functionality of some of your 3rd party applications.
Result for In-place Upgrade Requirements for the /usr/ Directory
Result: pass
Rule ID: xccdf_preupg_rule_system_UsrPartition_usr
Time: 2019-10-20 02:59
This module determines if the /usr/ directory is located on a separate partition.
Result for CA certificate bundles modified
Result: pass
Rule ID: xccdf_preupg_rule_system_ca-certificates_checkbundles
Time: 2019-10-20 02:59
Later versions of CentOS include a shared store for certificate authorities. Additional trusted certificate authorities must be placed in the new location rather that modifying the distributed certificate authority bundles. The Preupgrade assistant cannot automatically identify how certificate bundles have been modified on this system.
Result for Developer Tool Set packages
Result: pass
Rule ID: xccdf_preupg_rule_system_dts_dts
Time: 2019-10-20 02:59
Content checks whether Red Hat Developer Tool Set packages are installed.
Result for Hyper-V
Result: pass
Rule ID: xccdf_preupg_rule_system_hyperv_check
Time: 2019-10-20 02:59
Check if this system runs on Hyper-V.
Result for Content for enabling and disabling services based on CentOS 6 system
Result: needs_action
Rule ID: xccdf_preupg_rule_system_initscripts_control_check
Time: 2019-10-20 02:59
The content checks what services are enabled or disabled on assessment system and if the services will be enabled or disabled on CentOS 7 system.
Remediation instructions
The content detects some services who are disabled by default on CentOS 7 system.
INPLACERISK: HIGH: The service autofs on CentOS 7 is disabled by default. Enable them via commands: systemctl enable autofs && systemctl start autofs.service .
INPLACERISK: HIGH: The service blk-availability on CentOS 7 is disabled by default. Enable them via commands: systemctl enable blk-availability && systemctl start blk-availability.service .
INPLACERISK: HIGH: The service certmonger on CentOS 7 is disabled by default. Enable them via commands: systemctl enable certmonger && systemctl start certmonger.service .
INPLACERISK: HIGH: The service cgconfig on CentOS 7 is disabled by default. Enable them via commands: systemctl enable cgconfig && systemctl start cgconfig.service .
INPLACERISK: MEDIUM: The name cups-lpd was changed on CentOS 7 to one of these services: cups-lpd.socket cups-lpd@.service
INPLACERISK: HIGH: The service haldaemon on CentOS 7 is disabled by default. Enable them via commands: systemctl enable haldaemon && systemctl start haldaemon.service .
INPLACERISK: MEDIUM: The service influxdb is not handled by any package and will not be automatically enabled after in-place upgrade.
INPLACERISK: HIGH: The service ip6tables on CentOS 7 is disabled by default. Enable them via commands: systemctl enable ip6tables && systemctl start ip6tables.service .
INPLACERISK: HIGH: The service iscsi on CentOS 7 is disabled by default. Enable them via commands: systemctl enable iscsi && systemctl start iscsi.service .
INPLACERISK: HIGH: The service iscsid on CentOS 7 is disabled by default. Enable them via commands: systemctl enable iscsid && systemctl start iscsid.service .
INPLACERISK: HIGH: The service libvirt-guests on CentOS 7 is disabled by default. Enable them via commands: systemctl enable libvirt-guests && systemctl start libvirt-guests.service .
INPLACERISK: HIGH: The service mcelogd on CentOS 7 is disabled by default. Enable them via commands: systemctl enable mcelogd && systemctl start mcelogd.service .
INPLACERISK: HIGH: The service messagebus on CentOS 7 is disabled by default. Enable them via commands: systemctl enable messagebus && systemctl start messagebus.service .
INPLACERISK: HIGH: The service netcf-transaction on CentOS 7 is disabled by default. Enable them via commands: systemctl enable netcf-transaction && systemctl start netcf-transaction.service .
INPLACERISK: HIGH: The service netfs on CentOS 7 is disabled by default. Enable them via commands: systemctl enable netfs && systemctl start netfs.service .
INPLACERISK: HIGH: The service network on CentOS 7 is disabled by default. Enable them via commands: systemctl enable network && systemctl start network.service .
INPLACERISK: MEDIUM: The service nexus is not handled by any package and will not be automatically enabled after in-place upgrade.
INPLACERISK: HIGH: The service nfslock on CentOS 7 is disabled by default. Enable them via commands: systemctl enable nfslock && systemctl start nfslock.service .
INPLACERISK: MEDIUM: The service nrpe is not installed by CentOS signed packages and will not be automatically enabled after in-place upgrade.
INPLACERISK: HIGH: The service ntpd on CentOS 7 is disabled by default. Enable them via commands: systemctl enable ntpd && systemctl start ntpd.service .
INPLACERISK: MEDIUM: The service openct is not installed by CentOS signed packages and will not be automatically enabled after in-place upgrade.
INPLACERISK: HIGH: The service portreserve on CentOS 7 is disabled by default. Enable them via commands: systemctl enable portreserve && systemctl start portreserve.service .
INPLACERISK: HIGH: The service postfix on CentOS 7 is disabled by default. Enable them via commands: systemctl enable postfix && systemctl start postfix.service .
INPLACERISK: HIGH: The service rpcgssd on CentOS 7 is disabled by default. Enable them via commands: systemctl enable rpcgssd && systemctl start rpcgssd.service .
INPLACERISK: HIGH: The service smb on CentOS 7 is disabled by default. Enable them via commands: systemctl enable smb && systemctl start smb.service .
INPLACERISK: HIGH: The service udev-post on CentOS 7 is disabled by default. Enable them via commands: systemctl enable udev-post && systemctl start udev-post.service .
INPLACERISK: HIGH: The service vncserver on CentOS 7 is disabled by default. Enable them via commands: systemctl enable vncserver && systemctl start vncserver.service .
INPLACERISK: MEDIUM: The service x2gocleansessions is not installed by CentOS signed packages and will not be automatically enabled after in-place upgrade.
INPLACERISK: MEDIUM: The service collectd is disabled and not installed by CentOS signed packages. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service ebtables is disabled and not installed by CentOS signed packages. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service lm_sensors is disabled and not installed by CentOS signed packages. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service lxc is disabled and not installed by CentOS signed packages. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service nginx is disabled and not installed by CentOS signed packages. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service radvd is disabled and not installed by CentOS signed packages. It will be disabled after an in-place upgrade.
INPLACERISK: MEDIUM: The service wdaemon is disabled and not installed by CentOS signed packages. It will be disabled after an in-place upgrade.
Result for Check for ethernet interface naming
Result: needs_action
Rule ID: xccdf_preupg_rule_system_initscripts_ifcfg_check
Time: 2019-10-20 02:59
The content checks if network interface names set through /etc/sysconfig/network-scripts/ifcfg-* files are compatible with device naming in CentOS 7.
Remediation instructions
CentOS 7 still offers possibility to specifying names for network interface by setting DEVICE and HWADDR options in /etc/sysconfig/network-scripts/ifcfg-* configuration files. Unfortunally udev does not support swapping interface names anymore. In the case that you set ethX names to multiple network card and kernel discovers them in different order, udev rule 60-net.rules will most likely fail.It is highly recommended to rename such interfaces or remove DEVICE line from ifcfg configuration files.
INPLACERISK: HIGH: initscripts
Result for User modification in /etc/rc.local and /etc/rc.d/rc.local
Result: pass
Rule ID: xccdf_preupg_rule_system_initscripts_rc-local_rclocal
Time: 2019-10-20 02:59
The content checks whether user modifies files /etc/rc.local and /etc/rc.d/rc.local
Result for cgroups configuration compatibility check
Result: needs_action
Rule ID: xccdf_preupg_rule_system_libcgroup_cgroups
Time: 2019-10-20 02:59
Checks libcgroup configuration files
File(s) affected:
/etc/cgconfig.conf
/etc/cgrules.conf
/etc/cgconfig.d
Remediation instructions
In previous versions of CentOS, system administrators builtcustom cgroup hierarchies with use of the cgconfig command from the libcgroup
package. This package is now deprecated. There is only special situation,
in which libgroups should be used.
CentOS 7 moves the resource management settings from the
process level to the application level by binding the cgroup hierarchy
with the systemd unit hierarchy. Therefore, you can manage the cgroup tree
with systemctl commands.
For more details see Red Hat Enterprise Linux 7 Resource Management Guide,
Chapter 2 (Using Control Groups):
https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_Control_Groups.html
Chapter 3 (Using libcgroup Tools)
https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_libcgroup_Tools.html
INPLACERISK: HIGH: additional libcgroup configuration files were created (/etc/cgconfig.d)
Result for Plugable authentication modules (PAM)
Result: pass
Rule ID: xccdf_preupg_rule_system_pam_pam
Time: 2019-10-20 02:59
Content checks for no-longer supported pluggable authentication modules
Result for Foreign Perl modules
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_perl_check
Time: 2019-10-20 03:00
Find Perl modules which need to be checked for proper functionality with newer Perl version on the CentOS 7 system because they are not distributed by CentOS
Remediation instructions
Perl was updated from version 5.10 to version 5.16. Please read Perlsection in the CentOS 7 Developer Guide for more details.
Following Perl module files located in system Perl paths are either not
handled by any package or not signed by CentOS:
/usr/lib64/perl5/XML/Parser/Style/Stream.pm
/usr/lib64/perl5/XML/Parser/Style/Objects.pm
/usr/lib64/perl5/XML/Parser/Style/Subs.pm
/usr/lib64/perl5/XML/Parser/Style/Debug.pm
/usr/lib64/perl5/XML/Parser/Style/Tree.pm
/usr/lib64/perl5/XML/Parser/Expat.pm
/usr/lib64/perl5/XML/Parser.pm
/usr/lib64/perl5/DBI.pm
/usr/lib64/perl5/Bundle/DBI.pm
/usr/lib64/perl5/Bundle/DBD/mysql.pm
/usr/lib64/perl5/vendor_perl/nginx.pm
/usr/lib64/perl5/DBI/SQL/Nano.pm
/usr/lib64/perl5/DBI/ProfileSubs.pm
/usr/lib64/perl5/DBI/Roadmap.pm
/usr/lib64/perl5/DBI/DBD.pm
/usr/lib64/perl5/DBI/ProxyServer.pm
/usr/lib64/perl5/DBI/Util/CacheMemory.pm
/usr/lib64/perl5/DBI/Util/_accessor.pm
/usr/lib64/perl5/DBI/PurePerl.pm
/usr/lib64/perl5/DBI/Gofer/Serializer/DataDumper.pm
/usr/lib64/perl5/DBI/Gofer/Serializer/Storable.pm
/usr/lib64/perl5/DBI/Gofer/Serializer/Base.pm
/usr/lib64/perl5/DBI/Gofer/Response.pm
/usr/lib64/perl5/DBI/Gofer/Transport/pipeone.pm
/usr/lib64/perl5/DBI/Gofer/Transport/Base.pm
/usr/lib64/perl5/DBI/Gofer/Transport/stream.pm
/usr/lib64/perl5/DBI/Gofer/Request.pm
/usr/lib64/perl5/DBI/Gofer/Execute.pm
/usr/lib64/perl5/DBI/ProfileDumper/Apache.pm
/usr/lib64/perl5/DBI/Profile.pm
/usr/lib64/perl5/DBI/FAQ.pm
/usr/lib64/perl5/DBI/Const/GetInfo/ODBC.pm
/usr/lib64/perl5/DBI/Const/GetInfo/ANSI.pm
/usr/lib64/perl5/DBI/Const/GetInfoType.pm
/usr/lib64/perl5/DBI/Const/GetInfoReturn.pm
/usr/lib64/perl5/DBI/Changes.pm
/usr/lib64/perl5/DBI/ProfileData.pm
/usr/lib64/perl5/DBI/ProfileDumper.pm
/usr/lib64/perl5/DBI/DBD/Metadata.pm
/usr/lib64/perl5/File/FcntlLock.pm
/usr/lib64/perl5/HTML/HeadParser.pm
/usr/lib64/perl5/HTML/Filter.pm
/usr/lib64/perl5/HTML/PullParser.pm
/usr/lib64/perl5/HTML/Entities.pm
/usr/lib64/perl5/HTML/TokeParser.pm
/usr/lib64/perl5/HTML/LinkExtor.pm
/usr/lib64/perl5/HTML/Parser.pm
/usr/lib64/perl5/DBD/mysql.pm
/usr/lib64/perl5/DBD/Gofer/Transport/pipeone.pm
/usr/lib64/perl5/DBD/Gofer/Transport/Base.pm
/usr/lib64/perl5/DBD/Gofer/Transport/null.pm
/usr/lib64/perl5/DBD/Gofer/Transport/stream.pm
/usr/lib64/perl5/DBD/Gofer/Policy/pedantic.pm
/usr/lib64/perl5/DBD/Gofer/Policy/rush.pm
/usr/lib64/perl5/DBD/Gofer/Policy/classic.pm
/usr/lib64/perl5/DBD/Gofer/Policy/Base.pm
/usr/lib64/perl5/DBD/Proxy.pm
/usr/lib64/perl5/DBD/NullP.pm
/usr/lib64/perl5/DBD/ExampleP.pm
/usr/lib64/perl5/DBD/File.pm
/usr/lib64/perl5/DBD/SQLite.pm
/usr/lib64/perl5/DBD/Sponge.pm
/usr/lib64/perl5/DBD/DBM.pm
/usr/lib64/perl5/DBD/mysql/GetInfo.pm
/usr/lib64/perl5/DBD/Gofer.pm
/usr/share/perl5/Capture/Tiny.pm
/usr/share/perl5/Error.pm
/usr/share/perl5/XML/Parser/PerlSAX.pm
/usr/share/perl5/XML/Handler/Sample.pm
/usr/share/perl5/XML/Handler/Subs.pm
/usr/share/perl5/XML/Handler/XMLWriter.pm
/usr/share/perl5/XML/Handler/CanonXMLWriter.pm
/usr/share/perl5/XML/Grove/AsCanonXML.pm
/usr/share/perl5/XML/Grove/XPointer.pm
/usr/share/perl5/XML/Grove/Factory.pm
/usr/share/perl5/XML/Grove/PerlSAX.pm
/usr/share/perl5/XML/Grove/Subst.pm
/usr/share/perl5/XML/Grove/Sub.pm
/usr/share/perl5/XML/Grove/IDs.pm
/usr/share/perl5/XML/Grove/Builder.pm
/usr/share/perl5/XML/Grove/Path.pm
/usr/share/perl5/XML/Grove/AsString.pm
/usr/share/perl5/XML/SAX2Perl.pm
/usr/share/perl5/XML/Grove.pm
/usr/share/perl5/XML/ESISParser.pm
/usr/share/perl5/XML/Twig.pm
/usr/share/perl5/XML/Twig/XPath.pm
/usr/share/perl5/XML/Perl2SAX.pm
/usr/share/perl5/XML/PatAct/Amsterdam.pm
/usr/share/perl5/XML/PatAct/ToObjects.pm
/usr/share/perl5/XML/PatAct/ActionTempl.pm
/usr/share/perl5/XML/PatAct/MatchName.pm
/usr/share/perl5/XML/PatAct/PatternTempl.pm
/usr/share/perl5/DBIx/Simple.pm
/usr/share/perl5/Error/Simple.pm
/usr/share/perl5/URI/sip.pm
/usr/share/perl5/URI/_foreign.pm
/usr/share/perl5/URI/Split.pm
/usr/share/perl5/URI/sips.pm
/usr/share/perl5/URI/_generic.pm
/usr/share/perl5/URI/mms.pm
/usr/share/perl5/URI/nntp.pm
/usr/share/perl5/URI/tn3270.pm
/usr/share/perl5/URI/_login.pm
/usr/share/perl5/URI/_query.pm
/usr/share/perl5/URI/data.pm
/usr/share/perl5/URI/rtsp.pm
/usr/share/perl5/URI/ldap.pm
/usr/share/perl5/URI/snews.pm
/usr/share/perl5/URI/URL.pm
/usr/share/perl5/URI/rlogin.pm
/usr/share/perl5/URI/ftp.pm
/usr/share/perl5/URI/mailto.pm
/usr/share/perl5/URI/ldaps.pm
/usr/share/perl5/URI/_userpass.pm
/usr/share/perl5/URI/file/Mac.pm
/usr/share/perl5/URI/file/OS2.pm
/usr/share/perl5/URI/file/Win32.pm
/usr/share/perl5/URI/file/Base.pm
/usr/share/perl5/URI/file/QNX.pm
/usr/share/perl5/URI/file/Unix.pm
/usr/share/perl5/URI/file/FAT.pm
/usr/share/perl5/URI/news.pm
/usr/share/perl5/URI/urn/isbn.pm
/usr/share/perl5/URI/urn/oid.pm
/usr/share/perl5/URI/Heuristic.pm
/usr/share/perl5/URI/ldapi.pm
/usr/share/perl5/URI/http.pm
/usr/share/perl5/URI/Escape.pm
/usr/share/perl5/URI/gopher.pm
/usr/share/perl5/URI/_ldap.pm
/usr/share/perl5/URI/pop.pm
/usr/share/perl5/URI/telnet.pm
/usr/share/perl5/URI/https.pm
/usr/share/perl5/URI/_server.pm
/usr/share/perl5/URI/_segment.pm
/usr/share/perl5/URI/QueryParam.pm
/usr/share/perl5/URI/ssh.pm
/usr/share/perl5/URI/file.pm
/usr/share/perl5/URI/rtspu.pm
/usr/share/perl5/URI/urn.pm
/usr/share/perl5/URI/rsync.pm
/usr/share/perl5/URI/WithBase.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Processes.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/MemStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/NetStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/CpuStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Compilation.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SockStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/FileStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SysInfo.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskUsage.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/PgSwStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/ProcStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/LoadAVG.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux.pm
/usr/share/perl5/vendor_perl/XML/Dumper.pm
/usr/share/perl5/vendor_perl/File/BaseDir.pm
/usr/share/perl5/URI.pm
/usr/share/perl5/File/ReadBackwards.pm
/usr/share/perl5/HTML/Tagset.pm
/usr/share/perl5/Data/Grove/Parent.pm
/usr/share/perl5/Data/Grove/Visitor.pm
/usr/share/perl5/Data/Grove.pm
/usr/lib64/perl5/vendor_perl/nginx.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Processes.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/MemStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/NetStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/CpuStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Compilation.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SockStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/FileStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SysInfo.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskUsage.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/PgSwStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/ProcStats.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux/LoadAVG.pm
/usr/share/perl5/vendor_perl/Sys/Statistics/Linux.pm
/usr/share/perl5/vendor_perl/XML/Dumper.pm
/usr/share/perl5/vendor_perl/File/BaseDir.pm
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/XML/Parser/Style/Stream.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/XML/Parser/Style/Objects.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/XML/Parser/Style/Subs.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/XML/Parser/Style/Debug.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/XML/Parser/Style/Tree.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/XML/Parser/Expat.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/XML/Parser.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/Bundle/DBI.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/Bundle/DBD/mysql.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/vendor_perl/nginx.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/SQL/Nano.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/ProfileSubs.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Roadmap.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/DBD.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/ProxyServer.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Util/CacheMemory.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Util/_accessor.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/PurePerl.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Serializer/DataDumper.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Serializer/Storable.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Serializer/Base.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Response.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Transport/pipeone.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Transport/Base.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Transport/stream.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Request.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Gofer/Execute.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/ProfileDumper/Apache.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Profile.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/FAQ.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Const/GetInfo/ODBC.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Const/GetInfo/ANSI.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Const/GetInfoType.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Const/GetInfoReturn.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/Changes.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/ProfileData.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/ProfileDumper.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBI/DBD/Metadata.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/File/FcntlLock.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/HTML/HeadParser.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/HTML/Filter.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/HTML/PullParser.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/HTML/Entities.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/HTML/TokeParser.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/HTML/LinkExtor.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/HTML/Parser.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/mysql.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Transport/pipeone.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Transport/Base.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Transport/null.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Transport/stream.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Policy/pedantic.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Policy/rush.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Policy/classic.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer/Policy/Base.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Proxy.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/NullP.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/ExampleP.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/File.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/SQLite.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Sponge.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/DBM.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/mysql/GetInfo.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/DBD/Gofer.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/Capture/Tiny.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/Error.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Parser/PerlSAX.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Handler/Sample.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Handler/Subs.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Handler/XMLWriter.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Handler/CanonXMLWriter.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/AsCanonXML.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/XPointer.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/Factory.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/PerlSAX.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/Subst.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/Sub.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/IDs.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/Builder.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/Path.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove/AsString.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/SAX2Perl.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Grove.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/ESISParser.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Twig.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Twig/XPath.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/Perl2SAX.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/PatAct/Amsterdam.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/PatAct/ToObjects.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/PatAct/ActionTempl.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/PatAct/MatchName.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/XML/PatAct/PatternTempl.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/DBIx/Simple.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/Error/Simple.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/sip.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_foreign.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/Split.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/sips.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_generic.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/mms.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/nntp.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/tn3270.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_login.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_query.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/data.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/rtsp.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/ldap.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/snews.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/URL.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/rlogin.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/ftp.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/mailto.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/ldaps.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_userpass.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file/Mac.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file/OS2.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file/Win32.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file/Base.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file/QNX.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file/Unix.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file/FAT.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/news.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/urn/isbn.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/urn/oid.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/Heuristic.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/ldapi.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/http.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/Escape.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/gopher.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_ldap.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/pop.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/telnet.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/https.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_server.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/_segment.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/QueryParam.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/ssh.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/file.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/rtspu.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/urn.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/rsync.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI/WithBase.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Processes.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/MemStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/NetStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/CpuStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Compilation.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SockStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/FileStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SysInfo.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskUsage.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/PgSwStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/ProcStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/LoadAVG.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/XML/Dumper.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/File/BaseDir.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/URI.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/File/ReadBackwards.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/HTML/Tagset.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/Data/Grove/Parent.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/Data/Grove/Visitor.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/Data/Grove.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/lib64/perl5/vendor_perl/nginx.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Processes.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/MemStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/NetStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/CpuStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/Compilation.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SockStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/FileStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/SysInfo.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskUsage.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/DiskStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/PgSwStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/ProcStats.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux/LoadAVG.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/Sys/Statistics/Linux.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/XML/Dumper.pm was not installed by any CentOS-signed package.
INPLACERISK: SLIGHT: The perl module /usr/share/perl5/vendor_perl/File/BaseDir.pm was not installed by any CentOS-signed package.
Result for Python 2.7.5
Result: needs_inspection
Rule ID: xccdf_preupg_rule_system_python_check
Time: 2019-10-20 03:00
This module provides you with a list of packages that need to be rebuilt for version 2.7.5 of the Python programming language that is shipped with CentOS 7.
Remediation instructions
This solution text contains a list of packages that need to be rebuilt for Python 2.7.5, which is shipped with CentOS 7.CentOS 7 contains Python version 2.7.5. For information about the differences from older versions and for further details, see https://access.redhat.com/site/articles/676453.
The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by CentOS. These packages need to be rebuilt and reinstalled in order to work with Python 2.7.5. You can find more details at https://access.redhat.com/site/articles/676453.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Beaker-1.3.1-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Django-1.7-py2.6.egg-info is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Flask-0.10.1-py2.6.egg is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Glances-1.7.4-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Jinja2-2.7.3-py2.6.egg is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Mako-0.3.4-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Werkzeug-0.9.6-py2.6.egg is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/async_subprocess-0.2.1-py2.6.egg-info is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/beaker is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/cas is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/dbus is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/decorator-3.0.1-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/django is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/glances is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/iniparse is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/itsdangerous-0.24-py2.6.egg is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/logging-0.4.9.6-py2.6.egg is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/mako is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/meh is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/netaddr is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/nose is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/nose-0.10.4-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/pip is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/pip-1.3.1-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/pytz is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_support_lib is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_support_tool is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/requests-2.4.1-py2.6.egg is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/rho is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/rho-0.1-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/salt is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/salt-2014.7.0-py2.6.egg-info is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/scservices is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/slip is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/ssh-1.8.0-py2.6.egg is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/suds is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/suds-0.4.1-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/Crypto is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/M2Crypto is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/MarkupSafe-0.9.2-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/cairo is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/gpgme is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/gst-0.10 is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/gtk-2.0 is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/ldap is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/lxml is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/lxml-2.2.3-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/markupsafe is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/matplotlib is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/mpl_toolkits is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/msgpack is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/msgpack_python-0.4.2-py2.6.egg-info is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/numpy is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/orca is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/psutil is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/report is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/reportclient is not owned by any RPM package.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/rhsm is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/rhsm-1.9.6-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/simplejson is owned by an RPM package that was not signed by CentOS.
INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/simplejson-2.0.9-py2.6.egg-info is owned by an RPM package that was not signed by CentOS.
Result for SCL collections
Result: pass
Rule ID: xccdf_preupg_rule_system_scl-collection_scl
Time: 2019-10-20 03:00
Content checks whether RHSCL are installed
Result for YUM
Result: informational
Rule ID: xccdf_preupg_rule_system_yum_yum
Time: 2019-10-20 03:00
Content checks YUM configuration file
Remediation instructions
In CentOS 7 functionality of yum-plugin-security is a part of yum core.After the upgrade it will be impossible to undo/redo/rollback to pre-upgrade yum transactions. Please run 'yum history new' after the upgrade to start a new history file.
The way yum groups work has changed in CentOS 7. By default yum treats groups as objects now. Please refer to the documentation for more information.
Result for Check for usage of dangerous range of UID/GIDs
Result: needs_inspection
Rule ID: xccdf_preupg_rule_usrmgmt_DangerousRanges_dangerousranges
Time: 2019-10-20 03:00
In CentOS 6, limit for system accounts was 500, in CentOS 7 it was raised to 1000. Therefore some user accounts might be in this range. In addition, usage of unreserved ids between 0 and 200 is prohibited. This content checks for these two violations of standards which may bring issues during migration.
Remediation instructions
On CentOS 6, system account ids were bellow 500.This changes on CentOS 7, range reserved for
system account is now 0-999. This may cause troubles for the
migration. In addition, range 0-199 is prohibited to use without
static id reservation in setup package. Id's in this range might
be reserved and used later by some package, thus using them may cause
malfunction of such package.
Following problems were found on your system:
User "jboss" uses id 500 - this is in the range of system accounts.
User "osc" uses id 502 - this is in the range of system accounts.
User "hhivaas" uses id 601 - this is in the range of system accounts.
User "jerryj" uses id 602 - this is in the range of system accounts.
User "kapil" uses id 603 - this is in the range of system accounts.
User "scpark" uses id 604 - this is in the range of system accounts.
User "mwchoi" uses id 777 - this is in the range of system accounts.
User "watchapm" uses id 700 - this is in the range of system accounts.
group "mwa" uses id 500 - this is in the range of system accounts.
group "jboss" uses id 501 - this is in the range of system accounts.
group "osc" uses id 502 - this is in the range of system accounts.
group "hhivaas" uses id 601 - this is in the range of system accounts.
group "jerryj" uses id 602 - this is in the range of system accounts.
group "kapil" uses id 603 - this is in the range of system accounts.
group "scpark" uses id 604 - this is in the range of system accounts.
group "mwchoi" uses id 777 - this is in the range of system accounts.
These accounts should be migrated into the "safe" zone above 1000!
As an alternative, you can change the default ranges in /etc/login.defs to
the old CentOS 6 values if you require this by your system setup settings.
Result for Incorrect usage of reserved UID/GIDs
Result: pass
Rule ID: xccdf_preupg_rule_usrmgmt_ReservedIDs_reservedids
Time: 2019-10-20 03:00
Reserved user and group IDs by setup package changed between the CentOS 6 and CentOS 7. This may in some cases cause the unfunctionality of your system after the migration. This check should mitigate the risks.