Novell Privileged User Manager 2.2.1-2 (Hot Fix 2)

This document (5071411) is provided subject to the disclaimer at the end of this document.

patches this patch supersedes

File	Product	Status	Patch
novell-npum-packages-2.2.1-1.tar	Privileged User Manager 2.2.1	Obsolete	Novell Privileged User Manager 2.2.1-1 (Hot Fix 1)

patches that supersede this patch

Product	Status	Next Superceded By	Last Superceded By
Novell Privileged User Manager 2.2	Obsolete	Novell Privileged User Manager 2.2.2-1 (Hot Fix 1)	Novell Privileged User Manager 2.2.2-1 (Hot Fix 1)
Novell Privileged User Manager 2.2.1	Obsolete	Novell Privileged User Manager 2.2.2-1 (Hot Fix 1)	Novell Privileged User Manager 2.2.2-1 (Hot Fix 1)

patch attributes

Security patch: No

Priority: Recommended

Distribution Type: Public

http://download.novell.com/Download?buildid=9jdubsXUuHA~

document

Revision: 3

Document ID: 5071411

Creation Date: 2010-03-30 09:44:05

Modified Date: 2010-09-20 15:08:22

abstract

Novell Privileged User Manager 2.2.1-2 (Hot Fix 2) is a bundle of fixes for Novell Privileged User Manager 2.2.1

details

Fixes included in Novell Privileged User Manager 2.2.1-2 (Hot Fix 2):

Compliance Auditor (secaudit) 2.2.1-2
* Bug 580607 Compliance Auditor: Selecting 'Authorized' hides all present records from view when logged in as a user with access to see only a certain 'audit roles'
- Resolved: Compliance Auditor now correctly retrieves filtered events.

Command Contorl Agent (rexec) 2.2.1-2
* Bug 575448 Command from /etc/profile on HP-UX Itanium B.11.23 not working with crush
- Resolved: Implement the new utmp system calls on HP-UX Itanium

* Bug 573980 rush process remains after killing ssh/telnet session
- Resolved: Ensure the rush process receives the correct HUP signal when running a child process.

Distribution Agent (distrib) and Agent Console (servers) 2.2.1-2
* Bug 584236 ENH: Ability to stop people accidentally installing manager modules
- Resolved: Added ability to restrict users to install specific modules. When a user is assigned the distrib.acl role, attempts to install modules will require the user to have the relevant distrib.Module: role, where is the package name of the module. For example, to restrict a user to managing only PUM agent packages, they would need the following roles:
+ distrib.acl
+ distrib.Module:distrib
+ distrib.Module:regclnt
+ distrib.Module:strfwd
+ distrib.Module:rexec

Audit Manager (audit) and Administration Manager (admin) 2.2.1-2
* Bug 580923 ENH: Implement multiple password filters
- Resolved: Added ability to use regular expression in password filter, allowing multiple strings to be matched

Command Control Manager (cmdctrl) and Command Control Console (cmdctrl) 2.2.1-2
* Bug 578268 ENH: Enhanced file protection and access control
- Resolved: Added Enhanced Access Control functionality which allows policies to restrict applications based upon files and directories. A sample script has been added to the PUM Command Control console (Enhanced Access Control Policy) to allow fine grained access control to be applied to a users privileged session. Full documentation for the policy is included in the sample script.

* Bug 582636 ENH: Provide the ability to use templates when setting the run user and host
- Resolved: Added ability to change the run user and host based on other attributes in
the meta data by using the ${}$ template The Run User and Run Host fields on the Modify Rule page can now use template substitution when rewriting the user. The template can use any value from the request object. For example, to rewrite the Run Host to the command the user typed, you would type ${Command.original_cmd}$ in the Run Host field.

Command Reporting Console (report_comm) 2.2.1-2
* Bug 559846 - Performance issues on large audit databases
- Resolved: Made computationally expensive columns optional for the report and improved query performance for large audit databases

Syslog Emmitter(syslog) 2.2.1-2
* Bug 587611 - Syslog emmitter starts a session when the authorization fails
- Resolved: No session is started when authorization fails.

Installation: To install Hot Fix 2 please do the following:

Manually publish patch to Package Manager

1. Copy the novell-npum-packages-2.2.1-2.tar file onto one of your Privileged User Manager machines.
2. Extract novell-npum-packages-2.2.1-2.tar into a temporary location, such as /tmp/framework/

tar -xvf novell-npum-packages-2.2.1-2.tar

3. Publish the packages to your Package Manager, using the following command:

/opt/novell/npum/sbin/unifi -u admin distrib publish -d /tmp/framework/packages/

example:
sd142/ # /opt/novell/npum/sbin/unifi -u admin distrib publish -d /tmp/framework/packages/

Username: (admin)
Password:

4. Install the packages via the Framework.

To patch all Hosts:
Login to the Framework. Select Hosts | Select the root most Domain. From the left Navigation, select "Update Domain Packages" | Select the desired Hosts,(use Shift click or Ctrl click to select multiple hosts) then Next

Select Finish

or

To patch selected Hosts:
Login to the Framework. Select Hosts | Select the desired Host. From the left Navigation, select "Update Packages" | Select the desired Hosts,(use Shift click or Ctrl click to select multiple hosts) then Next

Select Finish

Note: Prior to patching Hosts, it is a good idea to "Commit Packages" on each host/domain. The "Commit Packages" will clean out the existing backup (if any) so that a backup can be created when a new patch is installed. Commit Packages can be done on a individual host or by Domain. If doing so by Domain, use the "Commit Domain Packages". If doing so by Host, use the "Commit Packages" option.

Note: During the process of installing the packages via the Framework, by default, it will create a backup of the existing packages that are being replaced if you leave the option to "Create backup" enabled when installing the patch. Should you need to remove the update, you can use the "Rollback Packages" option.

file contents

Files Included	Size	Date
novell-npum-packages-2.2.1-2.tar	93.2 MB (97812480)	2010-03-30 08:51:43
readme_5071411.html	N/A	2010-09-20 15:08:23

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

Novell is a registered trademark of Novell, Inc. in the United States and other countries. SUSE is a registered trademark of SUSE Linux AG, a Novell business. *All third-party trademarks are the property of their respective owners.