Linux Patch Notes for CTE v7.5.0.112

Resolved Issues

• AGT-55135 [CS1539818]: Kernel panic due to SecFS2

  The issue was caused by multiple nested file systems under one SecFS GuardPoint. They created a situation with more than one inode having the same inode number whereby the incorrect inode was accessed. The solution was to add additional checks to ensure that the correct inode is returned.

• AGT-57666 [CS1545309]: Unable to create symlink with policy that allows f_link action

  The issue occurs when a policy with f_link,f_rd_att,f_chg_att,f_rd_sec permission does not allow for the creation of a symlink to a protected resource inside of a GuardPoint. The issue occurred because CTE was unable to determine the object type for a symlink.

• AGT-57673 [CS1542868]: SQL going into recovery state on each server reboot after migration from DSM to CipherTrust Manager

  When the CTE agent initially contacts the server, it may fail due to a getaddrinfo error, which may be caused by the Windows DNS service not being ready. The change is to detect this failure type when connecting to a CipherTrust Manager, and to retry for a few seconds before stepping on to the next CipherTrust Manager in the cluster. This now matches the agent behavior when the same error condition occurred when connecting to a DSM.

• AGT-58574 [CS1547711]: CTE upgrade requires client to be registered or throws error

  A regression occurred when reading the agent lock flag. This caused manual upgrades to abort if the agent was not registered to a key manager. This has been fixed. The agents can now be manually upgraded without registration.

  

  Note

  This does not affect scheduled upgrade (upgrade on reboot) functionality.

• AGT-59512 [CS1558298]: Server is hanging due SecFS2 filesystem

  The system hung when all CPUs were stuck running tasks while waiting for a lock, held by a task that went to sleep and was unable to run, to release the lock for the other tasks. The fix ensures that the task will not go to sleep while holding the lock.