Linux Patch Notes for CTE v7.7.0

Enhancement

Error Log Improvement

Added an error log to report failed attempts to open files in preparation for rekey.

New Platform Supported

• RHEL 9.6

Resolved Issues

• AGT-63020: Crash when launching lazy rekey and doing unmount

  AFFECTED VERSIONS: 7.7.0.121

  Fixed race condition between launching a lazy rekey and unguarding running concurrently. The race could cause the kernel to crash. This has been fixed.

• AGT-63209: Error generated when moving directory from encrypt to nokeyrule during initial rekey on local LDT GuardPoint

  AFFECTED VERSIONS: 7.7.0.121

  Renaming a directory that changes the association of the files inside the directory, to no key rule, triggers background jobs to rekey the affected files according to the new key rule. System resources consumed for execution of those rekey jobs were not properly released. This issue has been fixed.

• AGT-63539: GuardPoint stuck in rekeying state when multiple renames of single directory are performed

  AFFECTED VERSIONS: 7.7.0.121

  Improvements in management of directory operations during active rekey.

• AGT-64604 [CS1615416]: Getting Transport endpoint is not connected when accessing the GuardPoint

  AFFECTED VERSIONS: 7.7.0.121

  When using a long hostname of 81 chars or longer, and using CEF for syslog, and the logging level is DEBUG, the logger overfills the buffer and corrupts the programs HEAP resulting in a crash. The solution was to change the code to accommodate larger host names.

• AGT-64972: Secondary assert vm_secfs_vfs_freeze:1 when rekey starts

  AFFECTED VERSIONS: 7.7.0.121

  Rotation of a new key, followed by launching a rekey across all members of the LDT GuardPoint Group, may result in a condition where access to the GuardPoint is blocked on the primary host. The cause of access blockage has been resolved in this patch.

Known Issues

No Known Issues at this time.