Red Hat Enterprise Linux 7 7.2 Release Notes Release Notes for Red Hat Enterprise Linux 7.2 Red Hat Customer Content Services Red Hat Enterprise Linux 7 7.2 Release Notes Release Notes for Red Hat Enterprise Linux 7.2 Red Hat Customer Content Services [email protected] Legal Notice Copyright © 2015 Red Hat, Inc. This document is licensed by Red Hat under the Creative Commons Attribution-ShareAlike 3.0 Unported License. If you distribute this document, or a modified version of it, you must provide attribution to Red Hat, Inc. and provide a link to the original. If the document is modified, all Red Hat trademarks must be removed. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, MetaMatrix, Fedora, the Infinity Logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is the registered trademark of Linus Torvalds in the United States and other countries. Java ® is a registered trademark of Oracle and/or its affiliates. XFS ® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is an official trademark of Joyent. Red Hat Software Collections is not formally related to or endorsed by the official Joyent Node.js open source or commercial project. The OpenStack ® Word Mark and OpenStack Logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are the property of their respective owners. Abstract The Release Notes provide high-level coverage of the improvements and additions that have been implemented in Red Hat Enterprise Linux 7.2 and document known problems in this release. For detailed documentation on all changes to Red Hat Enterprise Linux for the 7.2 update, refer to Errata on the Red Hat Customer Portal. T able of Cont ent s Table of Contents .P .r e. f. a. c. e. 9. .C .h .a .p . t.e .r . 1. .. A. r. c. h. i.t .e .c .t u. .r e. s. 1. 0. .P .a .r t. .I .. N. .e .w . F. e. a. t. u. r. e. s. 1. 1. .C .h .a .p . t.e .r . 2. .. G. .e .n .e .r .a .l .U .p . d. a. t. e. s. 1. 2. ⁠Cro ss channel p ackag e d ep end ency imp ro vements 12 ⁠RELRO p ro tectio n no w p ro p erly ap p lied when req uested 12 ⁠Mo re d iag no stic info rmatio n and a renamed p lug -in fo r so srep o rt 12 ⁠Enab le virtio netwo rk d evice renaming 12 ⁠Sup p o rt fo r DIF/DIX (T10 PI) o n sp ecified hard ware 12 .C .h .a .p . t.e .r . 3. .. A. u. t. h. e. n. .t i.c .a .t .i o. n. a. n. d. .I n. .t e. r. o. p. e. r. a. b. i.l i.t .y . 1. 4. ⁠Id entity Manag ement sets up a o ne-way trust b y d efault 14 ⁠o p enld ap reb ase to versio n 2.4.40 14 ⁠Cache authenticatio n in SSSD 14 ⁠SSSD enab les UID and GID map p ing o n ind ivid ual clients 14 ⁠SSSD can no w d eny SSH access to lo cked acco unts 14 ⁠The sud o utility no w cap ab le o f verifying co mmand checksum 14 ⁠SSSD smart card sup p o rt 15 ⁠Sup p o rt fo r multip le certificate p ro files and user certificates 15 ⁠Passwo rd Vault 15 ⁠Kerb ero s HTTPS p ro xy in Id entity Manag ement 15 ⁠Backg ro und refresh o f cached entries 15 ⁠Caching fo r initg ro up s o p eratio ns 15 ⁠Neg o tiate authenticatio n streamlined with mo d _auth_g ssap i 15 ⁠User life-cycle manag ement cap ab ilities 16 ⁠SCEP sup p o rt in certmo ng er 16 ⁠Ap ache mo d ules fo r Id M no w fully sup p o rted 16 ⁠NSS raises minimum accep ted key streng th values 16 ⁠NSS enab les TLS versio n 1.1 and 1.2 b y d efault 16 ⁠ECDSA certificates are no w sup p o rted 16 ⁠Op enLDAP auto matically cho o ses the NSS d efault cip her suites 16 ⁠Co nfig uring an Id M server to b e a trust ag ent no w sup p o rted 16 ⁠Auto mated mig ratio n fro m WinSync to trusts no w sup p o rted 17 ⁠Multi-step p ro mp ting fo r o ne-time and lo ng -term p asswo rd s 17 ⁠LPK schema fo r Op enLDAP no w availab le in the LDIF fo rmat 17 ⁠Cyrus can authenticate to AD and Id M servers ag ain 17 ⁠SSSD sup p o rts o verrid ing auto matically d isco vered AD site 17 ⁠Sup p o rt fo r SAML ECP has b een ad d ed 17 .C .h .a .p . t.e .r . 4. .. C. l.u . s. t.e .r .i n. g. 1. 8. ⁠systemd and p acemaker no w co o rd inate co rrectly d uring system shutd o wn 18 ⁠The p cs reso urce mo ve and p cs reso urce b an co mmand s no w d isp lay a warning messag e to clarify the co mmand s' b ehavio r 18 ⁠New co mmand to mo ve a Pacemaker reso urce to its p referred no d e 18 ⁠Sup p o rt fo r clufter co mmand fo r transfo rming and analyzing cluster co nfig uratio n fo rmats 18 ⁠Simp lified metho d fo r co nfig uring fencing fo r red und ant p o wer sup p lies in a cluster 18 ⁠New --p o rt-as-ip o p tio n fo r fencing ag ents 18 .C .h .a .p . t.e .r . 5. .. C. o. m. .p . i.l e. r. a. n. d. T. o. .o .l s. 2. 0. ⁠tail --fo llo w no w wo rks p ro p erly o n files o n Veritas Clustered file system (VXFS) 20 ⁠The d d co mmand no w cap ab le o f sho wing transfer p ro g ress 20 1 7 .2 Release Not es ⁠The d d co mmand no w cap ab le o f sho wing transfer p ro g ress 20 ⁠Imp ro ved wait times in lib curl 20 ⁠The lib curl lib rary no w imp lements a no n-b lo cking SSL hand shake 20 ⁠GDB o n IBM Po wer Systems no lo ng er fails when accessing the symb o l tab le 20 ⁠nscd up d ated to auto matically relo ad co nfig uratio n d ata 20 ⁠The d lo p en lib rary functio n no lo ng er crashes o n recursive calls 20 ⁠The o p erf to o l no w reco g nizes static hug e p ag e id entifiers 21 ⁠rsync -X no w wo rks co rrectly 21 ⁠Sub versio n executab les no w b uilt with full RELRO d ata 21 ⁠The thread extensio n in TCL no w wo rks co rrectly 21 ⁠AES cip her suites can b e exp licitly enab led o r d isab led fo r TLS 21 ⁠Op enJDK 7 no w sup p o rts ECC 21 ⁠ABRT is no w ab le to save a co re_b acktrace file instead o f a who le co red ump 21 ⁠Security features ad d ed to the Pytho n stand ard lib rary 21 ⁠New g lo b al setting s fo r SSL/TLS certificate verificatio n in the Pytho n stand ard lib rary 22 ⁠.C .h .a .p . t.e .r . 6. .. D. .e .s .k t. o. p. 2. 3. ⁠GNOME reb ase to versio n 3.14 23 ⁠The ib us-g tk2 p ackag e no w up d ates the immo d ules.cache file 24 ⁠.C .h .a .p . t.e .r . 7. .. F. i.l e. .S .y .s .t .e .m . s. 2..