Control Compliance Suite 8.60: Data Collection Hotfix January update (HF=2010-1)

Article:TECH122947  |  Created: 2010-01-03  |  Updated: 2011-04-13  |  Article URL http://www.symantec.com/docs/TECH122947
Article Type
Technical Solution


Issue





 


Solution



Chapter 1 Updates ................................................................................... 5
Updates in bv-Control for Internet Security ........................................ 5
Updates in bv-Control for Oracle ...................................................... 5
Updates in bv-Control for Windows ................................................... 7
Update in naming convention .......................................................... 8
Chapter 2 Resolved issues ..................................................................... 9
Resolved Issues in bv-Control for Oracle ............................................ 9
Resolved Issues in bv-Control for UNIX .............................................. 9
Resolved issues in bv-Control for Windows ....................................... 10
Chapter 3 Installing the Hotfix ............................................................ 11
Overview .................................................................................... 11
Installing the Hotfix (Express installation) ........................................ 12
Installing the Hotfix (Custom installation) ........................................ 13
Applying RapidFire Updates on the bv-Control for UNIX target
computers ............................................................................ 14
Installing the query engine Hotfix for bv-Control for Windows ............. 15
Chapter 4 Related Hotfixes .................................................................. 17
Related Hotfixes in RMS Console and Information Server .................... 17
Hotfix February 2008 .............................................................. 18
Hotfix June 2008 .................................................................... 18
Hotfix September 2008 ........................................................... 19
Hotfix March 2009 ................................................................. 19
Hotfix November 2009 ............................................................ 20
Related Hotfixes in bv-Control for Internet Security ........................... 21
Hotfix February 2008 .............................................................. 21
Hotfix June 2008 .................................................................... 22
Hotfix September 2008 ........................................................... 23
Hotfix March 2009 ................................................................. 24
Hotfix July 2009 ..................................................................... 24
Hotfix November 2009 ............................................................ 25
Related Hotfixes in bv-Control for NDS eDirectory ............................. 25
Hotfix February 2008 .............................................................. 25
Hotfix June 2008 .................................................................... 26
Hotfix July 2009 ..................................................................... 26
Related Hotfixes in bv-Control for Oracle ......................................... 27
Hotfix June 2008 .................................................................... 27
Hotfix December 2008 ............................................................ 28
Hotfix March 2009 ................................................................. 28
Hotfix July 2009 ..................................................................... 29
Hotfix November 2009 ............................................................ 29
Related Hotfixes in bv-Control for UNIX ........................................... 30
Hotfix February 2008 .............................................................. 30
Hotfix June 2008 .................................................................... 31
Hotfix September 2008 ........................................................... 33
Hotfix December 2008 ............................................................ 33
Hotfix March 2009 ................................................................. 34
Hotfix July 2009 ..................................................................... 35
Hotfix November 2009 ............................................................ 35
Related Hotfixes in bv-Control for NetWare ...................................... 36
Hotfix December 2008 ............................................................ 37
Hotfix March 2009 ................................................................. 37
Hotfix July 2009 ..................................................................... 37
Related Hotfixes in bv-Control for Windows ...................................... 38
Hotfix February 2008 .............................................................. 38
Hotfix June 2008 .................................................................... 39
Hotfix September 2008 ........................................................... 40
Hotfix December 2008 ............................................................ 43
Hotfix March 2009 ................................................................. 44
Hotfix July 2009 ..................................................................... 45
Hotfix November 2009 ............................................................ 46
Related Hotfixes in bv-Control for Microsoft Exchange ....................... 46
Hotfix March 2009 ................................................................. 46

Chapter 5 Files updated ........................................................................ 49
Files updated in bv-Control for Oracle .............................................. 49
Files updated or added in bv-Control for UNIX ................................... 49
Files updated in bv-Control for Windows .......................................... 50


Updates
This chapter includes the following topics:

  • Updates in bv-Control for Internet Security
  • Updates in bv-Control for Oracle
  • Updates in bv-Control for Windows
  • Update in naming convention


Updates in bv-Control for Internet Security
This Hotfix contains the following update:
 

  • The remediation section is also included in the reports that are exported.

Updates in bv-Control for Oracle

The Hotfix contains the following updates:

  • The following new fields have been added in the Database Object Auditing

datasource:

  • Audit Flashback Success Mode - This field reports the audit mode for the

option FLASHBACK WHENEVER SUCCESSFUL.

  • Audit Flashback Failure Mode - field reports the audit mode for the option

FLASHBACK WHENEVER UNSUCCESSFUL.

  • The following new fields have been added to the Listeners' datasource:
  • Secure Control - This field reports the transports on which control

commands are serviced.

Resolved issues

This chapter includes the following topics:
 

  • Resolved Issues in bv-Control for Oracle
  • Resolved Issues in bv-Control for UNIX
  • Resolved issues in bv-Control for Windows



Resolved Issues in bv-Control for Oracle
The Hotfix addresses the following issue:
 

  • Some checks, in the CIS Oracle 9i and 10g Database Security Benchmark v2.0

standard, were returning "Unknown" results.
The 2010-1 Hotfix resolves the issue and the checks now return correct results.


Resolved Issues in bv-Control for UNIX
The Hotfix addresses the following issues:
 

  • On the UNIX target computers, the cksum process was consuming too much

memory and killing the process spawned a new one.
The 2010-1 Hotfix now resolves this issue. The product spawned processes
due to the presence of a file with zero hard links on the file system on IBM AIX
computers. Such files are now skipped.
¡ On Sun Solaris cluster/ server, when the packages data source query was run,
it returned incomplete data, with the following error: "Error executing
datasource handler for Agent based target" The query would not run
successfully.
The 2010-1 Hotfix now resolves this issue. Incomplete data was being fetched
due to the presence of empty revision strings present in the package description
of certain packages on the UNIX target systems. The empty package revision
strings are now fixed.

Resolved issues in bv-Control for Windows
This Hotfix addresses the following issues:
 

  • When Authenticated Users group has permission on a directory which is

located on a NetApp filer, the Security: File system (effective) datasource query
fails.
This update resolves the issue and the Security: File system (effective)
datasource query runs successfully.

  • The Forced Strong Key Protection field in the Machine datasource reported

with the 0 value if the key was not found under
HKLM\Software\Policies\Microsoft\Cryptography\.
This update resolves the issue and the data source now returns the correct
value for the Forced Strong Key Protection field.

Installing the Hotfix
Installing the Hotfix (Express installation)
To install the Hotfix
1 Double-click CCS_DataCollection_8_60_HF_2010-1_win.exe located in the
installset.
2 In the Welcome panel of the Symantec Control Compliance Suite 8.60 - Data
Collection - InstallShield Wizard, click Next.
3 In the Location to Save Files panel, browse to the location where you want to
save the setup files and click Next.
4 In the Patch Welcome panel of the Symantec Control Compliance Suite - Data
Collection Setup, check Express and then click Next to continue.

5 In the Summary panel, verify the features that are selected for upgrade and
installation and click Next to begin the installation.
6 In the Finish panel, click Finish.

Note: Use Add/Remove Programs to add a new feature after you install the 2010-1
Cumulative Hotfix.

Installing the Hotfix (Custom installation)
To install the Hotfix by custom type of installation
1 Double-click CCS_DataCollection_8_60_HF_2010-1_win.exe located in the
installset.
2 In the Welcome panel of the Symantec Control Compliance Suite 8.60 - Data
Collection - InstallShield Wizard, click Next.
3 In the Location to Save Files panel, browse to the location where you want to
save the setup files and click Next.
4 In the Patch Welcome panel of the Symantec Control Compliance Suite - Data
Collection Setup, make sure that the Express option at the bottom left corner
of the panel is unchecked. Click Next to continue.
5 In the Licensing panel, click Add Licenses to navigate to the Symantec ELS
licenses and add the licenses. Click Next to continue.
6 In the upgrade panel, select the bv-Control snap-ins to be upgraded from the
Symantec Control Compliance Suite - Data Collection version 8.60. Click Next
to continue.
7 In the Add Feature panel, select the new features that you want to add and
then click Next.
8 In the Summary panel, review the features that you selected and then click
Next to begin the installation.
Click Back to make changes in the selections that you made in the previous
panels.
9 Click Finish in the Finish panel.

Applying RapidFire Updates on the bv-Control for UNIX target computers

The cumulative Hotfix (CHF) contains the RapidFire 8638.rf, which is to be applied
on the UNIX target computers where the bv-Control for UNIX agent is installed.
For more details on RapidFire Updates, refer to the topic, About RapidFire Updates
in the bv-Control_for_UNIX_Online_Help.chm.

Note: The RapidFire Updates that is applied on the UNIX target computers are
used by both bv-Control for UNIX and bv-Control for Oracle snap-ins for querying
and data collection.

For bv-Control for Oracle, you must download and apply 8615.rf before you apply the 8638.rf.

The RapidFire mechanism lets you apply the RapidFire Updates on the UNIX
target computers in the following ways:
 

  • Apply the RapidFire 8638.rf on all UNIX target computers at the enterprise

level.

  • Apply the RapidFire 8638.rf on the selected target computers only.


To update all the target computers in the enterprise

1 Before applying the RapidFire, ensure that there are no queries that are
executing on the target computers.
2 Select the appropriate server group that you want to update in the UNIX
Enterprise Browser.
3 From the menu select Action > Update RapidFire .
4 In the Select RapidFire Package dialog box, select 8638.rf.

To update a selected target computer

1 Before applying the RapidFire, ensure that there are no queries that are
executing on the target computer.
2 Select the UNIX target computer that you want to update in the UNIX
Enterprise Browser.
3 From the menu select Action > Update RapidFire .
4 In the Select RapidFire Package dialog box, select 8638.rf.

Installing the query engine Hotfix for bv-Control for Windows

This Hotfix is applicable only to bv-Control for Windows 8.6. Before you install
this Hotfix, you must close any RMS Console products that are running.

To install the query engine Hotfix

1 From the <RMS_Console_Installation_Directory>\Control\Windows\QE
Hotfixes folder, double-click Symantec_WIN_860_HF_WQN1896967.exe
.
Alternatively, you can copy the Symantec_WIN_860_HF_WQN1896967.exe
file to a computer that hosts a query engine, and double-click
Symantec_WIN_860_HF_WQN1896967.exe on that computer.

2 In the WQN1896967 - Welcome panel, click Next.

3 In the WQN1896967 - Location to Save Files panel, select the location where
you want the required installation files to be decompressed and executed. By
default, the required installation files are saved to the Temp folder
(C:\Documents and Settings\<Username>\Local Settings\Temp). You can
specify the location where you want to save the files in the Save files in folder
text box.

4 Click Next.

5 In the Hotfix Distribution panel, the Select Location of Hotfix Files and Select
ECS Database Machine text boxes contain the appropriate values. The Select
Domain to Update drop-down box and the Available Query Engine Machines
box also contain the appropriate values. These values appear only if the
distribution utility communicates with the ECS.
If the distribution utility is unable to communicate with the ECS, an error
message is displayed. Enter the name of the computer that hosts the ECS in
the Select ECS Database Machine text box. In the bv-Config component of
bv-Control for Windows or the Services control panel, ensure that the ECS
is running. After you enter the name of the computer that hosts the ECS, click
Refresh. The distribution utility contacts the ECS and updates the list of the
available domains.

6 From the Select Domain to Update drop-down box, select the domain in your
network that contains the query engines that you want to update. The names
of the computers that host both the Master and Slave Query Engines in the
selected domain appear in the Available Query Engine Machines box.
The Available Query Engine Machines box contains the following options:

Lets you add the selected query engine to the Query Engine Machines
to Update box.
Add

Lets you remove the selected query engine from the Query Engine
Machines to Update box.
Remove

Lets you add all the query engines that are available in the selected
domain to the Query Engine Machines to Update box.
Select All

Lets you remove all the query engines from the Query Engine Machines
to Update box.
Clear All

Lets you browse and add the query engines that are available in the
selected domain to the Query Engine Machines to Update box.
Browse

7 Check Enable reboot-deferred copy for locked files. If this option is not
checked, the Hotfix is not applied on the computers that have the BindView
query engine files locked.
The Enable reboot-deferred copy for locked files option lets the Hotfix
Distribution application check for locked files while you upgrade the query
engines. If a file is found locked while in the upgrade process, a temporary
folder is created and the files are copied to that folder. You get a notification
that prompts you to restart all the computers after they are processed. You
may choose not to restart any of the computers, but the Hotfix is not applied
until the computers are restarted. If you try to start the BindView services
on the computers that are not restarted, you may get unpredictable results.
The files in the temporary folder and the temporary folder itself are removed
after you restart the computers and successfully copy the files.

8 Click Apply Hotfix to apply the Hotfix to the selected computers.
This Hotfix is copied to the following folder of the selected query engines:
<Hotfix_Installation_Directory>\Symantec\BVNTQE.
Installing the Hotfix
Installing the query engine Hotfix for bv-Control for Windows


Data Collection Hotfix can be obtained from:

HF=2010-1:

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_control_compli
ance_suite/8.6/updates/data_collectors/CCS_DataCollection_8_60_HF_2010-1_win.exe

Readme:

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_control_compli
ance_suite/8.6/updates/data_collectors/ReadMe_CCS_DataCollection_8_60_HF_2010-1.pdf



Technical Information
Files updated

This chapter includes the following topics:
 

  • Files updated in bv-Control for Oracle
  • Files updated or added in bv-Control for UNIX
  • Files updated in bv-Control for Windows



Files updated in bv-Control for Oracle
The updated files and their version numbers are as follows:

BVOOSStrategies.dll 8.60.38.10900
BVOracleFieldMetaData.mdb -
BVOTypeIVSnapin.dll 8.60.38.10900
BVOUnixDataSourceImpl.dll 8.60.38.10900
BVOUnixStrategies.dll 8.60.38.10900
BVOUpgradeHandler.dll 8.60.38.10900
BVOWinStrategies.dll 8.60.38.10900
BVOSqlStrategies.dll 8.60.38.10900

Files updated or added in bv-Control for UNIX
The updated files and their version numbers are as follows:

BVUnixDataSourceImpl.dll 8.60.52.10900
BvUnixPackagesDataSource.dll 8.60.52.10900

Files updated in bv-Control for Windows
The updated files and their version numbers are as follows:

BVNTProcess.dll 8.60.25.10900
NTAnalysis.dll 8.60.25.10900
GroupPolicyObjectsXML_Schema.xml -
ActiveDirectoryFieldsMetaData.mdb -



 


Attachments

Readme PDF - requires Adobe Reader to view.
ReadMe_CCS_DataCollection_8_60_HF_2010-1.pdf (560 kBytes)

Legacy ID



2010020309573453


Article URL http://www.symantec.com/docs/TECH122947


Terms of use for this information are found in Legal Notices