HP-UX 11i June 2002 Release Notes

HP-UX 11i Operating Environment Applications
Selectable Applications
Chapter 6
130
• File mtime, ctime, and atime behaviors have changed in the recovery commands.
The commands make_tape_recovery, make_net_recovery, make_recovery, and
make_sys_image no longer use the -t option to the pax command. In the past, this
option was used so that the “atime” (access modification time) of the files being
backed up was restored. However, a hidden side-effect of this -t option was that it
caused the “ctime” (inode modification time) of files being backed up to change,
which, in turn, triggered security tools to raise an alarm. Another side effect of the
-t option also caused the “mtime” (modification time) of /etc/passwd and
/etc/group to be changed due to the way make_recovery used -t in combination
with the -s pax option.
• Device files for drivers that use dynamic major numbers are now modified to track
any changes to the dynamic major assignments that may occur during the
installation or recovery of a system. Prior to this change, some products (such as
X.25 and EMS) may not work correctly after recovering a system, or when installing
a system from an archive image. For this change to work, the OS archive image
must contain the /stand/ioconfig file from the original system. Therefore, you
will need to recreate old OS archive images with the new make_sys_image script
that includes /stand/ioconfig in the archive.
• The make_sys_image command no longer retrieves variable values from the
/tmp/install.vars or /var/opt/ignite/local/host.info files.
• A UID larger than 64K on an automount directory will no longer cause the contents
of the automounted directory to be backed up as if it were a directory on the local
disk or volume group. If a mount is detected as stale, the system will now issue a
WARNING and continue the traversal of the volumes and disks that need to be
recovered and put them in the archive image.
• When recovering systems that use Auto Port Aggregation Software (APA)
installation, IUX no longer comments out the Internet Configuration parameters for
LAN aggregates in the /etc/rc.config.d/netconf file. If the recovery is done over
the network, you will need to specify that the networking parameters are temporary
for the system to come up on the LAN aggregate interface.
• A new option -V has been added to bootsys. One or more -V options may be supplied
to set a value to a variable.
• All options of make_bundles other than -f, will generate content lines with product-
level instead of fileset-level detail. This is a fix for duplicate entries in the bundle
contents due to a product having both 32-bit and 64-bit filesets for 11.x and beyond.
The -f option now lists the fa=* attribute in the bundle contents.
Documentation
The Ignite-UX Administration Guide has been updated for HP-UX 11i, and is available
on the HP-UX Instant Information CD and on the http://docs.hp.com/ web site.
Another excellent source of information on Ignite-UX is the external web site:
http://software.hp.com/products/IUX/
IPFilter/9000
The security product, IPFilter/9000, provides system firewall capabilities by filtering IP
packets to control traffic in and out of a system. IPFilter/9000 includes support for Static
Linking, Gigabit Ethernet, Auto Port Aggregation (APA), and Virtual Local Area
Network (VLAN).