Originated: February 22, 2016
********************************************************************************

Patch-166932: Patch for OneFS 7.2.1.1. This patch addresses an issue in which
the OneFS antivirus client cannot process an infected file if the name of the
file contains extended characters.

--------------------------------------------------------------------------------

This patch can be installed on clusters running the following OneFS version: 
7.2.1.1

********************************************************************************

RESOLVED ISSUES

* Bug ID 157388
  If a file name included extended, non-standard ASCII characters, the OneFS
  antivirus client could not process the file even if the cluster's file system
  character encoding was set to UTF-8. If an infected file whose file name
  contained extended characters was encountered, the OneFS web administration
  interface might have displayed a partial list of detected threats on the
  Antivirus > Detected Threats tab or might not have displayed any information
  on the Antivirus > Detected Threats tab. In addition, if you ran the isi
  avscan report threat command under these conditions, a message similar to the
  following appeared:
  
  Could not decode to UTF-8 column 'FileInfected' with text 'test?file f?r 
  encode.doc'

********************************************************************************

CHANGED FILES

* /usr/local/lib/python2.6/site-packages/isi/ui/lib/avscan_report.pyc
  (MD5 = 3f38da538c9829f860a9f656145ab0e4)

* /usr/local/www/webkit/webui/GridAVDetectedThreats.py
  (MD5 = f04bfd18affc27dc792f77cb28327824)

* /usr/local/www/webkit/webui/GridAVRecentThreats.py
  (MD5 = 9593f0981d6293711e4c744b3c80c7bb)

* /usr/local/www/webkit/webui/GridAVReportDetail.py
  (MD5 = e307e717bcfe600e73b48f2fffe23007)

********************************************************************************

INSTALLATION/REMOVAL IMPACTS

During installation or removal of this patch, the OneFS web administration
interface and AVscan service will be unavailable and all clients will be
disconnected from the cluster. After the patch is removed or installed, client
connections must be manually restored and the AVScan service will restart
automatically.

********************************************************************************

IMPORTANT!  
VERIFY CLUSTER-FREE SPACE
If there is insufficient free space and you attempt to install or remove a
patch, the process might not complete successfully. An incomplete patch
installation or patch removal can leave the cluster in an inaccessible state.

Before installing or removing a patch, verify that your cluster has enough
free space to perform the procedure. For more information about maintaining
sufficient free space on an Isilon cluster, see the Best Practices Guide for
Maintaining Enough Free Space on Isilon Clusters and Pools:
https://support.emc.com/docu48119.

********************************************************************************

INSTALLING THIS PATCH

IMPORTANT!
Read INSTALLATION/REMOVAL IMPACTS before performing this procedure.
   
1. Verify that your cluster has enough free space to install this patch.

2. Verify if there are any AVScan jobs running, and note the Job ID of the 
   AVScan jobs that are running or waiting.
   
   isi job jobs list

   Example Output:
   
   ID   Type   State   Impact  Pri  Phase  Running Time 
   -----------------------------------------------------
   18   AVScan Running Low     6    1/1    1m 24s       
   19   AVScan Waiting Low     6    1/1    -            
   -----------------------------------------------------
   Total: 2

3. For each AVScan job ID in the previous step, pause the job.
 
   isi job jobs pause <job id>
   
   (There is no output from this command)

4. Verify the job(s) have been paused.

   isi job jobs list

   Example Output:
    
   ID   Type   State          Impact  Pri  Phase  Running Time 
   ------------------------------------------------------------
   18   AVScan Paused by user Low     6    1/1    1m 54s       
   19   AVScan Paused by user Low     6    1/1    1s           
   ------------------------------------------------------------
   Total: 2

5. Open an SSH connection on any node in the cluster and log in by using the
   root account.

   NOTE: If the patch is being installed on a compliance mode cluster, log in
   using the compadmin account.

6. Copy the patch-166932.tgz file to the /ifs/data directory on the cluster.

7. Run the following command to change to the /ifs/data directory:
   
   cd /ifs/data

8. To extract the patch file, run the following command:

   tar -zxvf patch-166932.tgz

9. To install this patch, run the following command:

   isi pkg install patch-166932.tar

10. To verify that this patch is installed, run the following command:
  
   isi pkg info

11. Confirm that patch-166932 appears in the list of installed packages.


12. Resume any AVScan jobs that were paused prior to the patch installation.

   isi job jobs resume <job id>
   
   (There is no output from this command)

13. Verify the AVScan job(s) are now in a running/waiting state.

   isi job jobs list

   ID   Type   State   Impact  Pri  Phase  Running Time 
   -----------------------------------------------------
   18   AVScan Running Low     6    1/1    2m 5s        
   19   AVScan Waiting Low     6    1/1    1s           
   -----------------------------------------------------
   Total: 2

********************************************************************************

REMOVING THIS PATCH

If you need to remove this patch, complete the steps below.

IMPORTANT!
Read INSTALLATION/REMOVAL IMPACTS before performing this procedure.

1. Verify that your cluster has enough free space to remove this patch.

2. Verify if there are any AVScan jobs running, and note the Job ID of the 
   AVScan jobs that are running or waiting.
   
   isi job jobs list

   Example Output:
   
   ID   Type   State   Impact  Pri  Phase  Running Time 
   -----------------------------------------------------
   18   AVScan Running Low     6    1/1    1m 24s       
   19   AVScan Waiting Low     6    1/1    -            
   -----------------------------------------------------
   Total: 2

3. For each AVScan job ID in the previous step, pause the job.
 
   isi job jobs pause <job id>
   
   (There is no output from this command)

4. Verify the job(s) have been paused.

   isi job jobs list

   Example Output:
    
   ID   Type   State          Impact  Pri  Phase  Running Time 
   ------------------------------------------------------------
   18   AVScan Paused by user Low     6    1/1    1m 54s       
   19   AVScan Paused by user Low     6    1/1    1s           
   ------------------------------------------------------------
   Total: 2

5. Open an SSH connection on any node in the cluster and log in using the
   root account.

   NOTE: If the patch is being removed from a compliance mode cluster, log in
   using the compadmin account.

6. To remove this patch, run the following command:

   isi pkg delete patch-166932

7. To verify that this patch was removed, run the following command:

   isi pkg info

8. Confirm that patch-166932 does not appear in the list of installed packages.

9. Resume any AVScan jobs that were paused prior to the patch installation.

   isi job jobs resume <job id>
   
   (There is no output from this command)

10. Verify the AVScan job(s) are now in a running/waiting state.

   isi job jobs list

   ID   Type   State   Impact  Pri  Phase  Running Time 
   -----------------------------------------------------
   18   AVScan Running Low     6    1/1    2m 5s        
   19   AVScan Waiting Low     6    1/1    1s           
   -----------------------------------------------------
   Total: 2

********************************************************************************
