
       Release Notes for McAfee(R) LinuxShield(TM)
                       Version 1.1

                     HotFix HF207993

 Copyright (C) 2004 Networks Associates Technology, Inc.
                   All Rights Reserved

==========================================================

HotFix Release:        August 25 2004

This release was developed and tested with:

- LinuxShield:                  1.1
- Engine Version:               4.3.20
- ePolicy Orchestrator Server:  3.0.2a and 3.5

Make sure you have installed these versions before
using this release.

==========================================================


Thank you for using LinuxShield(TM) software. This
file contains important information regarding this
release. We strongly recommend that you read the
entire document.

The attached files are provided as is, and with no
warranty either expressed or implied as to their
suitability for any particular use or purpose.
Network Associates, Inc. assumes no liability for
damages incurred either directly or indirectly as a
result of the use of these files, including but not
limited to the loss or damage of data or systems,
loss of business or revenue, or incidental damages
arising from their use. HotFix files should be
applied only on the advice of McAfee Technical
Support, and only when you are actually experiencing
the issue being addressed by the HotFix. HotFix
files should not be proactively applied in order to
prevent potential product issues. You are
responsible for reading and following all
instructions for preparation, configuration, and
installation of HotFix files. HotFix files are not a
substitute or replacement for product Service Packs
which may be released by Network Associates, Inc. It
is a violation of your software license agreement to
distribute or share these files with any other
person or entity without written permission from
Network Associates, Inc. Further, posting of McAfee
HotFix files to publicly available Internet sites is
prohibited. Network Associates, Inc. reserves the
right to refuse distribution of HotFix files to any
company or person guilty of unlawful distribution of
McAfee software products. Questions or issues with
McAfee HotFix files should be directed to McAfee
Technical Support.


__________________________________________________________
WHAT'S IN THIS FILE

-   About This Release
   -   Purpose
   -   Resolved Issues
   -   Files Included with This Release
-   Installation
   -   Installation Requirements
   -   Installation Steps
   -   Removing This Release
-   Contact Information
-   Copyright & Trademark Attributions
-   License & Patent Information


__________________________________________________________
ABOUT THIS RELEASE


PURPOSE

This release replaces the LinuxShield 1.1 ePolicy
Orchestrator event parser to address an issue where
events are not being deleted by the ePolicy Orchestrator
Server if the LinuxShield reports NAP
(LinuxShield110_reports.nap) was installed on the
ePolicy Orchestrator Server.


RESOLVED ISSUES

1.  ISSUE:

    LinuxShield events are not being deleted from 
    the ePolicy Orchestrator Server Events directory.

    RESOLUTION:

    The LinuxShield event parser which was provided as
    a COM plug-in in the reports NAP file was failing to
    release XML files which hold event data.
 
    This is preventing the event files from being
    deleted by the ePolicy Orchestrator Server. An event
    parser DLL has been provided to fix this issue.

    In addition a batch file has been provided to remove
    any undeleted LinuxShield events from the ePolicy
    Orchestrator Server Events directory.


FILES INCLUDED WITH THIS RELEASE

This release consists of a package called
HF207993-RPTNAP-1.1-150.zip, which contains 
the following files:

    LinuxShield110_reports.nap =
       Replacement ePolicy Orchestrator reports NAP
       file.

       For use if you have NOT yet installed the 
       reports NAP file provided with 
       LinuxShield 1.1.

    nailsEpo.dll =
       Replacement ePolicy Orchestrator event parser.

       For use if the ePolicy Orchestrator reports NAP
       file provided with LinuxShield 1.1 was already
       installed on the ePolicy Orchestrator server.

    cleanevents.bat =
       Batch file which deletes XML event files
       which where not deleted as a result the 
       issue this HotFix addresses. Note this
       batch file must only be run as indicated
       in the installation steps.

    HF207993-Readme.txt =
       This file.
__________________________________________________________
INSTALLATION

This HotFix does not affect LinuxShield 1.1
installations on Linux hosts; it affects the LinuxShield
NAP files installed on an ePolicy Orchestrator Server
which is managing LinuxShield hosts.

INSTALLATION REQUIREMENTS

- ePolicy Orchestrator Server 3.0.2a or greater


INSTALLATION STEPS

If you have not yet installed the LinuxShield 1.1
reports NAP file LinuxShield110_reports.nap, follow the
install instructions provided with LinuxShield 1.1 but
use the LinuxShield110_reports.nap provided in this
HotFix.


If LinuxShield NAP files ARE already installed on the
ePolicy Orchestrator Server, follow the steps below.

Note that the installation steps affect your ePolicy
Orchestrator Server only.

For the steps below, the specifics for C: and x.y will
be different depending on your ePolicy Orchestrator
Server version and installation location.

On your ePolicy Orchestrator Server perform the
following steps:

1.  Stop the ePolicy Orchestrator event parser service
    by performing the following:

    Open the Windows Services control panel applet:

    a.  Start Menu - Settings - Control Panel - 
        Administrative Tools - Services

    b.  Find the Service: 

        McAfee ePolicy Orchestrator 3.x.y Event Parser

    c.  Stop the Service using the stop button.

2.  Delete the event files which could not be deleted 
    due to the bug which this HotFix addresses:

    a.  cd C:\Program Files\Network Associates\ePO\3.x.y\Events

    b.  copy the cleanevents.bat provided with the HotFix 
        into this directory    

    c.  run cleanevents.bat 

    d.  del cleanevents.bat 

        
3.  Install in the new event parsing DLL

    a.  cd C:\Program Files\Network Associates\ePO\3.x.y\DB\Data\LYNXSHLD1100

    b.  ren nailsEpo.dll nailsEpo.old

    c.  copy the nailsEpo.dll provided with the HotFix in 
        this directory 

    d.  regsvr32 /i nailsEpo.dll

4.  Start the ePolicy Orchestrator event parser service
    (stopped in step 1.c) using the start button.

5.  Start the ePolicy Orchestrator 3.x.y Server Service.

    When the event parser service was stopped in step
    1.c this will have also stopped to the main ePolicy
    Orchestrator Server. This must now be restarted by:

    a.  Find the Service in the Windows Services control 
        panel applet opened in step 1.a

        McAfee ePolicy Orchestrator 3.x.y Server

    b.  Start the Service using the Start button.


REMOVING THIS RELEASE

To remove this HotFix:

1.  Stop the ePolicy Orchestrator event parser service
    as described in installation step 1.
        
2.  Roll back to the previous event parser:

    a.  cd C:\Program Files\Network Associates\ePO\3.x.y\DB\Data\LYNXSHLD1100

    b.  copy nailsEpo.old nailsEpo.dll 

        this will replace the HotFix DLL with the original

    c.  regsvr32 /i nailsEpo.dll

3.  Start the ePolicy Orchestrator event parser service.

__________________________________________________________
CONTACT INFORMATION

Technical Support
    Home Page
       http://www.networkassociates.com/us/support/

    KnowledgeBase Search
       https://knowledgemap.nai.com/phpclient/homepage.aspx

    PrimeSupport Service Portal
       https://mysupport.nai.com

    Login credentials required.


McAfee Beta Program
    Beta Web Site
       http://www.networkassociates.com/us/downloads/beta/mcafeebetahome.htm

    E-mail
       avbeta@nai.com


Security Headquarters:  AVERT
(Anti-Virus & Vulnerability Emergency Response
Team)
    Home Page
       http://www.networkassociates.com/us/security/home.asp

    Virus Information Library
       http://vil.nai.com

    AVERT WebImmune
       https://www.webimmune.net/default.asp

    Submit a Virus Sample
       http://vil.nai.com/vil/submit-sample.asp

    AVERT DAT Notification Service
       http://vil.nai.com/vil/join-DAT-list.asp


Download Site
    Home Page
       http://www.networkassociates.com/us/downloads/

    DAT File and Engine Updates
       http://www.networkassociates.com/us/downloads/updates/

       ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

    Product Upgrades
       https://secure.nai.com/us/forms/downloads/upgrades/login.asp

    Valid grant number required.
    Contact Customer Service


Training
    McAfee Security University
       http://www.networkassociates.com/us/services/education/mcafee/university.htm


Customer Service
    US, Canada, and Latin America toll-free:
   Phone:     +1-888-VIRUS NO or +1-888-847-8766
              Monday-Friday, 8am-8pm, Central Time

   E-mail:    https://secure.nai.com/us/forms/support/request_form.asp

   Web:       http://www.nai.com/us/index.asp
              http://www.networkassociates.com/us/support/default.asp

For additional contact information (including
addresses and toll-free numbers for worldwide
offices), see the CONTACT file that accompanied your
original product release.


_____________________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS

Copyright (C) 2004 Networks Associates Technology,
Inc. All Rights Reserved. No part of this
publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or
translated into any language in any form orbyany
means without the written permission of Networks
Associates Technology, Inc., or its suppliers or
affiliate companies. To obtain this permission,
write to the attention of the Network Associates
legal department at: 5000 Headquarters Drive, Plano,
Texas 75024, or call +1-972-963-8000.


TRADEMARKS

Active Firewall, Active Security, ActiveSecurity (in
Katakana), ActiveHelp, ActiveShield, AntiVirus
Anyware and design, Bomb Shelter, Certified Network
Expert, Clean-Up, CleanUp Wizard, ClickNet, CNX, CNX
Certification Certified Network Expert and design,
Covert, Design (Stylized E), Design (Stylized N),
Disk Minder, Distributed Sniffer System, Distributed
Sniffer System (in Katakana), Dr Solomon's, Dr
Solomon's label, Entercept, Enterprise SecureCast,
Enterprise SecureCast (in Katakana), ePolicy
Orchestrator, EZ SetUp, First Aid, ForceField, GMT,
GroupShield, GroupShield (in Katakana), Guard Dog,
HomeGuard, Hunter, IntruShield, Intrusion Prevention
Through Innovation, IntruVert Networks, LANGuru,
LANGuru (in Katakana), M and Design, McAfee, McAfee
(in Katakana), McAfee and design, McAfee.com, McAfee
VirusScan, NA Network Associates, Net Tools, Net
Tools (in Katakana), NetCrypto, NetOctopus, NetScan,
NetShield, NetStalker, Network Associates, Network
Associates Coliseum, NetXray, NotesGuard, Nuts &
Bolts, Oil Change, PC Medic, PCNotary, PrimeSupport,
Recoverkey, Recoverkey - International, Registry
Wizard, RingFence, Router PM, SecureCast,
SecureSelect, Sniffer, Sniffer (in Hangul),
SpamKiller, Stalker, TIS, TMEG, Total Network
Security, Total Network Visibility, Total Network
Visibility (in Katakana), Total Virus Defense,
Trusted Mail, UnInstaller, Virex, Virus Forum,
ViruScan, VirusScan, WebScan, WebShield, WebShield
(in Katakana), WebSniffer, WebStalker, WebWall,
What's The State Of Your IDS?, Who's Watching Your
Network, WinGauge, Your E-Business Defender, Zip
Manager are registered trademarks or trademarks of
Network Associates, Inc. and/or its affiliates in
the US and/or other countries.  Sniffer(R) brand
products are made only by Network Associates, Inc.
All other registered and unregistered trademarks
herein are the sole property of their respective
owners.


_____________________________________________________
LICENSE & PATENT INFORMATION

LICENSE AGREEMENT

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE
LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU
PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND
CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF
YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE
ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED
LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE
RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A
BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE
AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED
THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF
THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL
THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE
PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF
PURCHASE FOR A FULL REFUND.


LICENSE ATTRIBUTIONS

This product includes or may include:
*Software developed by the OpenSSL Project for use
in the OpenSSL Toolkit (http://www.openssl.org/).
*Cryptographic software written by Eric A. Young and
software written by Tim J. Hudson. *Some software
programs that are licensed (or sublicensed) to the
user under the GNU General Public License (GPL) or
other similar Free Software licenses which, among
other rights, permit the user to copy, modify and
redistribute certain programs, or portions thereof,
and have access to the source code. The GPL requires
that for any software covered under the GPL which is
distributed to someone in an executable binary
format, that the source code also be made available
to those users. For any such software covered under
the GPL, the source code is made available on this
CD. If any Free Software licenses require that
Network Associates provide rights to use, copy or
modify a software program that are broader than the
rights granted in this agreement, then such rights
shall take precedence over the rights and
restrictions herein.  *Software originally written
by Henry Spencer, Copyright 1992, 1993, 1994, 1997
Henry Spencer.  *Software originally written by
Robert Nordier, Copyright (C) 1996-7 Robert Nordier.
*Software written by Douglas W. Sauder.  *Software
developed by the Apache Software Foundation
(http://www.apache.org/). A copy of the license
agreement for this software can be found at
www.apache.org/licenses/LICENSE-2.0.txt.
*International Components for Unicode ("ICU")
Copyright (C) 1995-2002 International Business
Machines Corporation and others.  *Software
developed by CrystalClear Software, Inc., Copyright
(C) 2000 CrystalClear Software, Inc. *FEAD(R)
Optimizer(R)  technology, Copyright Netopsystems AG,
Berlin, Germany. *Outside In(R)  Viewer Technology
(C) 1992-2001 Stellent Chicago, Inc. and/or Outside
In(R) HTML Export, (C) 2001 Stellent Chicago, Inc.
*Software copyrighted by Thai Open Source Software
Center Ltd. and Clark Cooper, (C) 1998, 1999, 2000.
*Software copyrighted by Expat maintainers.
*Software copyrighted by The Regents of the
University of California, (C) 1989.  *Software
copyrighted by Gunnar Ritter.  *Software copyrighted
by Sun Microsystems(R), Inc. (C) 2003.  *Software
copyrighted by Gisle Aas. (C) 1995-2003.  *Software
copyrighted by Michael A. Chase, (C) 1999-2000.
*Software copyrighted by Neil Winton, (C) 1995-1996.
*Software copyrighted by RSA Data Security, Inc.,
(C) 1990-1992.  *Software copyrighted by Sean M.
Burke, (C) 1999, 2000.  *Software copyrighted by
Martijn Koster, (C) 1995.  *Software copyrighted by
Brad Appleton, (C) 1996-1999.  *Software copyrighted
by Michael G. Schwern, (C) 2001.  *Software
copyrighted by Graham Barr, (C) 1998.  *Software
copyrighted by Larry Wall and Clark Cooper, (C)
1998-2000.  *Software copyrighted by Frodo
Looijaard, (C) 1997.  *Software copyrighted by the
Python Software Foundation, Copyright (C) 2001,
2002, 2003. A copy of the license agreement for this
software can be found at www.python.org.  *Software
copyrighted by Beman Dawes, (C) 1994-1999, 2002.
*Software written by Andrew Lumsdaine, Lie-Quan Lee,
Jeremy G. Siek (C) 1997-2000 University of Notre
Dame.  *Software copyrighted by Simone Bordet &
Marco Cravero, (C) 2002.  *Software copyrighted by
Stephen Purcell, (C) 2001.  *Software developed by
the Indiana University Extreme! Lab
http://www.extreme.indiana.edu/).  *Software
copyrighted by International Business Machines
Corporation and others, (C) 1995-2003.  *Software
developed by the University of California, Berkeley
and its contributors.  *Software developed by Ralf
S. Engelschall <rse@engelschall.com> for use in the
mod_ssl project (http://www.modssl.org/).  *Software
copyrighted by Kevlin Henney, (C) 2000-2002.
*Software copyrighted by Peter Dimov and Multi Media
Ltd. (C) 2001, 2002.  *Software copyrighted by David
Abrahams, (C) 2001, 2002. See
http://www.boost.org/libs/bind/ bind.html for
documentation.  *Software copyrighted by Steve
Cleary, Beman Dawes, Howard Hinnant & John Maddock,
(C) 2000.  *Software copyrighted by Boost.org, (C)
1999-2002.  *Software copyrighted by Nicolai M.
Josuttis, (C) 1999.  *Software copyrighted by Jeremy
Siek, (C) 1999-2001.  *Software copyrighted by
Daryle Walker, (C) 2001.  *Software copyrighted by
Chuck Allison and Jeremy Siek, (C) 2001, 2002.
*Software copyrighted by Samuel Krempp, (C) 2001.
See http://www.boost.org for updates, documentation,
and revision history.  *Software copyrighted by Doug
Gregor (gregod@cs.rpi.edu), (C) 2001, 2002.
*Software copyrighted by Cadenza New Zealand Ltd.,
(C) 2000.  *Software copyrighted by Jens Maurer, (C)
2000, 2001.  *Software copyrighted by Jaakko Jrvi
(jaakko.jarvi@cs.utu.fi), (C) 1999, 2000.  *Software
copyrighted by Ronald Garcia, (C) 2002.  *Software
copyrighted by David Abrahams, Jeremy Siek, and
Daryle Walker, (C) 1999-2001.  *Software copyrighted
by Stephen Cleary (shammah@voyager.net), (C) 2000.
*Software copyrighted by Housemarque Oy
<http:// www.housemarque.com>,(C) 2001.  *Software
copyrighted by Paul Moore, (C) 1999.  *Software
copyrighted by Dr. John Maddock, (C) 1998-2002.
*Software copyrighted by Greg Colvin and Beman
Dawes, (C) 1998, 1999.  *Software copyrighted by
Peter Dimov, (C) 2001, 2002.  *Software copyrighted
by Jeremy Siek and John R. Bandela, (C) 2001.
*Software copyrighted by Joerg Walter and Mathias
Koch, (C) 2000-2002.


PATENT INFORMATION

Protected by US Patents 6,029,256; 6,230,288;
6,496,875; 6,594,686; 6,622,150; 6,668,289;
6,684,329.

DBN 002-EN

V3.0.0
