
       Release Notes for McAfee(R) LinuxShield(R)
                      Version 1.1
         Kernel Modules Updates Package 665-109
 Copyright (C) 2004 Networks Associates Technology, Inc.
                  All Rights Reserved

==========================================================

Kernel Modules Updates Package Release: 665-109  

This release was developed and tested with:

- LinuxShield 1.1

Make sure you have installed these versions before
using this release.

==========================================================

Thank you for using LinuxShield(R) software. This
file contains important information regarding this
release. We strongly recommend that you read the
entire document.

__________________________________________________________
WHAT'S IN THIS FILE

-   About This Release
   -   Purpose
   -   Resolved Issues
   -   Files Included with This Release
-   Installation
   -   Installation Requirements
   -   Installation Steps
   -   Testing Your Installation 
   -   Removing This Release 
-   Contact Information
-   Copyright & Trademark Attributions
-   License & Patent Information

__________________________________________________________
ABOUT THIS RELEASE


PURPOSE

Kernel Modules are used by LinuxShield to provide 
On-Access Anti-virus protection. 

This package includes updates to the kernel modules 
provided with LinuxShield 1.1 to support later 
versions of kernels, or patches to kernels which
were released after LinuxShield 1.1. 

Source code for these kernel modules is provided
with the original LinuxShield Release 1.1. The 
included kernel modules have been built using 
this source code and then tested prior to release
in this update.


FILES INCLUDED WITH THIS RELEASE

This release consists of a package called

LinuxShield-1.1.0.665-109-modules.tar.gz

This contains the following kernel modules:

Red Hat Enterprise Linux release 2.1 i686:
kernel-2.4.9-e.43 kernel-smp-2.4.9-e.43 kernel-enterprise-2.4.9-e.43

Red Hat Enterprise Linux release 3 (Taroon) i686:
kernel-2.4.21-15.0.3.EL kernel-smp-2.4.21-15.0.3.EL kernel-hugemem-2.4.21-15.0.3.EL

SuSE Linux 8.2 (i586):
k_deflt-2.4.20-115 k_smp-2.4.20-115

SuSE SLES-8 (i586):
k_deflt-2.4.21-231 k_smp-2.4.21-231

SuSE Linux 9.0 (i586):
k_deflt-2.4.21-231 k_smp4G-2.4.21-231 k_smp-2.4.21-231

__________________________________________________________
INSTALLATION


INSTALLATION REQUIREMENTS

To use this release, you must have LinuxShield 1.1
software installed on the computer you intend to update
with this release.

    NOTE:
    This release has not been tested with
    earlier versions of LinuxShield. It is 
    recommended that you upgrade to LinuxShield 1.1
    if you are running an earlier version.


INSTALLATION STEPS

1.  Extract the content of the update package 
    to a temporary directory:

    mkdir /tmp/khm
    cd /tmp/khm
    tar xzvf LinuxShield-1.1.0.665-109-modules.tar.gz

2.  Determine which kernel module you require, using:

    uname -a

3.  Extract the content of the required kernel module 
    package, for example:

    tar xzvf SuSE_9.0_2.4.21-231.tar.gz

    This will extract the content to a modules directory.

4.  Back up a copy of your original kernel modules
    provided with LinuxShield:

    cp /opt/NAI/LinuxShield/lib/modules/* <backup-directory>/.

    NOTE: The default LinuxShield installation directory
    is /opt/NAI/LinuxShield. If a different directory was
    used when LinuxShield was installed, this will need
    to be specified in the following steps.

5.  Copy the new files from the temporary directory you
    created in Step 3 to the LinuxShield modules directory:

    cp /tmp/khm/modules/* /opt/NAI/LinuxShield/lib/modules/.

6.  Restart LinuxShield.

    /etc/init.d/nails restart

7.  Validate the kernel module has been loaded:

    lsmod | grep -e lshook -e linuxshield

    This should output:

    lshook        nnnnn yy
    linuxshield   nnnnn yy

NOTE: For platforms that do not provide enough
information in step 2 to fully identify the kernel
version you will need to determine the kernel version
using rpm in step 2 and to extend
/opt/NAI/LinuxShield/lib/modules/kernel.version in step
5.

For example, for SuSE 8.2 determine the full kernel
version using one of the following commands:

    rpm -q --queryformat '%{VERSION}-%{RELEASE}-4GB\n' k_deflt
 or
    rpm -q --queryformat '%{VERSION}-%{RELEASE}-64GB-SMP\n' k_smp

and then append the matching <version>-kernel.version
file to kernel.version:

    cd /opt/NAI/LinuxShield/lib/modules
    cat 2.4.20-4GB-115-kernel.version >> kernel.version

There should only be one line for each kernel version in
this file.

For further information regarding the content of this
file see the section on building your own kernel modules
in the installation guide or the readme file in the
kernel module source package.

TESTING YOUR INSTALLATION

You can test the operation of the software by
running the EICAR Standard AntiVirus Test File on
any computer where you have installed the software.
The EICAR Standard AntiVirus Test File is a combined
effort by anti-virus vendors throughout the world to
implement one standard by which customers can verify
their anti-virus installations.

To test your installation:

1.  Copy the following line into its own file,
    making sure you do not include any spaces or
    line breaks. Save the file with the name
    EICAR.COM.

       X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

    The file size will be 68 or 70 bytes.

2.  Start your anti-virus software and allow it to
    scan the directory that contains EICAR.COM.

    When your software scans this file, it will
    report finding the EICAR test file.

3.  Delete the file when you have finished testing
    your installation to avoid alarming unsuspecting
    users.

    IMPORTANT:
    Please note that this file is NOT A VIRUS.


For more information on the EICAR test file, visit:

       www.eicar.org


REMOVING THIS RELEASE

To remove this Update from your computer,
replace the files in /opt/NAI/LinuxShield/lib/modules 
with the ones backed up in step 4 of the 
installation. 

A reboot will be required to unload the previous 
versions of the kernel modules if they were loaded
during this update installation.


__________________________________________________________
PARTICIPATING IN THE MCAFEE BETA PROGRAM

To download new beta software or to read about the
latest beta information, visit the beta web site:

       http://www.networkassociates.com/us/downloads/beta/mcafeebetahome.htm

To submit your feedback on any McAfee beta product,
send e-mail to:

       avbeta@nai.com

McAfee is devoted to providing solutions based on
your input.


__________________________________________________________
CONTACT INFORMATION

Technical Support
    Home Page
       http://www.networkassociates.com/us/support/

    KnowledgeBase Search
       https://knowledgemap.nai.com/phpclient/homepage.aspx

    PrimeSupport Service Portal
       https://mysupport.nai.com

    Login credentials required.


McAfee Beta Program
    Beta Web Site
       http://www.networkassociates.com/us/downloads/beta/mcafeebetahome.htm

    E-mail
       avbeta@nai.com


Security Headquarters:  AVERT
(Anti-Virus & Vulnerability Emergency Response
Team)
    Home Page
       http://www.networkassociates.com/us/security/home.asp

    Virus Information Library
       http://vil.nai.com

    AVERT WebImmune
       https://www.webimmune.net/default.asp

    Submit a Virus Sample
       http://vil.nai.com/vil/submit-sample.asp

    AVERT DAT Notification Service
       http://vil.nai.com/vil/join-DAT-list.asp


Download Site
    Home Page
       http://www.networkassociates.com/us/downloads/

    DAT File and Engine Updates
       http://www.networkassociates.com/us/downloads/updates/

       ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

    Product Upgrades
       https://secure.nai.com/us/forms/downloads/upgrades/login.asp

    Valid grant number required.
    Contact Customer Service


Training
    McAfee Security University
       http://www.networkassociates.com/us/services/education/mcafee/university.htm


Customer Service
    US, Canada, and Latin America toll-free:
   Phone:     +1-888-VIRUS NO or +1-888-847-8766
              Monday-Friday, 8am-8pm, Central Time

   E-mail:    https://secure.nai.com/us/forms/support/request_form.asp

   Web:       http://www.nai.com/us/index.asp
              http://www.networkassociates.com/us/support/default.asp

For additional contact information (including
addresses and toll-free numbers for worldwide
offices), see the CONTACT file that accompanied your
original product release.


_____________________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS

Copyright (C) 2004 Networks Associates Technology,
Inc. All Rights Reserved. No part of this
publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or
translated into any language in any form orbyany
means without the written permission of Networks
Associates Technology, Inc., or its suppliers or
affiliate companies. To obtain this permission,
write to the attention of the Network Associates
legal department at: 5000 Headquarters Drive, Plano,
Texas 75024, or call +1-972-963-8000.


TRADEMARKS

Active Firewall, Active Security, ActiveSecurity (in
Katakana), ActiveHelp, ActiveShield, AntiVirus
Anyware and design, Bomb Shelter, Certified Network
Expert, Clean-Up, CleanUp Wizard, ClickNet, CNX, CNX
Certification Certified Network Expert and design,
Covert, Design (Stylized E), Design (Stylized N),
Disk Minder, Distributed Sniffer System, Distributed
Sniffer System (in Katakana), Dr Solomon's, Dr
Solomon's label, Entercept, Enterprise SecureCast,
Enterprise SecureCast (in Katakana), ePolicy
Orchestrator, EZ SetUp, First Aid, ForceField, GMT,
GroupShield, GroupShield (in Katakana), Guard Dog,
HomeGuard, Hunter, IntruShield, Intrusion Prevention
Through Innovation, IntruVert Networks, LANGuru,
LANGuru (in Katakana), M and Design, McAfee, McAfee
(in Katakana), McAfee and design, McAfee.com, McAfee
VirusScan, NA Network Associates, Net Tools, Net
Tools (in Katakana), NetCrypto, NetOctopus, NetScan,
NetShield, NetStalker, Network Associates, Network
Associates Coliseum, NetXray, NotesGuard, Nuts &
Bolts, Oil Change, PC Medic, PCNotary, PrimeSupport,
Recoverkey, Recoverkey - International, Registry
Wizard, RingFence, Router PM, SecureCast,
SecureSelect, Sniffer, Sniffer (in Hangul),
SpamKiller, Stalker, TIS, TMEG, Total Network
Security, Total Network Visibility, Total Network
Visibility (in Katakana), Total Virus Defense,
Trusted Mail, UnInstaller, Virex, Virus Forum,
ViruScan, VirusScan, WebScan, WebShield, WebShield
(in Katakana), WebSniffer, WebStalker, WebWall,
What's The State Of Your IDS?, Who's Watching Your
Network, WinGauge, Your E-Business Defender, Zip
Manager are registered trademarks or trademarks of
Network Associates, Inc. and/or its affiliates in
the US and/or other countries.  Sniffer(R) brand
products are made only by Network Associates, Inc.
All other registered and unregistered trademarks
herein are the sole property of their respective
owners.


_____________________________________________________
LICENSE & PATENT INFORMATION

LICENSE AGREEMENT

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE
LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU
PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND
CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF
YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE
ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED
LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE
RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A
BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE
AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED
THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF
THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL
THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE
PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF
PURCHASE FOR A FULL REFUND.


LICENSE ATTRIBUTIONS

This product includes or may include:
*Software developed by the OpenSSL Project for use
in the OpenSSL Toolkit (http://www.openssl.org/).
*Cryptographic software written by Eric A. Young and
software written by Tim J. Hudson. *Some software
programs that are licensed (or sublicensed) to the
user under the GNU General Public License (GPL) or
other similar Free Software licenses which, among
other rights, permit the user to copy, modify and
redistribute certain programs, or portions thereof,
and have access to the source code. The GPL requires
that for any software covered under the GPL which is
distributed to someone in an executable binary
format, that the source code also be made available
to those users. For any such software covered under
the GPL, the source code is made available on this
CD. If any Free Software licenses require that
Network Associates provide rights to use, copy or
modify a software program that are broader than the
rights granted in this agreement, then such rights
shall take precedence over the rights and
restrictions herein.  *Software originally written
by Henry Spencer, Copyright 1992, 1993, 1994, 1997
Henry Spencer.  *Software originally written by
Robert Nordier, Copyright (C) 1996-7 Robert Nordier.
*Software written by Douglas W. Sauder.  *Software
developed by the Apache Software Foundation
(http://www.apache.org/). A copy of the license
agreement for this software can be found at
www.apache.org/licenses/LICENSE-2.0.txt.
*International Components for Unicode ("ICU")
Copyright (C) 1995-2002 International Business
Machines Corporation and others.  *Software
developed by CrystalClear Software, Inc., Copyright
(C) 2000 CrystalClear Software, Inc. *FEAD(R)
Optimizer(R)  technology, Copyright Netopsystems AG,
Berlin, Germany. *Outside In(R)  Viewer Technology
(C) 1992-2001 Stellent Chicago, Inc. and/or Outside
In(R) HTML Export, (C) 2001 Stellent Chicago, Inc.
*Software copyrighted by Thai Open Source Software
Center Ltd. and Clark Cooper, (C) 1998, 1999, 2000.
*Software copyrighted by Expat maintainers.
*Software copyrighted by The Regents of the
University of California, (C) 1989.  *Software
copyrighted by Gunnar Ritter.  *Software copyrighted
by Sun Microsystems(R), Inc. (C) 2003.  *Software
copyrighted by Gisle Aas. (C) 1995-2003.  *Software
copyrighted by Michael A. Chase, (C) 1999-2000.
*Software copyrighted by Neil Winton, (C) 1995-1996.
*Software copyrighted by RSA Data Security, Inc.,
(C) 1990-1992.  *Software copyrighted by Sean M.
Burke, (C) 1999, 2000.  *Software copyrighted by
Martijn Koster, (C) 1995.  *Software copyrighted by
Brad Appleton, (C) 1996-1999.  *Software copyrighted
by Michael G. Schwern, (C) 2001.  *Software
copyrighted by Graham Barr, (C) 1998.  *Software
copyrighted by Larry Wall and Clark Cooper, (C)
1998-2000.  *Software copyrighted by Frodo
Looijaard, (C) 1997.  *Software copyrighted by the
Python Software Foundation, Copyright (C) 2001,
2002, 2003. A copy of the license agreement for this
software can be found at www.python.org.  *Software
copyrighted by Beman Dawes, (C) 1994-1999, 2002.
*Software written by Andrew Lumsdaine, Lie-Quan Lee,
Jeremy G. Siek (C) 1997-2000 University of Notre
Dame.  *Software copyrighted by Simone Bordet &
Marco Cravero, (C) 2002.  *Software copyrighted by
Stephen Purcell, (C) 2001.  *Software developed by
the Indiana University Extreme! Lab
http://www.extreme.indiana.edu/).  *Software
copyrighted by International Business Machines
Corporation and others, (C) 1995-2003.  *Software
developed by the University of California, Berkeley
and its contributors.  *Software developed by Ralf
S. Engelschall <rse@engelschall.com> for use in the
mod_ssl project (http://www.modssl.org/).  *Software
copyrighted by Kevlin Henney, (C) 2000-2002.
*Software copyrighted by Peter Dimov and Multi Media
Ltd. (C) 2001, 2002.  *Software copyrighted by David
Abrahams, (C) 2001, 2002. See
http://www.boost.org/libs/bind/ bind.html for
documentation.  *Software copyrighted by Steve
Cleary, Beman Dawes, Howard Hinnant & John Maddock,
(C) 2000.  *Software copyrighted by Boost.org, (C)
1999-2002.  *Software copyrighted by Nicolai M.
Josuttis, (C) 1999.  *Software copyrighted by Jeremy
Siek, (C) 1999-2001.  *Software copyrighted by
Daryle Walker, (C) 2001.  *Software copyrighted by
Chuck Allison and Jeremy Siek, (C) 2001, 2002.
*Software copyrighted by Samuel Krempp, (C) 2001.
See http://www.boost.org for updates, documentation,
and revision history.  *Software copyrighted by Doug
Gregor (gregod@cs.rpi.edu), (C) 2001, 2002.
*Software copyrighted by Cadenza New Zealand Ltd.,
(C) 2000.  *Software copyrighted by Jens Maurer, (C)
2000, 2001.  *Software copyrighted by Jaakko Jrvi
(jaakko.jarvi@cs.utu.fi), (C) 1999, 2000.  *Software
copyrighted by Ronald Garcia, (C) 2002.  *Software
copyrighted by David Abrahams, Jeremy Siek, and
Daryle Walker, (C) 1999-2001.  *Software copyrighted
by Stephen Cleary (shammah@voyager.net), (C) 2000.
*Software copyrighted by Housemarque Oy
<http:// www.housemarque.com>,(C) 2001.  *Software
copyrighted by Paul Moore, (C) 1999.  *Software
copyrighted by Dr. John Maddock, (C) 1998-2002.
*Software copyrighted by Greg Colvin and Beman
Dawes, (C) 1998, 1999.  *Software copyrighted by
Peter Dimov, (C) 2001, 2002.  *Software copyrighted
by Jeremy Siek and John R. Bandela, (C) 2001.
*Software copyrighted by Joerg Walter and Mathias
Koch, (C) 2000-2002.


PATENT INFORMATION

Protected by US Patents 6,029,256; 6,230,288;
6,496,875; 6,594,686; 6,622,150; 6,668,289;
6,684,329.



DBN 002-EN

V3.0.0
