Bug 1552797

Summary:	Unplanned change of NSS filesystem probing in 7.5.0, undo for 7.5.z
Product:	Red Hat Enterprise Linux 7	Reporter:	Kai Engert (:kaie) (inactive account) <kengert>
Component:	nss-softokn	Assignee:	Daiki Ueno <dueno>
Status:	CLOSED CURRENTRELEASE	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	unspecified	Docs Contact:
Priority:	high
Version:	7.5	CC:	dueno, hkario, mthacker, omoris, rrelyea, szidek, tmraz, toneata
Target Milestone:	rc	Keywords:	ZStream
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	nss-softokn-3.36.0-5.el7_5	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1562083 (view as bug list)		Environment:
Last Closed:	2018-10-30 15:44:43 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1562083

Description Kai Engert (:kaie) (inactive account) 2018-03-07 18:36:23 UTC

The nss-softokn package for RHEL 7.5.0 contains a behavior change, which affects NSS applications that access NSS databases of the SQL type that are stored on network filesystems.

Previously, in RHEL 7.4.x and earlier, NSS performed automatic probing of the filesystem speed at startup time. This allowed NSS to automatically enable a speed/caching optimization.

In the upstream NSS version that 7.5.0 ships, this probing was disabled. We hadn't notice that change.

I'd like to recommend that we undo that accidental change in RHEL 7.5.0, and restore the previous behavior. This can avoid regression bug reports from RHEL 7.x users.

The fix is simple, a very small upstream patch needs to be reverted.

A good opportunity to fix this is the rebase of nss-softokn that is planned for Firefox 60 and 7.5.z, see bug 1531060 and 1550045.