AWS Security ChangesHomeSearch

AWS sap documentation change

Service: sap · 2025-04-25 · Documentation low

File: sap/latest/sap-hana/configure-operating-system-sles-for-sap-12.x.md

Summary

Formatting changes to command examples (placeholder standardization, indentation adjustments) and removal of redundant section headers. Updates to NTP configuration steps and grub configuration syntax.

Security assessment

Changes involve syntax standardization and formatting improvements without introducing or modifying security-related content. NTP configuration is a best practice but not directly tied to addressing a security vulnerability.

Diff

diff --git a/sap/latest/sap-hana/configure-operating-system-sles-for-sap-12.x.md b/sap/latest/sap-hana/configure-operating-system-sles-for-sap-12.x.md
index 297076b3a..30ca4c0ff 100644
--- a//sap/latest/sap-hana/configure-operating-system-sles-for-sap-12.x.md
+++ b//sap/latest/sap-hana/configure-operating-system-sles-for-sap-12.x.md
@@ -11,2 +10,0 @@ In the following steps, you need to update several configuration files. We recom
-###### To configure SLES 12/15 for SAP
-
@@ -25,2 +23,2 @@ Alternatively, you can use `sudo` to execute the following commands as ec2-user.
-          # hostnamectl set-hostname --static your_hostname
-      # echo your_hostname.example.com > /etc/hostname
+           hostnamectl set-hostname --static <your_hostname>
+       echo <your_hostname.example.com> > /etc/hostname
@@ -32 +30 @@ Open a new session to verify the hostname change.
-          # grep DHCLIENT_SET_HOSTNAME /etc/sysconfig/network/dhcp
+           grep DHCLIENT_SET_HOSTNAME /etc/sysconfig/network/dhcp
@@ -36 +34 @@ Open a new session to verify the hostname change.
-          # sed -i '/preserve_hostname/ c\preserve_hostname: true' /etc/cloud/cloud.cfg
+           sed -i '/preserve_hostname/ c\preserve_hostname: true' /etc/cloud/cloud.cfg
@@ -40 +38 @@ Open a new session to verify the hostname change.
-          ip_address hostname.example.com hostname
+          <ip_address> <hostname.example.com> <hostname>
@@ -44,2 +42,2 @@ Open a new session to verify the hostname change.
-          # SUSEConnect -r Your_Registration_Code
-      # SUSEConnect -s
+           SUSEConnect -r <Your_Registration_Code>
+       SUSEConnect -s
@@ -53 +51 @@ You can use the `rpm` command to check whether a package is installed.
-          # rpm -qi package_name
+           rpm -qi <package_name>
@@ -57 +55 @@ You can then use the zypper install command to install the missing packages.
-          # zypper install package_name
+           zypper install <package_name>
@@ -65 +63 @@ If you are importing your own SLES image, additional packages might be required
-          # rpm -qi kernel*
+           rpm -qi kernel*
@@ -69 +67 @@ If you are importing your own SLES image, additional packages might be required
-          # saptune daemon start
+           saptune daemon start
@@ -73 +71 @@ If you are importing your own SLES image, additional packages might be required
-          # grep force_latency /usr/lib/tuned/saptune/tuned.conf
+           grep force_latency /usr/lib/tuned/saptune/tuned.conf
@@ -79,4 +77,4 @@ If the parameter is set, skip the next step and proceed with activating the HANA
-          # mkdir /etc/tuned/saptune
-      # cp /usr/lib/tuned/saptune/tuned.conf /etc/tuned/saptune/tuned.conf
-      # sed -i "/\[cpu\]/ a force_latency=70" /etc/tuned/saptune/tuned.conf
-      # sed -i "s/script.sh/\/usr\/lib\/tuned\/saptune\/script.sh/"
+           mkdir /etc/tuned/saptune
+       cp /usr/lib/tuned/saptune/tuned.conf /etc/tuned/saptune/tuned.conf
+       sed -i "/\[cpu\]/ a force_latency=70" /etc/tuned/saptune/tuned.conf
+       sed -i "s/script.sh/\/usr\/lib\/tuned\/saptune\/script.sh/"
@@ -86,2 +84,2 @@ If the parameter is set, skip the next step and proceed with activating the HANA
-          # saptune solution apply HANA
-      # saptune solution verify HANA
+           saptune solution apply HANA
+       saptune solution verify HANA
@@ -95,7 +93,6 @@ Remove any existing invalid NTP server pools from `/etc/ntp.conf` before adding
-          # echo "server 0.pool.ntp.org" >> /etc/ntp.conf
-      # echo "server 1.pool.ntp.org" >> /etc/ntp.conf
-      # echo "server 2.pool.ntp.org" >> /etc/ntp.conf
-      # echo "server 3.pool.ntp.org" >> /etc/ntp.conf
-      # systemctl enable ntpd.service
-      # systemctl start ntpd.service
-          
+           echo "server 0.pool.ntp.org" >> /etc/ntp.conf
+       echo "server 1.pool.ntp.org" >> /etc/ntp.conf
+       echo "server 2.pool.ntp.org" >> /etc/ntp.conf
+       echo "server 3.pool.ntp.org" >> /etc/ntp.conf
+       systemctl enable ntpd.service
+       systemctl start ntpd.service
@@ -109,4 +106,4 @@ Instead of connecting to the global NTP server pool, you can connect to your int
-          # echo "tsc" > /sys/devices/system/clocksource/*/current_clocksource
-      # cp /etc/default/grub /etc/default/grub.backup
-      # sed -i '/GRUB_CMDLINE_LINUX/ s|"| clocksource=tsc"|2' /etc/default/grub
-      # grub2-mkconfig -o /boot/grub2/grub.cfg
+           echo "tsc" > /sys/devices/system/clocksource/*/current_clocksource
+       cp /etc/default/grub /etc/default/grub.backup
+       sed -i '/GRUB_CMDLINE_LINUX/ s|"| clocksource=tsc"|2' /etc/default/grub
+       grub2-mkconfig -o /boot/grub2/grub.cfg