AWS workspaces documentation change
Summary
Clarified migration paths and conditions for Linux WorkSpaces, including SELinux behavior during migrations and AD home directory resolution issues.
Security assessment
Changes are minor phrasing adjustments about migration compatibility and AD attribute behavior. No security vulnerabilities, fixes, or security features are mentioned or implied.
Diff
diff --git a/workspaces/latest/adminguide/migrate-linux-workspaces.md b/workspaces/latest/adminguide/migrate-linux-workspaces.md index 113a8db8a..3d456871d 100644 --- a//workspaces/latest/adminguide/migrate-linux-workspaces.md +++ b//workspaces/latest/adminguide/migrate-linux-workspaces.md @@ -60 +60 @@ Rocky 9 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — -All migration paths between Ubuntu, RHEL, and Rocky Linux are supported in both directions. You can upgrade (for example, RHEL 8 → RHEL 9), downgrade (for example, Ubuntu 24.04 → Ubuntu 22.04), and migrate across distribution families (for example, Rocky 9 → Ubuntu 24.04 or RHEL 9 → Rocky 8). The only restriction is that you cannot migrate a WorkSpace to the same bundle it is already using. +All migration paths between Ubuntu, RHEL, and Rocky Linux are supported in both directions. You can upgrade (for example, RHEL 8 → RHEL 9) or downgrade (for example, Ubuntu 24.04 → Ubuntu 22.04). You can also migrate across distribution families (for example, Rocky 9 → Ubuntu 24.04 or RHEL 9 → Rocky 8). The only restriction is that you cannot migrate a WorkSpace to the same bundle it is already using. @@ -276 +276 @@ When the migration target is RHEL or Rocky Linux, SELinux security contexts are - * Migrations between SELinux-enabled distributions (for example, RHEL 8 → RHEL 9, Rocky 8 → Rocky 9, or RHEL 9 → Rocky 9), because SELinux policy versions and file context definitions can change between major releases. + * Migrations between SELinux-enabled distributions (for example, RHEL 8 → RHEL 9, Rocky 8 → Rocky 9, or RHEL 9 → Rocky 9). SELinux policy versions and file context definitions can change between major releases. @@ -296 +296 @@ Active Directory supports RFC 2307 attributes (also known as "Unix Attributes"), -When migrating from AL2 to an SSSD-based distribution, if the AD user object has `unixHomeDirectory` set to a different path (for example, `/home/CORP/jsmith`), SSSD resolves the user's home directory to that AD-specified path. Since the user's actual data lives at `/home/`username`` from the AL2 era, the AD-specified path does not exist on the volume. +When migrating from AL2 to an SSSD-based distribution, the AD user object might have `unixHomeDirectory` set to a different path (for example, `/home/CORP/jsmith`). In that case, SSSD resolves the user's home directory to that AD-specified path. Since the user's actual data lives at `/home/`username`` from the AL2 era, the AD-specified path does not exist on the volume.