devel June 2005

devel@lists.centos.org

8 participants
8 discussions

Yum futex lockup upgrading from 4.0 to 4.1
by Rodrigo Barbosa 18 Jun '05

18 Jun '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Okey, this problem seems to be related to yum. After installing a new 4.0 machine (desktop, so lots of packages, custom install), I pointed CentOS.repos to 4.1. After that, I executed "yum update". Everything started fine, downloads finished without a problem. During the transation, tho, I have a hard locked of the yum process, when finishing updating redhat-lsb. Yum output showed the packted 100% done, but on /proc the process still had the redhat-lsb rpm packged opened (filedescriptor). The python process that was running yum was locked hard on a futex call. Interesting fact to notice that there were no other yum related processes running, and that the running python instance was upgraded earlier during the transation (so I have python.#prelink# running). No signals made any different, and I had to issue a -9 to kill the process (-15 was no good). I had to do a bit of fixing after that, since it seems python doesn't handle broken dependencies very well. Nothing a couple of "rpm -e --justdb" didn't so. Another "yum upgrade" finished upgrading the machine. All my previous tests were from a fully upgraded 4.0 machine, and for those I had no trouble. With this one, a stock 4.0 machine with no upgrades, yum locked. Might be worth trying to reproduce it. Another interesting fact is that this was my only machine with SELinux active, but I'm still betting on a python/yum related problem. All hardware on my machine was fully tested and no problems were detected. No processor overheat, no bad memory, perfect disks. Best regards, - -- Rodrigo Barbosa <rodrigob(a)suespammers.org> "Quid quid Latine dictum sit, altum viditur" "Be excellent to each other ..." - Bill & Ted (Wyld Stallyns) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFCs5L9pdyWzQ5b5ckRAuZSAJ9QhSJ29ik7C7z7+elPLoWU/EjLBACfQEMx bIROXJbSmjow3K6fyCPlFmw= =ktV4 -----END PGP SIGNATURE-----

3 2

CentOS 3.5 errors
by John Newbigin 15 Jun '05

15 Jun '05

The following packages from 3.5 do not appear to be signed properly: db4-4.1.25-8.1.i386.rpm db4-devel-4.1.25-8.1.i386.rpm dump-0.4b37-1E.i386.rpm crash-3.10-10.centos.0.i386.rpm db4-java-4.1.25-8.1.i386.rpm I checked on a CentOS-2 and CentOS-3 box. sample problem: $ rpm -vK i386/crash-3.10-10.centos.0.i386.rpm i386/crash-3.10-10.centos.0.i386.rpm: MD5 sum mismatch Expected: 8e030692acbc9af9b7ced6a729410c42 Saw : a27b0ab402bf38be5ae6bf195ca0c355 gpg: Warning: using insecure memory! gpg: please see http://www.gnupg.org/faq.html for more information gpg: Signature made Wed 25 May 2005 20:44:30 EST using DSA key ID 025E513B gpg: BAD signature from "CentOS-3 Key <centos-3key(a)caosity.org>" $ rpm -Kv db4-4.1.25-8.1.i386.rpm db4-4.1.25-8.1.i386.rpm: Header V3 DSA signature: OK, key ID 025e513b Header SHA1 digest: OK (b07a40eedbd1cf5e4703c2164a33af213b6473a3) MD5 digest: BAD Expected(8bcaf8d8b087898cf835d9e6bba73766) != (2023f31e90546d87a3e31714a77f3af3) V3 DSA signature: BAD, key ID 025e513b John. -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin

3 3

Mailing lists
by John Newbigin 09 Jun '05

09 Jun '05

Is anyone interested in composing a centos mailing list FAQ/AUP or at least netiquette for the centos list. Some suggestions which could be added: a) Don't top post b) Don't ask a new question in an existing thread etc. c) when asked by a moderator to take a discussion off list, do it. d) If someone on the list does a) or b) and you feel the need to complain then reply to them directly and not via the list. I think a noble aim is 'to maintain a mailing list archive which can be searched for useful questions and answers.' Sure there is room for discussion, but I think it should be related to using centos. John. -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin

2 1

Re: a centos SECURITY] Security Errata Pages (fwd)
by Lance Davis 09 Jun '05

09 Jun '05

On Thu, 2 Jun 2005, R P Herrold wrote: > > This guy may be a mirror candiate, and also seems to be > willing to spend some money as a donation equivalent to > license fees. > > How shall we solicit him? we need a db / web i/f for the devs to post errata this has been discussed previously. It will impose standards and at the same time update web page and email . Just need a volunteer to code it :) Regards Lance > > - R > > > ---------- Forwarded message ---------- > Date: Thu, 2 Jun 2005 01:47:08 +0200 > From: "Ronald Dolfsma, MP2" <ronald(a)mp2.nl> > To: security(a)centos.org > Subject: a centos SECURITY] Security Errata Pages > > LS, > > I noticed that the Security Errata pages haven't been updates since 2005/2/3 > although they were read very well i think. Is there a chance that they will > be posted again on a regular basis, for example when errata are available? > That looks more professional i think. Also, the errata part of the main page > is not utilised yet. I am convinced that in today's, security driven > community of semi-professional or professional linux admins, such things are > necessary. Even if the updates are available, without the proper marketing > nobody will know that you put so much effort in reacting promptly to > available updates that are repackaged and released for CentOS. > > Great product by the way; wil definitely donate if we keep using CentOS > instead of RHEL. Someone's gotta pay the bills :-) > > > Regards, > > Ronald Dolfsma > --- > MP2 Webhosting > http://www.mp2.nl > > -- uklinux.net - The ISP of choice for the discerning Linux user.

3 2

bugs.centos.org maint work schedule
by Karanbir Singh 06 Jun '05

06 Jun '05

Hi Guys, I am going to be doing some updates on bugs.centos.org - which should last about 2 hours at the most, starting from GMT 21:00 today, Jun 6th 2005. If things look odd and/or broken after this time - please let me know here, or open a bug ( if you can! ). - KB -- Karanbir Singh : http://www.karan.org/ GnuPG Public Key : http://www.karan.org/publickey.asc

1 0

Trivial mod to httpd-suexec-2.0.52-9.ent.centos4.1
by Ed Clarke 03 Jun '05

03 Jun '05

The httpd-suexec package is part of the httpd source RPM. As part of the security model of suexec, a directory is hard coded into /usr/sbin/suexec (/var/www in Centos 4) that must be the root of all cgi-bin directories on the system. As an alternate, the UserDir (/home/*/public_html) may be enabled for CGI execution - but this is not done by default. As a web-hosting company, we prefer to move the default cgi-bin directory to /home/cgi-bin (and subdirectories) rather than /var/www. This permits us to keep all customer files on one filesystem (/home) and still use Webmin/Usermin/Virtualmin. This also makes it easier to enforce quota restrictions. This is the way we add virtual systems (using cilia as an example): mkdir /home/cgi-bin/cilia chmod 755 /home/cgi-bin/cilia chown cilia.cilia /home/cgi-bin/cilia ln -s /home/cilia/cgi-bin /home/cgi-bin/cilia This follows the security model described in http://httpd.apache.org/docs-2.0/suexec.html although I'm not sure why this restriction is necessary. You get some obscure error messages about "premature end of script headers" if you don't do this correctly. The real error is written to /var/log/httpd/suexec.log but takes a while to find. The change to make this is simple - two lines in the httpd.spec file ( could be one ): %define cgidir /home/cgi-bin <--- added line --with-suexec-docroot=%{cgidir} \ <--- changed line Is this worth doing in CentosPlus? It looks like you have to recompile all of httpd (Apache 2.x) even though you're only changing the one file in the sub package.

3 2

Volunteer
by Rodrigo Barbosa 02 Jun '05

02 Jun '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I would like to volunteer for package maintenance tasks regarding CentOS 4. I used to work at Conectiva S/A development labs, and was the official manager of several packages, including glibc and exim, among others, for Conectiva Linux. So, if there is anything involving rpm packages I can help, just let me know. []s - -- Rodrigo Barbosa <rodrigob(a)suespammers.org> "Quid quid Latine dictum sit, altum viditur" "Be excellent to each other ..." - Bill & Ted (Wyld Stallyns) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFCn0vLpdyWzQ5b5ckRAuZWAKCYPB29+5XWJPhghFr5t70UdUGlsgCfahpR h7ayQ2g6gZmm3CBGoTym4N8= =WYY2 -----END PGP SIGNATURE-----

1 0

Centos 3 mirror
by Greg Swallow - SkyNet 01 Jun '05

01 Jun '05

Will http://mirror.centos.org/centos/3/ and http://mirror.centos.org/centos-3/3/ be linked to the 3.5 directory soon? They are still linked to 3.4. Greg

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel June 2005