July 2004 - Discuss - lists.centos.org

sox, ipsec-tools, samba
by seth vidal 30 Jul '04

30 Jul '04

Hi all, Lance got married and is a little distracted, at the moment. :) so I built sox, samba and ipsec-tools for centos. They're available here: http://linux.duke.edu/centos/samba/ - RHSA-2004:259-23 http://linux.duke.edu/centos/sox/ - RHSA-2004:409-05 http://linux.duke.edu/centos/ipsec-tools/ - RHSA-2004:308-06 These are all for Centos-3 They're signed with my gpg key. As soon as I can get my key in place I'll see if I can upload them for the primary mirror. thanks, -sv

1 1

CentOS-2 errata
by John Newbigin 26 Jul '04

26 Jul '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror: RHSA-2004:404-01 Updated samba packages fix vulnerability Files available: samba-2.2.10-1.21as.1.i386.rpm: samba-client-2.2.10-1.21as.1.i386.rpm: samba-common-2.2.10-1.21as.1.i386.rpm: samba-swat-2.2.10-1.21as.1.i386.rpm: More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

pam_mkhomedir.so do not mk_home_dir
by Petr "Qaxi" Klima 23 Jul '04

23 Jul '04

hi I am triing to make samba service authenticate trought Win2k domain. It works quite well, but I want make "homes" for users (the server will have an IMAP server and I need to make home for user on the first logon. It does not work ... and what is worst, it does not make ANY notice in any log Yes I know "debug" should do it, but does not. I can DO: $ smbclient //tux/tmp -U klimatest Password: Domain=[MADETA] OS=[Unix] Server=[Samba 3.0.2-6.3E] smb: \> q but $ smbclient //tux/klimatest -U klimatest Password: Domain=[MADETA] OS=[Unix] Server=[Samba 3.0.2-6.3E] tree connect failed: NT_STATUS_ACCESS_DENIED I tought it can't make the HOME bacause of permission so tux # mkdir /home/MADETA tux # chmod 777 /home/MADETA tux # chmod 777 /home (I know, I know, I imediatelly changed it back ...) And still nothing in log .... I am confused DID ANYONE SEE pam_mkhomedir.so DID HIS JOB? Thanks Petr Klima Samba 3.0.2-6.3E CENTOS-3 My /etc/pam.d/samba #%PAM-1.0 auth required pam_nologin.so auth required pam_stack.so service=system-auth auth required /lib/security/pam_winbind.so account required /lib/security/pam_winbind.so account required pam_stack.so service=system-auth session required /lib/security/pam_mkhomedir.so skel=/etc/samba/skel umask=0022 session required pam_stack.so service=system-auth password required pam_stack.so service=system-auth /etc/pam.d/imap %PAM-1.0 auth required /lib/security/pam_winbind.so auth required /lib/security/pam_stack.so service=system-auth account required /lib/security/pam_winbind.so account required /lib/security/pam_stack.so service=system-auth session required /lib/security/pam_mkhomedir.so umask=0022 /etc/pam.d/sys-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required /lib/security/$ISA/pam_env.so auth sufficient /lib/security/$ISA/pam_winbind.so auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok auth required /lib/security/$ISA/pam_deny.so account required /lib/security/$ISA/pam_unix.so password required /lib/security/$ISA/pam_cracklib.so retry=3 type= password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok password required /lib/security/$ISA/pam_deny.so session required /lib/security/$ISA/pam_limits.so session required /lib/security/$ISA/pam_unix.so /etc/samba/smb.conf #http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html#id2511305 [global] workgroup = MADETA netbios name = KLIMA security = DOMAIN printcap name = cups disable spoolss = Yes show add printer wizard = No idmap uid = 15000-20000 idmap gid = 15000-20000 winbind separator = + winbind use default domain = Yes use sendfile = Yes printing = cups # http://www.flatmtn.com/computer/Linux-Samba.html # template homedir = /home/%U # template shell = /bin/bash # name resolve order = wins lmhosts host bcast [homes] comment = Home Directories read only = No browseable = No valid users = %S # http://www.flatmtn.com/computer/Linux-Samba.html # valid users = %D+%S [tmp] comment = Temporary file space path = /tmp read only = no public = yes #######################################################

1 0

xmms-mp3
by Henk van Lingen 22 Jul '04

22 Jul '04

Hi, I have a (stupid?) problem getting xmms-mp3 added to a CentOS 3.1 desktop: 'xmms' is the distro one, and 'xmms-mp3' comes from Dag Wieers (I used to use freshrpms on redhat 9, but for some reason freshrpms doesn't do rhel3). Any ideas? drempt:/root-# yum install xmms-mp3 Gathering header information file(s) from server(s) Server: CentOS 3.1 - Addons Server: CentOS 3.1 - Base Server: Dag RPM Repository for Red Hat Enterprise Linux Server: CentOS 3.1 - Extras Server: CentOS 3.1 - Updates Finding updated packages Downloading needed headers kdeaddons-0-3.1.3-1.i386. 100% |=========================| 13 kB 00:00 xmms-1-1.2.7-22.1.p.i386. 100% |=========================| 8.6 kB 00:00 Resolving dependencies ....Unable to satisfy dependencies Package xmms-mp3 needs xmms = 1.2.7, this is not available. drempt:/root-# yum info xmms Gathering header information file(s) from server(s) Server: CentOS 3.1 - Addons Server: CentOS 3.1 - Base Server: Dag RPM Repository for Red Hat Enterprise Linux Server: CentOS 3.1 - Extras Server: CentOS 3.1 - Updates Finding updated packages Downloading needed headers Looking in Available Packages: Name : xmms Arch : i386 Version: 1.2.7 Release: 22.1.p Size : 4.15 MB Group : Applications/Multimedia Repo : CentOS 3.1 - Base Summary: A multimedia player for X which resembles Winamp. Description: Xmms is a multimedia player for the X Window System with an interface similar to Winamp's. Xmms supports playlists and streaming content and has a configurable interface. Looking in Installed Packages: Regards, -- Henk van Lingen, Systems & Network Administrator (o- -+ Dept. of Computer Science, Utrecht University. /\ | phone: +31-30-2535278 v_/_ http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/

3 3

re updated php fixes security vulnerability - sorry pasted wrong details
by lance＠uklinux.net 20 Jul '04

20 Jul '04

These are the correct ones. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is an update to httpd for CentOS 3.1 https://rhn.redhat.com/errata/RHSA-2004-342.html refers. Updated files are :- updates/i386/RPMS/php-4.3.2-11.1.ent.i386.rpm updates/i386/RPMS/php-devel-4.3.2-11.1.ent.i386.rpm updates/i386/RPMS/php-imap-4.3.2-11.1.ent.i386.rpm updates/i386/RPMS/php-ldap-4.3.2-11.1.ent.i386.rpm updates/i386/RPMS/php-mysql-4.3.2-11.1.ent.i386.rpm updates/i386/RPMS/php-odbc-4.3.2-11.1.ent.i386.rpm updates/i386/RPMS/php-pgsql-4.3.2-11.1.ent.i386.rpm These are available at http://mirror.centos.org/3.1/ and should be on all mirrors within a few hours. To update to the latest version 'yum update php' should be sufficient. Lance -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFA/HZ7cEnkTQJeUTsRAgrnAJ4uYlhthlYzXNAlfjm7QWK5e7uoJwCeJhr8 ZMKoZ8+RKPhZV6woM4LGa20= =tD2b -----END PGP SIGNATURE----- -- uklinux.net - The ISP of choice for the discerning Linux user.

2 1

CentOS-2 errata
by John Newbigin 19 Jul '04

19 Jul '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror: RHSA-2004:395-01 Updated php packages fix security issues Files available: php-4.1.2-2.1.8.i386.rpm: php-devel-4.1.2-2.1.8.i386.rpm: php-imap-4.1.2-2.1.8.i386.rpm: php-ldap-4.1.2-2.1.8.i386.rpm: php-manual-4.1.2-2.1.8.i386.rpm: php-mysql-4.1.2-2.1.8.i386.rpm: php-odbc-4.1.2-2.1.8.i386.rpm: php-pgsql-4.1.2-2.1.8.i386.rpm: More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html php modules from extras will be available soon. The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

Updated php package fixes security vulnerabilities
by lance＠uklinux.net 19 Jul '04

19 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is an update to php for CentOS 3.1 https://rhn.redhat.com/errata/RHSA-2004-392.html refers. Updated files are :- updates/i386/RPMS/httpd-2.0.46-32.ent.3.centos.1.i386.rpm updates/i386/RPMS/httpd-devel-2.0.46-32.ent.3.centos.1.i386.rpm updates/i386/RPMS/mod_ssl-2.0.46-32.ent.3.centos.1.i386.rpm updates/i386/SRPMS/httpd-2.0.46-32.ent.3.centos.1.src.rpm These are available at http://mirror.centos.org/3.1/ and should be on all mirrors within a few hours. To update to the latest version 'yum update httpd' should be sufficient. Lance -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFA/HXucEnkTQJeUTsRAijXAJ0aEe3Q/TuhdQUKQLSN3Tj3d3+DAACfR5sW TTyjlY1lRZ4qvmNge+hVfuU= =3VQB -----END PGP SIGNATURE----- -- uklinux.net - The ISP of choice for the discerning Linux user.

1 0

How to get 3Ware 9500S controller card working in CentOS 3.1?
by Sean Staats 18 Jul '04

18 Jul '04

My goal is to be able to install to the drive array on the 3Ware controller card. 3Ware does provide a RH WS 3 driver that I've tried to use; however, the RH Enterprise 3 WS driver doesn't work since that kernel is older than the CentOS-3.1 install kernel. I'm trying to create a centOS-3.1 installation driver disk for the 3ware 9500S card; however, I'm not having much luck. I've compiled the drivers on a stock centOS 3.1 install and created a modules.cgz file (using find . -depth | cpio -o -H newc | gzip -c > ../modules.cgz) with the newly-compiled driver modules. Here are the contents of the modules.cgz file I created: 2.4.21-9.0.1.EL.c0BOOT/i386/3w-9xxx.o 2.4.21-9.0.1.EL.c0hugemem/i386/3w-9xxx.o 2.4.21-9.0.1.EL.c0/i386/3w-9xxx.o 2.4.21-9.0.1.EL.c0smp/i386/3w-9xxx.o I've also tried the above without the 'i386' subdirectory. The stock install kernel version is 2.4.21-9.0.1.EL.c0. That IS what I should use for the modules directory name right? I then created a driver disk with the following files: modinfo modules.cgz modules.dep pcitable rhdd-6.1 src When I boot the install CD, I type: "linux dd". I then tell the installer that the drivers are on fd0. The installer reads the disk, but doesn't find the driver and gives me this message: "No devices of the appropriate type were found on this driver disk. Would you like to manually select the driver, continue anyway, or load another driver disk?" Does anybody know what I'm doing wrong? Am I going about this the hard way? Thanks in advance for any suggestions! -Sean

8 8

Re: [Centos] Diff files to be made publicly available.
by kevin 16 Jul '04

16 Jul '04

>Content-Type=message/rfc822 >Content-Description=embedded message >Date: Wed, 30 Jun 2004 14:04:52 +0100 (BST) From: Lance Davis <lance(a)uklinux.net> >To: kevin <kwood(a)free.fr> >Cc: centos(a)caosity.org >Subject: Re: [Centos] Diff files to be made publicly available. >On Wed, 30 Jun 2004, kevin wrote: >> If the diff files were made available with each update, >> the community would understand more, >> less questions and confusion would occur. >> More scrutiny would result in a better product for us all. >This really is a strange post. When one can not see from another persons perspective, things often looks strange. >The patch files are all contained separately within the source rpms. >The exceptions are redhat-artwork and anaconda-images where the graphic >files are contained with the source rpm, and anaconda itself where there >are wholesale changes. >I dont know what 'questions and confusion' you are referring to. >> RHEL takes open source software and closes it. >> CentOS takes this closed software and reopens it. >> By making the changes open to public inspection, >> CentOS would become 100% open source. >But they already are and it already is. I interpret this comment to mean CentOS 3.1 is 100% open source. Red Hat are very clear in RHEL 3ES about what they claim to be "Copyright" with "All rights reserved". However, can someone please explain the following line from redhat-logos.spec in CentOS 3.1 SRPMS: License: GPL - CentOS logos Copyright 2003 and Trademark Definitive Software Ltd I presume the following equation is true: Lance === Definitive Software Ltd I hope very much to be wrong. I hope CentOS is 100% GPL, open source software, free for all men (and women) to copy and distribute at a small cost (even if their enemies can do the same four times cheaper). So please feel free to regard this posting as strange, tell me I've found a typo, or tell the world that parts of CentOS 3.1 have Copyright restrictions and is NOT therefore 100% GPL, open source software. Not just yet anyway...... Kevin Wood In a world where GPL sometimes stands for (Greedy People Lying) >Lance >-- >uselinux.co.uk - The ISP of choice for the discerning Linux user.

4 3

Re: [Centos] Diff files to be made publicly available.
by kevin 16 Jul '04

16 Jul '04

Other than the following copyrighted parts to CentOS 3.1, Does Definite Software Ltd have any copyright restrictions on any code written by persons on the CentOS 3.1 project? #----------------------------------------------------------------------- # anaconda-images.spec.mydiff #----------------------------------------------------------------------- #> Summary: Images used in the CentOS installer #> Release: 2.centos.1 #> License: GPL - CentOS logos Copyright 2003 and Trademark Definite Software #Ltd #> The anaconda-images package contains images used in anaconda, the CentOS #installer. #----------------------------------------------------------------------- # redhat-artwork.spec.mydiff #----------------------------------------------------------------------- #> Summary: Artwork for CentOS default look-and-feel #> Release: 1E.centos.3 #> URL: http://www.centos.org #> License: GPL - CentOS logos Copyright 2003 and Trademark Definite Software #Ltd #> redhat-artwork contains the themes and icons that make up the CentOS #default #> - changed to CentOS artwork #----------------------------------------------------------------------- # redhat-logos.spec.mydiff #----------------------------------------------------------------------- #> Summary: CentOS-related icons and pictures. #> Release: 1.centos.3 #> License: GPL - CentOS logos Copyright 2003 and Trademark Definite Software #Ltd #> The redhat-logos package contains logos for CentOS. #----------------------------------------------------------------------- Kevin Wood Clarifying the question until the question becomes clear.

1 0

Re: [Centos] Diff files to be made publicly available.
by kevin 15 Jul '04

15 Jul '04

On Thu, 15 Jul 2004, Bart Schaefer wrote: >Content-Type=message/rfc822 >Content-Description=embedded message >Date: Thu, 15 Jul 2004 02:05:27 -0700 (PDT) From: Bart Schaefer <schaefer+centos(a)zanshin.com> >To: kevin <kwood(a)free.fr> >Cc: centos(a)caosity.org >Subject: Re: [Centos] Diff files to be made publicly available. >On Thu, 15 Jul 2004, kevin wrote: >> However, can someone please explain the following line >> from redhat-logos.spec in CentOS 3.1 SRPMS: >> >> License: GPL - CentOS logos Copyright 2003 and Trademark Definitive >> Software Ltd >> >> I hope CentOS is 100% GPL, open source software, >> free for all men (and women) to copy and distribute at a small cost >Copyright is not license. Okay. >Materials can be *licensed* under the GPL, and therefore freely copied, >even when copyrighted. In fact, the entire basis of the GPL, as I >understand it (IANAL etc. etc.) is copyright law -- someone has to hold a >copyright on the material in order to have legal grounds for applying the >GPL. If no one holds a copyright, then the material is in the public >domain and the GPL is neither necessary nor applicable. >It is true that in many cases the copyright of GPL'd material is assigned >to the FSF or some similar entity, but that is not a necessary condition >of licensing it under the GPL. >*IF* there were a statement somewhere that explicitly *excludes* these >images or other selected parts of CentOS from the terms of the GPL, then >you might have grounds for complaint, but the statement that they are >copyrighted does not AFAIK constitute such an exclusion. I have no reason to complain about the work done on CentOS 3.1. Its a necessary direction due to Red Hats chosen path. >The effect of the copyright is that you cannot separate the CentOS logos >from the rest of the sources and use them, independently, for some other >purpose, without permission from Definitive Software Ltd. The effect of >the GPL is that you can copy and distribute CentOS as a whole, even though >it includes the copyrighted images. Do you see the distinction? Okay imagine I have removed the images from CentOS 3.1 and replaced them with other images I created, or with no copyright restriction. Are there any other copyrighted parts to CentOS 3.1? Is some of the code copyrighted also? >(Again, I am not a lawyer, and the GPL has all sorts of other effects that >might be construed to make it possible to re-use the logos.) Thanks for the clear response. Kevin Wood. Looking for truth and clarity nothing more..... but if you throw in a bonus, thats fine with me.

2 1

CentOS 3.1 kernel crashes
by Shawn M. Jones 12 Jul '04

12 Jul '04

Greetings everyone, I've got a problem with my fileserver running CentOS 3.1. The kernel seems to crash about once a day (inevitably when I'm not present), forcing me to reboot. This behavior started after I applied the new kernel patch (2.4.21-15.0.3.EL.c0). I've left it on 2.4.21-15.0.2 for a little bit to see if it will crash tonight/tomorrow. As this may be a hardware problem, I'm reluctant to put it into bugzilla until I can pin it on something. The server has an A-Bit KR7A motherboard with an Athlon XP 1700+, 1.5 GB of RAM, 4 120 GB ATA-100 hard drives mirrored in two sets (hence I only have 240 GB available), a Cirrus Logic GD 5430 video card, and an Intel EtherExpress Pro 100. There is nothing useful in /var/log/messages and the only reason I know when it crashes is due to my fetchmail log. Has anyone else seen anything like this? Did I patch too soon? Any suggestions on where I might look for info on why it's crashing? The screen's blank and the keyboard lights are flashing. Thanks in advance, Shawn M. Jones

5 5

yum upgrade RHEL 2.1 to CentOS-3
by Josh Hildebrand 09 Jul '04

09 Jul '04

Has any one tried to upgrade from RHAS/RHEL 2.1 to CentOS-3 using yum? Is a reboot necessary for anything other than the kernel? How smoothly did it go? And how did you do it? -- Josh Hildebrand Senior Network Engineer Newgistics, Inc... The Leader in Returns Management Solutions 512-225-6044 Newgistics, Inc. Company Confidential

2 1

Re: [Centos] CentOS 3.1 kernel crashes
by C.M. Connelly 09 Jul '04

09 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 "SMJ" == Shawn M Jones <smj(a)littleprojects.org> SMJ> Greetings everyone, I've got a problem with my fileserver SMJ> running CentOS 3.1. The kernel seems to crash about once SMJ> a day (inevitably when I'm not present), forcing me to SMJ> reboot. This behavior started after I applied the new SMJ> kernel patch (2.4.21-15.0.3.EL.c0). SMJ> There is nothing useful in /var/log/messages and the only SMJ> reason I know when it crashes is due to my fetchmail log. SMJ> Has anyone else seen anything like this? Did I patch too SMJ> soon? My workstation (running the new kernel) did something similar yesterday -- I left my office, came back a while later, and the screen was blank. I wasn't able to switch to a VC or log in remotely (the system was pingable, and the first chunk of an SSH connection would succeed, but not complete). I was forced to power cycle. What seemed to be the same problem happened to our main file server, still running RHL9 with kernel 2.4.20-31.9smp, the day before. With no X, I was able to type a username at the login: prompt, but never got a password prompt. The machine behaved similarly with ssh connections. There was nothing obvious in the logs. I could figure out roughly when the crash happened because nothing appeared in the logs after that time. Claire *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Claire Connelly cmc(a)math.hmc.edu Systems Administrator (909) 621-8754 Department of Mathematics Harvey Mudd College *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/> iD8DBQFA7tupB0pE8d7vd8wRAgJGAJ9EoBicmziKwHGhCQD3HrA10wuA2ACdGc/c ePxg1Ln8c/sRIIvJ1tznm2s= =gupq -----END PGP SIGNATURE-----

1 0

http-devel problem
by Petr "Qaxi" Klima 09 Jul '04

09 Jul '04

I found a minor problem in httpd-devel-2.0.46-32.ent.3.centos.1 package in files used for developement for Apache webserver in directory /usr/lib/httpd/build thee a re weird INCLIDES paths: # pwd /usr/lib/httpd/build # grep cent * apr_rules.mk:apr_builddir=/home/centos/upd2/BUILD/httpd-2.0.46/prefork/srclib/apr apr_rules.mk:apr_builders=/home/centos/upd2/BUILD/httpd-2.0.46/srclib/apr/build config_vars.mk:APR_INCLUDEDIR = /home/centos/upd2/BUILD/httpd-2.0.46/prefork/srclib/apr/include /home/centos/upd2/BUILD/httpd-2.0.46/srclib/apr/include config_vars.mk:APU_INCLUDEDIR = /home/centos/upd2/BUILD/httpd-2.0.46/prefork/srclib/apr-util/include /home/centos/upd2/BUILD/httpd-2.0.46/srclib/apr-util/include those "dirs" should point to "real" include directories (at least in config_vars.mk)... when I overwrite APR_INCLUDEDIR and APU_INCLUDEDIR in config_vars.mk to /usr/include/http compilation works OK by Petr Klima

1 0

Re: more cron job madness
by Rick Graves 08 Jul '04

08 Jul '04

Hey, UNCLE! I added a warning to the YUM HowTo. I will also look into this further, and may be back with one or more proposed solutions. Rick

1 0

Updated httpd packages fix security issues
by Lance Davis 06 Jul '04

06 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is an update to httpd for CentOS 3.1 https://rhn.redhat.com/errata/RHSA-2004-342.html refers. Updated files are :- updates/i386/RPMS/httpd-2.0.46-32.ent.3.centos.1.i386.rpm updates/i386/RPMS/httpd-devel-2.0.46-32.ent.3.centos.1.i386.rpm updates/i386/RPMS/mod_ssl-2.0.46-32.ent.3.centos.1.i386.rpm updates/i386/SRPMS/httpd-2.0.46-32.ent.3.centos.1.src.rpm These are available at http://mirror.centos.org/3.1/ and should be on all mirrors within a few hours. To update to the latest version 'yum update httpd' should be sufficient. Lance -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFA61Q7cEnkTQJeUTsRAnDuAJkByi/gebJtuwqGPXIinqfE900GFACaA0qu tTGoTCciqpQUF3o8y1yOD+Y= =zDtW -----END PGP SIGNATURE----- -- uklinux.net - The ISP of choice for the discerning Linux user.

1 0

Re: cron job madness
by Rick Graves 06 Jul '04

06 Jul '04

Hey, > check-update sounds better than putting yum update in a cron job. Only a mad man would do that! Are the cAos and CentOS releases THAT BAD? > Much better to run a daily cron which rsyncs your local patch repository. So must one have your own local repository to avoid being labeled as a madman? In which one of the RedHad reference books can I find this? Just curious. Rick

2 1

Re: YUM updates
by Rick Graves 05 Jul '04

05 Jul '04

Hey, > The easy way to make sure you are up to date with > all the latest patches is to run: > # yum update There is an even easier way -- tell cron to apply YUM updates every day. There is a HowTo on the cAos site here: http://www.caosity.org/index.php?option=displaypage&Itemid=102&op=page&SubM… Rick

4 3

re:- (Another) Updated kernel package fixes security vulnerability.
by Lance Davis 05 Jul '04

05 Jul '04

sorry that should have read :- https://rhn.redhat.com/errata/RHSA-2004-360.html refers. Lance

1 0

(Another) Updated kernel package fixes security vulnerability.
by Lance Davis 05 Jul '04

05 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is an updated kernel for CentOS-3.1 https://rhn.redhat.com/errata/RHSA-2004-255.html refers. Updated files are :- all in updates/i386/RPMS/ kernel-2.4.21-15.0.3.EL.c0.athlon.rpm kernel-2.4.21-15.0.3.EL.c0.i686.rpm kernel-BOOT-2.4.21-15.0.3.EL.c0.i386.rpm kernel-doc-2.4.21-15.0.3.EL.c0.i386.rpm kernel-hugemem-2.4.21-15.0.3.EL.c0.i686.rpm kernel-hugemem-unsupported-2.4.21-15.0.3.EL.c0.i686.rpm kernel-smp-2.4.21-15.0.3.EL.c0.athlon.rpm kernel-smp-2.4.21-15.0.3.EL.c0.i686.rpm kernel-smp-unsupported-2.4.21-15.0.3.EL.c0.athlon.rpm kernel-smp-unsupported-2.4.21-15.0.3.EL.c0.i686.rpm kernel-source-2.4.21-15.0.3.EL.c0.i386.rpm kernel-unsupported-2.4.21-15.0.3.EL.c0.athlon.rpm kernel-unsupported-2.4.21-15.0.3.EL.c0.i686.rpm These are available at http://mirror.centos.org/3.1/ and should be on all mirrors within a few hours. To update to the latest version 'yum update kernel' should be sufficient. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFA6TdxcEnkTQJeUTsRAk8iAKCSGP9cfqZKYxmAadJzmCm2xDy+8QCfX2SI jXdcHH53ZQrJk9neXVbVkw8= =NItC -----END PGP SIGNATURE-----

1 0

CentOS-2 errata
by John Newbigin 04 Jul '04

04 Jul '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror: RHSA-2004:354-01 Updated kernel packages fix security vulnerability Files available: kernel-BOOT-2.4.9-e.43.i386.rpm: kernel-doc-2.4.9-e.43.i386.rpm: kernel-headers-2.4.9-e.43.i386.rpm: kernel-source-2.4.9-e.43.i386.rpm: kernel-2.4.9-e.43.i686.rpm: kernel-debug-2.4.9-e.43.i686.rpm: kernel-enterprise-2.4.9-e.43.i686.rpm: kernel-smp-2.4.9-e.43.i686.rpm: kernel-summit-2.4.9-e.43.i686.rpm: kernel-smp-2.4.9-e.43.athlon.rpm: kernel-2.4.9-e.43.athlon.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

[RHSA-2004:360-01] Updated kernel packages fix security vulnerabilities (fwd)
by Ryan Sweet 02 Jul '04

02 Jul '04

OK, this is the first important vuln I've seen since joining the centos list, and represents a good opportunity to ask "What happens now?" Do you accept contributed rebuilds? What is the rebuild/test/release procedure? Is there anyone who is tracking time between RH releases and centos yum repo updates? What can I do to help? thanks, -ryan -- Ryan Sweet <ryan.sweet(a)aoes.com> Advanced Operations and Engineering Services AOES Group BV http://www.aoes.com Phone +31(0)71 5795521 Fax +31(0)71572 1277 ---------- Forwarded message ---------- Date: Fri, 2 Jul 2004 04:23 -0400 From: bugzilla(a)redhat.com To: enterprise-watch-list(a)redhat.com Subject: [RHSA-2004:360-01] Updated kernel packages fix security vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated kernel packages fix security vulnerabilities Advisory ID: RHSA-2004:360-01 Issue date: 2004-07-02 Updated on: 2004-07-02 Product: Red Hat Enterprise Linux Keywords: taroon kernel security errata Cross references: Obsoletes: RHSA-2004:255 CVE Names: CAN-2004-0497 - --------------------------------------------------------------------- 1. Topic: Updated kernel packages that fix a security vulnerability affecting the kernel nfs server for Red Hat Enterprise Linux 3 are now available. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - athlon, i386, i686, ia32e, ia64, ppc64, ppc64iseries, ppc64pseries, s390, s390x, x86_64 Red Hat Enterprise Linux ES version 3 - athlon, i386, i686, ia32e, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - athlon, i386, i686, ia32e, ia64, x86_64 3. Problem description: The Linux kernel handles the basic functions of the operating system. During an audit of the Linux kernel, SUSE discovered a flaw that allowed a user to make unauthorized changes to the group ID of files in certain circumstances. In the 2.4 kernel, as shipped with Red Hat Enterprise Linux, the only way this could happen is through the kernel nfs server. A user on a system that mounted a remote file system from a vulnerable machine may be able to make unauthorized changes to the group ID of exported files. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0497 to this issue. Only Red Hat Enterprise Linux systems that are configured to share file systems via NFS are affected by this issue. All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. If up2date fails to connect to Red Hat Network due to SSL Certificate Errors, you need to install a version of the up2date client with an updated certificate. The latest version of up2date is available from the Red Hat FTP site and may also be downloaded directly from the RHN website: https://rhn.redhat.com/help/latest-up2date.pxt 5. RPMs required: Red Hat Enterprise Linux AS version 3: SRPMS: ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/kernel-2.4.21-15.0.3.EL… athlon: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.athlon.rpm i386: Available from Red Hat Network: kernel-BOOT-2.4.21-15.0.3.EL.i386.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.i386.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.i386.rpm i686: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-hugemem-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.i686.rpm ia32e: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ia32e.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ia32e.rpm ia64: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ia64.rpm ppc64: Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.ppc64.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.ppc64.rpm ppc64iseries: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ppc64iseries.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ppc64iseries.rpm ppc64pseries: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ppc64pseries.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ppc64pseries.rpm s390: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.s390.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.s390.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.s390.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.s390.rpm s390x: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.s390x.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.s390x.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.s390x.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.s390x.rpm x86_64: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.x86_64.rpm Red Hat Enterprise Linux ES version 3: SRPMS: ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/kernel-2.4.21-15.0.3.EL… athlon: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.athlon.rpm i386: Available from Red Hat Network: kernel-BOOT-2.4.21-15.0.3.EL.i386.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.i386.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.i386.rpm i686: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-hugemem-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.i686.rpm ia32e: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ia32e.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ia32e.rpm ia64: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ia64.rpm x86_64: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.x86_64.rpm Red Hat Enterprise Linux WS version 3: SRPMS: ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/kernel-2.4.21-15.0.3.EL… athlon: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.athlon.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.athlon.rpm i386: Available from Red Hat Network: kernel-BOOT-2.4.21-15.0.3.EL.i386.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.i386.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.i386.rpm i686: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-hugemem-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.i686.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.i686.rpm ia32e: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ia32e.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ia32e.rpm ia64: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.ia64.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.ia64.rpm x86_64: Available from Red Hat Network: kernel-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-doc-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-smp-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-smp-unsupported-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-source-2.4.21-15.0.3.EL.x86_64.rpm Available from Red Hat Network: kernel-unsupported-2.4.21-15.0.3.EL.x86_64.rpm 6. Verification: MD5 sum Package Name - -------------------------------------------------------------------------- 475ff576b3313ed4084c7e1e668395d0 kernel-2.4.21-15.0.3.EL.athlon.rpm d70cf96391302020a322363fa2a1a0f6 kernel-2.4.21-15.0.3.EL.i686.rpm 00a8bdd6335934d6173135fc19f223d4 kernel-2.4.21-15.0.3.EL.ia32e.rpm 039107e887d34cacc117a21d8603a9a7 kernel-2.4.21-15.0.3.EL.ia64.rpm e645e8f72418f3686ccdc99c3418b9c9 kernel-2.4.21-15.0.3.EL.ppc64iseries.rpm 012cd6cb22781e63bb3ce8b1b1f44e8e kernel-2.4.21-15.0.3.EL.ppc64pseries.rpm 97808a16163a1d5e35612ee5c3472a3f kernel-2.4.21-15.0.3.EL.s390.rpm 0d807eca7ba629ce12ceb152c72af472 kernel-2.4.21-15.0.3.EL.s390x.rpm 3aaebf2a78377c9fc76a1e6376dd9ffb kernel-2.4.21-15.0.3.EL.src.rpm e0a8c6b852d5693a21dd3c1de13bcba0 kernel-2.4.21-15.0.3.EL.x86_64.rpm dfc5ef35851cfc5e788cf837ac9b7bb3 kernel-BOOT-2.4.21-15.0.3.EL.i386.rpm 0cd3bcd3bb8781350e2d895ef89c213e kernel-doc-2.4.21-15.0.3.EL.i386.rpm 99c4217894bb83130336282c39b1e8b6 kernel-doc-2.4.21-15.0.3.EL.ia64.rpm adad45b051a6798fa673f2d9a3f372e2 kernel-doc-2.4.21-15.0.3.EL.ppc64.rpm 591d48f31b8bb34aae3907d62f9823a0 kernel-doc-2.4.21-15.0.3.EL.s390.rpm b06128421f53fb15fe0fc6cce6eebf90 kernel-doc-2.4.21-15.0.3.EL.s390x.rpm ae4348ee1d4e108c535a6aef26f1c44d kernel-doc-2.4.21-15.0.3.EL.x86_64.rpm 934a743299a8692cacfeb4182a9845fe kernel-hugemem-2.4.21-15.0.3.EL.i686.rpm df0cd8dd6539fc2e70113aae71d0111b kernel-hugemem-unsupported-2.4.21-15.0.3.EL.i686.rpm 3c1cfb8f5e6f33159532e49cca8f8e04 kernel-smp-2.4.21-15.0.3.EL.athlon.rpm ccd4140c84ee4b03ef06f7b978018902 kernel-smp-2.4.21-15.0.3.EL.i686.rpm 82051afbea03dbc21c18ee8b8688d38b kernel-smp-2.4.21-15.0.3.EL.x86_64.rpm 81e73afe4183b246fe80a67a401835f2 kernel-smp-unsupported-2.4.21-15.0.3.EL.athlon.rpm ec544f696a97180a395049aa56743645 kernel-smp-unsupported-2.4.21-15.0.3.EL.i686.rpm a2e8ae8ff9a423d851e07fee6ef33abe kernel-smp-unsupported-2.4.21-15.0.3.EL.x86_64.rpm 54012be1c9ef18d56b5436d8968ea13d kernel-source-2.4.21-15.0.3.EL.i386.rpm 70a873ddcb6ec6c0395f987d04ea3b72 kernel-source-2.4.21-15.0.3.EL.ia64.rpm 06cb2b6084e4df9e0873c0f9387d88b1 kernel-source-2.4.21-15.0.3.EL.ppc64.rpm 5cb0e66a5e1e7494affd828e4e72f4e0 kernel-source-2.4.21-15.0.3.EL.s390.rpm 5a80ee66ff1a264273d919afad2d883f kernel-source-2.4.21-15.0.3.EL.s390x.rpm 373692205805a76d1ed9d8e28d11b455 kernel-source-2.4.21-15.0.3.EL.x86_64.rpm 532a4cff6acdbcd1d700a92d06519545 kernel-unsupported-2.4.21-15.0.3.EL.athlon.rpm 8c5162755364e6ad3c1de6bfe7d62fd3 kernel-unsupported-2.4.21-15.0.3.EL.i686.rpm 7c3463374ffffc1b29e4879386d90ec9 kernel-unsupported-2.4.21-15.0.3.EL.ia32e.rpm 656636cc71ba38ea1b8b890dd5d88dbd kernel-unsupported-2.4.21-15.0.3.EL.ia64.rpm 6064dc8ae3c1a29c082cf8df9d626de1 kernel-unsupported-2.4.21-15.0.3.EL.ppc64iseries.rpm cb26ee54924bcec4433add0451210a3c kernel-unsupported-2.4.21-15.0.3.EL.ppc64pseries.rpm 01e658949728a7dc83c0ca83b2f51b2d kernel-unsupported-2.4.21-15.0.3.EL.s390.rpm 26fe4b56072f96a8b29bce7022449f18 kernel-unsupported-2.4.21-15.0.3.EL.s390x.rpm 87b05b779260e02473d87affc40c0db2 kernel-unsupported-2.4.21-15.0.3.EL.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key is available from https://www.redhat.com/security/team/key.html You can verify each package with the following command: rpm --checksig -v <filename> If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: md5sum <filename> 7. References: http://www.redhat.com/docs/manuals/enterprise/RHEL-3-Manual/ref-guide/s1-nf… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0497 8. Contact: The Red Hat security contact is <secalert(a)redhat.com>. More contact details at https://www.redhat.com/security/team/contact.html Copyright 2004 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQFA5Rt7XlSAg2UNWIIRAseCAJ99U2pcwb3i4iVmqNhRbHu3/K1ouwCfdA// b8SIM7Us3O3s/B8Df1x8gKo= =wHLr -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list Enterprise-watch-list(a)redhat.com https://www.redhat.com/mailman/listinfo/enterprise-watch-list

1 0

NVIDIA display card update
by Rick Graves 01 Jul '04

01 Jul '04

Hey, There have been still more NVIDIA card experiments, with some new results. If you are still hving an issue with an NVIDIA card, you might want to take a look at the updated FAQ under Installation. Rick Graves

2 2

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2004