Discuss September 2006

discuss@lists.centos.org

275 participants
362 discussions

SELinux targeted + httpd + suexec
by Leonardo Vilela Pinheiro 08 Sep '06

08 Sep '06

Hi, I have read: http://lists.centos.org/pipermail/centos/2005-March/003429.html, http://fedora.redhat.com/docs/selinux-apache-fc3/sn-using-other-types.html RedHat Selinux Documentation (PDF) (some parts) and they helped me solve a some difficulties, including the necessity to mount /var/www with -o suid. Now I'm getting these 2 errors in /var/log/messages whenever I execute a cgi: %-------------------------- avc: denied { create } for pid=17995 comm="suexec" scontext=root:system_r:httpd_suexec_t tcontext=root:system_r:httpd_suexec_t tclass=netlink_route_socket avc: denied { read } for pid=17995 comm="suexec" name="cert.pem" dev=dm-0 ino=520402 scontext=root:system_r:httpd_suexec_t tcontext=system_u:object_r:usr_t tclass=lnk_file %-------------------------- This is independent of the script being perl or sh, and despite the errors the cgi executes correctly. 'sestatus' reports: httpd_builtin_scripting active httpd_disable_trans inactive httpd_enable_cgi active httpd_enable_homedirs inactive httpd_ssi_exec inactive httpd_tty_comm inactive httpd_unified inactive Either httpd_ssi_exec or httpd_unified have made no difference in those errors. When I deactivate mod_suexec and comment SuexecUserGroup in Apache configs, those errors stop appearing. So I think this problem has to do directly with selinux policy and mod_suexec. Could this be a bug on selinux-policy-targeted, that doesn't bring 100% support for the "native" mod_suexec? -- Vilela

1 0

Sudo Build Parameters
by Camron W. Fox 08 Sep '06

08 Sep '06

Alle, I know this is available somewhere and I've read it before but I can't seem to find it know that I need it (age is definitely catching up to me). I'm trying to find out the build parameters used with the current installation of sudo-1.6.7p5-30.1.3, specifically, whether "--with-ldap" was used. Sorry for the inconvenience. Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu America, INC. E-mail: cwfox(a)us.fujitsu.com

4 5

yum vs up2date
by John Summerfied 08 Sep '06

08 Sep '06

Which is better? Why? I know yum is the official update mechanism here and in Fedora Core, but that doesn't make yum better than up2date any more than Windows NT was better than OS/2. Let's try to keep the discussion objective:-) I'm asking, hoping for some insights into why RH might (apparently) be moving to yum in preference to up2date (yum is now used within Anaconda). Other than general discussion, I'd also like to know what I'd muss by using up2date on CentOS. I'll start with this: What has yum that provides this functionality: up2date -d -u -- Cheers John -- spambait 1aaaaaaa(a)coco.merseine.nu Z1aaaaaaa(a)coco.merseine.nu Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/ Please do not reply off-list

16 62

Info requested on XEN and CentOS4.3
by James B. Byrne 08 Sep '06

08 Sep '06

First, I am a digest subscriber and I request the favour of a direct reply in addition to any to the list. I have installed xen-3.0-x86_32-rhel4.1 on CentOS4.3 and everything seems fine ( thanks to Karanbir Singh's helpful notes) but I have a couple of items to put to the list for clarification. 1. I had to remove the OS version check to get past the install script's requirement for RHEL-4.1. I know that this is not a good thing and I would like to know what alternatives, if any, are preferred to handle this sort of issue. 2. I had to remove lksctp-tools and lksctp-tools-devel in order to get xen to build. What are the implications of this? 3. On the first boot after installing xen I received a warning suggesting that I rename /lib/tls to /lib/tls.disabled. What is the reasons for this and what are the implications of doing so? Sincerely, -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 19, Issue 4
by centos-announce-request＠centos.org 08 Sep '06

08 Sep '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0600 Moderate CentOS 3 i386 mailman - security update (Tru Huynh) 2. CESA-2006:0600 Moderate CentOS 3 x86_64 mailman - security update (Tru Huynh) 3. CESA-2006:0661 Important CentOS 3 i386 openssl - security update (Tru Huynh) 4. CESA-2006:0661 Important CentOS 3 x86_64 openssl - security update (Tru Huynh) 5. CESA-2006:0600 Moderate CentOS 4 ia64 mailman - security update (Pasi Pirhonen) 6. CESA-2006:0661 Important CentOS 4 ia64 openssl - security update (Pasi Pirhonen) 7. CESA-2006:0600 Moderate CentOS 3 ia64 mailman - security update (Pasi Pirhonen) 8. CESA-2006:0661 Important CentOS 3 ia64 openssl - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 8 Sep 2006 11:56:52 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2006:0600 Moderate CentOS 3 i386 mailman - security update To: centos-announce(a)centos.org Message-ID: <20060908095651.GA3579(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2006:0600 mailman security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2006-0600.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/mailman-2.1.5.1-25.rhel3.7.i386.rpm source: updates/SRPMS/mailman-2.1.5.1-25.rhel3.7.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update mailman Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

4.4 update quits unexpectedly
by Tom Elsesser 08 Sep '06

08 Sep '06

After 2 good updates to 4.4, my 3rd is giving me trouble. I did all 3 installs the same: yum clean all yum update python-sqlite sqlite yum yum clean all yum upgrade This one, however, quits during the header download. I get "[Errno -1] Header not complete, trying another mirror", then "[Errno 256] No more mirrors to try". I am not going thru a proxy, and I can't find any other errors until these pop up. It is stopping at the same spot each time, during the kernel header. Following are the output from yum, debug and error level at 4, and my CentOS-Base.repo, which seems to be the most relevant repo. If there's anything else I can supply to help out, let me know. >[root@linux ~]# yum -y upgrade >> /home/tom/bad_yum >[root@linux ~]# cat /home/tom/bad_yum > Loading "protectbase" plugin > Loading "fastestmirror" plugin > Running "config" handler for "protectbase" plugin > Running "init" handler for "fastestmirror" plugin > Yum Version: 2.4.3 > COMMAND: yum > Installroot: / > Setting up Upgrade Process > Setting up repositories > Baseurl(s) for repo: ['http://mirror.centos.org/centos/4/updates/i386/'] > Baseurl(s) for repo: ['http://apt.sw.be/redhat/el4/en/i386/dag/', 'http://apt.sw.be/redhat/el4/en/i386/dag', 'http://archive.cs.uu.nl/mirror/dag.wieers/redhat/el4/en/i386/dag', 'http://ftp2.lcpe.uni-sofia.bg/freshrpms/pub/dag/redhat/el4/en/i386/dag', 'http://ftp-stud.fht-esslingen.de/dag/redhat/el4/en/i386/dag', 'http://mirror.cpsc.ucalgary.ca/mirror/dag/redhat/el4/en/i386/dag', 'http://mirrors.ircam.fr/pub/dag/redhat/el4/en/i386/dag', 'http://rh-mirror.linux.iastate.edu/pub/dag/redhat/el4/en/i386/dag', 'http://rpmfind.net/linux/dag/redhat/el4/en/i386/dag', 'http://wftp.tu-chemnitz.de/pub/linux/dag/redhat/el4/en/i386/dag', 'http://www.mirrorservice.org/sites/apt.sw.be/redhat/el4/en/i386/dag'] > Baseurl(s) for repo: ['http://updates.interworx.info/centos/4.4/os/i386/', 'http://mirrors.tiatera.com/centos/4.4/os/i386/', 'ftp://mirror.myriadnetwork.com/pub/centos/4.4/os/i386/', 'http://centos-distro.cavecreek.net/4.4/os/i386/', 'http://centos.mirrors.redwire.net/4.4/os/i386/', 'http://centos.cs.ucr.edu/centos/4.4/os/i386/', 'ftp://mirror.atlantic.net/pub/centos/4.4/os/i386/', 'http://mirrors.jtlnet.com/centos/4.4/os/i386/', 'http://mirrors.easynews.com//linux/centos/4.4/os/i386/', 'http://dds.gina.alaska.edu/public/mirrors/centos/4.4/os/i386/'] > Running "postreposetup" handler for "fastestmirror" plugin > Loading mirror speeds from cached hostfile > Reading repository metadata in from local files > Setting up Package Sacks > Excluding Incompatible Archs > Finished > Running "exclude" handler for "protectbase" plugin > 87 packages excluded due to repository protections > Reading Local RPMDB > Building updates object > Resolving Dependencies > 1157503446.99 > --> Populating transaction set with selected packages. Please wait. > Adding Package strace - 4.5.14-0.EL4.1.i386 in mode u > ---> Package strace.i386 0:4.5.14-0.EL4.1 set to be updated > Adding Package passwd - 0.68-10.1.i386 in mode u > ---> Package passwd.i386 0:0.68-10.1 set to be updated > Adding Package libgcj - 3.4.6-3.i386 in mode u > ---> Package libgcj.i386 0:3.4.6-3 set to be updated > Adding Package net-tools - 1.60-37.EL4.8.i386 in mode u > ---> Package net-tools.i386 0:1.60-37.EL4.8 set to be updated > Adding Package glibc-kernheaders - 2.4-9.1.98.EL.i386 in mode u > ---> Package glibc-kernheaders.i386 0:2.4-9.1.98.EL set to be updated > Adding Package libungif - 4.1.3-1.el4.2.i386 in mode u > ---> Package libungif.i386 0:4.1.3-1.el4.2 set to be updated > Adding Package openoffice.org-libs - 1.1.5-4.6.0.EL4.i386 in mode u > ---> Package openoffice.org-libs.i386 0:1.1.5-4.6.0.EL4 set to be updated > Adding Package sudo - 1.6.7p5-30.1.3.i386 in mode u > ---> Package sudo.i386 0:1.6.7p5-30.1.3 set to be updated > Adding Package newt - 0.51.6-9.rhel4.i386 in mode u > ---> Package newt.i386 0:0.51.6-9.rhel4 set to be updated > Adding Package fonts-xorg-base - 6.8.2-1.EL.noarch in mode u > ---> Package fonts-xorg-base.noarch 0:6.8.2-1.EL set to be updated > Adding Package logrotate - 3.7.1-5.RHEL4.i386 in mode u > ---> Package logrotate.i386 0:3.7.1-5.RHEL4 set to be updated > Adding Package psacct - 6.3.2-38.rhel4.i386 in mode u > ---> Package psacct.i386 0:6.3.2-38.rhel4 set to be updated > ---> Downloading header for kernel to pack into transaction set. Here is my /etc/yum/repos.d/CentOS-Base.repo: > [base] > name=CentOS-$releasever - Base > mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch… > #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ > gpgcheck=1 > protect=1 > enabled=1 > > #released updates > [update] > name=CentOS-$releasever - Updates > baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/ > gpgcheck=1 > protect=1 > enabled =1 > > #packages used/produced in the build but not released > [addons] > name=CentOS-$releasever - Addons > baseurl=http://mirror.centos.org/centos/$releasever/addons/$basearch/ > gpgcheck=1 > protect=0 > enabled=0 > > #additional packages that may be useful > [extras] > name=CentOS-$releasever - Extras > baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/ > gpgcheck=1 > protect=0 > enabled=0 > > #additional packages that extend functionality of existing packages > [centosplus] > name=CentOS-$releasever - Plus > baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/ > gpgcheck=1 > enabled=0 > > #contribs - packages by Centos Users > [contribs] > name=CentOS-$releasever - Contribs > baseurl=http://mirror.centos.org/centos/$releasever/contribs/$basearch/ > gpgcheck=1 > enabled=0 > > #packages in testing > [testing] > name=CentOS-$releasever - Testing > baseurl=http://mirror.centos.org/centos/$releasever/testing/$basearch/ > gpgcheck=1 > enabled=0 -- Tom

3 3

Kernel 2.6.9-42.0.2.plus.c4 doesn´t boot
by Christian Hügel 08 Sep '06

08 Sep '06

Hi, after upgrading with yum upgrade my server doesn´t boot with kernel 2.6.9-42.0.2.plus.c4 d. Kernel CentOS-4 x86_64 (2.6.9-34.EL) works just fine. I use 2 HDD as RAID1. Unfortunaly this is a root server so i do not have any console output. This is rather disappointing cause i run mission critical applications on the server. I guess the updates should be used with more caution. Regards, Christian

5 8

yum consumes machine (load average soars to 47)
by Daniel Senie 08 Sep '06

08 Sep '06

I was using yum to update packages a few nights ago on one of my servers. The update of rpm packages appeared to die. Since then, commands like 'yum check-update' will consume the system. This is a dual-core Pentium-D, with X64 (and I'm running 64 bit). One CPU pegs at 100% running yum, but whatever it's doing on disk really is the bigger issue. It so consumes the disk subsystem as everything else grinds to a halt and the system becomes unusable (likely swapping itself silly). I'd really like to get this resovled and apply errata. What I need to know is where to start looking. I've tried a 'yum clean all' but that doesn't help. Dan -- ----------------------------------------------------------------- Daniel Senie dts(a)senie.com Amaranth Networks Inc. http://www.amaranth.com "George Orwell was only off by 20 years. Had he titled his book 2004 instead of 1984, he'd have been hailed as prescient. War is Peace. Freedom is Slavery. Ignorance is Strength." -dts

4 4

wiping of unused space on ext3
by Mindaugas 08 Sep '06

08 Sep '06

Hello, I was asked if it is possible to zero unused space in ext3 partition? Users write to the server via Samba and are far from computer geeks so teaching them to use some safedelete utility is quite impossible. Is there some way or utility to wipe out all the data from unused space? Thanks, Mindaugas

5 6

Command ls blocked on usbdrive
by iagosineiro＠yahoo.es 08 Sep '06

08 Sep '06

Hi. In the /etc/fstab I have the next line for an usbdrive (IOMEGA USB 2.0 80 Gb): /dev/sda1 /media/IOMEGA_HDD vfat pamconsole,exec,noauto,managed 0 0 I mounted the usbdrive with mount /media/IOMEGA_HDD. If I executed an ls command for one of the directories on the usbdrive (ls /media/IOMEGA_HDD) there is not problem but if I executed an ls of the usbdrive ls -lha /media/IOMEGA_HDD/ it takes aproximately more than five minutes to execute the command. Iago.

1 0

← Newer
1
...
22
23
24
25
26
27
28
...
37
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2006