Discuss August 2007

discuss@lists.centos.org

284 participants
392 discussions

Help in starting spamassassin
by Robert Moskowitz 17 Aug '07

17 Aug '07

I have installed spamassassin, per the instructions on Scalix's wiki, and it is working, with some important caviats. So I asked for help on the spamassassin user list, and got some, but I think I am butting up against some Centos specific issues... This is what I am seeing in the maillog: Aug 17 14:39:59 z9m9z sendmail[13082]: l7HIdvGf013082: Milter add: header: X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on\n\tz9m9z.htt-consult.com Aug 17 14:39:59 z9m9z spamd[13032]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40454 Aug 17 14:39:59 z9m9z spamd[13032]: spamd: setuid to root succeeded Aug 17 14:39:59 z9m9z spamd[13032]: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody at /usr/bin/spamd line 1161, <GEN10> line 4. Aug 17 14:39:59 z9m9z spamd[13032]: spamd: processing message <461628246.59720704082024(a)melitta.dk> for root:99 and: Aug 17 14:39:59 z9m9z spamd[13032]: mkdir /root/.spamassassin: Permission denied at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin.pm line 1536 Aug 17 14:39:59 z9m9z spamd[13032]: locker: safe_lock: cannot create tmp lockfile /root/.spamassassin/auto-whitelist.lock.z9m9z.htt-consult.com.13032 for /root/.spamassassin/auto-whitelist.lock: Permission denied Aug 17 14:39:59 z9m9z spamd[13032]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /root/.spamassassin/auto-whitelist.lock.z9m9z.htt-consult.com.13032 for /root/.spamassassin/auto-whitelist.lock: Permission denied So over at spamassassin list I was told not to let spamassassin run as root. To create a user: spamfilter. and add -u spamfilter to the start command. So I created the user and group. I ran the spamassassin --lint and -D --lint Then I went to /etc/rc.d/init.d/spamassassin and change the lines: # Set default spamd configuration. SPAMDOPTIONS="-d -c -m5 -H" SPAMD_PID=/var/run/spamd.pid to # Set default spamd configuration. SPAMDOPTIONS="-u spamfilter -d -c -m5 -H" SPAMD_PID=/var/run/spamd.pid And then did: /etc/rc.d/init.d/spamassassin restart and spamassassin is still running as root and I am still getting these errors....

2 2

meaning and cause of kernel panic ??
by Noel Sanchez 17 Aug '07

17 Aug '07

Hello all. I have been running running centos 4.5 final for some time with any problems. Been running great, until today. System was frozen and /var/log/messages showed: Aug 15 23:01:28 mydomain kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000000 Aug 15 23:01:28 mydomain kernel: printing eip: Aug 15 23:01:28 mydomain kernel: c01b2de4 Aug 15 23:01:28 mydomain kernel: *pde = 0790d067 Aug 15 23:01:28 mydomain kernel: Oops: 0000 [#1] Aug 15 23:01:28 mydomain kernel: Modules linked in: md5 ipv6 autofs4 i2c_dev i2c_core uhci_hcd 3c59x mii floppy ata_piix libata dm_snapshot dm_zero dm_mirr or ext3 jbd dm_mod 3w_xxxx sd_mod scsi_mod Aug 15 23:01:28 mydomain kernel: CPU: 0 Aug 15 23:01:28 mydomain kernel: EIP: 0060:[<c01b2de4>] Not tainted VLI Aug 15 23:01:28 mydomain kernel: EFLAGS: 00010246 (2.6.9-55.0.2.EL) Aug 15 23:01:28 mydomain kernel: EIP is at sysfs_readdir+0x1b2/0x216 Aug 15 23:01:28 mydomain kernel: eax: 00000000 ebx: c54ee0e0 ecx: ffffffff edx: 00000000 Aug 15 23:01:28 mydomain kernel: esi: c54ee0e4 edi: 00000000 ebp: c1be11e4 esp: c48f8f60 Aug 15 23:01:28 mydomain kernel: ds: 007b es: 007b ss: 0068 Aug 15 23:01:28 mydomain kernel: Process ossec-syscheckd (pid: 11762, threadinfo=c48f8000 task=c75a27e0) Aug 15 23:01:28 mydomain kernel: Stack: bff7125c c7ff5420 c0180d15 c48f8fa0 c717f920 c0372960 c717f920 c7f2b8b0 Aug 15 23:01:28 mydomain kernel: c0180d15 c018097e c48f8fa0 ffffffda 0856a5dc c717f920 00000000 c0180fcb Aug 15 23:01:28 mydomain kernel: 0856a644 0856a62c 00000f98 ffffffea 00000009 0856a5c0 002e8ff4 c48f8000 Aug 15 23:01:28 mydomain kernel: Call Trace: Aug 15 23:01:28 mydomain kernel: [<c0180d15>] filldir64+0x0/0x11a Aug 15 23:01:28 mydomain kernel: [<c0180d15>] filldir64+0x0/0x11a Aug 15 23:01:28 mydomain kernel: [<c018097e>] vfs_readdir+0x8a/0xb7 Aug 15 23:01:28 mydomain kernel: [<c0180fcb>] sys_getdents64+0x80/0xba Aug 15 23:01:28 mydomain kernel: [<c031af83>] syscall_call+0x7/0xb Aug 15 23:01:28 mydomain kernel: [<c031007b>] xfrm_parse_spi+0xb2/0xd3 Aug 15 23:01:28 mydomain kernel: Code: 04 89 69 0c 8b 75 00 8b 44 24 04 83 c0 0c 39 c6 74 73 8d 5e fc 83 7b 14 00 74 66 89 d8 e8 ec e2 ff ff 89 c2 83 c9 ff 31 c0 89 d7 <f2> ae f7 d1 49 0f b7 43 1c c1 e8 0c 50 ff 73 20 8b 44 24 18 ff Aug 15 23:01:28 mydomain kernel: <0>Fatal exception: panic in 5 seconds # uname -a Linux mydomain.com 2.6.9-55.0.2.EL #1 Tue Jun 26 14:08:18 EDT 2007 i686 i686 i386 GNU/Linux I don't understand the meaning of all of this? I'm trying to find the cause of why my system froze or crashed. The only recent change ( a few weeks ago ) that I did was an upgrade of ossec from 1.2 to 1.3. Does this log show or hint to the cause of the problem? Thank You Noel

2 1

CentOS-announce Digest, Vol 30, Issue 6
by centos-announce-request＠centos.org 17 Aug '07

17 Aug '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0671 Moderate CentOS 3 ia64 kernel - security update (Pasi Pirhonen) 2. CESA-2007:0671 Moderate CentOS 3 s390(x) kernel - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 17 Aug 2007 01:01:30 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2007:0671 Moderate CentOS 3 ia64 kernel - security update To: centos-announce(a)centos.org Message-ID: <20070816220130.GG14462(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0671 https://rhn.redhat.com/errata/RHSA-2007-0671.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/kernel-2.4.21-51.EL.ia64.rpm updates/ia64/RPMS/kernel-doc-2.4.21-51.EL.ia64.rpm updates/ia64/RPMS/kernel-source-2.4.21-51.EL.ia64.rpm updates/ia64/RPMS/kernel-unsupported-2.4.21-51.EL.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Install CentOS from a floppy disk
by Mário Gamito 17 Aug '07

17 Aug '07

Hi, I'm trying to install CentOS 4.5 in a PIII. Problem is the computer doesn't boot by the CD-ROM drive and when I try to access the BIOS to change the settings, the machine goes bezerk :( Is it possible to start the install through a floppy and then continue the rest of the install process with the CDs ? If so, how ? Any help would be appreciated. Warm regards, -- :wq! Mário Gamito

1 0

mod_gnutls and named based virtual hosts on HTTPS
by Johnny Hughes 17 Aug '07

17 Aug '07

All, For anyone interested, there is an rpm in the CentOS testing repository for mod_gnutls for CentOS 5. It allows named based virtual hosting for HTTPS (Single IP, multiple sites and certificates). The idea to build the RPMS came from this article: http://www.g-loaded.eu/2007/08/10/ssl-enabled-name-based-apache-virtual-hos… Here is a guide for installing and using the new RPMS on CentOS 5: http://www.hughesjr.com/content/view/20/1/ RPMS uploaded are: http://dev.centos.org/centos/5/testing/i386/RPMS/mod_gnutls-0.2.0-1.el5.cen… http://dev.centos.org/centos/5/testing/x86_64/RPMS/mod_gnutls-0.2.0-1.el5.c… http://dev.centos.org/centos/5/testing/SRPMS/mod_gnutls-0.2.0-1.el5.centos.… Thanks, Johnny Hughes

2 6

logrotate and httpd logs
by Scott Moseman 17 Aug '07

17 Aug '07

I swear that I've removed httpd from logrotate.d on more than one occasion because I prefer to rotate httpd logs on my own schedule. But the config keeps on returning and throwing off my stats. I'm assuming that when there is an Apache upgrade that it's re-inserting the config into the logrotate.d directory? Is there an easy way to stop it from doing this? I *really* do not want to have to manually remove the config each time I upgrade Apache... Thanks, Scott

2 1

centos 4.5 deleting the top panel
by Jerry Geis 16 Aug '07

16 Aug '07

I can right click on the top panel and select "Delete Panel" on centos 4.5 however, is there a way to do that in a shell script? I was looking at gconf-editor under apps/panel/toplevels/top_panel but I dont see anything there about "dont show it at all". Thanks, Jerry

2 1

Re: [CentOS] Forcing ifcfg-eth0 to use the same nic in multi
by Lanny Marcus 16 Aug '07

16 Aug '07

On 15 August 2007, Les Mikesell <lesmikesell(a)gmail.com> wrote: <snip> > Everyone believed that except DECnet which expected all cards in the > same machine to have the same MAC. The address should be stored in a > ROM and initialized at startup, so it is probably a firmware or driver > bug. Les: On multiport cards, do the NICs all have different MAC addresses and do they all use the same driver? The OP has a board where the 2 NICs use different drivers. Seems like DECnet did not have a better idea there. <snip> > Yes, different block ranges are supposed to be assigned to different > companies. But, it shouldn't hurt anything unless both are connected > to the same subnet which you aren't likely to want. > That *would* be a problem, with routing to the proper box. Lanny

2 1

Re: [CentOS] Automount configuration problem
by Lanny Marcus 16 Aug '07

16 Aug '07

On 14 August 2007, Johnny Hughes <johnny(a)centos.org> wrote: <snip> > Not sure what the problem is ... but the new (fc6/7 and centos) > mounting > of DVDs uses gnome-mount. > > it mounts under ... /media/$ISO_NAME > > it should also show on the desktop > Johnny: It shows up properly, if I put a CD into that drive, but not with a DVD in the drive. (On my box, a DVD works properly, all the time). I did #rpm -V gnome-mount and there was no output, so I believe gnome-mount is OK. If I boot that box, with the CentOS 5.0 install DVD in that drive, it comes up to the install screen, every time. There does not seem to be a problem with it mounting and reading the DVD, when it is booted. I am wondering if somehow I screwed up the file permissions or settings (running SELinux in Permissive mode and the Firewall, as on my box) that are in some file unknown to me. Thank you for writing! I get the Digest ML, and I just read your reply. Lanny

1 0

SELinux questions, upon restarting BIND
by Ray Leventhal 16 Aug '07

16 Aug '07

Hi all, On my newly up-and-running nameserver (CentOS 5), I noticed the following alerts in /var/log/messages after restarting BIND. (lines inserted to aid in reading). As I'm new to SELinux, I'm hoping for some pointers on 1) if this is an issue which simply *must* be addressed, or if it's something I should live with, and 2) how to eliminate the warming messages without sacrificing SELinux protections. The system does not have X installed, so 'setroubleshoot' isn't an option (unless there's a text equivalent). Thanks in advance for any opinions/suggestions/enlightenments :) ~Ray ============================================= Aug 16 07:12:23 sunspot setroubleshoot: SELinux is preventing /usr/sbin/named (named_t) "getattr" access to /dev/random (tmpfs_t). For complete SELinux messages. run sealert -l 1ab129b8-9f9f-48ae-a67e-d52f63a5fb5a ============================================= Aug 16 07:12:23 sunspot setroubleshoot: SELinux is preventing /usr/sbin/named (named_t) "read" access to random (tmpfs_t). For complete SELinux messages. run sealert -l b7014747-0d8d-443e-8b9a-af868976452d ============================================= With apologies for the verbosity here, I'm including the output of the sealert commands here. ============================================= result of sealert -l 1ab129b8-9f9f-48ae-a67e-d52f63a5fb5a: [root@sunspot ray]# /usr/bin/sealert -l b7014747-0d8d-443e-8b9a-af868976452d Summary SELinux is preventing /usr/sbin/named (named_t) "read" access to random (tmpfs_t). Detailed Description SELinux denied access requested by /usr/sbin/named. It is not expected that this access is required by /usr/sbin/named and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Allowing Access Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for random, restorecon -v random. There is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 - or you can disable SELinux protection entirely for the application. Disabling SELinux protection is not recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Changing the "named_disable_trans" boolean to true will disable SELinux protection this application: "setsebool -P named_disable_trans=1." The following command will allow this access: setsebool -P named_disable_trans=1 Additional Information Source Context user_u:system_r:named_t Target Context system_u:object_r:tmpfs_t Target Objects random [ chr_file ] Affected RPM Packages bind-9.3.3-7.el5 [application] Policy RPM selinux-policy-2.4.6-30.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Permissive Plugin Name plugins.disable_trans Host Name sunspot Platform Linux sunspot 2.6.18-8.el5 #1 SMP Thu Mar 15 19:57:35 EDT 2007 i686 athlon Alert Count 12 Line Numbers Raw Audit Messages avc: denied { read } for comm="named" dev=dm-0 egid=25 euid=25 exe="/usr/sbin/named" exit=9 fsgid=25 fsuid=25 gid=25 items=0 name="random" pid=15327 scontext=user_u:system_r:named_t:s0 sgid=25 subj=user_u:system_r:named_t:s0 suid=25 tclass=chr_file tcontext=system_u:object_r:tmpfs_t:s0 tty=(none) uid=25 ============================================= [root@sunspot ray]# sealert -l b7014747-0d8d-443e-8b9a-af868976452d Summary SELinux is preventing /usr/sbin/named (named_t) "read" access to random (tmpfs_t). Detailed Description SELinux denied access requested by /usr/sbin/named. It is not expected that this access is required by /usr/sbin/named and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Allowing Access Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for random, restorecon -v random. There is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 - or you can disable SELinux protection entirely for the application. Disabling SELinux protection is not recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Changing the "named_disable_trans" boolean to true will disable SELinux protection this application: "setsebool -P named_disable_trans=1." The following command will allow this access: setsebool -P named_disable_trans=1 Additional Information Source Context user_u:system_r:named_t Target Context system_u:object_r:tmpfs_t Target Objects random [ chr_file ] Affected RPM Packages bind-9.3.3-7.el5 [application] Policy RPM selinux-policy-2.4.6-30.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Permissive Plugin Name plugins.disable_trans Host Name sunspot Platform Linux sunspot 2.6.18-8.el5 #1 SMP Thu Mar 15 19:57:35 EDT 2007 i686 athlon Alert Count 12 Line Numbers Raw Audit Messages avc: denied { read } for comm="named" dev=dm-0 egid=25 euid=25 exe="/usr/sbin/named" exit=9 fsgid=25 fsuid=25 gid=25 items=0 name="random" pid=15327 scontext=user_u:system_r:named_t:s0 sgid=25 subj=user_u:system_r:named_t:s0 suid=25 tclass=chr_file tcontext=system_u:object_r:tmpfs_t:s0 tty=(none) uid=25

1 1

← Newer
1
...
18
19
20
21
22
23
24
...
40
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2007