Discuss May 2008

discuss@lists.centos.org

268 participants
281 discussions

SELinux, postfix and milters
by Michael Saavedra 06 May '08

06 May '08

Hi all, I'm trying to add some milters (particularly spamass-milter and clamav-milter, which I acquired through rpmforge) to my postfix configuration on Centos5 with the targeted SELinux policy.. I'm running into difficulty getting postfix to communicate through the unix domain sockets created by the milters, because selinux keeps blocking them. I've attempted to use audit2allow to fix this, and made some progress in allowing postfix to write to the socket. I'm getting stuck on the following audit.log error, though. type=AVC msg=audit(1210016235.033:6265): avc: denied { use } for pid=17995 comm="cleanup" path="socket:[372498]" dev=sockfs ino=372498 scontext=root:system_r:postfix_cleanup_t:s0 tcontext=root:system_r:postfix_smtpd_t:s0 tclass=fd type=SYSCALL msg=audit(1210016235.033:6265): arch=c000003e syscall=47 success=yes exit=1 a0=9 a1=7fff0ec2f220 a2=0 a3=0 items=0 ppid=17983 pid=17995 auid=0 uid=89 gid=89 euid=89 suid=89 fsuid=89 egid=89 sgid=89 fsgid=89 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=root:system_r:postfix_cleanup_t:s0 key=(null) I use audit2allow to try to fix this, but the resulting rule: allow postfix_cleanup_t postfix_smtpd_t:fd use; does nothing to help. Has anyone succesfully added unix domain socket based milters to postfix without disabling selinux? If anyone has any suggestions, I'd be grateful. Thanks, Michael Saavedra

1 0

Port forwarding "File" ?
by Andrew ＠ ATM Logic 06 May '08

06 May '08

Can someone tell me what, and where the file that contains the port forwarding info is on a standard install? I had a server fail, I have mounted the drive and need to get this info back. Thanks.

2 1

CentOS5.1 PHP 5.2 RPMs?
by James Fidell 06 May '08

06 May '08

Is there a PHP 5.2 build for CentOS5.1 anywhere? Unfortunately I need a fix for a SOAP bug that is present in the current 5.1.6 release. James

4 10

images gone after yum update
by Geert Batsleer 06 May '08

06 May '08

Hi, yesterday I upgraded a centos 4.6 box via yum and now it seems that certain pages, especially swf files stopped working. Does anyone know if ImageMagick got broken on x64? I don't see any other package wich could have caused this problem. kind regards, Geert PS Below is the output of my yum update May 05 13:20:25 Updated: cups-libs.x86_64 1:1.1.22-0.rc1.9.20.2.el4_6.6 May 05 13:20:25 Updated: GeoIP.x86_64 1.4.4-1.el4.centos May 05 13:20:25 Updated: seamonkey-nspr.x86_64 1.0.9-16.el4.centos May 05 13:20:29 Updated: ImageMagick.x86_64 6.0.7.1-17.el4_6.1 May 05 13:20:38 Updated: nautilus.x86_64 2.8.1-4.el4_6.1 May 05 13:20:38 Updated: speex.x86_64 1.0.4-4.el4_6.1 May 05 13:20:38 Updated: unrar.x86_64 3.7.8-1.el4.rf May 05 13:20:39 Updated: rsync.x86_64 3.0.2-1.el4.rf May 05 13:20:43 Updated: squid.x86_64 7:2.5.STABLE14-1.4E.el4_6.2 May 05 13:20:44 Updated: cups-libs.i386 1:1.1.22-0.rc1.9.20.2.el4_6.6 May 05 13:20:47 Updated: cups.x86_64 1:1.1.22-0.rc1.9.20.2.el4_6.6 May 05 13:20:47 Updated: seamonkey-nspr.i386 1.0.9-16.el4.centos May 05 13:20:48 Updated: seamonkey-nss.x86_64 1.0.9-16.el4.centos May 05 13:20:49 Updated: seamonkey-nss.i386 1.0.9-16.el4.centos May 05 13:20:49 Updated: speex.i386 1.0.4-4.el4_6.1 May 05 13:20:49 Updated: libgnomecups.i386 0.1.12-5.el4_6.1 May 05 13:20:50 Updated: libgnomecups.x86_64 0.1.12-5.el4_6.1 May 05 13:20:50 Updated: dkms.noarch 2.0.19-2.el4.rf May 05 13:20:56 Updated: firefox.x86_64 1.5.0.12-0.15.el4.centos May 05 13:20:56 Updated: GeoIP-data.x86_64 20080301-1.el4.centos May 05 13:20:56 Updated: GeoIP-devel.x86_64 1.4.4-1.el4.centos May 05 13:20:57 Updated: ImageMagick-devel.x86_64 6.0.7.1-17.el4_6.1 May 06 15:34:14 Updated: perl-DBI.x86_64 1.604-1.el4.rf [root@SOKAHO2 log]# tail -n 100 /var/log/yum.log Mar 27 12:01:49 Updated: krb5-libs.x86_64 1.3.4-54.el4_6.1 Mar 27 12:01:49 Updated: krb5-libs.i386 1.3.4-54.el4_6.1 Mar 27 12:01:51 Updated: krb5-workstation.x86_64 1.3.4-54.el4_6.1 Mar 27 12:01:52 Updated: krb5-devel.x86_64 1.3.4-54.el4_6.1 May 05 13:20:25 Updated: cups-libs.x86_64 1:1.1.22-0.rc1.9.20.2.el4_6.6 May 05 13:20:25 Updated: GeoIP.x86_64 1.4.4-1.el4.centos May 05 13:20:25 Updated: seamonkey-nspr.x86_64 1.0.9-16.el4.centos May 05 13:20:29 Updated: ImageMagick.x86_64 6.0.7.1-17.el4_6.1 May 05 13:20:38 Updated: nautilus.x86_64 2.8.1-4.el4_6.1 May 05 13:20:38 Updated: speex.x86_64 1.0.4-4.el4_6.1 May 05 13:20:38 Updated: unrar.x86_64 3.7.8-1.el4.rf May 05 13:20:39 Updated: rsync.x86_64 3.0.2-1.el4.rf May 05 13:20:43 Updated: squid.x86_64 7:2.5.STABLE14-1.4E.el4_6.2 May 05 13:20:44 Updated: cups-libs.i386 1:1.1.22-0.rc1.9.20.2.el4_6.6 May 05 13:20:47 Updated: cups.x86_64 1:1.1.22-0.rc1.9.20.2.el4_6.6 May 05 13:20:47 Updated: seamonkey-nspr.i386 1.0.9-16.el4.centos May 05 13:20:48 Updated: seamonkey-nss.x86_64 1.0.9-16.el4.centos May 05 13:20:49 Updated: seamonkey-nss.i386 1.0.9-16.el4.centos May 05 13:20:49 Updated: speex.i386 1.0.4-4.el4_6.1 May 05 13:20:49 Updated: libgnomecups.i386 0.1.12-5.el4_6.1 May 05 13:20:50 Updated: libgnomecups.x86_64 0.1.12-5.el4_6.1 May 05 13:20:50 Updated: dkms.noarch 2.0.19-2.el4.rf May 05 13:20:56 Updated: firefox.x86_64 1.5.0.12-0.15.el4.centos May 05 13:20:56 Updated: GeoIP-data.x86_64 20080301-1.el4.centos May 05 13:20:56 Updated: GeoIP-devel.x86_64 1.4.4-1.el4.centos May 05 13:20:57 Updated: ImageMagick-devel.x86_64 6.0.7.1-17.el4_6.1 May 06 15:34:14 Updated: perl-DBI.x86_64 1.604-1.el4.rf [

2 1

Tunning EAP-TTLS with PAP
by Sergio Belkin 06 May '08

06 May '08

Hi, I have a freeradius server that is working well in university. We use EAP-TTLS and PAP protocols. Users from Windows can use Securew2. Users from Linux and Mac OS X luckily have native support for EAP-TTLS and PAP. (if you think is Off Topic, keep reading on). On Ubuntu I can use the nm-applet for setting the connection up. But I'd want to find a way to automatize it, that it finds the TTLS certificate and verifies the server name (I didn't see this feature in Linux). Could you help me to do this? (What tools/apps and file config should I look?) Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

1 0

Watching Netflix movies on CentOS
by Rogelio 06 May '08

06 May '08

Has anyone here been able to view Netflix movies on CentOS? (It requires Internet Explorer, and I'm wondering what the workaround is for Firefox)

9 12

Re: [CentOS] Way OT Re: OT- Re: ext3 filesystems larger than 8TB
by Ross S. W. Walker 06 May '08

06 May '08

Ahm, it wasn't money that influenced the OJ case, it was, race, coupled with incompetence on the side of the prosecution. Now if Reiser had kept his mouth shut he might have just been acquitted. He had a good attorney, that attorney gave him sound advise and he chose to ignore it anyways. I also believe if he had confessed to what happened he would have received manslaughter, though after the cover up he would have gotten the max sentence plus obstruction of justice and God knows what else, but still less than first degree. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: centos(a)centos.org <centos(a)centos.org> Sent: Mon May 05 18:41:10 2008 Subject: [CentOS] Way OT Re: OT- Re: ext3 filesystems larger than 8TB on 5-5-2008 3:24 PM John R Pierce spake the following: > Ross S. W. Walker wrote: >> No doubt! >> >> The worse part is I don't believe it was premeditated. I think she came >> over to drop off the kids and told him oh by the way I'm taking the >> children to live with me in Russia, at that point he went into a fit of >> anger and threw here against the pillar causing a fatal head injury. >> > > I followed the trial blogs day by day on the SF Chronicle site. His > wife was very close to gaining her US medical license (she had been a > doctor in Russia), had lined up a good job, and various other > indications of planning for a long term life here, nothing indicating > any plans to leave for Russia. <rant> The fact that he could be convicted with little to no real evidence, but someone like O.J. Simpson could be acquitted with what seemed like a smoking gun still in his hands just shows how money makes the law go away in the US. </rant> -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

1 0

Re: [CentOS] OT- Re: ext3 filesystems larger than 8TB
by Ross S. W. Walker 06 May '08

06 May '08

I was basing that on the fact that she had secured Russian citizenship for her children prior to the divorce, but I cannot get the complete details as I just don't have the time these days to follow any story in great length. I still stand behind the idea that it was a case of accidental manslaughter that was attempted to be covered up. Is there a court tv mailing list out there? -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: CentOS mailing list <centos(a)centos.org> Sent: Mon May 05 18:24:40 2008 Subject: Re: [CentOS] OT- Re: ext3 filesystems larger than 8TB Ross S. W. Walker wrote: > No doubt! > > The worse part is I don't believe it was premeditated. I think she came > over to drop off the kids and told him oh by the way I'm taking the > children to live with me in Russia, at that point he went into a fit of > anger and threw here against the pillar causing a fatal head injury. > I followed the trial blogs day by day on the SF Chronicle site. His wife was very close to gaining her US medical license (she had been a doctor in Russia), had lined up a good job, and various other indications of planning for a long term life here, nothing indicating any plans to leave for Russia. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

1 0

wine question
by fred smith 05 May '08

05 May '08

Before bothering the wine folks thought I'd ask here... On my fully-updated (fully operational battle station), er, centos box I seem to be able to use the Centos-released version of wine to run the software installers for quite a few apps. However, at no time during the installer do I actually see any text in any of the dialogs that appear. This makes it a little hard to choose options :) Does anyone here have any experience using wine like this and perhaps can tell me what I need to do to fix it? for years I've had one of the huge sets of national geographic on CDROM, and years ago it wouldn't even install on wine. I've just used acroread to view the files in the past, but thought I'd see today if the wine i've got will install it. Yes, it seems to, but it's hard to tell what choices I made. For example, it wont' actually run (now that it is installed) unless I register it, which apparently is done as part of the installation. Before I go run the installer again and see if I can fake my way through registration I'd like to see if there's a way to tweak Wine so it'll let me see the text in the installer windows (and the legends on the buttons). Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- But God demonstrates his own love for us in this: While we were still sinners, Christ died for us. ------------------------------- Romans 5:8 (niv) ------------------------------

4 4

SELinux policy module sources
by Ingemar Nilsson 05 May '08

05 May '08

Hi. I'm trying to figure out where the SELinux policy modules shipped with the system live, and how they work. The modules listed by 'semodule -l' are the same as those available in /etc/selinux/targeted/modules/active/modules, but those are not part of any package, and are presumably added and removed to this location as they are added and removed to the kernel. I later found these modules to live in /usr/share/selinux. If I create a policy module of my own, is this the place to put it to make sure that it is loaded when the system boots? Or do I also need to list it somewhere, such in a configuration file? The reason why I ask is because there are a few .pp files in this directory that are not visible in the list of loaded modules, and they are also not available in the /etc/selinux/.../modules directory above. I today tried to figure out what these precompiled policy packages contain, but that isn't exactly obvious. I found .if files in /usr/share/selinux/devel/include/... that correspond to the .pp files in /usr/share/selinux, but nothing else. The .if files only contain definitions, but don't these need to be used somewhere, such as in .te files? And what about the .fc files that the policy generation tool in system-config-selinux creates? Are such files not needed? Lots of questions, but the documentation on this subject isn't exactly stellar. :) Regards Ingemar

2 2

← Newer
1
...
21
22
23
24
25
26
27
28
29
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2008