Discuss January 2009

discuss@lists.centos.org

272 participants
261 discussions

Re: [CentOS] Antivirus for CentOS? (yuck!)
by Les Bell 22 Jan '09

22 Jan '09

Ian Forde <ian(a)duckland.org> wrote: >> That depends upon how you define malware detection. Antivirus software for Linux typically scans for Windows viruses and malware. On the other hand, if you're talking about detection in the sense of Tripwire, or a cron job that runs a 'rpm -V' every night, I completely agree that this is something that should be done. << Bingo. The changes made in PCI DSS v 1.2 broaden the scope of section 5 from "viruses" to "malicious software". This covers viruses, worms, trojans, spyware, rootkits, etc. Use of AIDE or Open-Source Tripwire, with a carefully set up policy, should meet the requirements. I would write an "explanation of non-applicability" that states that CentOS is at low risk of infection by viruses and only slightly higher risk of infection by worms, and that implementation of a host filesystem integrity verification system (or host intrusion detection system) provides an appropriate control to alert administrators to unauthorised changes of any kind on the system. Add appropriate verbiage about SELinux, etc. if appropriate. I'd say that should get the job done. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Apache Server Tuning for Performance
by linux-crazy 22 Jan '09

22 Jan '09

Hi all, I am facing facing performance issues with our web servers which is working for concurrent 250 requests properly and then stops responding when the requests are more than 250 . The current configuration parameters are as follows : apachectl -version Server version: Apache/2.0.52 Server built: Jan 30 2007 09:56:16 Kernel : 2.6.9-55.ELsmp #1 SMP Fri Apr 20 16:36:54 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux Server Hardware : MAIN MEMORY (i) Memory Size 4 GB Dual-Core Intel 5160 processors. httpd.conf Timeout 300 KeepAlive On MaxKeepAliveRequests 1000 KeepAliveTimeout 150 ## Server-Pool Size Regulation (MPM specific) # prefork MPM # StartServers: number of server processes to start # MinSpareServers: minimum number of server processes which are kept spare # MaxSpareServers: maximum number of server processes which are kept spare # ServerLimit: maximum value for MaxClients for the lifetime of the server # MaxClients: maximum number of server processes allowed to start # MaxRequestsPerChild: maximum number of requests a server process serves <IfModule prefork.c> StartServers 8 MinSpareServers 5 MaxSpareServers 20 ServerLimit 251 MaxClients 251 MaxRequestsPerChild 4000 </IfModule> # worker MPM # StartServers: initial number of server processes to start # MaxClients: maximum number of simultaneous client connections # MinSpareThreads: minimum number of worker threads which are kept spare # MaxSpareThreads: maximum number of worker threads which are kept spare # ThreadsPerChild: constant number of worker threads in each server process # MaxRequestsPerChild: maximum number of requests a server process serves <IfModule worker.c> StartServers 2 MaxClients 150 MinSpareThreads 25 MaxSpareThreads 75 ThreadsPerChild 25 MaxRequestsPerChild 0 </IfModule> I want to know about the difference between worker MPM and Prefork MPM , how to find out which one will be used by my apache server and the recommended one for highly loaded server.If some one provide me the link that best explains above two comparison also be very use full. Can any one guide me tuning to be done for the maximum utilization of the Resources and better performance of the Servers. Regards, lingu

9 13

Firefox error msg.
by Bob Taylor 22 Jan '09

22 Jan '09

After my / disk seemed to be failing and found many files disappeared, I decided to remove it. I moved my other disk to it's place. Long story omitted. After installing my backup of /home and seeing firefox not restart, I started it from the command line with the immediate error: Could not find compatible GRE between version 1.9.0.5 and 1.9.0.5. I'm sorry, I'm at a complete loss. What's a GRE? -- Bob Taylor

2 4

Re: [CentOS] Antivirus for CentOS? (yuck!)
by Les Bell 22 Jan '09

22 Jan '09

Ian Forde <ian(a)duckland.org> wrote: >> Yep - on the wikipedia page you referenced, look in the "Requirements" section, section 5. It says: "Use and regularly update anti-virus software on all systems commonly affected by malware" << I doubt Amos's QSA is using Wikipedia as his reference, unfortunately. The PCI DSS Ver 1.2 standard (of Oct. 2008 - get it from https://www.pcisecuritystandards.org/security_standards/pci_dss_download.ht…) actually states: 5.1 Deploy anti-virus software on all systems commonly affected by malicious software (particularly personal computers and servers). but then goes on, under "Testing Procedures" to state: 5.1 For a sample of system components including all operating system types commonly affected by malicious software, verify that anti-virus software is deployed if applicable anti-virus technology exists. Unfortunately, both open-source and commercial anti-virus software that will run on Centos do exist, which gives the assessor some wiggle-room. Even worse, the Summary of Changes from 1.1 to 1.2 says: Requirement & Testing Procedure: Clarified requirement applies to all operating systems types commonly affected by malicious software, if applicable anti-virus technology exists. Besides use of the term "anti-virus software", changed the term "virus" to "malicious software". Deleted note stating "Systems commonly affected by viruses typically do not include UNIX-based operating systems or mainframes." That last sentence is a killer, unfortunately - it means they have been tightening up on *ix systems. Looks like you could be in for a battle if the QSA is an intransigent sort. You could argue that while anti-virus programs do exist, their purpose is to detect infected files which could harm connected Windows systems, and are therefore not applicable in your specific case, particularly since you are using proprietary protocols and not running Windows file-sharing software (e.g. Samba, FTP, etc.) It really comes down to whether your Assessor is clueful, or a box-ticking droid. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

CentOS4 pam_tally2 config
by Jim Perrin 22 Jan '09

22 Jan '09

Okay, it's been a while since I've messed with EL4, and apparently I've gone stupid with respect to pam and properly enabling pam_tally2 in an appropriate fashion. My notes are for EL5, so if someone would be so kind as to smack me in the right direction, I'd appreciate it. -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell

2 3

Web pages time out after server rebuild
by Rob Kampen 21 Jan '09

21 Jan '09

Hi All, I have an old (2004) Intel based server with 4G of ram running Linux ndgonline.net 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux fully up to date using centOS rpms for apache, php, and mysql. I have just changed from dmraid to md raid for the OS on mirrored 80Gb SATA drives. (long story for another time) Mysql lives on a Intel hardware raid 5 controlled array - as is has for four years. My application has not changed and also runs just fine on another server (although this one is 64 bit) that has a mirrored mysql database replication from this one. I have compared apache conf files, my.cnf and all appears well. The page that times out on our firefox browsers after 30 seconds does have a series of complex mysql queries. There are no log messages other than ssl_error_log that shows: PHP Fatal error: Maximum execution time of 30 seconds exceeded in /var/www/htdocs/ndg/includes/customHandler.inc on line 87 the line number varies as does the file name it reports. It will serve pages that only have a few records, yet on my functioning server even the large pages return over the internet in less than 2 seconds. So I'm thinking not enough memory? - but it was working well last Monday. something slowing mysql?? - all other queries in this app appear just fine php having issues? How do I get some extra log info to track this down? Kind regards Rob

3 5

error installing Twinkle - libresolv.so.2(GLIBC_PRIVATE)
by Mr.Vandeley 21 Jan '09

21 Jan '09

Hello, I have an error while try to install twinkle: # yum install twinkle [...] Resolving Dependencies --> Running transaction check ---> Package twinkle.i386 0:1.2-1.el5.rf set to be updated --> Processing Dependency: libresolv.so.2(GLIBC_PRIVATE) for package: twinkle --> Finished Dependency Resolution Error: Missing Dependency: libresolv.so.2(GLIBC_PRIVATE) is needed by package twinkle [...] But libresolv.so.2 is there: # locate libresolv.so.2 /lib/libresolv.so.2 Any idea what is happening? cheers,

2 1

Help with find
by Matt 21 Jan '09

21 Jan '09

This finds all files modified 5 minutes ago. find /home/*/ -cmin 5 -type f -mindepth 1 -maxdepth 1 I want to find all files modified 5 or less minutes ago. How do I do that? "find -mtime -1" only works in 24 hour increments. Matt

2 2

Status of PostgreSQL and PHP in Testing
by Peter Hopfgartner 21 Jan '09

21 Jan '09

Dear CentOS developers I would like to have ask some questions about the PostgreSQL and PHP packages in the current Testing repository for CentOS 5. In http://wiki.centos.org/QaWiki/TestingRepo there is a note, that the testing period is about 3 weeks. Currently, the PostgreSQL and PHP packages in http://dev.centos.org/centos/5/testing/SRPMS were created in September 08. Do the developers need more feedback about the packages in testing? Is there something (a wiki page, a ticket in the bug tracker or something else) where the feedback can be collected? Is there a testing plan for the packages (works with this and that software, upgrade from base works)? What is the best way I can help? Simply sending feedback to the ML? Is there a kind of policy for the upstream version, something like: version is expected to be in the next major Red Hat release, must be part of Upstream Web Stack or another Upstream product. Casting this to a concrete question: Can upgrades to PHP 5.2.8 or PostgreSQL 8.2.11 be expected to happen. And is there already a concrete plan to move those 2 packages to Plus [http://mirror.centos.org/centos/5/centosplus/]? Regards and thank you for this great distribution. The more I work with it the more I like it. Peter -- Dott. Peter Hopfgartner R3 GIS Srl - GmbH Via Johann Kravogl-Str. 2 I-39012 Meran/Merano (BZ) Email: peter.hopfgartner(a)r3-gis.com Tel. : +39 0473 494949 Fax : +39 0473 069902 www : http://www.r3-gis.com

1 1

Compile Problem
by Joseph L. Casale 21 Jan '09

21 Jan '09

I am trying to follow a solution that states "edit apache's libtool and change the following option to "yes": build_libtool_libs=no" which begs the question, how? :) Anyone care to show me the light? Thanks! jlc

3 8

← Newer
1
...
9
10
11
12
13
14
15
...
27
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss January 2009