Discuss October 2011

discuss@lists.centos.org

186 participants
148 discussions

CentOS-announce Digest, Vol 80, Issue 8
by centos-announce-request＠centos.org 20 Oct '11

20 Oct '11

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2011:1383 CentOS 5 x86_64 cvs FASTTRACK Update (Johnny Hughes) 2. CEBA-2011:1383 CentOS 5 i386 cvs FASTTRACK Update (Johnny Hughes) 3. CESA-2011:1380 Critical CentOS 5 i386 java-1.6.0-openjdk Update (Johnny Hughes) 4. CESA-2011:1380 Critical CentOS 5 x86_64 java-1.6.0-openjdk Update (Johnny Hughes) 5. CESA-2011:1385 Moderate CentOS 5 i386 kdelibs Update (Johnny Hughes) 6. CESA-2011:1385 Moderate CentOS 5 x86_64 kdelibs Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Oct 2011 17:44:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2011:1383 CentOS 5 x86_64 cvs FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20111019174410.GA19469(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2011:1383 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-1383.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: d2d661a31425a255bebbed69b767a4f0 cvs-1.11.22-9.el5.x86_64.rpm a3bb5e880398696f22c21cc60757e343 cvs-inetd-1.11.22-9.el5.x86_64.rpm Source: b496b948c4323e2d9f5dc33c31b83f9c cvs-1.11.22-9.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 19 Oct 2011 17:44:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2011:1383 CentOS 5 i386 cvs FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20111019174410.GA19453(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2011:1383 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-1383.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c637bc159fb8f3dc9f8cef05b389d62e cvs-1.11.22-9.el5.i386.rpm e15f386f8ada62ac5272ff0b051d8637 cvs-inetd-1.11.22-9.el5.i386.rpm Source: b496b948c4323e2d9f5dc33c31b83f9c cvs-1.11.22-9.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 19 Oct 2011 21:07:19 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1380 Critical CentOS 5 i386 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20111019210719.GA29291(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1380 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1380.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 2a9257de63e8d6912120d260a78c7b54 java-1.6.0-openjdk-1.6.0.0-1.23.1.9.10.el5_7.i386.rpm 1413a1ec73bee83f83185f9c83a3fe94 java-1.6.0-openjdk-demo-1.6.0.0-1.23.1.9.10.el5_7.i386.rpm a14519952cbe6758f9891e96a2e145ef java-1.6.0-openjdk-devel-1.6.0.0-1.23.1.9.10.el5_7.i386.rpm e814dc90241eb5e158609a2c31a80858 java-1.6.0-openjdk-javadoc-1.6.0.0-1.23.1.9.10.el5_7.i386.rpm d8afc1d46f2dc1a2ad011d52cce06dd9 java-1.6.0-openjdk-src-1.6.0.0-1.23.1.9.10.el5_7.i386.rpm Source: 2ec7cfb0b849e273740803810cab22bf java-1.6.0-openjdk-1.6.0.0-1.23.1.9.10.el5_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 19 Oct 2011 21:07:19 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1380 Critical CentOS 5 x86_64 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20111019210719.GA29308(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1380 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1380.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: dcd51b2589fe34fe74e8526907ae431a java-1.6.0-openjdk-1.6.0.0-1.23.1.9.10.el5_7.x86_64.rpm 75ab7dff52bb89a11a51a780c13a1913 java-1.6.0-openjdk-demo-1.6.0.0-1.23.1.9.10.el5_7.x86_64.rpm 6ba489fa66b8e7597af400445262843b java-1.6.0-openjdk-devel-1.6.0.0-1.23.1.9.10.el5_7.x86_64.rpm 76818199a1750d786972de9a447ba0a0 java-1.6.0-openjdk-javadoc-1.6.0.0-1.23.1.9.10.el5_7.x86_64.rpm febccdd61f3cc0550f6076e5f1bce888 java-1.6.0-openjdk-src-1.6.0.0-1.23.1.9.10.el5_7.x86_64.rpm Source: 2ec7cfb0b849e273740803810cab22bf java-1.6.0-openjdk-1.6.0.0-1.23.1.9.10.el5_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 19 Oct 2011 21:24:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1385 Moderate CentOS 5 i386 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20111019212420.GA29472(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1385 Moderate Upstream details at : http://rhn.redhat.com/errata/RHSA-2011-1385.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9bc8d8f3b13bd1e86556aac113b79d1c kdelibs-3.5.4-26.el5.centos.1.i386.rpm e18dd5ee93157926b434456fafea2569 kdelibs-apidocs-3.5.4-26.el5.centos.1.i386.rpm 3e071569b39063aaf9f3fb589367f71a kdelibs-devel-3.5.4-26.el5.centos.1.i386.rpm Source: a149dd622eef4ba2e43a690b5045b9f8 kdelibs-3.5.4-26.el5.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 19 Oct 2011 21:24:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1385 Moderate CentOS 5 x86_64 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20111019212420.GA29489(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1385 Moderate Upstream details at : http://rhn.redhat.com/errata/RHSA-2011-1385.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 9bc8d8f3b13bd1e86556aac113b79d1c kdelibs-3.5.4-26.el5.centos.1.i386.rpm 02723b60e5c81720d8ff3b513e9b9d98 kdelibs-3.5.4-26.el5.centos.1.x86_64.rpm 43c5e518d234dacaa1b5a9da4155e0f6 kdelibs-apidocs-3.5.4-26.el5.centos.1.x86_64.rpm 3e071569b39063aaf9f3fb589367f71a kdelibs-devel-3.5.4-26.el5.centos.1.i386.rpm 7b7f74abcf830bf67f922774a8b0f596 kdelibs-devel-3.5.4-26.el5.centos.1.x86_64.rpm Source: a149dd622eef4ba2e43a690b5045b9f8 kdelibs-3.5.4-26.el5.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 80, Issue 8 **********************************************

1 0

C6 compatible wireless printers?
by nux＠li.nux.ro 20 Oct '11

20 Oct '11

Hi, Any success stories with C6 and wireless printers? Or maybe horror stories and what products to avoid? I'm looking at some HPs on amazon right now, some quite cheap, ~ £50, not bad. Ideally they should have easy to refill cartridges. Thanks.

4 4

Silly logrotate question
by John Kennedy 20 Oct '11

20 Oct '11

Ok, I have Googled this and either I am not asking the right way or I just can't see what's in front of me (sorry)... We have log files called app.2011-10-119.log (with the date changing every day). The log is created by the application each day at midnight. I have logrotate set to rotate files ending in .log at 4am, with copytruncate on by default. If I list the files I see all the old app.2011-10-<X>.log files with a 0 file size. If I turn off copytruncate, the current days log file will be removed everyday at 4am. How can I satisfy both the need to remove yesterday's log file while keeping the current day? Here is the logrotate file: /var/log/app/*.log { daily rotate 10 compress missingok notifempty create 0644 user user } I added notifempty to keep the old empty log files from being compressed... Thanks, John John Kennedy

3 2

[HW] Do the HDD cages in rack mount chassis indicate visual/audio HDD failure?
by Arun Khan 19 Oct '11

19 Oct '11

I have no personal experience with rack mount chassis. >From the past postings, I reckon there are members, in this list, who have experience in rack mount setups and would like get their advice. To reduce the H/W cost, I am considering Linux mdadm RAID10 on a 2U chassis. I would appreciate clarification on the following: In rack mount chassis, do the cages that house the hard disks have the following feature? (a) Indicate disk failure. LED lights up and/or audio alarm? (b) The failed HDD can be swapped. TIA. -- Arun Khan

7 17

Hot upgrade from 5.2 Centos to 5.7 Centos
by Vinay Nagrik 19 Oct '11

19 Oct '11

Hello Group, I am installed some application running on top of Centos 5.2 OS and these applications are running fine. However, we are thinking of upgrading our 5.2 Centos to 5.7 (hot upgrade). That is we want to upgrade from 5.2 Centos to 5.7 Centos and not disturb the applications. Is it possible? Could someone please help. -- Thanks Nagrik

6 6

CentOS-announce Digest, Vol 80, Issue 7
by centos-announce-request＠centos.org 19 Oct '11

19 Oct '11

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2011:1377 Moderate CentOS 5 x86_64 postgresql Update (Johnny Hughes) 2. CESA-2011:1377 Moderate CentOS 5 i386 postgresql Update (Johnny Hughes) 3. CESA-2011:1378 Moderate CentOS 5 i386 postgresql84 Update (Johnny Hughes) 4. CESA-2011:1378 Moderate CentOS 5 x86_64 postgresql84 Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 18 Oct 2011 18:58:11 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1377 Moderate CentOS 5 x86_64 postgresql Update To: centos-announce(a)centos.org Message-ID: <20111018185811.GA19283(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1377 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1377.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: eeec946fd8c8b4088482e16e194a4aa4 postgresql-8.1.23-1.el5_7.2.x86_64.rpm 59b2c737e32f99236b5efa16ec6ce937 postgresql-contrib-8.1.23-1.el5_7.2.x86_64.rpm 6525b16ac94fce994e88b1a32a6f1148 postgresql-devel-8.1.23-1.el5_7.2.i386.rpm 7829bd347fedbaed48edab745fa1ca3a postgresql-devel-8.1.23-1.el5_7.2.x86_64.rpm f68e4209d4df4619be56e065644c80f6 postgresql-docs-8.1.23-1.el5_7.2.x86_64.rpm aba1e11dc0a4e59af715039054e11c4e postgresql-libs-8.1.23-1.el5_7.2.i386.rpm 0f329153132eb964891c308979ffad4b postgresql-libs-8.1.23-1.el5_7.2.x86_64.rpm 93eb40cfa57d4663261b2611d2320c51 postgresql-pl-8.1.23-1.el5_7.2.x86_64.rpm 17c0359b896eab98d095d1f3a704ca57 postgresql-python-8.1.23-1.el5_7.2.x86_64.rpm ac36fe3e635ed270671e5d4839caa5ef postgresql-server-8.1.23-1.el5_7.2.x86_64.rpm 34dfcf98798f159dd435f239c4491b7e postgresql-tcl-8.1.23-1.el5_7.2.x86_64.rpm 3cc8c324eacbcaabde63cc8212301b29 postgresql-test-8.1.23-1.el5_7.2.x86_64.rpm Source: 290a28e48a8eb13f5dc13a2064494a8a postgresql-8.1.23-1.el5_7.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 18 Oct 2011 18:58:11 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1377 Moderate CentOS 5 i386 postgresql Update To: centos-announce(a)centos.org Message-ID: <20111018185811.GA19266(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1377 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1377.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e5a593818184aece2da4df854c0fa0b0 postgresql-8.1.23-1.el5_7.2.i386.rpm 6d7049b1c0c8ce788cd78463af220458 postgresql-contrib-8.1.23-1.el5_7.2.i386.rpm 6525b16ac94fce994e88b1a32a6f1148 postgresql-devel-8.1.23-1.el5_7.2.i386.rpm eb71da3d4dc9c0ce3b38eda0e26fc75d postgresql-docs-8.1.23-1.el5_7.2.i386.rpm aba1e11dc0a4e59af715039054e11c4e postgresql-libs-8.1.23-1.el5_7.2.i386.rpm c3fa9d4c668946a8ba8672b083c99b9d postgresql-pl-8.1.23-1.el5_7.2.i386.rpm 935a50efb738618f9fece4ad8793742f postgresql-python-8.1.23-1.el5_7.2.i386.rpm 74e6b1f646e17243677410d162669e3e postgresql-server-8.1.23-1.el5_7.2.i386.rpm 3584447ad2217c996a66afe533d3aa02 postgresql-tcl-8.1.23-1.el5_7.2.i386.rpm e92eea056cc54813f7207f7cec0a4df9 postgresql-test-8.1.23-1.el5_7.2.i386.rpm Source: 290a28e48a8eb13f5dc13a2064494a8a postgresql-8.1.23-1.el5_7.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 18 Oct 2011 19:01:00 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1378 Moderate CentOS 5 i386 postgresql84 Update To: centos-announce(a)centos.org Message-ID: <20111018190100.GA20765(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1378 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1378.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 364bd6b291401fb91cf4a6c3ebf2f6ba postgresql84-8.4.9-1.el5_7.1.i386.rpm 5002e23d1d7a56908742cf23a5d58fef postgresql84-contrib-8.4.9-1.el5_7.1.i386.rpm f40a6c867c1160d8a20f2ebc908029f2 postgresql84-devel-8.4.9-1.el5_7.1.i386.rpm 2675601d8666496d5c6e3c9b59bef984 postgresql84-docs-8.4.9-1.el5_7.1.i386.rpm 5a63475d6ec432a573309e587bad9468 postgresql84-libs-8.4.9-1.el5_7.1.i386.rpm 6d180c7a976fd6fa4560a71cda7ed542 postgresql84-plperl-8.4.9-1.el5_7.1.i386.rpm a8f83d1de9c92098800417a094be4270 postgresql84-plpython-8.4.9-1.el5_7.1.i386.rpm 2b979a1b6841f1c59c8f949f08767f84 postgresql84-pltcl-8.4.9-1.el5_7.1.i386.rpm 0da854e444c2ee918663445b1261a8ad postgresql84-python-8.4.9-1.el5_7.1.i386.rpm 97e72d729ba45bd66812ff60a3f4eab9 postgresql84-server-8.4.9-1.el5_7.1.i386.rpm 8b343e51df56355cc671384648c507bd postgresql84-tcl-8.4.9-1.el5_7.1.i386.rpm 225fc34d29b8d54997153bb189afc29b postgresql84-test-8.4.9-1.el5_7.1.i386.rpm Source: 90de9baee05c8e5b6626b5f72a10df6e postgresql84-8.4.9-1.el5_7.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 18 Oct 2011 19:01:00 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2011:1378 Moderate CentOS 5 x86_64 postgresql84 Update To: centos-announce(a)centos.org Message-ID: <20111018190100.GA20781(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:1378 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1378.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 72e907b4eaf6db414eb659a843595e6d postgresql84-8.4.9-1.el5_7.1.x86_64.rpm ecb76148eeb33dbc5718ac4055e35fce postgresql84-contrib-8.4.9-1.el5_7.1.x86_64.rpm f40a6c867c1160d8a20f2ebc908029f2 postgresql84-devel-8.4.9-1.el5_7.1.i386.rpm 7ee4ad83816519c99b8d41fd89b31dd4 postgresql84-devel-8.4.9-1.el5_7.1.x86_64.rpm 1b09054fe504c39980633f5283fcc1eb postgresql84-docs-8.4.9-1.el5_7.1.x86_64.rpm 5a63475d6ec432a573309e587bad9468 postgresql84-libs-8.4.9-1.el5_7.1.i386.rpm 85778207697d32a29a66fd44b6a2ed38 postgresql84-libs-8.4.9-1.el5_7.1.x86_64.rpm 776b408db48201d92861105d2899777f postgresql84-plperl-8.4.9-1.el5_7.1.x86_64.rpm 9eb1886e65fef0f1d741523b2b6bb3c3 postgresql84-plpython-8.4.9-1.el5_7.1.x86_64.rpm 500212038d969af99bcf5cbad598dd02 postgresql84-pltcl-8.4.9-1.el5_7.1.x86_64.rpm 70227e4ac793727b92d19553f7112e0f postgresql84-python-8.4.9-1.el5_7.1.x86_64.rpm 60c73a580d46b89967f5958d9ed0f18c postgresql84-server-8.4.9-1.el5_7.1.x86_64.rpm 6a0b72caccd8f4010b828511906b436d postgresql84-tcl-8.4.9-1.el5_7.1.x86_64.rpm 11dec83dc76bbe67025544b1ad95a4b9 postgresql84-test-8.4.9-1.el5_7.1.x86_64.rpm Source: 90de9baee05c8e5b6626b5f72a10df6e postgresql84-8.4.9-1.el5_7.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 80, Issue 7 **********************************************

1 0

network mapping software
by Jure Pečar 19 Oct '11

19 Oct '11

Hi all, I'm looking for network mapping software that would walk the local subnet and using snmp/cdp/nmap & friends produce a picture of network connections for documentation purposes. I've seen some for wintendo, but haven't found any decent for linux and CentOS specifically. Something like cheops-ng.sf.net would fill my needs, but before I start a fight with 5+ years old code to get it compiled, I'd like to hear what you guys are using. -- Jure Pečar http://jure.pecar.org http://f5j.eu

3 3

Fwd: Re: SELinux triggered during Libvirt snapshots
by Trey Dockendorf 19 Oct '11

19 Oct '11

Forwarding back to list. ---------- Forwarded message ---------- From: "Trey Dockendorf" <treydock(a)gmail.com> Date: Oct 17, 2011 10:06 AM Subject: Re: [CentOS] SELinux triggered during Libvirt snapshots To: "Daniel J Walsh" <dwalsh(a)redhat.com> On Mon, Oct 17, 2011 at 7:47 AM, Daniel J Walsh <dwalsh(a)redhat.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 10/14/2011 08:17 PM, Trey Dockendorf wrote: > > I recently began getting periodic emails from SEalert that SELinux > > is preventing /usr/libexec/qemu-kvm "getattr" access from the > > directory I store all my virtual machines for KVM. > > > > All VMs are stored under /vmstore , which is it's own mount point, > > and every file and folder under /vmstore currently has the correct > > context that was set by doing the following: > > > > semanage fcontext -a -t virt_image_t "/vmstore(/.*)?" restorecon -R > > /vmstore > > > > So far I've noticed then when taking snapshots and also when using > > virsh to make changes to a domain's XML file. I haven't had any > > problems for the 3 or 4 months I've run this KVM server using > > SELinux on Enforcing, and so I'm not really sure what information > > is helpful to debug this. The server is CentOS 6 x86_64 updated to > > CR. This is the raw audit entry, (hostname removed) > > > > node=kvmhost.tld type=AVC msg=audit(1318634450.285:28): avc: denied > > { getattr } for pid=1842 comm="qemu-kvm" name="/" dev=dm-2 ino=2 > > scontext=system_u:system_r:svirt_t:s0:c772,c779 > > tcontext=system_u:object_r:fs_t:s0 tclass=filesystem > > node=kvmhost.tld type=SYSCALL msg=audit(1318634450.285:28): > > arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff1cf153f0 > > a2=0 a3=7fff1cf15170 items=0 ppid=1 pid=1842 auid=4294967295 > > uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 > > fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" > > exe="/usr/libexec/qemu-kvm" > > subj=system_u:system_r:svirt_t:s0:c772,c779 key=(null) > > > > I've attached the alert email as a quote below, (hostname removed) > > > > Any help is greatly appreciated, I've had to deal little with > > SELinux fortunately, but at the moment am not really sure if my > > snapshots are actually functional or if this is just some false > > positive. > > > > Thanks - Trey > > > > Summary > >> > >> SELinux is preventing /usr/libexec/qemu-kvm "getattr" access on > >> /vmstore. > >> > >> Detailed Description > >> > >> SELinux denied access requested by qemu-kvm. It is not expected > >> that this > >>> access is required by qemu-kvm and this access may signal an > >>> intrusion attempt. It is also possible that the specific > >>> version or configuration of the application is causing it to > >>> require additional access. > >> > >> Allowing Access > >> > >> You can generate a local policy module to allow this access - see > >> FAQ > >>> Please file a bug report. > >> > >> Additional Information > >> > >> Source Context: system_u:system_r:svirt_t:s0:c772,c779 > >> > >> Target Context: system_u:object_r:fs_t:s0 > >> > >> Target Objects: /vmstore [ filesystem ] > >> > >> Source: qemu-kvm > >> > >> Source Path: /usr/libexec/qemu-kvm > >> > >> Port: <Unknown> > >> > >> Host: kvmhost.tld > >> > >> Source RPM Packages: qemu-kvm-0.12.1.2-2.160.el6_1.8 > >> > >> Target RPM Packages: > >> > >> Policy RPM: selinux-policy-3.7.19-93.el6_1.7 > >> > >> Selinux Enabled: True > >> > >> Policy Type: targeted > >> > >> Enforcing Mode: Enforcing > >> > >> Plugin Name: catchall > >> > >> Host Name: kvmhost.tld > >> > >> Platform: Linux kvmhost.tld 2.6.32-71.29.1.el6.x86_64 #1 SMP > >> Mon Jun 27 > >>> 19:49:27 BST 2011 x86_64 x86_64 > >> > >> Alert Count: 1 > >> > >> First Seen: Fri Oct 14 18:20:50 2011 > >> > >> Last Seen: Fri Oct 14 18:20:50 2011 > >> > >> Local ID: c73c7440-06ee-4611-80ac-712207ef9aa6 > >> > >> Line Numbers: > >> > >> Raw Audit Messages : > >> > >> > >>> node=kvmhost.tld type=AVC msg=audit(1318634450.285:28): avc: > >>> denied { getattr } for pid=1842 comm="qemu-kvm" name="/" > >>> dev=dm-2 ino=2 scontext=system_u:system_r:svirt_t:s0:c772,c779 > >>> tcontext=system_u:object_r:fs_t:s0 tclass=filesystem > >> > >> node=kvmhost.tld type=SYSCALL msg=audit(1318634450.285:28): > >> arch=c000003e > >>> syscall=138 success=no exit=-13 a0=9 a1=7fff1cf153f0 a2=0 > >>> a3=7fff1cf15170 items=0 ppid=1 pid=1842 auid=4294967295 uid=107 > >>> gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 > >>> tty=(none) ses=4294967295 comm="qemu-kvm" > >>> exe="/usr/libexec/qemu-kvm" > >>> subj=system_u:system_r:svirt_t:s0:c772,c779 key=(null) > >> > >> > >> > > _______________________________________________ CentOS mailing > > list CentOS(a)centos.org > > http://lists.centos.org/mailman/listinfo/centos > > > THis is a bug in policy. It can be allowed for now. > > We have 6.2 selinux-policy preview package available on > http://people.redhat.com/dwalsh/SELinux/RHEL6 > > I believe all that is happening is qemu-kvm is noticing you have a > file system mounted, and doing a getattr on it. > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iEYEARECAAYFAk6cI/8ACgkQrlYvE4MpobM6/QCg1qs8iK+dVRsPNVB+QXgr0zEN > +EMAnAghOHYB4INQ/NH1D4i9k3uJD7Ob > =TfIB > -----END PGP SIGNATURE----- > Thanks for the help Dan. Is there something that could have triggered this between 6.0 and 6.1? This server was updated to 6.0 CR around the same time this began happening, so I want to make sure if it's an issue in CR that I can file a useful bug report. When updating selinux-policy, do I have to update all the RPMs listed or will that one package suffice? Thanks - Trey

2 6

L9 - what is true?
by Jussi Hirvi 19 Oct '11

19 Oct '11

This code: boolean(null); ', '; boolean(string); ', '; boolean(integer);', '; boolean(array); ', '; boolean(map); ', '; gives: false, false, false, true, true This is different from L8. Is this intentional? If so, why? This has consequences which I think are counterintuitive: if(array(1) -> find('whatever')); This evaluates as true. - Jussi

1 1

Xfce from minimal install
by Johan Vermeulen 19 Oct '11

19 Oct '11

Dear All, because I have a lot of older machines and laptops (512Mb) I would like to use Xfce. So I installed CentOs 6 from the normal netinstall cd and selected minimal ( just over 200 packages). From there I enabled EPEL repo and did : #yum groupinstall Xfce after that I installed Xorg and the driver for Intel ( it's on a Dell laptop ) after startx I get a get a lot of gnome-session warnings; 'Unable to find provider 'gnome-panel' of 'gnome session: Pango warning ' and many more. So can anyone help me make further adjustments? thanks for any tips in advance. greetings, James Opensource Software is the future.

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
15
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2011