Discuss September 2011

discuss@lists.centos.org

268 participants
252 discussions

Where are the CentOS 6 security updates?
by Lintula 09 Sep '11

09 Sep '11

The release announcement for CentOS-6.0 posted on CentOS-announce on Sun Jul 10 mentioned that: > Since upstream has a 6.1 version already released, we will be using a > Continous Release repository for 6.0 to bring all 6.1 and post 6.1 > security updates to all 6.0 users, till such time as CentOS-6.1 is > released itself. There will be more details about this posted within the > next 48 hours. I have not noticed anything said about this since, and I can't find any security updates. Firefox, for instance, is at 3.6.9. This is about a year old with many known security problems, so it really shouldn't be used. CentOS 5 and RHEL 6 have 3.6.18. Are there still no security updates available for CentOS 6, or have I just managed to completely miss how to access them?

9 8

CentOS5 with Dell Broadcom iSCSI Offload, does it work ?
by Antonio da Silva Martins Junior 09 Sep '11

09 Sep '11

Hi all, After finding multiples answers to this question via google, but without making it work on my servers. Has anybody iSCSI Offload working on a Dell Server with Broadcom NICs ? My environment: I'm running CentOS 5.6 CR, on a Dell PowerEdge R710 with Broadcom Corporation NetXtreme II BCM5709 conecting to an EMC CX4-120 SAN, via 2x Cisco 2960G-24TC-L switches. It's working without the iSCSI offload. Thanks in advance, Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analyst | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: asmartins(a)uem.br / shadow(a)uem.br | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ "Real Programmers don’t need comments — the code is obvious."

4 4

Re: [CentOS] CentOS5 with Dell Broadcom iSCSI Offload, does it work ?
by Antonio da Silva Martins Junior 09 Sep '11

09 Sep '11

----- "Steve Walsh" <steve(a)nerdvana.net.au> escreveu: > De: "Steve Walsh" <steve(a)nerdvana.net.au> > Para: centos(a)centos.org > Enviadas: Sexta-feira, 9 de Setembro de 2011 9:17:50 (GMT-0300) Auto-Detected > Assunto: Re: [CentOS] CentOS5 with Dell Broadcom iSCSI Offload, does it work ? > > On 09/09/2011 10:05 PM, Drew Weaver wrote: > > Hi, > > > > I could be wrong here but don't you go into the Broadcom NIC > > configuration while the server is booting and add the iSCSI target in > > there and then it should appear as "Just Another Volume (TM)" to the > > operating system? > > > > I've never tried it but I assume thats how the 'offloading' works. > > close, but not. TCP Offloading (obviously) offloads the TCP protocol > processing from the server CPU onto the server adapter. This preserves > valuable CPU cycles for applications processing and improves overall > server performance and network efficiency, as the heavy lifting for > iSCSI is done on the card, by the card. > > <snip> > > After finding multiples answers to this question via google, but > > without making it work on my servers. Has anybody iSCSI Offload > > working on a Dell Server with Broadcom NICs ? > > Depending on how the Broadcom is in the server (ie - Physical Card vs > onboard mezzanine card) depends on if you enable it in BIOS, or switch > into the firmware when prompted at boot time to enable it. Hi, Well... I looked into the NICs config to make sure it's on. On BIOS I can see the 4 onboard NICs. On these I can chage from "no boot" / PXE / iSCSI boot. And the BIOS "detect" that this NICs are TOE & ISOE "capable". I had PXE on the first one and "no boot" on the other 3. From the NICs firmware menu I can see all the 8 NICs (including the 4 onboard), I can change the same options, no option to enable/disable iSCSI Offload, only iSCSI boot. I'm trying the instructions from: - http://www.open-iscsi.org/docs/README - http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/pdf/Online_Sto… - http://webpages.marshall.edu/~wolfe21/papers/rhel5-iscsi-HOWTO.pdf All of these say almost the same, and I can configure open-iscsi to access the EMC SAN using the two broadcom NICs using dm-multipath. But when I tryed to use the second MAC on the NIC (to activate iSCSI Offload) then I can't connect on the SAN. I can discovery it using the second MAC, but can't connect. Using "default" iface, it will conect using eth1 or eth2: [root@vHst-153-NEAD03 ~]# iscsiadm -m discoverydb -t st -p 10.252.1.1:3260 -I default --discover -P 1 Target: iqn.1992-04.com.emc:cx.ckm00091500140.a2 Portal: 10.252.1.1:3260,1 Iface Name: default Target: iqn.1992-04.com.emc:cx.ckm00091500140.b2 Portal: 10.252.1.2:3260,2 Iface Name: default Target: iqn.1992-04.com.emc:cx.ckm00091500140.a3 Portal: 10.252.2.1:3260,3 Iface Name: default Target: iqn.1992-04.com.emc:cx.ckm00091500140.b3 Portal: 10.252.2.2:3260,4 Iface Name: default [root@vHst-153-NEAD03 ~]# iscsiadm -m node -I default -lLogging in to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.a3, portal: 10.252.2.1,3260] Logging in to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.b2, portal: 10.252.1.2,3260] Logging in to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.b3, portal: 10.252.2.2,3260] Logging in to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.a2, portal: 10.252.1.1,3260] Login to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.a3, portal: 10.252.2.1,3260] successful. Login to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.b2, portal: 10.252.1.2,3260] successful. Login to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.b3, portal: 10.252.2.2,3260] successful. Login to [iface: default, target: iqn.1992-04.com.emc:cx.ckm00091500140.a2, portal: 10.252.1.1,3260] successful. [root@vHst-153-NEAD03 ~]# iscsiadm -m session tcp: [5] 10.252.2.1:3260,3 iqn.1992-04.com.emc:cx.ckm00091500140.a3 tcp: [6] 10.252.1.2:3260,2 iqn.1992-04.com.emc:cx.ckm00091500140.b2 tcp: [7] 10.252.2.2:3260,4 iqn.1992-04.com.emc:cx.ckm00091500140.b3 tcp: [8] 10.252.1.1:3260,1 iqn.1992-04.com.emc:cx.ckm00091500140.a2 [root@vHst-153-NEAD03 ~]# iscsiadm -m session -P 1 Target: iqn.1992-04.com.emc:cx.ckm00091500140.a3 Current Portal: 10.252.2.1:3260,3 Persistent Portal: 10.252.2.1:3260,3 ********** Interface: ********** Iface Name: default Iface Transport: tcp Iface Initiatorname: iqn.1994-05.com.redhat:vHst-153-NEAD03 Iface IPaddress: 10.252.2.153 Iface HWaddress: <empty> Iface Netdev: <empty> SID: 5 iSCSI Connection State: LOGGED IN iSCSI Session State: LOGGED_IN Internal iscsid Session State: NO CHANGE <snip> But, if I try the same with the eth1 offload, I get: [root@vHst-153-NEAD03 ~]# ifconfig eth1 eth1 Link encap:Ethernet Endereço de HW BC:30:5B:FD:F7:E7 inet end.: 10.252.1.153 Bcast:10.252.1.255 Masc:255.255.255.0 endereço inet6: fe80::be30:5bff:fefd:f7e7/64 Escopo:Link UP BROADCASTRUNNING MULTICAST MTU:9000 Métrica:1 RX packets:735 errors:0 dropped:0 overruns:0 frame:0 TX packets:8 errors:0 dropped:0 overruns:0 carrier:0 colisões:0 txqueuelen:1000 RX bytes:47040 (45.9 KiB) TX bytes:620 (620.0 b) IRQ:26 Memória:d2000000-d2012800 [root@vHst-153-NEAD03 ~]# iscsiadm -m iface default tcp,<empty>,<empty>,<empty>,<empty> iser iser,<empty>,<empty>,<empty>,<empty> bnx2i.bc:30:5b:fd:f7:e8 bnx2i,bc:30:5b:fd:f7:e8,10.252.1.53,<empty>,<empty> bnx2i.bc:30:5b:fd:f7:ea bnx2i,bc:30:5b:fd:f7:ea,10.252.2.53,<empty>,<empty> [root@vHst-153-NEAD03 ~]# iscsiadm -m iface -I bnx2i.bc:30:5b:fd:f7:e8 # BEGIN RECORD 2.0-872 iface.iscsi_ifacename = bnx2i.bc:30:5b:fd:f7:e8 iface.net_ifacename = <empty> iface.ipaddress = 10.252.1.53 iface.hwaddress = bc:30:5b:fd:f7:e8 iface.transport_name = bnx2i iface.initiatorname = <empty> # END RECORD [root@vHst-153-NEAD03 ~]# iscsiadm -m discoverydb -t st -p 10.252.1.1:3260 -I bnx2i.bc:30:5b:fd:f7:e8 --discover -P 1 Target: iqn.1992-04.com.emc:cx.ckm00091500140.a2 Portal: 10.252.1.1:3260,1 Iface Name: bnx2i.bc:30:5b:fd:f7:e8 Target: iqn.1992-04.com.emc:cx.ckm00091500140.b2 Portal: 10.252.1.2:3260,2 Iface Name: bnx2i.bc:30:5b:fd:f7:e8 Target: iqn.1992-04.com.emc:cx.ckm00091500140.a3 Portal: 10.252.2.1:3260,3 Iface Name: bnx2i.bc:30:5b:fd:f7:e8 Target: iqn.1992-04.com.emc:cx.ckm00091500140.b3 Portal: 10.252.2.2:3260,4 Iface Name: bnx2i.bc:30:5b:fd:f7:e8 [root@vHst-153-NEAD03 ~]# iscsiadm -m node -I bnx2i.bc:30:5b:fd:f7:e8 -l Logging in to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.a3, portal: 10.252.2.1,3260] Logging in to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.b2, portal: 10.252.1.2,3260] Logging in to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.b3, portal: 10.252.2.2,3260] Logging in to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.a2, portal: 10.252.1.1,3260] iscsiadm: Could not login to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.a3, portal: 10.252.2.1,3260]. iscsiadm: initiator reported error (8 - connection timed out) iscsiadm: Could not login to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.b2, portal: 10.252.1.2,3260]. iscsiadm: initiator reported error (8 - connection timed out) iscsiadm: Could not login to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.b3, portal: 10.252.2.2,3260]. iscsiadm: initiator reported error (8 - connection timed out) iscsiadm: Could not login to [iface: bnx2i.bc:30:5b:fd:f7:e8, target: iqn.1992-04.com.emc:cx.ckm00091500140.a2, portal: 10.252.1.1,3260]. iscsiadm: initiator reported error (8 - connection timed out) iscsiadm: Could not log into all portals Well, has anybody make this to work ? What I'm missing ? Thanks in advance, Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analyst | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: asmartins(a)uem.br / shadow(a)uem.br | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ "Real Programmers don’t need comments — the code is obvious."

1 0

CentOS-announce Digest, Vol 79, Issue 4
by centos-announce-request＠centos.org 09 Sep '11

09 Sep '11

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2011:1264 Important CentOS 4 i386 gstreamer-plugins - security update (Tru Huynh) 2. CESA-2011:1264 Important CentOS 4 x86_64 gstreamer-plugins - security update (Tru Huynh) 3. CESA-2011:1267 Important CentOS 4 i386 thunderbird - security update (Tru Huynh) 4. CESA-2011:1267 Important CentOS 4 x86_64 thunderbird - security update (Tru Huynh) 5. CESA-2011:1266 Important CentOS 4 i386 seamonkey - security update (Tru Huynh) 6. CESA-2011:1266 Important CentOS 4 x86_64 seamonkey - security update (Tru Huynh) 7. CESA-2011:1268 Important CentOS 4 i386 firefox - security update (Tru Huynh) 8. CESA-2011:1268 Important CentOS 4 x86_64 firefox - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 8 Sep 2011 19:33:02 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2011:1264 Important CentOS 4 i386 gstreamer-plugins - security update To: centos-announce(a)centos.org Message-ID: <20110908173302.GA2605(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2011:1264 gstreamer-plugins security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2011-1264.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/gstreamer-plugins-0.8.5-1.EL.4.i386.rpm updates/i386/RPMS/gstreamer-plugins-devel-0.8.5-1.EL.4.i386.rpm source: updates/SRPMS/gstreamer-plugins-0.8.5-1.EL.4.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update gstreamer-plugins Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Problems with the epel GPG key
by m.roth＠5-cent.us 09 Sep '11

09 Sep '11

I just went to install fail2ban, and it kept failing, complaining about the EPEL GPG key. It was installed... and yum worked, once I did ln -s /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6 /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL Small problem there.... mark

4 5

Trying to understand SELinux MSG
by Robert Spangler 09 Sep '11

09 Sep '11

Hello, I received the below SELinux message today and I am trying to figure out what caused it. I see what it says under Allow Access but I am not sure this is what I really want to do without know why it happened in the first place. What should I be looking at to understand what or why this has happened? Any help I would be most grateful for. Here is the output form SELinux SUMMARY: SELinux is preventing access to files with the label, file_t. Detailed Description: SELinux permission checks on files labeled file_t are being denied. file_t is the context the SELinux kernel gives to files that do not have a label. This indicates a serious labeling problem. No files on an SELinux box should ever be labeled file_t. If you have just added a new disk drive to the system you can relabel it using the restorecon command. Otherwise you should relabel the entire files system. Allowing Access: You can execute the following command as root to relabel your computer system: "touch /.autorelabel; reboot" Additional Information: Source Context: user_u:system_r:pam_console_t Target Context: system_u:object_r:file_t Target Objects: / [ dir ] Source: pam_console_appSource Path: /sbin/pam_console_apply Port: <Unknown> Host: host1.mycompany.com Source RPM Packages: pam-0.99.6.2-6.el5_5.2 Target RPM Packages: filesystem-2.4.0-3.el5.centos Policy RPM: selinux-policy-2.4.6-316.el5 Selinux Enabled: True Policy Type: targeted MLS Enabled: True Enforcing Mode: Enforcing Plugin Name: file Host Name: host1.mycompany.com Platform: Linux host1.mycompany.com 2.6.18-238.19.1.el5 #1 SMP Fri Jul 15 07:31:24 EDT 2011 x86_64 x86_64 Alert Count: 77 First Seen: Thu 08 Sep 2011 02:04:40 PM EDT Last Seen: Thu 08 Sep 2011 02:04:45 PM EDT Local ID: 39ba9c3c-5ac0-4b91-aab1-8d871c20162c Line Numbers: Raw Audit Messages : host=host1.mycompany.com type=AVC msg=audit(1315505085.751:14929): avc: denied { read } for pid=690 comm="pam_console_app" name="/" dev=md4 ino=2 scontext=user_u:system_r:pam_console_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir host=host1.mycompany.com type=SYSCALL msg=audit(1315505085.751:14929): arch=c000003e syscall=2 success=no exit=-13 a0=7fff0f2076c0 a1=10800 a2=0 a3=7fff0f209cca items=0 ppid=631 pid=690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="pam_console_app" exe="/sbin/pam_console_apply" subj=user_u:system_r:pam_console_t:s0 key=(null) -- Regards Robert Linux The adventure of a lifetime. Linux User #296285 Get Counted http://linuxcounter.net/

3 4

CentOS 6: Making KDE Default
by Michael D. Berger 09 Sep '11

09 Sep '11

I learned from Anne that if I boot to level 5, after I enter the username, can select Gnome or KDE. I note that the default is always Gnome. How can I make the default KDE? How can I get KDE with startx after booting to level 3? Thanks, Mike.

12 34

CentOS 6 Installation on Thinkpad X220
by Janne Nyman 09 Sep '11

09 Sep '11

I am trying to install CentOS 6 x86_64 on a Lenovo Thinkpad x220. During the installation it asks me to insert a driver. Has anyone done this successfully? -- Rgds, Janne Nyman M: +44 751 696 1842 E: jnyman(a)jbtec.org

3 2

HBA port
by Paras pradhan 09 Sep '11

09 Sep '11

Hi, I have a host which is connected to SAN via single Fibre channel HBA (qlogic). I have several LUNS assigned to this (sdc, sdd). I added another single port HBA to this host. I can now see two world wide names. Now the confusion is which world wide name does sdc and sdd is/was using. scsi_id -g -u -s /block/sdc only gives wwid but I need the wwn for sdc and sdd. Thanks Paras.

2 1

Networking question
by tdukes＠sc.rr.com 09 Sep '11

09 Sep '11

Hello, Is it possible to use a mobile hot spot such as the one from Verizon to run a home network? Is there a way to do this without having to buy wireless cards? I was thinking maybe I would have to buy one for my centos machine which acts as my gateway but would like to have other devices wired. Not sure if a wireless router or access point would allow me to do so. TIA, Eddie

8 16

← Newer
1
...
15
16
17
18
19
20
21
...
26
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2011