Discuss May 2012

discuss@lists.centos.org

193 participants
203 discussions

Another odd SELinux message
by James B. Byrne 28 May '12

28 May '12

Does anyone recognize this sort of message or have any idea what might cause it? May 28 11:00:06 inet09 setroubleshoot: [avc.ERROR] Plugin Exception catchall #012Traceback (most recent call last):#012 File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 191, in analyze_avc#012 report = plugin.analyze(avc)#012 File "/usr/share/setroubleshoot/plugins/catchall.py", line 67, in analyze#012 summary = self.summary + " on " + avc.tpath + "."#012UnicodeDecodeError: 'utf8' codec can't decode byte 0x80 in position 1: invalid start byte SELinux is preventing /bin/ps from search access on the directory D�. For complete SELinux messages. run sealert -l b9c81815-0139-45f7-ae92-4f77dd21a6e7 sealert -l b9c81815-0139-45f7-ae92-4f77dd21a6e7 Entity: line 70: parser error : Input is not proper UTF-8, indicate encoding ! Bytes: 0x80 0x3C 0x2F 0x74 <tpath>D�</tpath> ^ failed to connect to server: xmlParseDoc() failed I am also seeing a lot of these sorts of messages on the same server: May 28 10:49:26 inet09 setroubleshoot: SELinux is preventing /bin/ps from getattr access on the directory /proc/<pid>. For complete SELinux messages. run sealert -l 14393839-4be4-448f-9c29-34b7a5d53b9d May 28 10:49:26 inet09 setroubleshoot: SELinux is preventing /bin/ps from search access on the directory 1169. For complete SELinux messages. run sealert -l b2e0a936-a6fe-4551-b463-28b587d4daed sealert -l b2e0a936-a6fe-4551-b463-28b587d4daed SELinux is preventing /bin/ps from search access on the directory 1169. ***** Plugin catchall (100. confidence) suggests *************************** If you believe that ps should be allowed search access on the 1169 directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep ps /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp This particular server is running several Ruby-on-Rails (RoR) applications using Passenger (aka mod-rails). Passenger has a 'lot' of SELinux issues so this host is more or less a quarantine site for Rails apps. I am suspicious that Passenger is the cause because I see these reports as well: type=AVC msg=audit(1338217386.027:1839): avc: denied { read } for pid=4612 comm="ps" name="stat" dev=proc ino=11982 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:system_r:restorecond_t:s0 tclass=file Was caused by: Missing type enforcement (TE) allow rule. You can use audit2allow to generate a loadable module to allow this access. I wonder if Passenger is tracking system processes via ps to manage its user apps. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

mcelog SELinux errors
by James B. Byrne 28 May '12

28 May '12

Prowling around in the system logs this morning I discover the following entries: May 27 09:48:27 vhost01 mcelog: Cannot open logfile /var/log/mcelog: Permission denied May 27 09:48:27 vhost01 mcelog: failed to prefill DIMM database from DMI data May 27 09:48:27 vhost01 mcelog: Cannot bind to client unix socket `/var/run/mcel og-client': Permission denied and later: vhost01 setroubleshoot: SELinux is preventing /usr/sbin/mcelog from write access on the directory /var/run. For complete SELinux messages. run sealert -l 548d9d71-bac3-41eb-aa30-9b40e3f2a324 sealert -l 548d9d71-bac3-41eb-aa30-9b40e3f2a324 SELinux is preventing /usr/sbin/mcelog from write access on the directory /var/run. ***** Plugin catchall (100. confidence) suggests *************************** If you believe that mcelog should be allowed write access on the run directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep mcelog /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp This seems to my mind a bug either with the distributed SELinux policies or the software itself or somehow something has become very, very misconfigured. However, an semodule -l does not reveal any local policies installed on this server, so whatever is wrong it does not seem likely that the cause was a local modification. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] NTP and virtual guests
by James B. Byrne 28 May '12

28 May '12

On Mon, May 28, 2012 08:50, Reindl Harald wrote: > > > Am 28.05.2012 14:41, schrieb James B. Byrne: >> when power returned all of the restored guests were immediately >> shutdown by ntp because the time differential between the >> restored systems and that of the ntpd sync servers exceeded >> the panic threshold. > > how can ntpd shutdown a guest? I have no idea. Perhaps I misunderstood what the ntpd man page referred to as a panic. If it is not ntpd then I still need to discover some way of ensuring that all the KVM guests that were active at the time of a power failure automatically come back on line when the KVM host system starts up. I cannot find any reference to how this is done. Are there any recommended solutions? These systems are on UPS already but the power failure duration exceeded the endurance of the the UPS. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

NTP and virtual guests
by James B. Byrne 28 May '12

28 May '12

We encountered a problem with respect to KVM virtual host restore and NTP. Specifically, our VM test host was shutdown by an extended power outage and when power returned all of the restored guests were immediately shutdown by ntp because the time differential between the restored systems and that of the ntpd sync servers exceeded the panic threshold. This is not an acceptable situation so in the absence of something more elegant we are contemplating shutting down ntpd on virtual hosts and scheduling regular ntpd -q from cron instead. Is there an alternative to this? If not then what would be a recommended scheduling interval? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

CentOS-announce Digest, Vol 87, Issue 15
by centos-announce-request＠centos.org 27 May '12

27 May '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Mailserver move (Ralph Angenendt) ---------------------------------------------------------------------- Message: 1 Date: Sun, 27 May 2012 01:15:00 +0200 From: Ralph Angenendt <ralph.angenendt(a)gmail.com> Subject: [CentOS-announce] Mailserver move To: centos(a)centos.org, centos-devel(a)centos.org, centos-mirror(a)centos.org, centos-qa(a)centos.org, centos-announce(a)centos.org Message-ID: <20120526231500.GA28507(a)reboot.strg-alt-entf.org> Content-Type: text/plain; charset=us-ascii Hi subscribers, the sponsor of the machine our mailserver runs on will be physically moving the machine at around May 27th 04:00 UTC. This move will take until around May 27th 07:00 UTC (or shorter). This means that there will be no activity on the mailing lists during that time. We all hope that the machine will come up without problems again after the move. If it doesn't, service (mailing lists) might be interrupted for a few more hours. We apologize for any inconvenience this might cause you. Regards, Ralph ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 87, Issue 15 ***********************************************

1 0

Mailserver move
by Ralph Angenendt 27 May '12

27 May '12

Hi subscribers, the sponsor of the machine our mailserver runs on will be physically moving the machine at around May 27th 04:00 UTC. This move will take until around May 27th 07:00 UTC (or shorter). This means that there will be no activity on the mailing lists during that time. We all hope that the machine will come up without problems again after the move. If it doesn't, service (mailing lists) might be interrupted for a few more hours. We apologize for any inconvenience this might cause you. Regards, Ralph

2 1

Re: [CentOS] Mysterious versioning reported by file command
by Frank Cox 27 May '12

27 May '12

On Sat, 26 May 2012 21:32:52 +0200 Reindl Harald wrote: > from the binary, "file" does only print what a file contains Ok, then where does it come from, since it's not the current kernel version and it's not the elfutils version? gcc somehow finds that number and inserts it into the binary. Where did it find it and why is that number not the same as the other stuff, notably the kernel, since it appears to be a kernel version number? Just not the current kernel version number. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

2 1

Re: [CentOS] Mysterious versioning reported by file command
by Frank Cox 26 May '12

26 May '12

On Sat, 26 May 2012 10:25:54 +0200 Reindl Harald wrote: > > Why does the output from file say "Linux 2.6.18" when the actual kernel in > > use is 2.6.32? > > it DOES NOT, learn to read outputs - it speaks about the elfutils > why should their output reflect the current kernel point version > it is not their job because "uname" exists [frankcox@mutt ~]$ rpm -q elfutils elfutils-0.152-1.el6.x86_64 That's not version 2.6.18 either. My question is, where does that 2.6.18 come from? It's not the current kernel version, it's not the gcc version, and it's not the current elfutils version either. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

2 1

support for Broadcom BCM4313
by Philippe Naudin 26 May '12

26 May '12

Hello, The support for Broadcom Corporation BCM4313 802.11b/g/n Wireless is native in the kernel since 2.6.37 (module brcm80211, renamed brcmsmac since 2.6.39). But is it backported to some kernel available for CentOS ? Thanks, -- Philippe Naudin

4 7

Mysterious versioning reported by file command
by Frank Cox 26 May '12

26 May '12

I just noticed this, which doesn't actually seem to affect anything but does create a mystery: [frankcox@mutt temp]$ cat test.c #include <stdio.h> int main(void) { printf("Hello world\n"); return 0; } [frankcox@mutt temp]$ gcc -o test test.c [frankcox@mutt temp]$ file test test: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, not stripped [frankcox@mutt temp]$ uname -a Linux mutt.melvilletheatre.net 2.6.32-220.17.1.el6.x86_64 #1 SMP Wed May 16 00:01:37 BST 2012 x86_64 x86_64 x86_64 GNU/Linux Why does the output from file say "Linux 2.6.18" when the actual kernel in use is 2.6.32? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
21
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2012