Discuss June 2012

discuss@lists.centos.org

185 participants
178 discussions

Configure KVM
by jiten jha 18 Jun '12

18 Jun '12

Dear Friends, How to configure KVM in centos 5.6. Can you send me documentation with all configuration and process. -- Regards Jitendra Jha

4 4

10gb :: ixgbe :: ssl problems?
by Adrian Sevcenco 18 Jun '12

18 Jun '12

Hi! Did anyone encountered some ssl transaction problems with latest version of ixgbe? i had some very strange problem with nodes with private ip (the server with 10 gb interface was masquerading the nodes behind a switch with 10gb and 1 gb interfaces) i used the latest drivers and the ssl conection could be made .. as soon as i used the 2.6.18-308.8.1.el5 driver (3.4.8-k) the problem vanished... What am i missing? how can a network driver have effect on ssl transactions? Thank you for any info ..i feel like in twilight zone :( Adrian

1 0

centos 6.2 mirror no yum grouplist
by Natxo Asenjo 18 Jun '12

18 Jun '12

hi, I have created a 6.2 local repository in our lan and it works fine for packages. However, when trying to use the yum groups, I get this: # yum grouplist Loaded plugins: fastestmirror, security Setting up Group Process Loading mirror speeds from cached hostfile Error: No group data available for configured repositories I have tried downloading one comps.xml file (I have tried both with http://mirror.centos.org/centos/6.2/os/i386/repodata/e9226c33fcd943a60c7a63… with http://mirror.centos.org/centos/6.2/os/i386/repodata/cffddde71947e5fe5a7ce5…) and rebuilding the repo with createrepo -g /path/to/xml /path/to/rpms, but after cleaning the yum cache and remaking the cache on the client I still have the same error. I am obviously doing something wrong, but I do not see what. Any hints greatly appreciated The repos are created with mrepo, in case this is important. Any hints greatly appreciated. -- Groeten, natxo

1 0

[HW/OT] Recommend vendor to recover data from LTO4 tapes
by Arun Khan 18 Jun '12

18 Jun '12

Posting here in the hope that some one may have encountered problems with recovery from backups on LTO4 media and found a solution. Back ups on FujiFilm LTO4 media (800/1600). Archives created using tar -cf /dev/nst0. The tapes were fine when the archives were created (tested by extracting random sample files from them) but something went wrong in storage (no physical damage). Now a few LTO4 tapes are giving I/O errors when I try to extract data from them. Tried dd_rescue and that too fails giving I/O errors. I am wondering if there are any service providers, to extract the data out of the magnetic tapes in a fashion similar to "dead" hard disks. Please share info if you know of any such provider. Thanks, -- Arun Khan

3 2

unfsd scalability issues
by Boris Epstein 17 Jun '12

17 Jun '12

Hello there, I believe that unfsd ( http://unfs3.sourceforge.net/ ) now does have multi-threaded capability and as such should be fairly well scalable. I am using it on CentOS 6.2 and it seems to become all but unusable when more then 3-4 users connect to it. Is that normal? What sort of experience have other people had? Is there a way to parametrically tune it, by the way? Thanks. Boris.

8 18

Resizing est4 filesystem while mounted
by Jeff Boyce 17 Jun '12

17 Jun '12

Greetings - I had a logical volume that was running out of space on a virtual machine. I successfully expanded the LV using lvextend, and lvdisplay shows that it has been expanded. Then I went to expand the filesystem to fill the new space (# resize2fs -p /dev/vde1) and I get the results that the filesystem is already xx blocks long, nothing to do. If I do a # df -h, I can see that the filesystem has not been extended. I could kick the users off the VM, reboot the VM using a GParted live CD and extend the filesystem that way, but I thought that it was possible to do this live and mounted? The RH docs say this is possible; the man page for resize2fs also says it is possible with ext4. What am I missing here? This is a Centos 6.2 VM with an ext4 filesystem. The logical volumes are setup on the host system which is also a Centos 6.2 system. Jeff Boyce Meridian Environmental

5 5

Sendmail SMTP Brute-Force Attack
by Gustavo Lacoste 16 Jun '12

16 Jun '12

Dear CentOS Community Is totally clear there's no support sendmail platform today, but I need to stop SMTP brute-force attack on sendmail. My server is attacked today, my maillog look like : 4624(a)myserver.com>, proto=ESMTP, daemon=MTA, relay=myserver.com [127.0.0.1] Jun 14 19:07:01 at6412 sendmail[24627]: q5EN71jC024627: from=<>, size=3958, class=0, nrcpts=1, msgid=<201206142307.q5EN710u024623(a)myserver.com>, proto=ESMTP, daemon=MTA, relay=myserver.com [127.0.0.1] Jun 14 19:07:23 at6412 sendmail[24868]: q5EN7M6D024868: from=< qmarket(a)qmarket.cl>, size=2193, class=0, nrcpts=2, msgid=< 20120614231448.1E99A13EE5F(a)smtp02qmarket.qmarket.cl>, proto=ESMTP, daemon=MTA, relay=[200.1.174.121] Jun 14 19:07:24 at6412 sendmail[24961]: q5EN7OT4024961: from=< nobody(a)2012.123icq.cl>, size=4716, class=0, nrcpts=1, msgid=< E1SfJ8H-0005kv-JE(a)2012.123icq.cl>, proto=ESMTP, daemon=MTA, relay= pc1.globalmac.cl [200.29.231.61] (may be forged) Jun 14 19:07:33 at6412 sendmail[25013]: q5EN7SqK025013: from=< a.pfsvtij(a)yahoo.com>, size=760, class=0, nrcpts=1, msgid=< 1531549-634033-36(a)owfzdl.net>, proto=SMTP, daemon=MTA, relay= h095159149119.ys.dsl.sakhalin.ru [95.159.149.119] Jun 14 19:07:37 at6412 sendmail[25065]: q5EN7bCj025065: from=< en.viaimport(a)gmail.com>, size=4531, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=186-105-73-29.baf.movistar.cl [186.105.73.29] I need help for STOP this spamers right now. Thanks in advance to anyone who can guide me With Kind Regards, Gustavo A. Lacoste Z. Curacautín - Chile Skype: knxroot Msn & Gtalk: knx.root [at] gmail.com Home page: http://www.lacosox.org - - *Por favor, evite enviarme documentos adjuntos en formato Word o PowerPoint. Lea http://www.gnu.org/philosophy/no-word-attachments.es.html*

9 16

Centos 6 / Kickstart Using degraded mdadm RAID1
by Emmanuel Noobadmin 16 Jun '12

16 Jun '12

I'm trying to install a bunch of C6 involving initially degraded mdadm RAID 1 Anaconda refuses to let me create a RAID 1 array with only one member. Based on some reading, it seems that I should be able to use kickstart with the PRE scripts to do this. However, after trying for a couple of hours, it doesn't seem that anaconda will allow it, it just boots the created arrays. At best I end up with a list of softraid partitions instead. Am I trying the impossible or has anybody done this before and can point to a resource how on this can be done?

2 5

Strange su behavior after installing latest CentOS updates
by Alfred von Campe 16 Jun '12

16 Jun '12

I did a "yum update" on my CentOS 6 systems yesterday for the first time in about a month and now have some automated processes failing because the PATH is not set up correctly when using "su". The problem is very easy to see by comparing the output of the following two commands: # su - <user> -c "env | grep PATH" # su <user> -c "env | grep PATH" Before yesterday's update, and on any CentOS 6.2 systems without the latest (in the last month) updates and all CentOS 5.8 systems, PATH contained anything that was set in /etc/profile.d, but it appears that it does not run anything in that directory after yesterday's update. As I mentioned before, this is breaking a lot of automated process that relied on the PATH being set correctly when doing a "su - <user> -c ...". Is this a known issue? Is anyone else affected by it? In case it matters, I'll include the list of all the packages that were installed yesterday at the end of this message. Thanks, Alfred Installed: kernel.i686 0:2.6.32-220.17.1.el6 kernel-devel.i686 0:2.6.32-220.17.1.el6 Updated: ImageMagick.i686 0:6.5.4.7-6.el6_2 apr.i686 0:1.3.9-5.el6_2 autocorr-en.noarch 1:3.2.1-19.6.el6_2.7 bash.i686 0:4.1.2-9.el6_2 bind-libs.i686 32:9.7.3-8.P3.el6_2.3 bind-utils.i686 32:9.7.3-8.P3.el6_2.3 epel-release.noarch 0:6-7 expat.i686 0:2.0.1-11.el6_2 firefox.i686 0:10.0.5-1.el6.centos flash-plugin.i686 0:11.2.202.236-0.1.el6.rf gnome-power-manager.i686 0:2.28.3-6.el6_2 google-chrome-stable.i386 0:19.0.1084.56-140965 java-1.6.0-openjdk.i686 1:1.6.0.0-1.48.1.11.3.el6_2 java-1.6.0-openjdk-devel.i686 1:1.6.0.0-1.48.1.11.3.el6_2 java-1.6.0-openjdk-javadoc.i686 1:1.6.0.0-1.48.1.11.3.el6_2 kernel-firmware.noarch 0:2.6.32-220.17.1.el6 kernel-headers.i686 0:2.6.32-220.17.1.el6 libatasmart.i686 0:0.17-4.el6_2 libsmbclient.i686 0:3.5.10-116.el6_2 net-tools.i686 0:1.60-110.el6_2 nfs-utils.i686 1:1.2.3-15.el6_2.1 openoffice.org-brand.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-calc.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-calc-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-draw.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-draw-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-graphicfilter.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-impress.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-impress-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-langpack-en.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-math.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-math-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-opensymbol-fonts.noarch 1:3.2.1-19.6.el6_2.7 openoffice.org-pdfimport.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-presenter-screen.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-ure.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-writer.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-writer-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-xsltfilter.i686 1:3.2.1-19.6.el6_2.7 openssl.i686 0:1.0.0-20.el6_2.5 openssl-devel.i686 0:1.0.0-20.el6_2.5 postgresql-libs.i686 0:8.4.11-1.el6_2 samba.i686 0:3.5.10-116.el6_2 samba-client.i686 0:3.5.10-116.el6_2 samba-common.i686 0:3.5.10-116.el6_2 samba-winbind-clients.i686 0:3.5.10-116.el6_2 socat.i686 0:1.7.2.1-1.el6.rf sos.noarch 0:2.2-17.el6_2.3 sudo.i686 0:1.7.4p5-9.el6_2 tcsh.i686 0:6.17-19.el6_2 tzdata.noarch 0:2012c-1.el6 tzdata-java.noarch 0:2012c-1.el6 xulrunner.i686 0:10.0.5-1.el6.centos

3 4

Puppet + Passenger SELinux issues
by Trey Dockendorf 15 Jun '12

15 Jun '12

I recently setup my Puppetmaster server to run through Passenger via Apache instead of on the default webrick web server. SELinux made that not work and I've found some documentation on making rules to allow it however mine won't load. This is the policy I found via this website, http://sandcat.nl/~stijn/2012/01/20/selinux-passenger-and-puppet-oh-my/comm… . module puppet_passenger 1.7; require { type bin_t; type devpts_t; type httpd_t; type passenger_t; type port_t; type proc_net_t; class process { getattr siginh setexec sigchld noatsecure transition rlimitinh }; class unix_stream_socket { getattr accept read write }; class capability { sys_resource sys_ptrace }; class file { entrypoint open create relabelfrom relabelto getattr setattr read write append ioctl lock rename link unlink }; class lnk_file { getattr read }; class udp_socket name_bind; class dir { getattr setattr add_name remove_name search open read write ioctl lock }; } #============= httpd_t ============== allow httpd_t port_t:udp_socket name_bind; allow httpd_t proc_net_t:file { read getattr open }; allow httpd_t bin_t:file entrypoint; allow httpd_t passenger_t:process sigchld; allow httpd_t passenger_t:unix_stream_socket { getattr accept read write }; optional_policy(` puppet_manage_lib(httpd_t) puppet_search_log(httpd_t) puppet_search_pid(httpd_t) allow httpd_t puppet_var_lib_t:file { relabelfrom relabelto }; ') #============= passenger_t ============== allow passenger_t devpts_t:dir search; allow passenger_t httpd_t:process { siginh rlimitinh transition noatsecure }; allow passenger_t self:capability { sys_resource sys_ptrace }; allow passenger_t self:process setexec; ps_process_pattern(passenger_t, httpd_t) domain_read_all_domains_state(passenger_t) Using the SELinux Make file works but when I try to add the new policy via "semodule -i puppet_passenger.pp" I get the following # semodule -i puppet_passenger.pp libsepol.print_missing_requirements: puppet_passenger's global requirements were not met: type/attribute passenger_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! The blog I got the policy from mentioned disabling the rubygem_passenger policy, is that where passenger_t is defined? I've looked at the source of selinux-policy and see the required type of passenger_t is working so unsure why it doesn't work in my policy. The policy from audit2allow generates this when using "grep -e 'httpd\|passenger'" but it seems like too much allowance module passenger 1.0; require { type unconfined_t; type semanage_t; type init_t; type system_cronjob_t; type mysqld_t; type syslogd_t; type apmd_t; type initrc_t; type postfix_local_t; type puppet_etc_t; type setfiles_t; type rpm_t; type unlabeled_t; type var_run_t; type kernel_t; type puppet_var_run_t; type puppet_var_lib_t; type auditd_t; type httpd_t; type rpm_var_lib_t; type postfix_cleanup_t; type postfix_master_t; type inetd_t; type udev_t; type mysqld_safe_t; type postfix_pickup_t; type sshd_t; type crond_t; type getty_t; type postfix_qmgr_t; type ntpd_t; class sock_file { write unlink open }; class capability { sys_resource sys_ptrace }; class process setexec; class dir { write getattr read create search add_name }; class file { execute read create execute_no_trans write open append }; } #============= httpd_t ============== allow httpd_t apmd_t:dir { getattr search }; allow httpd_t apmd_t:file { read open }; allow httpd_t auditd_t:dir { getattr search }; allow httpd_t auditd_t:file { read open }; allow httpd_t crond_t:dir { getattr search }; allow httpd_t crond_t:file { read open }; allow httpd_t getty_t:dir { getattr search }; allow httpd_t getty_t:file { read open }; allow httpd_t inetd_t:dir { getattr search }; allow httpd_t inetd_t:file { read open }; allow httpd_t init_t:dir { getattr search }; allow httpd_t init_t:file { read open }; allow httpd_t initrc_t:dir { getattr search }; allow httpd_t initrc_t:file { read open }; allow httpd_t kernel_t:dir { getattr search }; allow httpd_t kernel_t:file { read open }; allow httpd_t mysqld_safe_t:dir { getattr search }; allow httpd_t mysqld_safe_t:file { read open }; allow httpd_t mysqld_t:dir { getattr search }; allow httpd_t mysqld_t:file { read open }; allow httpd_t ntpd_t:dir { getattr search }; allow httpd_t ntpd_t:file { read open }; allow httpd_t postfix_cleanup_t:dir { getattr search }; allow httpd_t postfix_cleanup_t:file { read open }; allow httpd_t postfix_local_t:dir { getattr search }; allow httpd_t postfix_local_t:file { read open }; allow httpd_t postfix_master_t:dir { getattr search }; allow httpd_t postfix_master_t:file { read open }; allow httpd_t postfix_pickup_t:dir { getattr search }; allow httpd_t postfix_pickup_t:file { read open }; allow httpd_t postfix_qmgr_t:dir { getattr search }; allow httpd_t postfix_qmgr_t:file { read open }; allow httpd_t puppet_etc_t:file { execute execute_no_trans }; #!!!! The source type 'httpd_t' can write to a 'dir' of the following types: # squirrelmail_spool_t, dirsrv_config_t, httpd_tmp_t, httpd_cache_t, httpd_tmpfs_t, dirsrvadmin_tmp_t, httpd_squirrelmail_t, dirsrv_var_log_t, zarafa_var_lib_t, dirsrv_var_run_t, httpd_var_run_t, dirsrvadmin_config_t, httpd_dirsrvadmin_rw_content_t, httpd_prewikka_rw_content_t, httpd_w3c_validator_rw_content_t, httpd_awstats_rw_content_t, httpd_user_rw_content_t, httpdcontent, httpd_cobbler_rw_content_t, httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t, httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t, httpd_nutups_cgi_rw_content_t, httpd_mediawiki_rw_content_t, httpd_apcupsd_cgi_rw_content_t, httpd_squid_rw_content_t, httpd_smokeping_cgi_rw_content_t allow httpd_t puppet_var_lib_t:dir { read write create add_name }; allow httpd_t puppet_var_lib_t:file { write create append }; allow httpd_t puppet_var_run_t:dir { search getattr }; allow httpd_t rpm_t:dir { getattr search }; allow httpd_t rpm_t:file { read open }; allow httpd_t rpm_var_lib_t:dir { search getattr }; allow httpd_t rpm_var_lib_t:file open; #!!!! This avc can be allowed using the boolean 'httpd_setrlimit' allow httpd_t self:capability sys_resource; allow httpd_t self:capability sys_ptrace; allow httpd_t self:process setexec; allow httpd_t semanage_t:dir { getattr search }; allow httpd_t semanage_t:file { read open }; allow httpd_t setfiles_t:dir { getattr search }; allow httpd_t setfiles_t:file { read open }; allow httpd_t sshd_t:dir { getattr search }; allow httpd_t sshd_t:file { read open }; allow httpd_t syslogd_t:dir { getattr search }; allow httpd_t syslogd_t:file { read open }; allow httpd_t system_cronjob_t:dir { getattr search }; allow httpd_t system_cronjob_t:file { read open }; allow httpd_t udev_t:dir { getattr search }; allow httpd_t udev_t:file { read open }; allow httpd_t unconfined_t:dir { getattr search }; allow httpd_t unconfined_t:file { read open }; allow httpd_t unlabeled_t:file { read execute open execute_no_trans }; #!!!! The source type 'httpd_t' can write to a 'file' of the following types: # squirrelmail_spool_t, httpd_lock_t, dirsrv_config_t, httpd_tmp_t, httpd_cache_t, httpd_tmpfs_t, dirsrvadmin_tmp_t, httpd_squirrelmail_t, dirsrv_var_log_t, zarafa_var_lib_t, dirsrv_var_run_t, httpd_var_lib_t, httpd_var_run_t, dirsrvadmin_config_t, httpd_dirsrvadmin_rw_content_t, httpd_prewikka_rw_content_t, root_t, httpd_w3c_validator_rw_content_t, httpd_awstats_rw_content_t, httpd_user_rw_content_t, httpdcontent, httpd_cobbler_rw_content_t, httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t, httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t, httpd_nutups_cgi_rw_content_t, httpd_mediawiki_rw_content_t, httpd_apcupsd_cgi_rw_content_t, httpd_squid_rw_content_t, httpd_smokeping_cgi_rw_content_t allow httpd_t var_run_t:file { write open }; #!!!! The source type 'httpd_t' can write to a 'sock_file' of the following types: # httpd_tmp_t, httpd_tmpfs_t, dirsrv_var_run_t, httpd_var_run_t allow httpd_t var_run_t:sock_file { write unlink open }; Here's my version of selinux-policy selinux-policy.noarch 3.7.19-126.el6_2.10 selinux-policy-targeted.noarch 3.7.19-126.el6_2.10 Any advice or pointers of how to get puppetmasterd to run through passenger WITH SELinux would be great. Thanks - Trey

2 1

← Newer
1
...
7
8
9
10
11
12
13
...
18
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2012