May 2013 - Discuss - lists.centos.org

CentOS-announce Digest, Vol 99, Issue 10
by centos-announce-request＠centos.org 22 May '13

22 May '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0847 Moderate CentOS 5 kernel Update (Johnny Hughes) 2. CEBA-2013:0846 CentOS 5 xen Update (Johnny Hughes) 3. CEEA-2013:0852 CentOS 5 rgmanager Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 22 May 2013 00:42:18 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0847 Moderate CentOS 5 kernel Update To: centos-announce(a)centos.org Message-ID: <20130522004218.GA2167(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0847 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0847.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ab5044367344e995cb1eae8cfae59c2b6df68a8366ab6830b1b7fff6311de88e kernel-2.6.18-348.6.1.el5.i686.rpm 098b89256fe94e488bc11c7d7d5c9c633f26e6ce2f556027cb6a4c09d83c6b1a kernel-debug-2.6.18-348.6.1.el5.i686.rpm 07934a3d05a145d04f3174247f261ec83865876335ec30735b690a16d2155ffc kernel-debug-devel-2.6.18-348.6.1.el5.i686.rpm 9844fb6c5aa44ab6c81d364f5297d0a79312be417eaff79e14fc857b198c00c6 kernel-devel-2.6.18-348.6.1.el5.i686.rpm c677268f2a1d2eb32508693ccef0813e236b12909e8b32a785ccb472d53740e0 kernel-doc-2.6.18-348.6.1.el5.noarch.rpm de801934133ee709e3c513299db6f9e5876767e6a00ac55928ecad7d9762fdcd kernel-headers-2.6.18-348.6.1.el5.i386.rpm fe04425d4d7c8314ab42b7601be855c02d79a94dbeb5badce6c701acc35c11e6 kernel-PAE-2.6.18-348.6.1.el5.i686.rpm ef9181b7ff77bce3f1bec28a5e37360b8e64932f44531bc66c83216699e7e7e6 kernel-PAE-devel-2.6.18-348.6.1.el5.i686.rpm 765cf57dab52afb57f18bb84cc354f11ae3fa264b9b157bf84914cacb6db2b83 kernel-xen-2.6.18-348.6.1.el5.i686.rpm 347a8b9e89eea05d6b53e1b30fa5569593d62282c16561aff945e1604c7e4465 kernel-xen-devel-2.6.18-348.6.1.el5.i686.rpm x86_64: 02a6c7c2f002543eb61596fc3b16a3cb4a8a9d97218adb4caa8f2482fa062a94 kernel-2.6.18-348.6.1.el5.x86_64.rpm 4d0acfe18f15a26f2d32274a03e2daee04c7cd14043de85348c3e50cc513b5b8 kernel-debug-2.6.18-348.6.1.el5.x86_64.rpm 750bd839ca73cf262309eec0a34b82a2e14e2a5a64f1ad6d67eea47a8b8c95de kernel-debug-devel-2.6.18-348.6.1.el5.x86_64.rpm 1a2351ac39b3080b13e0904b6de03e4daa604f428ffdd038ff53402531977e30 kernel-devel-2.6.18-348.6.1.el5.x86_64.rpm c677268f2a1d2eb32508693ccef0813e236b12909e8b32a785ccb472d53740e0 kernel-doc-2.6.18-348.6.1.el5.noarch.rpm 0e84f4daf0c476e555c6ebf1ff261bd44c5e72a5bbe75fe5f574abb3376f7de4 kernel-headers-2.6.18-348.6.1.el5.x86_64.rpm 2df8bbdbb154d41d699bfec546d64d4ce80fddee4800657cd4c7d981f2519bc0 kernel-xen-2.6.18-348.6.1.el5.x86_64.rpm 96add8d6aeaa2c3cfc8fa2ea93b8ced13230353fbef3025e850d7e3858e704c3 kernel-xen-devel-2.6.18-348.6.1.el5.x86_64.rpm Source: 79f0fd50d589af4bc5772082dfd03ac7a6f1e1954f930c8c18583a84c9afdd56 kernel-2.6.18-348.6.1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 22 May 2013 01:26:35 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0846 CentOS 5 xen Update To: centos-announce(a)centos.org Message-ID: <20130522012635.GA3891(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0846 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0846.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ec631cb6cef6d16171547387d83540ee421f208c37e735064f03a4b61f920930 xen-3.0.3-142.el5_9.3.i386.rpm 52625a828dc04a4f501cad0e3e76c0f760a3934be4d079bad86c88b9ac730b1b xen-3.0.3-142.el5_9.3.i686.rpm a37c1d767aabc0be5a3510f2654ccccb7543fdfe31c9571d982f97666268674d xen-devel-3.0.3-142.el5_9.3.i386.rpm 81f01c550d014391e5008eae46189bee65229401ff197737cc4c7ecb1df7df16 xen-devel-3.0.3-142.el5_9.3.i686.rpm 558ccfff31589f7e2b46a501e9f730d7aea01b81941dd82746b49a4871c36abd xen-libs-3.0.3-142.el5_9.3.i386.rpm 6b1cd54270c7cedf43126b650d6cac68a7441badcaaed58639d439b0a7df8bc2 xen-libs-3.0.3-142.el5_9.3.i686.rpm x86_64: e98666d9db0a5110cc81e925a594ea7bda9a1a5e0fde99c521755db29ac92924 xen-3.0.3-142.el5_9.3.x86_64.rpm a37c1d767aabc0be5a3510f2654ccccb7543fdfe31c9571d982f97666268674d xen-devel-3.0.3-142.el5_9.3.i386.rpm 5feb695b37fd5dde27d223b55fcdf8437321f63f4cf6a228356b77e7ab4024a0 xen-devel-3.0.3-142.el5_9.3.x86_64.rpm 558ccfff31589f7e2b46a501e9f730d7aea01b81941dd82746b49a4871c36abd xen-libs-3.0.3-142.el5_9.3.i386.rpm 1d3f7879976677794109e382f561a36452e02035bb037b897f62e8d3861b0496 xen-libs-3.0.3-142.el5_9.3.x86_64.rpm Source: 9dbfd13241c4e3249f424d32ed6526e2b3662d969f3518dab3287b92926ae32b xen-3.0.3-142.el5_9.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 22 May 2013 11:50:54 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2013:0852 CentOS 5 rgmanager Update To: centos-announce(a)centos.org Message-ID: <20130522115054.GA3369(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2013:0852 Upstream details at : https://rhn.redhat.com/errata/RHEA-2013-0852.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1c3221b07eb1f14878c380a15e89e9467121295070034d3e3b45175e918bda9f rgmanager-2.0.52-37.el5.centos.2.i386.rpm x86_64: 4b8b522fb08f2002f9a407bc40f4e5bda7d17d22d25847de64c1643408d5ce85 rgmanager-2.0.52-37.el5.centos.2.x86_64.rpm Source: 6a4c446af0a5f6fde288b3385adae0fcaf02b2a4bb4001dd0b3d17b451656bd7 rgmanager-2.0.52-37.el5.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 99, Issue 10 ***********************************************

1 0

Re: [CentOS] Centos 6.4: Possible bug in system-config-network-cmd
by Glenn Eychaner 22 May '13

22 May '13

m.roth: > Hmmm... have you looked at /etc/udev/rules.d/70-persistant-net.rules? # PCI device 0x8086:0x104b (e1000e) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:16:xx:xx:xx:xx", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" # PCI device 0x10b7:0x9200 (3c59x) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:04:xx:xx;xx:xx", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" Not sure there's anything relevant there... -G. -- Glenn Eychaner (geychaner(a)lco.cl) Telescope Systems Programmer, Las Campanas Observatory

1 0

SuperMicro with LSI MegaRaid with Centos 6.0
by Gregory P. Ennis 21 May '13

21 May '13

Everyone, I am trying to install a Centos 6.0 system on a SuperMicro with an LSI MegaRaid SCSI 320-2 controller. I had originally tried to install 6.4, but the 6.4 install DVD does not boot with this configuration. See : http://bugs.centos.org/view.php?id=5377 Fortunately, the 6.0 install DVD worked fine until it failed to identify the hard disc controller. I checked the lsi.com site which had a driver for RH 3 and RH4, but not 5 and not 6. The interesting thing about this machine is that I had Centos 5.0 installed without difficulty (that over time upgraded to 5.9) Does anyone have any idea of a driver I could use to get Centos 6.0 up and running. Thanks!!!! Greg Ennis

2 5

Force anaconda to use GPT labels on all drives?
by Tucker 21 May '13

21 May '13

I did a quick search through the archive and couldn't find anything that mapped to my need, so I figured I should ping the community and see if anyone has the requisite knowledge and could point me in the right direction. *Succinct Version* Is there a way to, using updates.img, monkey patching or swapping in a newer Anaconda (>= 16) to force all disks to have gpt labels and not just disks> 2TB? *TL;DR Version* I'm working on setting up an installation environment and am trying to make it as machine agnostic as possible. We're currently using CentOS 6.3 (will start 6.4 work soon). Getting software on a machine is simple but laying out disks is less so. Some of our machines have eight disks and some twelve and some others have two. Normenpoughaalizing on a single hardware profile is not an option, due to the various types of systems we need. What I'm currently having to do is wipe the partition information and set a gpt label, in a %pre section, on the first two disks only. After that, I have to use our post installation installer to create the partitions on the remaining disks. Because of the way it works, unless we manually remove the partitions from the remaining partitions, prior to doing the post installation steps (which setup the host for its role), we will end up with drives that have old information (read as: not formatted). I understand that that normal way to do this is to use zerombr and clearpart but this leaves me with some disks that have msdos labels (<= 2TB) and some with gpt labels (> 2TB). In order to simplify everything, without having to be deterministic about hardware type, we need to use gpt labels on everything. It appears that Anaconda 16 and beyond use gpt labels by default (unless "nogpt" is provided as a kernel option) but CentOS (even 6.4) is using Anaconda 13. I've read about updates.img but I'm not sure that's the solution (if so, I don't grok it yet). I've managed to get Anaconda 17 to build from source (wow... that was "fun") but don't know enough kickstart/anaconda to know how and if I can swap that in place of the existing Anaconda images and still get CentOS to install. -- --tucker

2 3

ReiserFS - status?
by Rafał Radecki 21 May '13

21 May '13

Hi All. What is the status of ReiserFS in CentOS at the moment? I have some servers which use it as a loadable kernel module. I am thinking about a filesystem for database systems and would like to know if ReiserFS will be maintained in CentOS/Linux kernel in the future? Best regards, Rafal.

5 4

ICMPv6 Neighbour Solication request is not answered by linux when IPv6 address is assigned via Netlink code.
by Kevin Peterson 21 May '13

21 May '13

Hi, I have a process which is running as a linux service and assigns IP addresses using netlink to configued interface in linux. For IPv4 addresses i do not see any issue with this assignment. When i try to assign an IPv6 address, the address gets assigned successfully to the interface, but the Neighbour Solication request received for that address is not responded with and hence ping6 from a different machine doesn't work. When i take the same netlink code and run it in a sample program the address gets assigned and the Neighbour solicitation is responded with a advertisement and hence ping6 works. IP assigned by the program : 7000::15/32 IP on client machine from where ping6 is done : 7000::17/32. Bot machines are connected to same Layer-2 switch. I have flushed the ip6tables on both the machines just to rule out any firewall issues. Thanks, Kevin Peterson

2 3

semi-OT: flashing the BIOS on an HP dl580 GT, afterward
by m.roth＠5-cent.us 21 May '13

21 May '13

When last we saw our hero, er, sysadmin, he'd found that the "noarch" BIOS update was, in fact, a self-extracting .exe file, and he'd extracted it. Finally getting the ok to take the system down, the following hilarity (for small values of hilarity) ensued. First, booting off unetbootin to freedos was fine... except it was try to guess which version - freedos + emm386 + himem, no himem, live CD only, or, finally, "no drivers loaded", which works. It gags on something orders of magnitude larger than it was written for, y'know. Then I discover that the builtin type command does *not* have /p, and there's no more command, and I should have read the longer files before I started this. Fun with <ctrl-s> ensues. Finally, I find what are actually DOS config.sys files, with different extensions, and read them - they're one-liners, and find out how to run the rompaq.exe that runs the utility to flash the drives, and run it. And again. And again. And *finally* get the reason it's failing, and (to save the original name) copied the actual data from an 8.3 name into 7 char, which the utility demands: *exactly* seven chars, no more, no less. And unlike the Dell utility, which give you lots of warm fuzzies ("collecting data", "this is for this hardware, this is newer, do you want to update?"), this just does it. Fortunately, this HBS contains a backup ROM, just in case.... And a three-finger kill later, it's up. And I put the memory boards back in, so we'll see if the BIOS update fixed the memory problems (remember them? this song's about them).... mark

1 0

security breach - ftp?
by Philipp Duffner 21 May '13

21 May '13

Hi, I'm running Plesk 11.0.9 on a Centos 5.5. A website on that box got hacked last week and malicious code got inserted into some html/php files. So I went to find out what happened... I found no back doors by using rkhunter or manually searching for suspicious files in /tmp, etc. No activity at all in the php logs at the time of the attack. I also analysed of course the system logs (messages, secure, ...) - nothing that I could see either - except for an entry of an successful login to that domain via FTP just before the the modified dates of the infected files. I found one of the oldest infected files were in the folder of a hopelessly outdated version of a WYSIWYG editor and decided to blame that due to probability. So in order to recover I did in this order... * delete httpdocs from the website * change the FTP password * upgrade and update Plesk from 10.0.4 to 11.0.9 * upgrade php to php53 via plesk - this also updates mysql and phpmyadmin * yum update everything, also made sure I have the latest version of proftp * restore the entire website from a clean backup * delete the WYSIWYG folder that I believed had caused the vulnerability The next days I slept ok hoping I removed the attacker's entry point(s). ...so I thought! Today the website got hacked again - the same exploit on the pages, meaning same attacker. And again I can see nothing suspicious except for the successful FTP logon just before the modification time of the infected html/php: 2013-05-18T15:01:25.195559-07:00 MyServer proftpd: Deprecated pam_stack module called from service "proftpd" 2013-05-18T15:01:25.204731-07:00 MyServer proftpd: Deprecated pam_stack module called from service "proftpd" 2013-05-18T15:01:25.204831-07:00 MyServer proftpd: Deprecated pam_stack module called from service "proftpd" 2013-05-18T15:01:25.205183-07:00 MyServer proftpd: pam_unix(proftpd:session): session opened for user WEBSITEUSER by (uid=0) 2013-05-18T15:01:25.205244-07:00 MyServer proftpd: Deprecated pam_stack module called from service "proftpd" 2013-05-18T15:01:25.231034-07:00 MyServer proftpd[20243]: 127.0.0.1 (188.190.126.105[188.190.126.105]) - USER WEBSITEUSER: Login successful. 2013-05-18T15:04:08.095351-07:00 MyServer proftpd: Deprecated pam_stack module called from service "proftpd" 2013-05-18T15:04:08.095379-07:00 MyServer proftpd: pam_env(proftpd:setcred): Unable to open config file: /etc/security/pam_env.conf: No such file or directory 2013-05-18T15:04:08.095445-07:00 MyServer proftpd: Deprecated pam_stack module called from service "proftpd" 2013-05-18T15:04:08.095455-07:00 MyServer proftpd: pam_succeed_if(proftpd:session): error retrieving information about user 0 2013-05-18T15:04:08.095463-07:00 MyServer proftpd: pam_unix(proftpd:session): session closed for user WEBSITEUSER I know for a fact it couldn't have been the website owner because I didn't give him the new FTP password yet. # yum list | grep proftp psa-proftpd.i386 1.3.4a-cos5.build110121114.13 installed proftpd.i386 1.3.3g-2.el5 epel proftpd-ldap.i386 1.3.3g-2.el5 epel proftpd-mysql.i386 1.3.3g-2.el5 epel proftpd-postgresql.i386 1.3.3g-2.el5 epel I think I really hit a snag with this one - I have no idea where to go forward from here. I'd appreciate any ideas. Thanks. Philipp

6 5

CentOS-announce Digest, Vol 99, Issue 9
by centos-announce-request＠centos.org 21 May '13

21 May '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0835 CentOS 6 selinux-policy Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 20 May 2013 21:40:06 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0835 CentOS 6 selinux-policy Update To: centos-announce(a)centos.org Message-ID: <20130520214006.GA40075(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0835 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0835.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dfb1bb4ec17400b1c6945e2da7063190b60dfb03219dc590bfbd0fb43d985b87 selinux-policy-3.7.19-195.el6_4.5.noarch.rpm 944c8db5d659d526320a9717da0b610619bb6912c8b87097b7d6709b06786bf8 selinux-policy-doc-3.7.19-195.el6_4.5.noarch.rpm 0a28b5bc11f3c2bd554ef548dc3db8338aeb22fe4b63029361a80ad75e094d28 selinux-policy-minimum-3.7.19-195.el6_4.5.noarch.rpm 05d0bddd2d028cf23bcc3fb7a7fd47fb3660e990362b8770cec0ac4ff1a5734c selinux-policy-mls-3.7.19-195.el6_4.5.noarch.rpm b1fda473fea9012d18c2296692a9b0537317c7efc5ef3abbec9cb5aa3b435161 selinux-policy-targeted-3.7.19-195.el6_4.5.noarch.rpm x86_64: dfb1bb4ec17400b1c6945e2da7063190b60dfb03219dc590bfbd0fb43d985b87 selinux-policy-3.7.19-195.el6_4.5.noarch.rpm 944c8db5d659d526320a9717da0b610619bb6912c8b87097b7d6709b06786bf8 selinux-policy-doc-3.7.19-195.el6_4.5.noarch.rpm 0a28b5bc11f3c2bd554ef548dc3db8338aeb22fe4b63029361a80ad75e094d28 selinux-policy-minimum-3.7.19-195.el6_4.5.noarch.rpm 05d0bddd2d028cf23bcc3fb7a7fd47fb3660e990362b8770cec0ac4ff1a5734c selinux-policy-mls-3.7.19-195.el6_4.5.noarch.rpm b1fda473fea9012d18c2296692a9b0537317c7efc5ef3abbec9cb5aa3b435161 selinux-policy-targeted-3.7.19-195.el6_4.5.noarch.rpm Source: dad5529bb99ba4336b4fe96e8bfc0ac371fb6faf068bdfb11da95e2bbc2ac329 selinux-policy-3.7.19-195.el6_4.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 99, Issue 9 **********************************************

1 0

NIC interrupts and packets per second ratio, how to calculate? There must be some way...
by Alex Flex 21 May '13

21 May '13

Hello again guys, Iam trying to asses the best hardware for a machine that procceses a high number of packets per second on its NIC. THe only way I can achieve this without guesses is If iam able to understand or test what the number of interrupts available per core and how to translate that to PPS capabilities. So far ive been testing an Core I5 CPU and was able to achieve up to 400k packets (small syn packets) in a single core (2.8Ghz i think..) untill the point where 100% was reported to serve as hardware interrupts, yet what is the math behind this? In any case, i find this rather low and confused as I know for a fact that small home routers even on gigabit have specs that detail they can do packet forwarding at rates up to 1.4 million pps and iam sure there CPU is no where as powerfull as a 2.8Ghz Core I5 core. Any orientation is much appreciated. Alex

2 1

6.4 on old PC not connecting
by Beartooth 20 May '13

20 May '13

On an old server (Dell PowerEdge SC1420, now without RAID) I have CentOS 6.4 installed, up, and running -- but it keeps failing to connect for some reason .... NetworkManager applet 0.8.1 runs blue rings around in the panel for a while, then reports itself disconnected. It also offers a pseudo-choice, if I right-click, between Wired Connection and eth0; in fact, the cable to the router is the only connection the machine has or has ever had. I've tried such things as I could find to get a connection, in vain. I've tried replacing the cable. If there's a good fix, I'd like to get my wife running CentOS, because it's one obvious choice for her to have against such time as I'm gone. (I don't at all claim to be the Oldest Subscriber, but I am at an age such that I would be irrational not to plan for such contingencies.) What new way can I try to get this beast online? -- Beartooth Staffwright, Neo-Redneck Not Quite Clueless Power User Remember I have precious (very precious!) little idea where up is.

3 6

Re: [CentOS] TPM and secure boot
by John R Pierce 20 May '13

20 May '13

On 5/19/2013 2:41 PM, Reindl Harald wrote: > your question was*clearly* secure boot > and before UEFI secure boot*nobody* cared about TPM on OS systems so basically, you're saying you can't use a TPM to secure a linux system? hey, saves me a lot of work. I'll tell my boss it can't be done. -- john r pierce 37N 122W somewhere on the middle of the left coast

2 1

Re: [CentOS] TPM and secure boot
by John R Pierce 20 May '13

20 May '13

On 5/19/2013 2:06 PM, Reindl Harald wrote: > Am 19.05.2013 22:59, schrieb John R Pierce: >> >is this typically used in conjunction with disk encryption such that the >> >TPM module supplies the decryption keys? does linux have any concept >> >of signed executables, kernel, and so forth? would replacing the RPM >> >keys with keys signed by our own certificate authority such that the TPM >> >would be involved in RPM authentication be practical? > did you not read any IT news in the last year? > forget it on CentOS / RHEL currently > > even Fedora is far far away from what you think you need and the > complete chain of trust is more or less impossible on a opensource > system without make any 3rd party kernel module completly impossible > > https://fedoraproject.org/wiki/Secureboot > http://www.networkworld.com/community/blog/microsofts-secure-boot-red-hat-r… > TPM is not the same as the new secureboot UEFI BIOS stuff. this is an optional module (tamperproofed so if its unplugged, it erases) on most server motherboards, you initialize it with your OWN security keys if you want to use it, Microsoft has nothing to do with it. TPM has been around since 2006 or earlier. -- john r pierce 37N 122W somewhere on the middle of the left coast

2 1

Centos6.4 cannot reboot
by muiz 20 May '13

20 May '13

Dear all， I install new version centos 6.4 64bit and everything is ok except it cannot reboot, below is the /var/messages information: May 20 10:08:07 ravi2 smbd[1712]: failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL May 20 10:22:24 ravi2 init: tty (/dev/tty1) main process (1727) killed by TERM signal May 20 10:22:24 ravi2 init: tty (/dev/tty2) main process (1729) killed by TERM signal May 20 10:22:24 ravi2 init: tty (/dev/tty3) main process (1731) killed by TERM signal May 20 10:22:24 ravi2 init: tty (/dev/tty4) main process (1733) killed by TERM signal May 20 10:22:24 ravi2 init: tty (/dev/tty5) main process (1735) killed by TERM signal May 20 10:22:24 ravi2 init: tty (/dev/tty6) main process (1737) killed by TERM signal May 20 10:22:25 ravi2 xinetd[1618]: Exiting... May 20 10:22:26 ravi2 init: Disconnected from system bus May 20 10:22:26 ravi2 auditd[1530]: The audit daemon is exiting. May 20 10:22:26 ravi2 kernel: type=1305 audit(1369016546.436:112): audit_pid=0 old=1530 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 May 20 10:22:26 ravi2 kernel: type=1305 audit(1369016546.539:113): audit_enabled=0 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 May 20 10:22:26 ravi2 kernel: Kernel logging (proc) stopped. May 20 10:22:26 ravi2 rsyslogd: [origin software="rsyslogd" swVersion="5.8.10" x-pid="1546" x-info="http://www.rsyslog.com"] exiting on signal 15. (No message after this line until I click the Reset button) Do you know why? Muiz

1 0

TPM and secure boot
by John R Pierce 19 May '13

19 May '13

has anyone implemented any sort of 'secure boot' using TPM 1.2 modules on the server boards using CentOS 6.x ? I'm not finding much concrete stuff on how to setup and manage a system like this, but I've been asked to research it for a security application internally at my job. our primary application for the TPM is for client authentication certificates in an SSL application (the machine with the TPM is an unmanned embedded client, that accesses webservices on a remote server which needs to authenticate this client). We've already done similar client authentication using USB Tokens, but would like to use TPM for this in the future. I think the client authentication part is pretty straight forward, using Trousers and so forth and PKCS#11 to access the keys. Once we get the client authentication side working, we'd like to also secure the OS itself to prevent tampering, presumably using trusted grub and such? is this typically used in conjunction with disk encryption such that the TPM module supplies the decryption keys? does linux have any concept of signed executables, kernel, and so forth? would replacing the RPM keys with keys signed by our own certificate authority such that the TPM would be involved in RPM authentication be practical? (yes, I know, this would mandate using a private yum repository, and building/signing all our own system components). I realize this will greatly complicate system management, security is always a tightrope act. -- john r pierce 37N 122W somewhere on the middle of the left coast

1 0

OpenStack Grizzly on CentOS-6.4
by Florian La Roche 19 May '13

19 May '13

Hello, setting up the newest OpenStack Grizzly release seems to be really straight-forward. Red Hat has put together all support for this at http://openstack.redhat.com/. I've documented installation, post-install config tweaks, how to add a few ready-to-use guest images and links to a few gotchas on the following wiki page: http://jur-linux.org/testwiki/index.php/CloudLinux/OpenStack Most items can be setup on the command line this way, no need to e.g. use the web interface to upload guest images. best regards, Florian La Roche

2 5

[Fwd: GThread-ERROR **: GThread system may only be initialized once.]
by James B. Byrne 18 May '13

18 May '13

I posted this to the Jitsi users mailing list on Thursday last and have received no replies. Does anyone here have any idea of what is causing this and how to fix it? One other bit of information. When I first installed Jitsi it initially worked for a non-privileged user as I ran it from the gnome menu of my login account. However, at some point it seemed get 'confused' and hung. Since then I have been unable to get it to run as a non-privileged user. I have removed and reinstalled it. I have also rebooted the host. Nothing changes its current behaviour. -------------------------- Original Message -------------------------- Subject: GThread-ERROR **: GThread system may only be initialized once. From: "James B. Byrne" <byrnejb(a)harte-lyne.ca> Date: Thu, May 16, 2013 16:54 To: users(a)jitsi.org ---------------------------------------------------------------------- I installed jitsi-2.2 on a CentOS-6.4 x86_64 host. When I run it as a non-privileged user then I see this error: $ jitsi ALSA lib pcm.c:2209:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.rear ALSA lib pcm.c:2209:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.center_lfe ALSA lib pcm.c:2209:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.side ALSA lib pcm_dmix.c:957:(snd_pcm_dmix_open) The dmix plugin supports only playback stream GThread-ERROR **: GThread system may only be initialized once. aborting... Aborted and it dies. If instead I run it as a privileged user then I see this: $ sudo jitsi [sudo] password for byrnejb: ALSA lib pcm.c:2209:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.rear ALSA lib pcm.c:2209:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.center_lfe ALSA lib pcm.c:2209:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.side ALSA lib pcm_dmix.c:957:(snd_pcm_dmix_open) The dmix plugin supports only playback stream java.lang.UnsatisfiedLinkError: /usr/share/jitsi/lib/native/libglobalshortcut.so: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.15' not found (required by /usr/share/jitsi/lib/native/libglobalshortcut.so) at java.lang.ClassLoader$NativeLibrary.load(Native Method) at java.lang.ClassLoader.loadLibrary1(ClassLoader.java:1939) at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1864) at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1854) at java.lang.Runtime.loadLibrary0(Runtime.java:845) at java.lang.System.loadLibrary(System.java:1084) at net.java.sip.communicator.impl.globalshortcut.NativeKeyboardHook.<clinit>(NativeKeyboardHook.java:254) at net.java.sip.communicator.impl.globalshortcut.GlobalShortcutServiceImpl.<init>(GlobalShortcutServiceImpl.java:56) at net.java.sip.communicator.impl.globalshortcut.GlobalShortcutActivator.start(GlobalShortcutActivator.java:104) at org.apache.felix.framework.util.SecureAction.startActivator(SecureAction.java:629) at org.apache.felix.framework.Felix.activateBundle(Felix.java:1904) at org.apache.felix.framework.Felix.startBundle(Felix.java:1822) at org.apache.felix.framework.Felix.setActiveStartLevel(Felix.java:1192) at org.apache.felix.framework.StartLevelImpl.run(StartLevelImpl.java:266) at java.lang.Thread.run(Thread.java:722) And it works. What is going on and how do I fix it? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

F18: Create a USB install of CentOS 6 from iso
by Mihamina Rakotomandimby 18 May '13

18 May '13

Hi all, On a F18, I installed livecd-tools-18.15-1 I downloaded CenOS6.x minimal .iso and with livecd-iso-to-disk the resulting USB is never bootable: the computer doesnt boot on it. Tested on many computers. The fact is I succeded to install CentOS on a Netbook (no CD/DVD tray), but I dont remember how I invoked livecd-iso-to-disk. I tried with many combinations (/dev/sdc is the USB pendrive): 1°) $ sudo livecd-iso-to-disk --format --force <ISO> /dev/sdc 2°) $ sudo livecd-iso-to-disk --format --force <ISO> /dev/sdc1 3°) - Format with VFAT on partiion #1 then $ sudo livecd-iso-to-disk <ISO> /dev/sdc1 4°) - Format with Ext on partiion #1 then $ sudo livecd-iso-to-disk <ISO> /dev/sdc1 ... N°) I dont remember what I tried, but it was many, mostly tried with CentOS 6.2 Please, if someone has a F18 + an USB drive: would you test and see if you succed? If you ever succed, how did you? -- RMA.

5 5

device in use after a reboot
by sebastian 17 May '13

17 May '13

Hello, I have a server with an 17tb scsi-storage. In past, the storage has a "jfs"-filesystem. Now i want to create a "ext4"-filesystem. I have update the e2fsprogs from 1.41 to 1.42 (16tb limit >1.41). Now I have an 17tb-storage as /dev/sda1 with ext4. I can mount this device as /home/ (/etc/fstab "/dev/sda1 /home/ ext4 defaults 1 2". Now I start a e2fschk /dev/sda1 (umounted). No error-messages are in the screen. If I now reboot the server, the server does not started: <---// Checking filesystems /dev/md2: clean, ..... /dev/md0: clean, ..... /dev/sda1 is in use. e2fsck: Cannot continue, aborting. *** An error occurred during the file system check. *** Dropping you to a shell; the system will reboot *** when you leave the shell. Give root password for maintenance (or type Control-D to continue): //---> I think thats can be a problem with the e2fsprogs 1.42, now i reinstall the server with the default e2fsprogs 1.41 from CentOS 6.4 and create only a 16tb /dev/sda1 partition with ext4. But if i start a "e2fschk /dev/sda1" and reboot the server, i have the same message in the boot-screen and the server does not boot. Why the system thinks that the device still be in use? How can i change this? Thanks Sebastian

4 6

python-pandas 10
by m.roth＠5-cent.us 17 May '13

17 May '13

Anyone familiar with building python modules? We've got a user who needs pandas 10 - he says that there was a memory handling issue that kills him in the lower releases. My counterpart (the humanoid one <g>) says that it seems to want to build against python 2.7, rather than the CentOS 2.6.6. Plus, of course, there are the dependencies.... 1. Are there any tarball installs? 2. Alternatively, are there any src rpms? I haven't found any so far.... Thanks in advance. mark

1 0

CentOS-announce Digest, Vol 99, Issue 8
by centos-announce-request＠centos.org 17 May '13

17 May '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0831 Moderate CentOS 6 libvirt Update (Johnny Hughes) 2. CESA-2013:0830 Important CentOS 6 kernel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 17 May 2013 00:35:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0831 Moderate CentOS 6 libvirt Update To: centos-announce(a)centos.org Message-ID: <20130517003537.GA14466(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0831 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0831.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5a32ff9a43563fa625339e17c72f9d0030c37739795c8dbd7214855357a1df31 libvirt-0.10.2-18.el6_4.5.i686.rpm b0aaeb027d374f4efda4c8e63572ef5ce541de8d8a783886c51bdea8c1c81e93 libvirt-client-0.10.2-18.el6_4.5.i686.rpm ff21809b7f8094694dbd1f56ddc528865779bb0d5ec4d92f2aa988d2b66ec09f libvirt-devel-0.10.2-18.el6_4.5.i686.rpm a5a19eb3740fa9e6c094763aa835e6f7c2a8bc7a5011863bf02340827983e803 libvirt-python-0.10.2-18.el6_4.5.i686.rpm x86_64: 1f5989987a4f696420ca59034ef7468faf42ff6d44a2b821a0138c1f038f35a3 libvirt-0.10.2-18.el6_4.5.x86_64.rpm b0aaeb027d374f4efda4c8e63572ef5ce541de8d8a783886c51bdea8c1c81e93 libvirt-client-0.10.2-18.el6_4.5.i686.rpm 7bfae1084c8cc01f4e328d9acd1c93c81949c545463b72fbec518fdb5ca06678 libvirt-client-0.10.2-18.el6_4.5.x86_64.rpm ff21809b7f8094694dbd1f56ddc528865779bb0d5ec4d92f2aa988d2b66ec09f libvirt-devel-0.10.2-18.el6_4.5.i686.rpm f4abd67b2614301da6c16cc0ffb69fd611bff1369faa694d9314d13769e3ce07 libvirt-devel-0.10.2-18.el6_4.5.x86_64.rpm 25e82884d275305505133b373b1d42cfbfd0ce1e6b27daeba786ea8b97edcc62 libvirt-lock-sanlock-0.10.2-18.el6_4.5.x86_64.rpm 573b22172850a5da5e96ffe8fe72db605cfa1e7918d9f07ac92d606497b98d3f libvirt-python-0.10.2-18.el6_4.5.x86_64.rpm Source: ae8026063f273636fcab9947c0711be9c53ea6c2e73f574f2408025e79cf641d libvirt-0.10.2-18.el6_4.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 17 May 2013 00:36:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0830 Important CentOS 6 kernel Update To: centos-announce(a)centos.org Message-ID: <20130517003604.GA14607(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0830 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0830.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d6c94ff701e9d6772f164e87df48073eb7fc3ccbc5ec23bf27d59d084066b912 kernel-2.6.32-358.6.2.el6.i686.rpm 68728b5f77c56b745477478fe9decc6245a9015cbf1d9a2c54c868606be9d010 kernel-debug-2.6.32-358.6.2.el6.i686.rpm c862327110fa5efb09031a4618347d0a78d117c1482bf69c50423464e7d351d7 kernel-debug-devel-2.6.32-358.6.2.el6.i686.rpm 60d3d223fd5185bd7f9ee24bb8492dfef3cfe07bb6751542f240c351855c11d8 kernel-devel-2.6.32-358.6.2.el6.i686.rpm e1fc1dd9210cda92fd773c05a796008ed481b61d3e99bdef601e87c1d0451ef2 kernel-doc-2.6.32-358.6.2.el6.noarch.rpm 59f2d900bce7aeb443f72f00b9a8febed3a6e53f05e7668ef8cb42df5a03ac7f kernel-firmware-2.6.32-358.6.2.el6.noarch.rpm e4b4d7e137ff7ee822cacc67d4e01bdbbdd0e87ce8688564274f1a2df361e419 kernel-headers-2.6.32-358.6.2.el6.i686.rpm c30d700ed6271a2d88d261c5002b1185beeeffb10cbc44c740d89f19e9b37231 perf-2.6.32-358.6.2.el6.i686.rpm cf4da5b6bac241b0836ba8330845d04a2d498982e1f294c3c403d962930f9fc7 python-perf-2.6.32-358.6.2.el6.i686.rpm x86_64: edc9ee434ce217fcca48ccfc6fa6a0378bd39f531da1ca3a0be7fef8f0373ffb kernel-2.6.32-358.6.2.el6.x86_64.rpm 355e8fadb8450359940a9008ac7700a3aebf8984bd7f1516fb7f68b6f1c33a04 kernel-debug-2.6.32-358.6.2.el6.x86_64.rpm d9c0ccfc888ac4a922ca8b59418b75c588bddad145e030b3dd31924db3e6d576 kernel-debug-devel-2.6.32-358.6.2.el6.x86_64.rpm a97cff3f2aa6d5169cca4464eeea5d0efd14c9d57fd65175a5ce91450f1d1448 kernel-devel-2.6.32-358.6.2.el6.x86_64.rpm e1fc1dd9210cda92fd773c05a796008ed481b61d3e99bdef601e87c1d0451ef2 kernel-doc-2.6.32-358.6.2.el6.noarch.rpm 59f2d900bce7aeb443f72f00b9a8febed3a6e53f05e7668ef8cb42df5a03ac7f kernel-firmware-2.6.32-358.6.2.el6.noarch.rpm a6d5cba3af49028f5dab732ce29d618b49e4d9191e948febe8dfca6b83d5d821 kernel-headers-2.6.32-358.6.2.el6.x86_64.rpm 3ce8c55f629e5e40033c5b34ab22eea770124df86050de7920fb4e7ac02dd4d6 perf-2.6.32-358.6.2.el6.x86_64.rpm 94965c8a82fc3330fa572bff243ff20513446d4a2daabc8314f8f5e69b3e7d4b python-perf-2.6.32-358.6.2.el6.x86_64.rpm Source: c36c02aa994327cf9d0724117240ddb5b4b89073f19b2ed83f78336c98552310 kernel-2.6.32-358.6.2.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 99, Issue 8 **********************************************

1 0

CVE-2013-2094 and CentOS 6.x
by David C. Miller 17 May '13

17 May '13

For those who don't know yet here is the redhat bugzilla on this exploit. https://bugzilla.redhat.com/show_bug.cgi?id=962792 Does anyone know if CentOS 6 have the debug packages available to apply the temp patch for this listed in the bugzilla link? David.

4 4

Missing printer driver
by Steve Blackwell 17 May '13

17 May '13

I have a Lexmark 2600 series printer but when I plug in the USB I get an alert saying the printer driver is missing and this appears in /var/log/messages: May 8 19:33:17 localhost kernel: generic-usb 0003:093A:2510.0071: input,hidraw0: USB HID v1.11 Mouse [PixArt USB Optical Mouse] on usb-0000:00:1d.0-1.7/input0 May 8 19:33:22 localhost kernel: usb 1-1.6: new full speed USB device number 4 using ehci_hcd May 8 19:33:22 localhost kernel: usb 1-1.6: New USB device found, idVendor=043d, idProduct=011d May 8 19:33:22 localhost kernel: usb 1-1.6: New USB device strings: Mfr=1, Product=2, SerialNumber=3 May 8 19:33:22 localhost kernel: usb 1-1.6: Product: 2600 Series May 8 19:33:22 localhost kernel: usb 1-1.6: Manufacturer: Lexmark May 8 19:33:22 localhost kernel: usb 1-1.6: SerialNumber: XXXXXXXXX May 8 19:33:22 localhost kernel: usb 1-1.6: configuration #1 chosen from 1 choice May 8 19:33:22 localhost kernel: usblp0: USB Bidirectional printer dev 4 if 1 alt 0 proto 2 vid 0x043D pid 0x011D May 8 19:33:22 localhost kernel: generic-usb 0003:043D:011D.0072: hiddev96,hidraw1: USB HID v1.00 Device [Lexmark 2600 Series] on usb-0000:00:1a.0-1.6/input2 May 8 19:33:22 localhost udev-configure-printer: invalid or missing IEEE 1284 Device ID Can anyone tell me what I need to install to get this working? Thanks, Steve # rpm -qa | egrep -i "cups|foomatic|hplip" cups-pk-helper-0.0.4-12.el6.x86_64 hplip-libs-3.12.4-4.el6.x86_64 foomatic-4.0.4-1.el6_1.1.x86_64 gutenprint-cups-5.2.5-2.el6.x86_64 foomatic-db-ppds-4.0-7.20091126.el6.noarch cups-libs-1.4.2-50.el6_4.4.x86_64 foomatic-db-filesystem-4.0-7.20091126.el6.noarch hplip-common-3.12.4-4.el6.x86_64 foomatic-db-4.0-7.20091126.el6.noarch hplip-3.12.4-4.el6.x86_64 hplip-gui-3.12.4-4.el6.x86_64 cups-1.4.2-50.el6_4.4.x86_64

5 14

Bit Torrent Application
by Mark LaPierre 17 May '13

17 May '13

Hey All, Can someone suggest a bit torrent application for CentOS 6.4 along with the name of the repo where it resides. Add/Remove Software, and several google attempts, have come up empty. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

4 8

Is there Blink SIP/SRTP soft-phone CentOS-6 rpm package available?
by James B. Byrne 16 May '13

16 May '13

Does anyone know of a reputable repository where I can obtain a CentOS-6 version of Blink as an rpm/yum package? I have to support three platforms (OSX, MS-Win and CentOS-Linux) with SRTP capable soft-phones. interoperating with an Asterisk-11 PBX; and I would rather have only one client to deal with. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2013