Discuss May 2013

discuss@lists.centos.org

151 participants
121 discussions

Local Privilege Escalation
by Tom Brown 14 May '13

14 May '13

Hi - Looking at https://news.ycombinator.com/item?id=5703758 I have just tried this on a fully patched 6.4 box and it seems vulnerable - Do other see the same? thanks

6 7

What is the recommended method to obtain Pan 0.136+ (with SSL) for Centos 6?
by Rock 14 May '13

14 May '13

Q: What is the recommended method to obtain Pan 0.136+ (with SSL) for Centos 6? I've been successfully using Pan 0.135 from the RPMForge repository for about a year now: $ yum --noplugins --showduplicates --enablerepo \* --disablerepo c6-media,\*-source,\*debug\* provides "*/pan" ==> 1:pan-0.135-1.el6.rf.x86_64 : The Pan Newsreader ==> Repo : installed $ sudo yum --enablerepo rpmforge install pan -y ==> Package 1:pan-0.135-1.el6.rf.x86_64 already installed and latest version For a good reason (native SSL support), I'm interested in testing out Pan version 0.136 (or above). So, the question arises, how 'best' to find and install Pan 0.136 (or above)? A search at http://rpm.pbone.net failed to find any RPM for 0.136 or above: http://www1.picturepush.com/photo/a/12878464/img/12878464.png But I do find the later Pan RPMs in later Fedora releases: http://pkgs.org/download/pan (e.g., Fedora 17 & 18 have later RPMs): http://www5.picturepush.com/photo/a/12878508/img/12878508.png Or, I can compile Pan version 0.139 from source code: http://pan.rebelbase.com/download/ Given these seem to be my choices (and, given that only about half my compiles ever work); may I ask first the basic question: Q: What is the recommended method to obtain Pan 0.136+ (with SSL) for Centos 6?

5 5

CentOS-announce Digest, Vol 99, Issue 5
by centos-announce-request＠centos.org 14 May '13

14 May '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0807 Low CentOS 5 hypervkvpd Update (Johnny Hughes) 2. CEEA-2013:0810 CentOS 6 libselinux Update (Johnny Hughes) 3. CEBA-2013:0811 CentOS 6 gdb Update (Johnny Hughes) 4. CESA-2013:0815 CentOS 5 httpd Update (Johnny Hughes) 5. CESA-2013:0815 Moderate CentOS 6 httpd Update (Johnny Hughes) 6. CESA-2013:0815 Moderate CentOS 6 httpd Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 May 2013 01:17:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0807 Low CentOS 5 hypervkvpd Update To: centos-announce(a)centos.org Message-ID: <20130510011750.GA2172(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0807 Low Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0807.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1ad59e8b24b9d93d4268c7f539e7dfd0490aa8b3f17f1d13e2176d987f43367c hypervkvpd-0-0.7.el5_9.3.i686.rpm x86_64: 2c03636fb553c4ee620daf1a3dd9ad55d9ef6b43a51a527e4b8c1d93e30ff6ca hypervkvpd-0-0.7.el5_9.3.x86_64.rpm Source: f73527c365b082ff78480bf9a5e47c240937dc77d9465fc62237c95baffc5ede hypervkvpd-0-0.7.el5_9.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 13 May 2013 13:07:45 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2013:0810 CentOS 6 libselinux Update To: centos-announce(a)centos.org Message-ID: <20130513130745.GA32438(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2013:0810 Upstream details at : https://rhn.redhat.com/errata/RHEA-2013-0810.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0e74ed33164db1e2442b52b34476a744b29927338db56dab619ee99e1736b75f libselinux-2.0.94-5.3.el6_4.1.i686.rpm a053b1c4242c0c0f45618c2ed0fefb9b2c61b6e6648455e24d96641d0ecd4ddf libselinux-devel-2.0.94-5.3.el6_4.1.i686.rpm 41d78f2ca86971e01c37f7be8183c3fc4f5c4b9fe78fa60211f2b66c41717299 libselinux-python-2.0.94-5.3.el6_4.1.i686.rpm e3815d181c42848bb36136167ed98f4ce0b35e83b0a0b9cabd98558ba2921c55 libselinux-ruby-2.0.94-5.3.el6_4.1.i686.rpm 1ee75a449b641b9cc70382d7d5f85d65f76c54e178ec3fec3b16cfbd51c48638 libselinux-static-2.0.94-5.3.el6_4.1.i686.rpm ebc9944c58f29ee1a61592a002a39f6b021851baa2594aeb4f98407cfdb90f4e libselinux-utils-2.0.94-5.3.el6_4.1.i686.rpm x86_64: 0e74ed33164db1e2442b52b34476a744b29927338db56dab619ee99e1736b75f libselinux-2.0.94-5.3.el6_4.1.i686.rpm b1d2ca2c6d32b92d4bddeaf55f8618d423bead94752d05e27e1f2b22d6ac7949 libselinux-2.0.94-5.3.el6_4.1.x86_64.rpm a053b1c4242c0c0f45618c2ed0fefb9b2c61b6e6648455e24d96641d0ecd4ddf libselinux-devel-2.0.94-5.3.el6_4.1.i686.rpm cb9a04d45678a3da6ca9edde4b8db40fd72b38b9d0ba176339a9b58efc261e70 libselinux-devel-2.0.94-5.3.el6_4.1.x86_64.rpm 8c3d0a04532bb764de964412a75df90d2a7fa4d644538175db2da4509e43bba8 libselinux-python-2.0.94-5.3.el6_4.1.x86_64.rpm a150c42fba192559c5f8f11e37f3aa81d7d8dbcff0f7d31d16c5848aa14aad5f libselinux-ruby-2.0.94-5.3.el6_4.1.x86_64.rpm dec253a557be691ddc5c89dd89584285f8cf1f819a7ebb5fe90c6866bec8bd1a libselinux-static-2.0.94-5.3.el6_4.1.x86_64.rpm 1fb417ec5e62f62788b95af385b381740f621ab029f3b34aa8b7f61972c24faf libselinux-utils-2.0.94-5.3.el6_4.1.x86_64.rpm Source: 5837a760295de897517ab752b51379a732049fa2c5febcb54ea7a9f0fa6837bd libselinux-2.0.94-5.3.el6_4.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 13 May 2013 13:08:27 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0811 CentOS 6 gdb Update To: centos-announce(a)centos.org Message-ID: <20130513130827.GA32531(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0811 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0811.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 53521009739567a1520d41c87541c92f335196475f5137bccbde271d38bca38a gdb-7.2-60.el6_4.1.i686.rpm 8ac9e5729e7605c717239d0e48eec47b41b6c7c2f50c8f83457db45ab85e48ac gdb-gdbserver-7.2-60.el6_4.1.i686.rpm x86_64: 3378c578de808cdc3b207646d2a6d646fd6bfc3b3b0589364c94cb78e4040345 gdb-7.2-60.el6_4.1.x86_64.rpm fdc706e6d7d11a70fec358b5f4bf5166098105670ec3e56c24aba12df35290b6 gdb-gdbserver-7.2-60.el6_4.1.x86_64.rpm Source: ce8f56878616fa4c9b4d01dbbdc72f1cc550e36b6d1a00456919c698535bd786 gdb-7.2-60.el6_4.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 13 May 2013 22:32:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0815 CentOS 5 httpd Update To: centos-announce(a)centos.org Message-ID: <20130513223203.GA29318(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0815 Upstream details at : http://rhn.redhat.com/errata/RHSA-2013-0815.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0de61eb9464a5fbbb53bb37d24d6bba56a6c6290eb0b1b2687c4a0621a885a1f httpd-2.2.3-78.el5.centos.i386.rpm 8f4a7763c4cc2091d3cbed599afd42ce5df223f5e5eb3344ed1d177557f4c6b6 httpd-devel-2.2.3-78.el5.centos.i386.rpm 01f8715985e71ddcfbc8d45beefa264aaf5d8f8464258665640a457a15a02fcb httpd-manual-2.2.3-78.el5.centos.i386.rpm b125b427b8d1805533852a53039db06bc9731781ff2f008a62610c18026ecb74 mod_ssl-2.2.3-78.el5.centos.i386.rpm x86_64: 4ec023a84addeaef73bf26795fd02258d428a3905320b8e76e341a93729763bc httpd-2.2.3-78.el5.centos.x86_64.rpm 8f4a7763c4cc2091d3cbed599afd42ce5df223f5e5eb3344ed1d177557f4c6b6 httpd-devel-2.2.3-78.el5.centos.i386.rpm 972887f8fc97dc9479037d957b4fa75c499c1c041f8c609d3d6810c4e0c53a91 httpd-devel-2.2.3-78.el5.centos.x86_64.rpm e0f37171362609ac537bdc14bced682605474d4b29f045f8909b23b0bf16ea90 httpd-manual-2.2.3-78.el5.centos.x86_64.rpm 23b6033f279d730f8ad3b94a1260aacc19204f92c895074e2729c786321ca871 mod_ssl-2.2.3-78.el5.centos.x86_64.rpm Source: 81c9cb670921097a9cd3b3614b8838963424ac50bb0591b05ab3fbd2d93db96e httpd-2.2.3-78.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 14 May 2013 00:04:29 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0815 Moderate CentOS 6 httpd Update To: centos-announce(a)centos.org Message-ID: <20130514000429.GA58270(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0815 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0815.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Tue, 14 May 2013 11:49:25 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0815 Moderate CentOS 6 httpd Update To: centos-announce(a)centos.org Message-ID: <20130514114925.GA938(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0815 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0815.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e15436d438dd9e3310517bf332a000bf0a5744aa95b97a85d922735830f630f6 httpd-2.2.15-28.el6.centos.i686.rpm 5b55d8c6900b23e7b81e0af76977c4dfd88f6ec86a856ee8b76b71fd08df415b httpd-devel-2.2.15-28.el6.centos.i686.rpm 4264a4230d12d3ab2a7675eedc285c18c373822289112e530cc0f57228db6dbb httpd-manual-2.2.15-28.el6.centos.noarch.rpm 1af95a6bcec5670487d42f952c64e144f111e9ab1eceefa05ab8fa972118a648 httpd-tools-2.2.15-28.el6.centos.i686.rpm 167e76578c90b87073b52cbf8c0b1ed049ce85957d6e9a04a125ca94f0677344 mod_ssl-2.2.15-28.el6.centos.i686.rpm x86_64: d61bf1614aa2cf9ef74fabbb9845043bfc0530a8967fadef8e6b426ebeafc89e httpd-2.2.15-28.el6.centos.x86_64.rpm 5b55d8c6900b23e7b81e0af76977c4dfd88f6ec86a856ee8b76b71fd08df415b httpd-devel-2.2.15-28.el6.centos.i686.rpm b25c1b85c499f8fdc8aab849e147b60108351de061de68e70dccffe59af667a0 httpd-devel-2.2.15-28.el6.centos.x86_64.rpm 4264a4230d12d3ab2a7675eedc285c18c373822289112e530cc0f57228db6dbb httpd-manual-2.2.15-28.el6.centos.noarch.rpm f8d28f9089433038b69e5d750c80c2ff1f71a13e58920a2c2c6f6134b87b23cb httpd-tools-2.2.15-28.el6.centos.x86_64.rpm 55c8ffc2a4bae473d22f76f2c0a57d6f2b71a3ea7ec40acd60ec2dac0c43077f mod_ssl-2.2.15-28.el6.centos.x86_64.rpm Source: fb4fb0f75cd750a3cc2576577cd9b86896bd126833ebe574e0abb9af6b8d2d67 httpd-2.2.15-28.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 99, Issue 5 **********************************************

1 0

still no centos 6.4 live cd dvd available?
by ppse＠web.de 13 May '13

13 May '13

Hello, in the release announcement for centos 6.4 on march 9th, the 6.4-live cd/dvd was supposed to be released a few days after the centos 6.4 release. Meanwhile 6 weeks later i still can't find any live cd/dvd in the mirror repositories. Any hint when there is a 6.4. live cd available? I'd like to test centos 6.4 on several machines (x86_64) without foregoing installation. Thank you in advance

2 1

selinux-policy rpm not signed
by Leon Fauster 13 May '13

13 May '13

Hi, i am seeing an unsigned package here: rpm -K http://mirror.centos.org/centos/6/updates/x86_64/Packages/selinux-policy-3.… http://mirror.centos.org/centos/6/updates/x86_64/Packages/selinux-policy-3.…: sha1 md5 OK i came across this while updating my systems. Just wondering if I am the first that stumbled over this? -- Thanks LF

2 2

CentOS 6.4 Samba 3.6.9 Regression
by Ryan Wagoner 13 May '13

13 May '13

Anyone know the reason RHEL bumped Samba from 3.5.10 to 3.6.9? This version has a regression with BackupExec and Veeam backing up to network shares. I receive access denied errors. Samba is in security=user mode and not joined to a domain. If I downgrade just the Samba packages to the CentOS 6.3 version 3.5.10 everything works again. I've found a couple of bug reports and the one suggested fix "acl check permissions = no" doesn't work. https://bugzilla.samba.org/show_bug.cgi?id=8414 https://bugzilla.redhat.com/show_bug.cgi?id=918537 Thanks, Ryan

2 2

Looking for a CentOS-friendly online backup company
by Digimer 11 May '13

11 May '13

Hi all. We've got a lot of customers running CentOS 5 and 6 servers. We've been asked by many to provide backup, which is something we don't want to do in house. So we started looking for backup companies to partner with. The problem is that the ones we've found who support RHEL won't support CentOS. So does anyone know of an online backup company that _will_ support CentOS (and Windows)? Any pointers will be much appreciated! digimer -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education?

5 7

Re: [CentOS] Looking for a CentOS-friendly online backup company
by Digimer 11 May '13

11 May '13

On 05/10/2013 05:46 PM, Reindl Harald wrote: > > > Am 10.05.2013 23:41, schrieb Digimer: >> Because CentOS works just fine for them. They've used it going back to >> CentOS 4 days without issue. Suggesting they rebuild long-in-production >> servers for the sake of a backup company is not going to fly. > > who needs to rebuild? > replace the release-packages and you are mostly done > > that is what "binary compatible" means > the only changes in CentOS are release name and logos / trademarks > >> That it is someone else's money doesn't change my responsibility to >> deliver the best bang for the buck > > that is a differnet story as above > > after years of expierience i would recommend let them alone > in case of service you can and will not provide at your own > because you will be resposible for any mistake from the > customers point of view becasue you recommended whatever As I mentioned initially; We don't do backups and we don't want to do it, either. That said, it's a service our clients are (strongly) asking for. We're not looking for a company to simply recommend, but one to partner with or become a reseller of. The goal is that the client maintains a single point of contact, us, and we pay a proper backup company for the support and service. -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education?

2 1

Re: [CentOS] Looking for a CentOS-friendly online backup company
by Digimer 10 May '13

10 May '13

On 05/10/2013 02:50 PM, Reindl Harald wrote: > > > Am 10.05.2013 20:46, schrieb Digimer: >> We've got a lot of customers running CentOS 5 and 6 servers. We've >> been asked by many to provide backup, which is something we don't want >> to do in house. So we started looking for backup companies to partner >> with. The problem is that the ones we've found who support RHEL won't >> support CentOS > > what needs to be "supported" - CentOS is *binary compatible* > > what sorts of "backup" > a backup can be anything, data, OS-images, snapshots, rsync.... > > if it is only *data* simply setup a SAN storage with a virtual > machine per customer and stup rsnapshot at your own, if it > is not liked inhouse rent a rack whereever > I know that it's binary compatible and that the software that works for RHEL will work for CentOS. What I mean by "supported" is a company who will see the host OS is CentOS and not throw up their hands and say "sorry, not supported!". My fear is that, a year from now, something will go wrong and the company we choose won't help us. We're not a backup company and we have no interest in becoming one, either. So we want to find a company to partner with who will see "CentOS" and still help us. So in short, this is a political, not technical question. As for what to backup; We're just looking for application data backup, not OS data. -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education?

2 2

cifs mount desktop icon
by Emiliano Mariño 10 May '13

10 May '13

Hi, I am mounting a Windows share on /media/%(USER)/mountpoint via pam_mount and I would like to show the volume desktop icon for every user logged in. The thing is that it works only for the first user that gets logged, when another user logs in, the desktop icon is missing, but the share mount works just fine if you navigate through the /media directory. The share is the same for all the users, but each user mounts it with its own privileges. Could it be something related to the name of the share being the same each time? Is there a way to fix it? Regards, Emiliano

1 0

← Newer
1
...
6
7
8
9
10
11
12
13
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2013