December 2014 - Discuss - lists.centos.org

Guidance: compile education
by Stan Cruise 05 Dec '14

05 Dec '14

This question may not belong in the Centos.org list, but I do want to compile against this distro. Please advise. The question: Can I be pointed at methods to learn to compile source against a distro. I have software development background (but too long ago to be specifically useful; however I have the concepts). Typically I can find some fairly decent step-by-steps for some apps, but it never works out. Which means I am missing the basics. I have been working with Centos and Fedora through many VM and metal installs, so that part is OK. I am getting tired of constantly trying to find the app I want in the distro, or an applicable rpm. It's time to compile. Stan

4 3

Re: [CentOS] ELRepo still active?
by Niki Kovacs 05 Dec '14

05 Dec '14

Le 05/12/2014 19:03, Mark Milhollan a écrit : > Surely visiting the elrepo web site would have provided an answer even > more quickly. Still, the list came through for you. I just found out my mistake. There was a "last modified" entry for 2012, but this concerned only the FAQ page. Now I looked on another page, and it's october 2014. This was just bad luck. > > As an aside, CentOS 5 is in phase 3 of support so unless you feel your > old PC can't handle CentOS 6 or 7 you would be well advised to consider > them instead. I am planning on basing my main desktop and server configurations on CentOS 6.x and 7.x. I was only asking for CentOS 5.x, since here in South France, there are many people who have sometimes pathologically obsolete hardware. And I think CentOS 5.x is the best choice for legacy hardware that's more than 10 years old. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

CentOS-announce Digest, Vol 118, Issue 4
by centos-announce-request＠centos.org 05 Dec '14

05 Dec '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2014:1958 CentOS 7 bnx2x Enhancement Update (Johnny Hughes) 2. CEBA-2014:1957 CentOS 7 resource-agents BugFix Update (Johnny Hughes) 3. CESA-2014:1956 Moderate CentOS 7 wpa_supplicant Security Update (Johnny Hughes) 4. CESA-2014:1959 Moderate CentOS 5 kernel Security Update (Johnny Hughes) 5. Release for CentOS Linux Rolling media (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 Dec 2014 13:37:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2014:1958 CentOS 7 bnx2x Enhancement Update Message-ID: <20141204133711.GA44352(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2014:1958 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1958.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: eab035c4c87117fc19cc75cd8f5b856aa52a1a63a54ab7cf441755b89dd28ace kmod-bnx2x-1.710.51-3.el7_0.x86_64.rpm a4b5a1acbedc67060930542d951007f74845314a6215bdf5c5c5e93ea8b1909d kmod-bnx2x-firmware-1.710.51-3.el7_0.x86_64.rpm Source: a44c81bac129e207108d4b8d9b61f8e373c993175bbfe4399b9cbf3c5187b24f bnx2x-1.710.51-3.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 4 Dec 2014 13:37:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1957 CentOS 7 resource-agents BugFix Update Message-ID: <20141204133742.GA44420(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1957 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1957.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 324557e085beb83897926fe401aa1bff5a96bd437c0ec1aa4d443893f9eae08d resource-agents-3.9.5-26.el7_0.6.x86_64.rpm Source: ea95a99f8a74cb22e963873f5693f1dcca724e2ac2cd9e7caee1b7821254bdb5 resource-agents-3.9.5-26.el7_0.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 4 Dec 2014 13:38:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1956 Moderate CentOS 7 wpa_supplicant Security Update Message-ID: <20141204133810.GA44491(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1956 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1956.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 867c5ed3ca6d8ddad3d7b237c318c8087a3f00b84608290c8029045c7d61e2d2 wpa_supplicant-2.0-13.el7_0.x86_64.rpm Source: f80528eda6d9a6aaddd3e357c3262d2daabed1fa4f3c8a09329d91ce98201004 wpa_supplicant-2.0-13.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 4 Dec 2014 21:58:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1959 Moderate CentOS 5 kernel Security Update Message-ID: <20141204215810.GA25971(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1959 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1959.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 571e827d7dbab6fe3597c0829b9305c53799be25559f1da4cf7f9ee8734cfee2 kernel-2.6.18-400.el5.i686.rpm 30ac09c18f82823a59cc15190e2122c68b118d6b22cd21dcb7b42b02c8a2ac47 kernel-debug-2.6.18-400.el5.i686.rpm a3ffa5d52b54b9d0fcc7b93aa0468466aff00785baddb2480b7e721daca13fe3 kernel-debug-devel-2.6.18-400.el5.i686.rpm dab96c2095b6d8af0440dbce169fa7f12d4959b20f257445aba655bfef15f0ec kernel-devel-2.6.18-400.el5.i686.rpm 0bcdb43d7e5a6f0ba3d8b2fdc83b0b67ca6b1d9a6eab18539b226fdb690cd21f kernel-doc-2.6.18-400.el5.noarch.rpm b95947c4d03ad59211433a60d3400eb19b7b1aab87214b3957bd8711b019b869 kernel-headers-2.6.18-400.el5.i386.rpm 36a0e7df7468c4a3a934a5dc7b353bce88d006d8b67b49a5969c0035c029fb1d kernel-PAE-2.6.18-400.el5.i686.rpm 55667df2e69466595e21c816c8c7349c1fa1003d657c968918c919e5f9defd51 kernel-PAE-devel-2.6.18-400.el5.i686.rpm ec8ca478d8071c3bfe1efeefb4b311fbe68ccb22e3856efb5cdf198a649604df kernel-xen-2.6.18-400.el5.i686.rpm 64e517b032083c8bcd3c647428ca20564c79e3b74e36292fa7545e90ab1982e0 kernel-xen-devel-2.6.18-400.el5.i686.rpm x86_64: 3b164c554a8fd7dada2bfcff2f9869b79b2592704ef2403d553ee7c1b017e8ac kernel-2.6.18-400.el5.x86_64.rpm dbd5c43ab0079acc611b4ee88fd960d9e4671599f909ae98d1d10275073f2f02 kernel-debug-2.6.18-400.el5.x86_64.rpm ca31c6755e0bf9553cb8272617d7df78a071495e143a2f8f4a85075058f941a5 kernel-debug-devel-2.6.18-400.el5.x86_64.rpm b6d114eed6268a5f24e61df0a92b36c8a79013749dd6af1b33cdf4af9868c657 kernel-devel-2.6.18-400.el5.x86_64.rpm 0bcdb43d7e5a6f0ba3d8b2fdc83b0b67ca6b1d9a6eab18539b226fdb690cd21f kernel-doc-2.6.18-400.el5.noarch.rpm dad86e534519df2cba7e4685709ad09a9d5337793d8c9e36cee7c72f13bc7020 kernel-headers-2.6.18-400.el5.x86_64.rpm 6c39539b27af4d38dc293047f9ece8f3545f671f66d49cfeb0e34db5074a6d66 kernel-xen-2.6.18-400.el5.x86_64.rpm e35581f0d3f928f3d39c998c5cca6b624385d7c365e0dc98a235383cf6a307d3 kernel-xen-devel-2.6.18-400.el5.x86_64.rpm Source: 22aff4842eebb3976961fb12a11adbf6e7cdfc4b1801dfe6a151994c3d53d55e kernel-2.6.18-400.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 05 Dec 2014 01:48:21 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS Linux Rolling media Message-ID: <54810EE5.1090909(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am pleased to announce general availability of the rolling builds for CentOS Linux. Todays release includes CentOS Linux 7 iso based install media and the generic cloud images. CentOS Linux rolling builds are point in time snapshot media rebuild from original release time, to include all updates pushed to mirror.centos.org's repositories. This includes all security, bugfix, enhancement and general updates for CentOS Linux. Machines installed from this media will have all these updates pre-included and will look no different when compared with machines installed with older media that have been yum updated to the same point in time. All rpm/yum repos remain on mirror.centos.org with no changes in either layout or content. We will aim to update and issue for release a new set of these files at the end of every month going forward. Each released filename includes a datestamp and a buildtag to indicate the content included. Files marked as 20141129_02 indicate that it includes all content released to mirror.centos.org upto ( and including ) the 29th of Nov 2014 and is the second build of that cycle. While all build's are made public at buildlogs.centos.org/, only those that pass our QA and testing cycles will be marked as released, to be included in buildlogs.centos.org/rolling/. We will also do interim builds as needed ( for development and testing purposes ) at different points in time, those builds will not be marked for general release, but will still be avilable publicly. Since there is a need to test these images, the release will always lag few days behind the datestamp ( and therefore content included ) in the release. My aim is to automate as much of this as possible going forward to reduce this time lag as much as possible, however we might not be able to remove it completely. With every cycle, we hope to increase the content made available in this rolling format. Immediate next steps include bringing the CentOS Linux 7 livemedia into the rolling releases followed by CentOS Linux 6 content from the next ( December 2014 ) cycle. Due to the way the installer works in CentOS-5, and its point in time we have no plans on including CentOS-5 in this cycle at this point. For the sake of uniformity and communication, the release media will be referenced by the month it reflects, not the month it was released in. Making this release the Nov 2014 Rolling release. Other content formats like containers and vendor specific images will aim to start with the same cycle as the main CentOS Linux media, but might move to a more frequent build and release cycle if needed. Special Interest Groups ( http://wiki.centos.org/SpecialInterestGroup ) wanting to do media and installer releases should also consider using the rolling timelines to sync with. Finally, I want to highlight that we will always consider doing a rolling release to address major security issues like the recent heartbleed, shellshock and poodle patches. - ----------- CentOS Linux distro installer media: File: CentOS-7-x86_64-DVD-20141129_02.iso Sha256sum: 85a46c62b5bfc701678bef7854bb73af4ccfb840dfcbfb2f9b2189e08fe9438c File: CentOS-7-x86_64-Everything-20141129_02.iso Sha256sum: f9fdd8b12c9529a1e3bf7628ebee964b2aeb9fd66540de7b369e0fde6f7a4236 File: CentOS-7-x86_64-Minimal-20141129_02.iso Sha256sum: e1338d13178f1c66c17386b7ced0b1459c677ff9a1cf095ac4db377234cc03fa Symlinks are provided that will always map to the latest released builds, as follows ( including their current mapping ) http://buildlogs.centos.org/rolling/7/isos/x86_64/CentOS-7-x86_64-DVD.iso - -> CentOS-7-x86_64-DVD-20141129_02.iso http://buildlogs.centos.org/rolling/7/isos/x86_64/CentOS-7-x86_64-Everythin… - -> CentOS-7-x86_64-Everything-20141129_02.iso http://buildlogs.centos.org/rolling/7/isos/x86_64/CentOS-7-x86_64-Minimal.i… - -> CentOS-7-x86_64-Minimal-20141129_02.iso These symlinks will be updated to point at the latest tested and released media and make for a good target in automation that requires CentOS Linux media. - ---------- Cloud and Instance Images: The CentOS Linux 7 GenericCloud image is built to include cloud-init from the Extras/ repository. The image is made available in multiple formats, with identical content. The cloud images are released via http://cloud.centos.org/centos/7/images/ File: CentOS-7-x86_64-GenericCloud-20141129_01.qcow2 Desc: is the reference image. Size: 944 MB Sha256Sum: 7710ffdd497cf00fc72c22a3fa7cc7adb3424d3542521ca8fbe19eba9ded403f File: CentOS-7-x86_64-GenericCloud-20141129_01.qcow2c Desc: This is the same image, run through the qemu qcow2 internal compression setup - while this image is suiteable for development and play, it comes with non trivial i/o performance penalties and therefore not recommended for production. Size: 399MB Sha256Sum: db42e4fb9565e75f0acbe6b54a5b8822f3f1e9783fb1a553e1552c72ceaff8df File: CentOS-7-x86_64-GenericCloud-20141129_01.qcow2.xz Desc: This is the regular qcow2 file, run through the xz compression tool. This gives a regular qcow2 file, suiteable for production use. Size: 266MB Sha256Sum: 9b0b38c48a24164c15c33625972b87835501b6994c3ee894f6b79ce40e7d5e54 File: CentOS-7-x86_64-GenericCloud-20141129_01.raw Desc: This is a raw format file for systems that dont consume qcow2 image types. Its also suiteable to use with "qemu-img convert" to render into different formats. Size: 8GB. Sha256Sum: 2e643310bdb3cda775905408dbfe378a5eed04e91db193165178afc5ed5492b8 Symlinks are provided that will always map to the latest released builds, as follows ( including their current mapping ) http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2 - -> CentOS-7-x86_64-GenericCloud-20141129_01.qcow2 http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2c - -> CentOS-7-x86_64-GenericCloud-20141129_01.qcow2c http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2.… - -> CentOS-7-x86_64-GenericCloud-20141129_01.qcow2.xz http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw - -> CentOS-7-x86_64-GenericCloud-20141129_01.raw These symlinks will be updated to point at the latest tested and released media and make for a good target in automation that requires CentOS Linux media. - ---------- For more information and comments please join us on the centos-devel mailing list ( http://lists.centos.org/ ) Enjoy! - -- Karanbir Singh, Project Lead, The CentOS Project -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJUgQ7lAAoJEI3Oi2Mx7xbtkogH/2Y/kum8rfJZbLKHsYguHndk V9JHBiBLB7f8t5m/8XJXZHd630eWe80iADQdtS7sSRxsFXfb7yVIqHo5O/ahx80n 5jqKdCNmJdY0nv/thIQzgxVYy51mEGcm940OD1OZ3DPgJKAC74MLaXpRX/WoGgcB q64DHQF/TjfHf4mArtvw+HxBV9cVCq1v8Z7BDlBErNN9UMRhj8Y0nQM2w3BwAOVJ VvN39XN7nCKb2wWalrRMA2VJooQ1d91sI1xKNNUv23vgM5lYZDT8A0kRebUOSazU QFtAFZD3MydlKgooNaYMi2G+sY+JKWRsYmzUqTLxzT7Q8ASpvOXH12nFOxdwyM0= =1HdB -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 118, Issue 4 ***********************************************

1 0

CentOS 5 text mode installer: minimum requirements?
by Niki Kovacs 05 Dec '14

05 Dec '14

Hi, A company I do some teaching for has a load of legacy hardware, among which a Dell Poweredge 1300 server. Rough specs: Pentium-III 500 MHz processor, 110 MB RAM, 3 x 9 GB SCSI disks. This thing is a dinosaur, and horribly loud, but apparently it takes a meteor strike to wipe it. I like using it for training purposes, mainly to poke fun at the Windows Server trainer, who complained that 8 GB RAM was "a bit short" to run all his various services. :o) The last time I used it, I installed Slackware 14.1 successfully on it (init 3, no GUI, various services like Dnsmasq, NTP, Samba, Squid, a LAMP stack, etc.). I wonder if that thing would be able to boot CentOS 5.11 in text mode. I vaguely remember the text mode installer requires a minimum of 128 MB RAM, but I can't seem to find some conclusive information on the subject. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

Cisco Anyconnect Client on Centos 7
by Samson 05 Dec '14

05 Dec '14

Hi all, I have Centos 7 which is doing great. I tried to install Cisco Anyconnect VPN client but could not launch it. It appear on my Application tab but not launching. Kindly assist me the a working rpm on Centos 7. Regards.

3 2

Re: [CentOS] What is the "not supported" hardware?
by Jeremy Hoel 05 Dec '14

05 Dec '14

On Thu, Dec 4, 2014 at 12:32 PM, <m.roth(a)5-cent.us> wrote: > Jeremy Hoel wrote: > > We noticed this when installing onto some new Dell R320's.. it might have > > something to do with hardware that the device had that the older kernel > > might not have known about. Nothing seemed wrong and everything seemed > to > > install ok (we would also update the kernel in the install process, so > > that > > probably hid any further problems), but moving to a 6.6 install made the > > silly error message go away. > > > Please don't top post. > > Dumb question: *how* were you installing? Did you have a kickstart of your > very own? If so... could it have wanted eth0, and the installer called it > em1? > > mark > > Kickstart.. and we had already changed the interface to the new name. It's the same kickstart between the two versions, with just the nic name being different.

2 1

Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

Can anyone help with getting the new DoD CACs (Smart Card) to work in CentOS 6.6? I don't use it for console logins, only for email and .mil web sites. I recently had to get a new DoD CAC (Smart Card) when one of the buildings I work in upgraded their security system. My old CAC was working fine prior to this for signing and encrypting email and for authenticating to various DoD (.mil) sites from the Internet using the coolkey libraries. After getting my new CAC I am no longer able to authenticate to any DoD sites. I can still sign and encrypt email in Thunderbird via the coolkey libraries but .mil sites either simply display blank pages or raise various errors in firefox. I am prompted for my PIN, which is successfully accepted but I'm not even prompted for which cert to use, like I used to be. I've tried installing and loading the latest "cackey" libraries (see below) but when I insert my CAC and attempt to login to the module in the Mozilla device manager it completely freezes firefox. Recovery requires killing firefox. If I remove the latest and install the next previous cackey library it works the same as coolkey - doesn't freeze up firefox but never connects to .mil sites. I tried building the cackey RPMs from the source RPMs too but the result is the same. Latest 64-bit cackey: cackey-0.6.8-3522.x86_64.rpm Next previous cackey: cackey-0.6.5-2444.x86_64.rpm I'm pretty sure it has something to do with the newer PIV CAC internal layout. I went through a similar transition when the GEMAL 144 cards came out but the cackey libraries did at least work and coolkey eventually caught up. One thing is for sure... the cackey RPM from forge.mil is not a drop-in replacement for coolkey. The cackey RPM only installs the libraries themselves, nothing else. It doesn't even register them in the nss db I had to do that manually with modutil. I must be missing something... Without direct access to forge.mil it's difficult to troubleshoot cackey. For some silly reason they still require CAC authentication to get the CAC software and drivers and access the forums, etc. More relevant information below... I'd be grateful for any ideas or advice on this. I desperately need to retrieve vulnerability reports, patches, and other DoD resources. Thanks! Cal Webster Smart Card Reader: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202509) 00 00-0 Old CAC: GEMAL TO TOPDL GX4 144 New CAC: G&D FIPS 201 SCE 3.2 [root@inet3 ~]# cat /etc/redhat-release CentOS release 6.6 (Final) [root@inet3 ~]# uname -a Linux inet3 2.6.32-504.1.3.el6.x86_64 #1 SMP Tue Nov 11 17:57:25 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux [root@inet3 ~]# Installed Packages coolkey.i686 1.1.0-32.el6 @base coolkey.x86_64 1.1.0-32.el6 @base firefox.i686 31.2.0-3.el6.centos @updates firefox.x86_64 31.2.0-3.el6.centos @updates thunderbird.x86_64 31.2.0-3.el6.centos @updates pcsc-lite.x86_64 1.5.2-14.el6 @base pcsc-lite-devel.x86_64 1.5.2-14.el6 @base pcsc-lite-libs.x86_64 1.5.2-14.el6 @base nss.i686 3.16.1-14.el6 @base nss.x86_64 3.16.1-14.el6 @base nss-devel.x86_64 3.16.1-14.el6 @base nss-softokn.i686 3.14.3-18.el6_6 @updates nss-softokn.x86_64 3.14.3-18.el6_6 @updates nss-softokn-devel.x86_64 3.14.3-18.el6_6 @updates nss-softokn-freebl.i686 3.14.3-18.el6_6 @updates nss-softokn-freebl.x86_64 3.14.3-18.el6_6 @updates nss-softokn-freebl-devel.x86_64 3.14.3-18.el6_6 @updates nss-sysinit.x86_64 3.16.1-14.el6 @base nss-tools.x86_64 3.16.1-14.el6 @base nss-util.i686 3.16.1-3.el6 @base nss-util.x86_64 3.16.1-3.el6 @base nss-util-devel.x86_64 3.16.1-3.el6 @base [root@inet3 ~]# modutil -list -dbdir /etc/pki/nssdb Listing of PKCS #11 Modules ----------------------------------------------------------- 1. NSS Internal PKCS #11 Module slots: 2 slots attached status: loaded slot: NSS Internal Cryptographic Services token: NSS Generic Crypto Services slot: NSS User Private Key and Certificate Services token: NSS Certificate DB 2. CoolKey PKCS #11 Module library name: libcoolkeypk11.so slots: 1 slot attached status: loaded slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202 token: WEBSTER.CALVIN.DALE.9427154028 3. cackey library name: libcackey.so slots: 2 slots attached status: loaded slot: CACKey Slot token: WEBSTER.CALVIN.DALE.9427154028 slot: CACKey Slot token: DoD Certificates ----------------------------------------------------------- [root@inet3 ~]#

3 12

What is the "not supported" hardware?
by Robert Nichols 04 Dec '14

04 Dec '14

When the installer complains that it has detected unsupported hardware, is there any way to tell just what it didn't like? Following the URL in the message just ends up at the RHEL Hardware Certification page, which isn't much help. The installer seemed quite willing to continue with the installation, and poking around from the shell VT I didn't find anything that didn't seem to be working. I also didn't see anything relevant in any of the message VTs. As it turns out this isn't a big deal for me, since this was the CentOS 6.5 installer and there was no such warning from the 6.6 installer. I'm just wondering how I might go about tracking that down, -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

2 1

Re: [CentOS] Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

On Thu, 2014-12-04 at 11:30 -0500, m.roth(a)5-cent.us wrote: > Cal Webster wrote: > > On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > >> On 12/03/14 17:34, Cal Webster wrote: > >> > Can anyone help with getting the new DoD CACs (Smart Card) to work in > >> > CentOS 6.6? I don't use it for console logins, only for email and .mil > >> > web sites. > >> > > >> > I recently had to get a new DoD CAC (Smart Card) when one of the > >> > buildings I work in upgraded their security system. My old CAC was > >> > working fine prior to this for signing and encrypting email and for > >> > authenticating to various DoD (.mil) sites from the Internet using the > >> > coolkey libraries. > >> > >> Dunno 'bout the new CaC keys, but they "upgraded" our PIV cards to 128? > >> 256? I forget, earlier this year, and I *think* I remember my manager > pushing > >> an enhancement on upstream, and since then we've had no trouble with > >> coolkey accessing them. The two *should* be identical. > > > > Was source for this upstream enhancement released to the community? Not > > Yup. We have a few RHEL licenses, so he could push for the enhancement. It > was released, and we were using it with CentOS 6.5. It must have been in the coolkey-1.1.0-32 update. Build Date: Wed 15 Oct 2014 11:11:10 AM EDT Install Date: Wed 29 Oct 2014 05:04:04 AM EDT > > sure what you meant by "The two" - you mean coolkey and cackey? > > Nope. We don't use cackey. > > > >> <snip> > >> > I've tried installing and loading the latest "cackey" libraries (see > >> > >> I know nothing about cackey libraries, but it's possible that, and pcscd > >> are arguing. > >> > >> I don't see pcscd installed. > > > > pcsc-lite-1.5.2-14.el6.x86_64 (listed on original post) contains pcscd. > > Sure that's possible but I see nothing to support that in the system > > logs > > Watch out that opensc that *doesn't* come with pcscd isn't loaded. Oh, > also, new card - do you have a new CA chain? Is that installed? > <snip> > > mark, who has a new card a few weeks ago, and had to deal with the > CA change from Verizon to Entrust.... Yes, I learned to avoid opensc years ago when we first setup the CACs. A missing CA cert turned out to be the problem. I checked after Jason Pyeron was kind enough to mention "MAIL CA-32" listed on my CAC cert lookup. Sure enough, it was missing in the Firefox CA store but present in the Thunderbird store. This explains why I could sign and encrypt email but not access .mil web sites. When I used the dod_configuration mozilla add-on to update the certs I assumed it would get them all. Apparently not. In fact, I think it deleted this cert because I recorded everything on my previous CAC before getting the new one. It was also using CA-32. I ended up just exporting the cert from Thunderbird and importing it into Firefox. ./Cal

1 0

Re: [CentOS] Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > On 12/03/14 17:34, Cal Webster wrote: > > Can anyone help with getting the new DoD CACs (Smart Card) to work in > > CentOS 6.6? I don't use it for console logins, only for email and .mil > > web sites. > > > > I recently had to get a new DoD CAC (Smart Card) when one of the > > buildings I work in upgraded their security system. My old CAC was > > working fine prior to this for signing and encrypting email and for > > authenticating to various DoD (.mil) sites from the Internet using the > > coolkey libraries. > > Dunno 'bout the new CaC keys, but they "upgraded" our PIV cards to 128? 256? I > forget, earlier this year, and I *think* I remember my manager pushing an > enhancement on upstream, and since then we've had no trouble with coolkey > accessing them. The two *should* be identical. Was source for this upstream enhancement released to the community? Not sure what you meant by "The two" - you mean coolkey and cackey? > <snip> > > I've tried installing and loading the latest "cackey" libraries (see > > I know nothing about cackey libraries, but it's possible that, and pcscd are > arguing. > > I don't see pcscd installed. pcsc-lite-1.5.2-14.el6.x86_64 (listed on original post) contains pcscd. Sure that's possible but I see nothing to support that in the system logs. I just got a cackey developer contact on forge.mil today from a Civil Svc engineer who does have access so I'll send him my data too. Thanks Mark. > mark > <snip> > > More relevant information below... > > > > Smart Card Reader: > > SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202509) 00 > > 00-0 > > > > Old CAC: GEMAL TO TOPDL GX4 144 > > New CAC: G&D FIPS 201 SCE 3.2 > > > > > > [root@inet3 ~]# cat /etc/redhat-release > > CentOS release 6.6 (Final) > > [root@inet3 ~]# uname -a > > Linux inet3 2.6.32-504.1.3.el6.x86_64 #1 SMP Tue Nov 11 17:57:25 UTC > > 2014 x86_64 x86_64 x86_64 GNU/Linux > > [root@inet3 ~]# > > > > Installed Packages > > > > coolkey.i686 1.1.0-32.el6 @base > > coolkey.x86_64 1.1.0-32.el6 @base > > firefox.i686 31.2.0-3.el6.centos @updates > > firefox.x86_64 31.2.0-3.el6.centos @updates > > thunderbird.x86_64 31.2.0-3.el6.centos @updates > > pcsc-lite.x86_64 1.5.2-14.el6 @base > > pcsc-lite-devel.x86_64 1.5.2-14.el6 @base > > pcsc-lite-libs.x86_64 1.5.2-14.el6 @base > > nss.i686 3.16.1-14.el6 @base > > nss.x86_64 3.16.1-14.el6 @base > > nss-devel.x86_64 3.16.1-14.el6 @base > > nss-softokn.i686 3.14.3-18.el6_6 @updates > > nss-softokn.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-devel.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-freebl.i686 3.14.3-18.el6_6 @updates > > nss-softokn-freebl.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-freebl-devel.x86_64 3.14.3-18.el6_6 @updates > > nss-sysinit.x86_64 3.16.1-14.el6 @base > > nss-tools.x86_64 3.16.1-14.el6 @base > > nss-util.i686 3.16.1-3.el6 @base > > nss-util.x86_64 3.16.1-3.el6 @base > > nss-util-devel.x86_64 3.16.1-3.el6 @base > > > > > > [root@inet3 ~]# modutil -list -dbdir /etc/pki/nssdb > > > > Listing of PKCS #11 Modules > > ----------------------------------------------------------- > > 1. NSS Internal PKCS #11 Module > > slots: 2 slots attached > > status: loaded > > > > slot: NSS Internal Cryptographic Services > > token: NSS Generic Crypto Services > > > > slot: NSS User Private Key and Certificate Services > > token: NSS Certificate DB > > > > 2. CoolKey PKCS #11 Module > > library name: libcoolkeypk11.so > > slots: 1 slot attached > > status: loaded > > > > slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202 > > token: WEBSTER.CALVIN.DALE.9427154028 > > > > 3. cackey > > library name: libcackey.so > > slots: 2 slots attached > > status: loaded > > > > slot: CACKey Slot > > token: WEBSTER.CALVIN.DALE.9427154028 > > > > slot: CACKey Slot > > token: DoD Certificates >

1 0

wield messages on /var/log/messages after install BACKEXEC
by mcclnx mcc 04 Dec '14

04 Dec '14

we have Centos 5.X on DELL servers. Recently we upgrade to BACKEXEC later version of software and /var/log/messages have following messages: Dec 3 18:19:04 ORA1 modprobe: WARNING: Unmatched bracket in ÷ 0E[rŠ£½Øô/N Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in •§ºÎãù(A[v’¯Íì Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in ÈÚí,C[tŽ©Åâ Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in `r…™®ÄÛó &A]z˜· Dec 3 19:29:45 ORA1 SYMBDSNAP_SDK[7808]: Reloc File successfully created. Dec 3 19:30:38 ORA1 SYMBDSNAP_SDK[7808]: Reloc File successfully created. ANy one know why? Thanks

1 0

ELRepo still active?
by Niki Kovacs 04 Dec '14

04 Dec '14

Hi, I'm currently installing CentOS 5.11 i386 on an old PC. Is the ELRepo third-party repository still active and maintained? Cheers, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

CentOS 7 - not using latest installed kernel
by John Horne 04 Dec '14

04 Dec '14

Hello, I have just installed CentOS 7 onto two servers and applied all the current patches. There are currently two kernels installed: # rpm -q kernel kernel-3.10.0-123.el7.x86_64 kernel-3.10.0-123.9.3.el7.x86_64 However, if I reboot the servers they both start up on the older kernel: # uname -r 3.10.0-123.el7.x86_64 I would have expected them to restart using kernel 3.10.0-123.9.3. I know I can manually select the kernel to use at boot time (from the grub2 menu), but, as with CentOS 6, I would have expected the servers to reboot using the latest kernel automatically. Has anyone else noticed this? Any ideas as to why it might be happening? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK

3 3

SEtroubleshootd Crashing
by Gary Smithson 04 Dec '14

04 Dec '14

When running Node.js through Phusion Passenger on Centos 6.5 ( Linux 2.6.32-431.23.3.el6.x86_64 #1 SMP Thu Jul 31 17:20:51 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux), with SELinux enabled in permissive mode we receive a large number of entries in the audit.log and setroubleshootd randomly crashes with the following error, We have resolved the selinux alerts by following the troubleshooting steps recommend by running sealert,However we are concerned by setroubleshootd crashing and are concered that we may have masked the issue by fixing the entries in the audit.log. abrt_version: 2.0.8 cmdline: /usr/bin/python -Es /usr/sbin/setroubleshootd -f '' executable: /usr/sbin/setroubleshootd kernel: 2.6.32-431.23.3.el6.x86_64 last_occurrence: 1417101625 time: Thu 27 Nov 2014 03:20:25 PM UTC uid: 0 username: root sosreport.tar.xz: Binary file, 3642240 bytes backtrace: :analyze.py:426:lookup_signature:ProgramError: [Errno 1001] signature not found : :Traceback (most recent call last): : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 401, in auto_save_callback : self.save() : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 377, in save : self.prune() : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 340, in prune : self.delete_signature(sig, prune=True) : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 471, in delete_signature : siginfo = self.lookup_signature(sig) : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 426, in lookup_signature : raise ProgramError(ERR_NO_SIGNATURE_MATCH) :ProgramError: [Errno 1001] signature not found : :Local variables in innermost frame: :matches: [] :siginfo: None :self: <setroubleshoot.analyze.SETroubleshootDatabase object at 0x151d590> :sig: <setroubleshoot.signature.SEFaultSignature object at 0x645a050> We are running the following versions Passenger/htttpd/node passenger --version Phusion Passenger version 4.0.53 httpd -v Server version: Apache/2.2.15 (Unix) Server built: Jul 23 2014 14:17:29 node -v v0.10.32 This email is from the Press Association. For more information, see www.pressassociation.com. This email may contain confidential information. Only the addressee is permitted to read, copy, distribute or otherwise use this email or any attachments. If you have received it in error, please contact the sender immediately. Any opinion expressed in this email is personal to the sender and may not reflect the opinion of the Press Association. Any email reply to this address may be subject to interception or monitoring for operational reasons or for lawful business practices.

3 11

CentOS-announce Digest, Vol 118, Issue 3
by centos-announce-request＠centos.org 04 Dec '14

04 Dec '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1948 Important CentOS 5 nss Security Update (Johnny Hughes) 2. CESA-2014:1919 Critical CentOS 5 firefox Security Update (Johnny Hughes) 3. CESA-2014:1924 Important CentOS 5 thunderbird Security Update (Johnny Hughes) 4. CESA-2014:1919 Critical CentOS 6 firefox Security Update (Johnny Hughes) 5. CESA-2014:1924 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 6. CESA-2014:1948 Important CentOS 6 nss Security Update (Johnny Hughes) 7. CESA-2014:1919 Critical CentOS 7 firefox Security Update (Johnny Hughes) 8. CESA-2014:1948 Important CentOS 7 nss Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 3 Dec 2014 22:45:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1948 Important CentOS 5 nss Security Update Message-ID: <20141203224556.GA26634(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1948 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1948.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b8a799602864cd2f9352bcd442c0b4652ef4486b246d9baeff9e889ce51b9243 nss-3.16.2.3-1.el5_11.i386.rpm 409f51997a41bd6e2cff5b37a32019b46d2a526621ac35c5f35d0b884ec9c75b nss-devel-3.16.2.3-1.el5_11.i386.rpm 3af4d4d23156e56efbe74e5658af28cc66c517ecbb20c1040f2d4d679e92dfdb nss-pkcs11-devel-3.16.2.3-1.el5_11.i386.rpm f6eb0fa74c036640fcfef6df781e5a716cf8c9eb1d6614ce4432ff233ed2a576 nss-tools-3.16.2.3-1.el5_11.i386.rpm x86_64: b8a799602864cd2f9352bcd442c0b4652ef4486b246d9baeff9e889ce51b9243 nss-3.16.2.3-1.el5_11.i386.rpm d09ed19b6ec0defe4352c10caccfe0c996ad71a5950b7b97f88d80675ec9369d nss-3.16.2.3-1.el5_11.x86_64.rpm 409f51997a41bd6e2cff5b37a32019b46d2a526621ac35c5f35d0b884ec9c75b nss-devel-3.16.2.3-1.el5_11.i386.rpm c79362a2311852a8bc470fc23ec216ef1c584dcbba82fe6ea388c7b6a0c2d0fe nss-devel-3.16.2.3-1.el5_11.x86_64.rpm 3af4d4d23156e56efbe74e5658af28cc66c517ecbb20c1040f2d4d679e92dfdb nss-pkcs11-devel-3.16.2.3-1.el5_11.i386.rpm eb674312d3831b56b2ce62688b1d9fbc92e13def8dae4a52b371beee7f3fd70c nss-pkcs11-devel-3.16.2.3-1.el5_11.x86_64.rpm 5aa2f69b45955f200f22a682164c8679b1904911a429845dc5b89e84528f3b59 nss-tools-3.16.2.3-1.el5_11.x86_64.rpm Source: f99f974c0ad77aea4144b991d7e6fb6ee10aa92c9abbebc7030dfd11f7c2ee0e nss-3.16.2.3-1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 3 Dec 2014 22:51:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1919 Critical CentOS 5 firefox Security Update Message-ID: <20141203225138.GA26758(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1919 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1919.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fcc0f6afc339f1489e58b0a3d5165842cdd18b0be9989593788d21dc34184eb7 firefox-31.3.0-4.el5.centos.i386.rpm x86_64: fcc0f6afc339f1489e58b0a3d5165842cdd18b0be9989593788d21dc34184eb7 firefox-31.3.0-4.el5.centos.i386.rpm 8486affc75744d986438ecf4f9fe1b73f27ef370999675c2d3f2caa8bb58405d firefox-31.3.0-4.el5.centos.x86_64.rpm Source: c1833c68d0aa3abb27e5011b2e1625eafc5e968f353e42a381327fa583ef3172 firefox-31.3.0-4.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 3 Dec 2014 22:57:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1924 Important CentOS 5 thunderbird Security Update Message-ID: <20141203225724.GA26890(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1924 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1924.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f0dd2d40a001cf33ca9a05870bfa863620af2a1a001c0cd304c7cea387a43720 thunderbird-31.3.0-1.el5.centos.i386.rpm x86_64: aa47ec189d308956a270e350d01bb1548f23e3bdcabb492a2ad028bec14d99f0 thunderbird-31.3.0-1.el5.centos.x86_64.rpm Source: ba64035c733787cecc3117b45193e6abb8b0bb579e1ccc7fdc90524465828fc8 thunderbird-31.3.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 3 Dec 2014 23:57:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1919 Critical CentOS 6 firefox Security Update Message-ID: <20141203235713.GA8409(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1919 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1919.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 89a5f7d8af694396fc523d0de024e6f06a581c4cea913ee81c72ea21211e2a14 firefox-31.3.0-3.el6.centos.i686.rpm x86_64: 89a5f7d8af694396fc523d0de024e6f06a581c4cea913ee81c72ea21211e2a14 firefox-31.3.0-3.el6.centos.i686.rpm 88d60199516cc17011a341197faa4da3e591f86b1619291ed337f127d94b9b40 firefox-31.3.0-3.el6.centos.x86_64.rpm Source: fdc191935831a1dfbc2ce83e522702e468332b54e64fa036007cf115e3a151e8 firefox-31.3.0-3.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 3 Dec 2014 23:58:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1924 Important CentOS 6 thunderbird Security Update Message-ID: <20141203235839.GA8629(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1924 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1924.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 82e88ed23a9b2cb047f132fec73986de089734ef476b741639d86ff20d05dd41 thunderbird-31.3.0-1.el6.centos.i686.rpm x86_64: 460c7e5c05b8b369381c34a9442237f46afd49f830b608ff246ec594d5b7ff98 thunderbird-31.3.0-1.el6.centos.x86_64.rpm Source: 4e5d29a207bddd364faadfeec30564d2435b93bdc4bc7c05402986f42662cdb0 thunderbird-31.3.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Thu, 4 Dec 2014 00:11:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1948 Important CentOS 6 nss Security Update Message-ID: <20141204001159.GA15399(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1948 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1948.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d44cbf6866b13f0e24e172d3438f5cbc96a60ba6f746695c52dbfe7fabc0d135 nss-3.16.2.3-3.el6_6.i686.rpm 1e7b5c6f5db2e205b2c3ba93a1c1f971de1a3f60a8115c1c5ad3fe9b6492f6f5 nss-devel-3.16.2.3-3.el6_6.i686.rpm 5357aeab890d2fc31fae0a3aabaea8706bd30136b6d4575e592780b7dda4a8de nss-pkcs11-devel-3.16.2.3-3.el6_6.i686.rpm f6a3c52e66613ab99256321a26a1b2f2b8fc5a2bbcbfca7ce82b88b283991b8c nss-sysinit-3.16.2.3-3.el6_6.i686.rpm abe4ee51f44dc1fcedfb15680c36da9a112bee3c5ec835ea6ac6e7d777ba43c7 nss-tools-3.16.2.3-3.el6_6.i686.rpm b8e3724912c778a530b904cafa7bb68a919b491f1463fb268714f1faef959841 nss-util-3.16.2.3-2.el6_6.i686.rpm 19968a0d55400081337caa92d6fcd75097894729dcc369469ab8053e39140448 nss-util-devel-3.16.2.3-2.el6_6.i686.rpm x86_64: d44cbf6866b13f0e24e172d3438f5cbc96a60ba6f746695c52dbfe7fabc0d135 nss-3.16.2.3-3.el6_6.i686.rpm 661b219685b967ef444c5cda07f4dea367fbc7124478148059ead8480734b9ed nss-3.16.2.3-3.el6_6.x86_64.rpm 1e7b5c6f5db2e205b2c3ba93a1c1f971de1a3f60a8115c1c5ad3fe9b6492f6f5 nss-devel-3.16.2.3-3.el6_6.i686.rpm 71f5828a7d7118f0d1aeeb11e423276389c458b700bc7689120c6cc99c46f7c4 nss-devel-3.16.2.3-3.el6_6.x86_64.rpm 5357aeab890d2fc31fae0a3aabaea8706bd30136b6d4575e592780b7dda4a8de nss-pkcs11-devel-3.16.2.3-3.el6_6.i686.rpm 3df42ef1f61a868fe6d134a9a820ff23dfc7f122ce572332f7031ac08f58dfb8 nss-pkcs11-devel-3.16.2.3-3.el6_6.x86_64.rpm 706de94d7936a668af1c412950e08952334d5ce51dd343ce4733f0aa1949a396 nss-sysinit-3.16.2.3-3.el6_6.x86_64.rpm d76b38f51af2a0f68066a7fc377d3083d38a7a7135b091ceaa1da8d0f3182cd2 nss-tools-3.16.2.3-3.el6_6.x86_64.rpm b8e3724912c778a530b904cafa7bb68a919b491f1463fb268714f1faef959841 nss-util-3.16.2.3-2.el6_6.i686.rpm af57dcff19ab53e94d64cc0d90018dff0f601028ed75b3affa260f37250fee42 nss-util-3.16.2.3-2.el6_6.x86_64.rpm 19968a0d55400081337caa92d6fcd75097894729dcc369469ab8053e39140448 nss-util-devel-3.16.2.3-2.el6_6.i686.rpm e7db4b6843bbd8dd9a0bc4508ae64b127cd941f3308768dad07525bd0306878d nss-util-devel-3.16.2.3-2.el6_6.x86_64.rpm Source: 7e103a6dea0f74afd01deaf8da4ae561aad0b2a178a83da2dbbd6cc20421b028 nss-3.16.2.3-3.el6_6.src.rpm 7a57738b55bf60c529be17aa7452bd2eb137dd84089224d91467ffda8f21910a nss-util-3.16.2.3-2.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Thu, 4 Dec 2014 01:18:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1919 Critical CentOS 7 firefox Security Update Message-ID: <20141204011841.GA24554(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1919 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1919.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: aacdeeb999af039d4f0afc1fc6a12551fadfd3191f0e4b46249e2213ab967204 firefox-31.3.0-3.el7.centos.i686.rpm b0551a17cb1086859742361f5548501516ec871f378950508a5ba52970ef43e6 firefox-31.3.0-3.el7.centos.x86_64.rpm Source: 493a8291a268476144f2db5a0eab7da41df7a412bace132aee02b40752cd5cff firefox-31.3.0-3.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Thu, 4 Dec 2014 01:19:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1948 Important CentOS 7 nss Security Update Message-ID: <20141204011911.GA24702(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1948 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1948.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 76f765d7a7e36352a608ce19c8f48165ccbd3732122dada8984ad3a7779fb0af nss-3.16.2.3-2.el7_0.i686.rpm 7b628aa5f625d1e44ab70c37a30e0cffd1be488018952219f208c2cab0c8d618 nss-3.16.2.3-2.el7_0.x86_64.rpm 4493523c94a15dc30e4afca68d882609f64cd9e8b0e101d4b12d4998053c5b8c nss-devel-3.16.2.3-2.el7_0.i686.rpm e57435b7958560d090cee89426ecb5851fd462f3d6f6e52c57d43f2d865ed856 nss-devel-3.16.2.3-2.el7_0.x86_64.rpm 6d9d880cbf6c62456d3e5f8524d3d4b0c486473a2ec5ab34fe9b76c7571216d7 nss-pkcs11-devel-3.16.2.3-2.el7_0.i686.rpm 1451404b9da935fa658bea2dd40610649cea10af6bcadaa73b37f3b5c60ddc0e nss-pkcs11-devel-3.16.2.3-2.el7_0.x86_64.rpm 817170d344ff6e0d131fee05d4eb4d5268c368d32bdf892133b46c660f3975a2 nss-softokn-3.16.2.3-1.el7_0.i686.rpm bc446316e99097538341838746ad02a31d31a9d2f59133605ecb386452e4b772 nss-softokn-3.16.2.3-1.el7_0.x86_64.rpm 8aa5d12ad6b0a2cef2a8b8fbe7054f97dbce79ad27275ac88ca144e15f9304fc nss-softokn-devel-3.16.2.3-1.el7_0.i686.rpm 503bb23175fcc5fcb5b1417a30f2370528f9aa9c192bcb9c9a589e5d2865a9c1 nss-softokn-devel-3.16.2.3-1.el7_0.x86_64.rpm 2c28918dc00a85c8ae8192dd48cbda90fab7b30314c56bff2747eeab26071bf3 nss-softokn-freebl-3.16.2.3-1.el7_0.i686.rpm 23876b8b1b13e7e0b3553cf6a1fd092c68c5c2d8d8efc8ff45e69833bf23b715 nss-softokn-freebl-3.16.2.3-1.el7_0.x86_64.rpm 3110df74bf5b0684bcc50904325ef53be0f0a953f1f00d9e0c31a41cec5096f3 nss-softokn-freebl-devel-3.16.2.3-1.el7_0.i686.rpm f3327ed7ebc9fbc9553d71d16644b038fb115295fcf37c506f15f18f4b7bd494 nss-softokn-freebl-devel-3.16.2.3-1.el7_0.x86_64.rpm db01c85665c2d8fb8ad297d0931ac73abd0ed63b7f9bdad5c0552cca362ffc13 nss-sysinit-3.16.2.3-2.el7_0.x86_64.rpm 28ffb84499d817022682e69f127bb53de42d4844490a60e5cd3c5bb4fad3a9cf nss-tools-3.16.2.3-2.el7_0.x86_64.rpm b9ebda07ef700287b47c34998f36cc940d4e10366951e834453a09d9467d97e6 nss-util-3.16.2.3-1.el7_0.i686.rpm bc3c9b29e9019b0bfbbdd62c015c63cb298f4cb28169f2a283b29a7f74ae982e nss-util-3.16.2.3-1.el7_0.x86_64.rpm b3bd87b2f180cb9405e0bb2aa32b2ec5e770c34d0603ef424c718116389aa6d4 nss-util-devel-3.16.2.3-1.el7_0.i686.rpm 48fa2f47c6ae0d3456b884eec5aa418380bb44b36b7c03a47d65873ff841680d nss-util-devel-3.16.2.3-1.el7_0.x86_64.rpm Source: dae5150819470a15508f4dcffeaee627b5c38a8342a0595d5ba121f79a39a5f1 nss-3.16.2.3-2.el7_0.src.rpm d06daf0f270daba7ba2aabd16b16fc422a7b591a6cb98fc4496246474f936206 nss-softokn-3.16.2.3-1.el7_0.src.rpm 12d1a3d127daa3ff3704e4e282ce14fec861edcd154fa460c339ace7e831b924 nss-util-3.16.2.3-1.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 118, Issue 3 ***********************************************

1 0

libvirt machine type rhel6.6.0 on CentOS 7
by Paul Heinlein 04 Dec '14

04 Dec '14

One of our VM clusters has four CentOS 6.6 machines. I'm in the process of testing the addition of a CentOS 7 box (with the goal of upgrading the 6.6 machines soon). A newly created VM running on a 6.6 node has a machine type of rhel6.6.0: <os> <type arch='x86_64' machine='rhel6.6.0'>hvm</type> <boot dev='hd'/> </os> The libvirt on the CentOS 7 machine won't recognize that label; it goes straight from rhel6.5.0 to the newer RHEL 7 types: pc-i440fx-rhel7.0.0 and pc-q35-rhel7.0.0. I can shutdown the VM, edit its XML definition, restart it, and then migrate it -- but I'd rather be able to do a live migration without a shutdown. Has anyone else seen this? Any workarounds? -- Paul Heinlein heinlein(a)madboa.com 45°38' N, 122°6' W

1 0

Re: [CentOS] partedmagic connecting to a comcast address
by g 03 Dec '14

03 Dec '14

On 12/03/2014 11:13 AM, Mark Milhollan wrote: <> > Do you mean PartedMagic as the destination port? If so that's just a > translation from the port number to a name found in your /etc/services > file. It is often wrong or misleading, and in most cases can be > ignored. i have no PartedMagic in /etc/services >> NetName: COMCAST-VOIP-4 > > Given this it seems like you have Comcast phone service and what > you are seeing is your phone checking-in with their switch. my isp service is DSL with bellsouth.net over copper. my neighbors to north and south of my home use comcast and they have wifi between them. wireless on my router is not enabled. wireshark text file loaded at; http://pastebin.com/rCU0CC10 -- peace out. in a world with out fences, who needs gates. tc,hago. g .

5 9

Creating a USB bootable modified netinstall ISO image
by Alfred von Campe 03 Dec '14

03 Dec '14

I’ve been creating slightly modified CentOS netinstall ISO images using the following steps: Copy contents of CentOS netinstall ISO image to a temporary directory Edit isolunux/isolinux.cfg file Create new ISO image using the following command: mkisofs -o new.iso -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot -boot-load-size 4 -boot-info-table -R -J -v -T /tmp/iso I’ve been using that command for many years and found it in the RHEL 5 documentation I believe. Anyway, so far, so good. If I burn a CD from this new ISO image I can boot from it and get the modified menu as expected. However, if I use dd to copy this ISO image to a USB stick, It’s not bootable. Using the exact same dd command with the original CentOS ISO image produces a bootable USB stick. Any idea why my modified ISO image is not bootable when copied to a USB stick? Alfred

3 3

partedmagic connecting to a comcast address
by g 03 Dec '14

03 Dec '14

i have been noticing a short connection burst in system monitor every time i connect to internet. i got curious and decided to run wireshark to see what was happening. seems that i am connecting to 96.195.141.178 with destination of "PartedMagic". this seemed strange because i do not have PartedMagic installed, so i ran a 'whois' check. this is what it showed: IP Location United States United States Pittsburgh Comcast Cable Communications Llc ASN United States AS7922 COMCAST-7922 - Comcast Cable Communications, Inc.,US (registered Feb 14, 1997) Resolve Host m001dd684d074.pitt1.pa.comcast.net Whois Server whois.arin.net IP Address 96.195.141.178 NetRange: 96.192.0.0 - 96.223.255.255 CIDR: 96.192.0.0/11 NetName: COMCAST-VOIP-4 NetHandle: NET-96-192-0-0-1 Parent: NET96 (NET-96-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Comcast Cable Communications, LLC (CCCS) is this something for concern? if so, what is/are best way/s to track this down? any and all help / suggestions are much needed and appreciated. thank you. -- peace out. in a world with out fences, who needs gates. tc,hago. g .

3 5

Building QT on CentOS 5
by Wade Hampton 03 Dec '14

03 Dec '14

I am building QT 4.8.6 on CentOS 5 and it is failing on building the webkit module with __sync_add_and_fetch_4 not being defined. My build is for Embedded Linux, which allows me to use the framebuffer. Posts report this error when trying to cross-compile for ARM, but I am building for X86. Several posts also indicate that this is due to the old GCC used by CentOS 5. Does anyone have any suggestions? Thanks, -- Wade Hampton

2 1

Help with at Bash script
by James B. Byrne 03 Dec '14

03 Dec '14

I am attempting to get a script borrowed from DJB to work on my CentOS-6.6 box. Simplified it looks like this: tcpdump -l -n -e port 53 \ | awk '{if ($14 ~ /A.*?/) print $15}' \ | while read domain ; do echo $domain ; done ; The sticking point is the 'while read' construct. Run just as 'tcpdum | awk' I get this: english.stackexchange.com. www.urbandictionary.com. www.urbandictionary.com. www.urbandictionary.com. www.urbandictionary.com. api.mywot.com. a.udimg.com. a.udimg.com. fonts.googleapis.com. . . . Run with the 'while read $domain ; do echo ' pipe nothing appears whatsoever. What am I doing wrong? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 9

CentOS-announce Digest, Vol 118, Issue 2
by centos-announce-request＠centos.org 03 Dec '14

03 Dec '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:C004 CentOS 7 ipa BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 2 Dec 2014 17:47:50 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:C004 CentOS 7 ipa BugFix Update Message-ID: <20141202174750.GA43921(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:C004 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1828.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f373d3e21421f9a9f35c33582327ac8366bfb9b3753bbd1b353d75aeadb97a8b ipa-admintools-3.3.3-28.0.1.el7.centos.3.x86_64.rpm f59a39764e2390d0e9274236b167aab61fa3b324dafb26b6067ad1b7d57baa82 ipa-client-3.3.3-28.0.1.el7.centos.3.x86_64.rpm b280d818e3dfa57c4e86a3bfbd1113450df3ac0a1cba4bb808e5aa051cb95b52 ipa-python-3.3.3-28.0.1.el7.centos.3.x86_64.rpm 8118f8f2d2c0867ca14bc5b06e3a8c7f1dd8f4654e5ace17621c57b262d2f669 ipa-server-3.3.3-28.0.1.el7.centos.3.x86_64.rpm 6d1acb05d7af677fb0a11cc5106cd7e4e26bf763f7b6935b564f0bdd100a3991 ipa-server-trust-ad-3.3.3-28.0.1.el7.centos.3.x86_64.rpm Source: 7de16e077d7fc8f6c74f1d3c88a4b8b44a107d26e4897e3f2e60272baa4574b6 ipa-3.3.3-28.0.1.el7.centos.3.src.rpm NOTE: This is a re-release of the above packages to remove subscription manager as an install requirement. See CentOS Bug: http://bugs.centos.org/view.php?id=7266 -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 118, Issue 2 ***********************************************

1 0

Re: [CentOS] CentOs 7.0 and reboot failure
by Gregory P. Ennis 03 Dec '14

03 Dec '14

On Tue, 2014-12-02 at 16:32 -0600, Gregory P. Ennis wrote: > On Tue, 2014-12-02 at 20:23 +0000, Ned Slider wrote: > > On 02/12/14 18:34, Gregory P. Ennis wrote: > > > On Mon, 2014-12-01 at 18:50 +0000, Ned Slider wrote: > > >> On 01/12/14 18:36, Gregory P. Ennis wrote: > > >>> On Thu, 2014-11-27 at 22:04 -0600, Gregory P. Ennis wrote: > > >>>> On Thu, 2014-11-27 at 18:50 -0600, Gregory P. Ennis wrote: > > >>>>> Date: Sun, 23 Nov 2014 13:50:17 -0600 > > >>>>> > > >>>>> On Sun, 23 Nov 2014 13:07:47 -0600 > > >>>>> Gregory P. Ennis wrote: > > >>>>> > > >>>>>> I also changed the boot level to 5. > > >>>>> > > >>>>> Do you mean the runlevel? If so, are you sure that you changed it correctly? > > >>>>> > > >>>>> Centos 7 doesn't use runlevels set in inittab like previous versions did. I see that fact is actually noted in /etc/inittab, along with the expected way to do it. > > >>>>> --------------------------------------------------------------------------------------------- > > >>>>> > > >>>>> Frank, > > >>>>> > > >>>>> Yes, you are correct, I changed the run level and not boot level to 5 > > >>>>> and did so by using the command : > > >>>>> > > >>>>> ln -sf /lib/systemd/system/graphical.target /etc/systemd/system/default.target > > >>>>> > > >>>>> Also, I appreciate everybody's input on this, but I am still at a loss > > >>>>> as to how to fix this. Without being able to reboot, it sure makes the > > >>>>> set up difficult. > > >>>>> > > >>>>> Does anyone else have any ideas?? > > >>>>> > > >>>>> Greg > > >>>>> > > >>>> > > >>>> I have tried some additional changes that have not made a difference. > > >>>> > > >>>> I disabled selinux - that made no difference > > >>>> I stopped and disabled firewalld - that made no difference. > > >>>> > > >>>> I can boot this machine after I turn it off and then back on, but when I > > >>>> try to do a shutdown now -r, the system hangs right after picking the OS > > >>>> that is desired "CentOS Linux..........". > > >>>> > > >>>> After the machine is turned off the boot process occurs normally after > > >>>> this choice and I get two penguins in the upper left hand corner, and > > >>>> the boot proceeds. When I do a shutdown now -r, I do not get to the > > >>>> penguins and the machine hangs forever until I either unplug it or press > > >>>> the power button for 5 seconds. > > >>>> > > >>>> Any help would be appreciated!!! > > >>>> > > >>>> Greg > > >>>> > > >>> ----------------------------------------------------------- > > >>> > > >>> Everyone, > > >>> > > >>> I did not get much of a response on the list so I filed a bug report. I > > >>> wanted to document the bug report for anyone else that is having a > > >>> reboot problem. > > >>> > > >>> https://bugs.centos.org/view.php?id=7949 > > >>> > > >>> > > >>> Greg Ennis > > >>> > > >> > > >> Seems little point in filing a bug report when you have no idea what the > > >> issue is. Bugs are not a means of troubleshooting nor a support forum. > > >> However, you did get my attention so lets see if we can stimulate some > > >> further interest in troubleshooting this. > > >> > > >> So the system will perform a cold reboot, but not a warm reboot. Sounds > > >> like a hardware issue to me. > > >> > > >> Any clues in /var/log/messages ? > > >> > > >> Tried updating the BIOS? > > >> > > >> Any hardware firmwares being loaded? > > >> > > >> > > >> _______________________________________________ > > > > > > Ned, > > > > > > Thanks for your response!!! > > > > > > Sorry, if posting a bug report was the wrong venue !!! > > > > > > There are no messages in the message logs that I could identify as > > > problems, but the system fails before the OS is active. > > > > > > I have not updated the BIOS, and do not know how to do this... but this > > > is my testing machine so I am more than open to doing this. I am using > > > a Gateway SX2855-UB12P. I will take a look at the Gateway site; if > > > there are tutorials you could point me to I would appreciate it. > > > > You'd have to check the Gateway website to see if a bios update is > > available to download for your model. Instructions are normally included > > / available. > > > > > > > > The only hardware that has been added has been a usb ethernet connection > > > so that I have the motherboard nic card and the usb nic connection. > > > > > > Just to eliminate the easy option first, does unplugging the USB > > ethernet adapter (before rebooting) solve the problem? > > > > > > > wanted to use this setup to test the firewalld capabilities for a > > > network gateway. The machine does not have a monitor, and is without a > > > mouse or keyboard. > > > > > > It should be noted that this machine previously had CentOS 6 with a 3T > > > Seagate drive that worked without a problem, but recently developed a > > > disc failure. I replaced the drive with a 4T WesternDigital drive and > > > installed CentOs 7.0 from a DVD. > > > > > > > I wouldn't think the drive swap would make a difference. > > > > > Thanks again for your help!!! > > > > > > Greg > > > > > > ------------------------- > Ned, The USB ethernet adapter was a good thought, but removing it did not make a difference. I removed the adapter, rebooted with same failure, then manually turned off system and did a boot with the adapter unplugged, then did another reboot which had the same failure. It does not look like the adapter is the problem. I will take another look at the Gateway website. First search attempt did not result in anything productive, that is why I looked at the American Megatrends site which had a bios download tool, but it was for a windows machine. I am going to continue to look, I think my best choice would be to take another look at Gateway site. This machine worked perfectly under CentOS 6, I can still use it with CentOS 7, but it is a real pain to reboot. Greg

1 0

Selinux logging and reporting in centos 7
by Joseph L. Casale 03 Dec '14

03 Dec '14

Seems odd the stock logwatch polls for audit data in messages while the stock config has that data sent to /var/log/audit/audit.log? Not sure why that doesn't have a distro specific override... So on that premise, what are people using for reports on headless c7 instances without a gui? Anything better than logwatch worth investigating? Thanks, jlc

1 0

Re: [CentOS] NetworkManager fights with DHCP-only backup NIC
by James B. Byrne 02 Dec '14

02 Dec '14

On Mon, December 1, 2014 16:48, Les Mikesell wrote: > > Is there anyone who has more than a few boxes at more than one > location who _doesn't_ have this issue? I'd like to see a FAQ or > something by whoever designed the network configuration system about > how they planned for it to work (with and without GUI availability). > Likewise for what is supposed to happen when you restore a backup onto > different hardware. > Think 'laptop'. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2014