Discuss November 2015

discuss@lists.centos.org

130 participants
112 discussions

Start a nNew thread

centos 7 and keychain
by Pete Stieber 18 Nov '15

18 Nov '15

Is there a centos recommended repository for centos 7 where I can obtain the keychain package? TIA, Pete

3 3

firewalld rule syntax
by Nick Bright 18 Nov '15

18 Nov '15

I'm still learning firewalld obviously, and I am having trouble groking the documentation to understand how to do this. I know I could do an iptables direct, but that doesn't seem like the "right" way to do it. What I'm trying to do is allow a specific service, only for a specific ip. Effectively, SNMP should be allowed form a specific IP address (the systems monitor). What would be the most correct way of doing this? Create a zone for the snmp, then add the associated interface to that zone? firewall-cmd --zone=monitoring --add-source=1.2.3.4/32 firewall-cmd --zone=monitoring --add-service=snmp firewall-cmd --zone=monitoring --add-interface=ens192 firewall-cmd --runtime-to-permanent Would this be an appropriate approach? Is it the 'most correct' way? -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.

3 4

Re: [CentOS] firewalld being stupid
by James B. Byrne 17 Nov '15

17 Nov '15

On Mon, November 16, 2015 16:39, Nick Bright wrote: > On 11/6/2015 3:58 PM, James Hogarth wrote: >> I have a couple of relevant articles you may be interested in ... >> >> On assigning the zone via NM: >> https://www.hogarthuk.com/?q=node/8 >> >> Look down to the "Specifying a particular firewall zone" bit ... >> remember that if you edit the files rather than using nmcli you must >> reload NM (or do nmcli reload) for that to take effect. >> >> If you specify a zone in NM then this will override the firewalld >> configuration if the zone is specified there. >> >> Here's some firewalld stuff: >> https://www.hogarthuk.com/?q=node/9 >> >> Don't forget that if you use --permanent on a command you need to do >> a >> reload for it to read the config from disk and apply it. > Thanks for the articles, they're informative. > > Here's what's really irritating me though. > > firewall-cmd --zone=internal --change-interface=ens224 --permanent > > ^^ This command results in NO ACTION TAKEN. The zone IS NOT CHANGED. > > firewall-cmd --zone=internal --change-interface=ens224 > > This command results in the zone of ens224 being changed to internal, > as > desired. Of course, this is not permanent. > > As such, firewall-cmd --reload (or a reboot, ect) will revert to the > public zone. To save the change, one must execute firewall-cmd > --runtime-to-permanent. > > This is very frustrating, and not obvious. If --permanent doesn't work > for a command, then it should give an error - not silently fail > without doing anything! > This behaviour is congruent with SELinux. One utility adjusts the permanent configuration, the one that will be applied at startup. Another changes the current running environment without altering the startup config. From a sysadmin point of view this is desirable since changes to a running system are often performed for empirical testing. Leaving ephemeral state changes permanently fixed in the startup config could, and almost certainly would eventually, lead to serious problem during a reboot. Likewise, immediately introducing a state change to a running system when reconfiguring system startup options is just begging for an operations incident report. It may not be intuitive to some but it is certainly the logical way of handling this. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 8

firewalld being stupid
by Nick Bright 17 Nov '15

17 Nov '15

Greetings, One of my biggest frustrations with CentOS 7 has been firewalld. Essentially all of the documentation just flat doesn't work. One common thing that needs to be done is to change the zone of an interface, however I've tried: firewall-cmd --permanent --zone=internal --change-interface=ens192 firewall-cmd --permanent --zone=internal --add-interface=ens192 I've also tried setting in /etc/sysconfig/network-scripts/ifcfg-ens192: ZONE=internal ZONE="internal" No matter what, when firewalld starts, ens192 will be in the public zone. What am I doing wrong? Why does the documented command structure not work? -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.

8 9

CentOS-SCL python version
by Noam Bernstein 17 Nov '15

17 Nov '15

Hi - I’d like to use the CentOS-SCL python27 packages, but those appear to be rather out of date, still on 2.7.5. Is there any chance that there will be an update in the 2.7 track, to 2.7.10? thanks, Noam ----------------------------------------------------------- Noam Bernstein Center for Materials Physics and Technology Naval Research Laboratory Code 6390 noam.bernstein(a)nrl.navy.mil phone: 202 404 8628

2 2

Problems with CentOS Advisory from August 2014
by Ian Stirling 17 Nov '15

17 Nov '15

Regarding this announcement [CentOS-announce] CESA-2014:1008 Important CentOS 6 samba Security Update *Johnny Hughes* johnny at centos.org <mailto:centos-announce%40centos.org?Subject=Re:%20%5BCentOS-announce%5D%20CESA-2014%3A1008%20Important%20CentOS%206%20samba%20Security%0A%09Update&In-Reply-To=%3C20140805200929.GA57368%40n04.lon1.karan.org%3E> /Tue Aug 5 20:09:29 UTC 2014/ Talks about this upstream Redhat problem - https://rhn.redhat.com/errata/RHSA-2014-1008.html When you read that errata it talks about RHEL 7 and in fact the filesets mentioned in the CentOS announcement are for CentOS 7 which leaves us in a state of a CentOS 6 system trying to install CentOS 7 filesets (some examples) x86_64: 157af858bf13ec971678a8bf3fc6cb649d577e671edadf3c860723a87c736eab libsmbclient-4.1.1-37.*el7*_0.i686.rpm 90ea2064837184635e7d718b854ced1482b78514c35b26a75125242b342316c8 libsmbclient-4.1.1-37.*el7*_0.x86_64.rpm 8a02b8e75489ae6972d2dce9cdc641c303903e772913421ad5a0d18ba9b84ecc libsmbclient-devel-4.1.1-37.el7_0.i686.rpm 7fd666c9b7e9fcae08cfe87a1061de6f6bc70c1fe6f9e3b276e08281faaa74db libsmbclient-devel-4.1.1-37.el7_0.x86_64.rpm 6d227ef56d9c743db3ef6ca280232c92a7eac8b7ce831dd97d15eb34b4e456fc libwbclient-4.1.1-37.el7_0.i686.rpm 3b1c4905362c5bded2e3a6b700447adfa16c557a1bed8be96595598ff55f82a1 libwbclient-4.1.1-37.el7_0.x86_64.rpm -- Regards Ian

1 0

CentOS-announce Digest, Vol 129, Issue 8
by centos-announce-request＠centos.org 17 Nov '15

17 Nov '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:2065 Important CentOS 5 xen Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 16 Nov 2015 20:32:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:2065 Important CentOS 5 xen Security Update Message-ID: <20151116203224.GA10162(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:2065 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-2065.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 388ec1332b1e2f675f67fdb8ad56c28811128e3c9e7f0093fd67b7180e12bf70 xen-3.0.3-147.el5_11.i386.rpm 3c8e64bff83246ab9f8e361c248f4e473096ad5d0213631738082ed9c6db5d4d xen-3.0.3-147.el5_11.i686.rpm b563a6f98a3c39f0a28ef6057e175c6d940e9c16f808877006803b6a6f1f83ca xen-devel-3.0.3-147.el5_11.i386.rpm 6ea1d0d1d4d9a76c7e9ab5c057a265fa162fec047d164ac818341e216dffa97c xen-devel-3.0.3-147.el5_11.i686.rpm 2469d3e25e7fe7135c69bcd43699b4ff5ea6e912ba1de5918c4041ec5b8ce223 xen-libs-3.0.3-147.el5_11.i386.rpm b3ee5a22722b9eca0d758746f85208abf66e05dcc30cbc38b20be3a12d8cbe8e xen-libs-3.0.3-147.el5_11.i686.rpm x86_64: 489c2f01bb31c69c37aea0ce5a681e4a9a979c453ba87671040f882307afb7f0 xen-3.0.3-147.el5_11.x86_64.rpm b563a6f98a3c39f0a28ef6057e175c6d940e9c16f808877006803b6a6f1f83ca xen-devel-3.0.3-147.el5_11.i386.rpm b71e966fd955b269897933773580ea8d37ba385a63545b323dd308b4063413b9 xen-devel-3.0.3-147.el5_11.x86_64.rpm 2469d3e25e7fe7135c69bcd43699b4ff5ea6e912ba1de5918c4041ec5b8ce223 xen-libs-3.0.3-147.el5_11.i386.rpm c111fe7960da5cbc37c8f0f4804f2b762aadde878099f72c38b4e04ab689995f xen-libs-3.0.3-147.el5_11.x86_64.rpm Source: 0e2ed9159d7d8a815c5483da3a802da4e05d229302f4446a6d5ce1915a22b669 xen-3.0.3-147.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 129, Issue 8 ***********************************************

1 0

FCGIWrapper
by Siva Prasad Nath 17 Nov '15

17 Nov '15

Hi, I am setting up my development environment. I am new to linux. I installed Apache on CentOS 7.0. I modified /etc/httpd/conf/httpd.conf and tried to restart Apache. I got the below error' AH00526: Syntax error on line 393 of /etc/httpd/conf/httpd.conf Wrapper /home/currencybooking/fcgi-bin/php5.fcgi cannot be accessed:...enied The line no 393 in /etc/httpd/conf/httpd.conf is FCGIWrapper /home/currencybooking/fcgi-bin/php5.fcgi .php Later I tried to install FCGIWrapper. [root@cbcdev mod_fastcgi-2.4.6]# make top_dir=/usr/lib64/httpd Makefile:12: /usr/lib64/httpd/build/special.mk: No such file or directory make: *** No rule to make target `/usr/lib64/httpd/build/special.mk'. Stop. I am not to able to build the package. Do I need to change the ownership if I copied file from production to Dev? Please help me. With regards, Shiva Shiva Prasad Nath 92981134

2 2

CentOS-SCL - php 5.6?
by Nick Bright 16 Nov '15

16 Nov '15

Is there any information available about what packages are being planned for the SCL? For example, will PHP 5.6 be made available & maintained? By "maintained" I mean kept up to date with back ported security patches and such. -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.

3 2

About IPv6 Link-Local Address(CentOS5)
by 米山陽介 16 Nov '15

16 Nov '15

Hello Because I did not send , and then retransmitted. I am using the CentOS5.7. In a state where the link down, I did a ping to the IPv4 and IPv6. IPv4 succeeds in ping. but, IPv6 is ping fails. Once confirmed by ifconfig, it did not have a Link-Local Address. At link down, Is the Link-Local Address not set? Leave the link down, Is there a way to avoid this? # ethtool eth1 Settings for eth1: 〜 Link detected: no # ifconfig eth1 eth1 Link encap:Ethernet HWaddr 08:00:27:83:74:54 inet addr:192.168.11.8 Bcast:192.168.11.255 Mask:255.255.255.0 inet6 addr: 2000:8000:12:6:192:168:11:8/64 Scope:Global UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:786 errors:0 dropped:0 overruns:0 frame:0 TX packets:289 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:81093 (79.1 KiB) TX bytes:46507 (45.4 KiB) # ping 192.168.11.8 PING 192.168.11.8 (192.168.11.8) 56(84) bytes of data. 64 bytes from 192.168.11.8: icmp_seq=1 ttl=64 time=0.033 ms 64 bytes from 192.168.11.8: icmp_seq=2 ttl=64 time=0.019 ms 〜 # ping6 2000:8000:12:6:192:168:11:8 PING 2000:8000:12:6:192:168:11:8(2000:8000:12:6:192:168:11:8) 56 data bytes Thanks! -- ■□■□■□■□■□■□■□■□■□■□■□■ 株式会社デージーネットフロンティア開発部米山陽介 TEL: (052)709-7121 FAX: (052)709-7122 e-mail: komeyama(a)designet.co.jp URL: http://www.designet.co.jp ■□■□■□■□■□■□■□■□■□■□■□■

3 7

← Newer
1
...
4
5
6
7
8
9
10
11
12
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2015