December 2015 - Discuss - lists.centos.org

I want to connect to a l2tp server from centos.
by Eliezer Croitoru 22 Mar '17

22 Mar '17

I have a server currently connecting to a pptp remote server. This server(lns\lac) has the option for pptp connections and l2tp connections. The l2tp connections are not using ipsec encryption at all. I have seen couple guides\tutorials on the internet: - https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_on_CentOS_-_Red_Hat_Enterpris… - https://wiki.archlinux.org/index.php/L2TP/IPsec_VPN_client_setup But all the guides that I have found are using ipsec with "secret". On ubuntu there is a gui applet that helps setting these kind of connections up but I am working with a CentOS server and not Ubuntu desktop. If someone used l2tp the same way I want to use on CentOS 7 please give me some advice. If you have a guide which might help me I will be more then happy to see this one. Thanks, Eliezer

4 8

Broadcom BCM4313 support broken with kernel 2.6.32-573.7.1.el6.centos.plus.x86_64?
by wwp 24 Aug '16

24 Aug '16

Hello, I noticed that with latest kernel (2.6.32-573.7.1.el6.centos.plus.x86_64), my laptop's Wifi doesn't work, whereas with previous kernel (2.6.32-504.30.3.el6.centos.plus.x86_64), it works fine. Is this a known issue or did I miss something new? BTW, `lspci` says: Broadcom Corporation BCM4313 802.11bgn Wireless Network Adapter (rev 01) Regards, -- wwp

2 2

Any further developments on CentOS7 for i386?
by Kay Schenk 22 Jun '16

22 Jun '16

Well I haven't tested out the CentOS 7 for i386 yet as sent in the message of 06/02-- https://lists.centos.org/pipermail/centos-devel/2015-June/013426.html Nor have I seen any additional information. So how is this going? I'm almost ready to jump in as I would really prefer to be on Gnome 3. -- -------------------------------------------- MzK “The journey of a thousand miles begins with a single step.” --Lao Tzu

3 7

abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected
by Michael H 15 Feb '16

15 Feb '16

Hi All, I've been tuning a server recently and just today this has started to appear in my top/htop output. [root@db1 ~]# ps -aux | grep kernel root 1011 0.0 0.0 212048 4532 ? Ss 13:34 0:00 /usr/bin/abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected ernel BUG at list_del corruption list_add corruption do_IRQ: stack overflow: ear stack overflow (cur: eneral protection fault nable to handle kernel ouble fault: RTNL: assertion failed eek! page_mapcount(page) went negative! adness at NETDEV WATCHDOG ysctl table check failed : nobody cared IRQ handler type mismatch Machine Check Exception: Machine check events logged divide error: bounds: coprocessor segment overrun: invalid TSS: segment not present: invalid opcode: alignment check: stack segment: fpu exception: simd exception: iret exception: /var/log/messages -- /usr/bin/abrt-dump-oops -xtD I had made a few changes to sysctl.conf which I have now reverted and the error still exists. my sysctl.conf contained; vm.swappiness=0 vm.overcommit_memory=2 vm.overcommit_ratio=90 - this was only added this morning because of an 'out of memory' error in postgresql. kernel.shmmax=35433480192 kernel.shmall=2214592512 which I have now removed. Can anyone shine any light on this? A little search on Google mentions faulty memory, I will install memtest today and see what the output is like. Thanks Michael

2 1

Folding At Home
by Mark LaPierre 02 Feb '16

02 Feb '16

Hey Y'all, I have the Stanford University Folding At Home project running on three of my machines. I had them all set up so that I could control them all from my main machine, 192.168.15.101, but some time ago something changed so that I can no longer connect to the FAH clients on the other two machines. I figured it wasn't really important so I would look into it later. Well time has passed and my Christmas break is almost passed too to I guess this is the time to figure it out. I can still SSH onto both machines. I can ping both machines. When I open the FAH Control on my machine connection to clients running on 192.168.15.105 and 192.168.15.107 fails. I'm assuming that there would be an entry in a log on those two machines detailing the failed connection attempt. What log file should I be looking at? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 5

Centos 7 guest - long delay on mounting /boot with host disk write cache off
by Andrzej Szymanski 12 Jan '16

12 Jan '16

Hello, I've noticed a strange delay while booting a CentOS 7 guest on a CentOS 7 host with slow disks (7200RPM) with write cache off. The guest and host are freshly installed Centos 7 (host was fully patched before guest install). Guest is installed on an lvm pool residing on an md raid1 with two SATA 7200 RPM drives with their write caches off. The delay is on mounting /boot, the dmesg on the guest says: [ 23.491857] XFS (vda1): Mounting V4 Filesystem [ 46.668396] XFS (vda1): Ending clean mount [ 46.668404] SELinux: initialized (dev vda1, type xfs), uses xattr Subsequent mounts by hand on a running system last even longer - dmesg records: [ 96.442544] XFS (vda1): Unmounting Filesystem [ 100.086741] XFS (vda1): Mounting V4 Filesystem [ 146.098703] XFS (vda1): Ending clean mount [ 146.098721] SELinux: initialized (dev vda1, type xfs), uses xattr mounting "-o ro" doesn't help - dmesg records: [ 205.552778] XFS (vda1): Unmounting Filesystem [ 212.452724] XFS (vda1): Mounting V4 Filesystem [ 258.537459] XFS (vda1): Ending clean mount [ 258.537477] SELinux: initialized (dev vda1, type xfs), uses xattr but mounting with "-o ro,norecovery" does help - dmesg records: [ 263.795813] XFS (vda1): Unmounting Filesystem [ 271.973701] XFS (vda1): Mounting V4 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 272.003618] SELinux: initialized (dev vda1, type xfs), uses xattr xfs_logprint -t /dev/vda1 says that the device is clean: xfs_logprint: data device: 0xfc01 log device: 0xfc01 daddr: 512032 length: 6824 log tail: 3447 head: 3447 state: <CLEAN> however the full xfs log contains a lot of entries xfs_logprint /dev/vda1 results in ~23000 lines of text. Permanent help is from xfs_repair which zeroes the log - a subsequent mount is fast, and subsequent reboots are fast. [ 411.290031] XFS (vda1): Mounting V4 Filesystem [ 411.456661] XFS (vda1): Ending clean mount [ 411.456676] SELinux: initialized (dev vda1, type xfs), uses xattr During the problematic mounts the host reports a lot of small disk writes with queue depth ~1. Also, when I move the problematic filesystem using dd to an lvm volume, mount -o ro, unmount, make snapshot, mount -o ro again, then the contents of the original volume are the same as the snapshot but the snapshot usage increases from 0 to ~2MB - so something writes to the original volume in a ro mode - possibly a log replay. Is is normal for the xfs mount to replay a log after a clean unmount? With best regards, Andrzej -- Andrzej Szymański, Ph.D. tel. +48 12 6174035 fax. +48 12 6342372 e-mail: szymans(a)agh.edu.pl AGH University of Science and Technology Department of Telecommunications Al. Mickiewicza 30 30-059 Kraków POLAND

2 2

Yum Weird Message
by Alice Wonder 08 Jan '16

08 Jan '16

I ran into this exact issue last night - http://www.iotti.biz/?p=433 When a computer is connected via IPv4 but the IPv4 a repo host connects to is not available, yum then tries the IPv6 address and will fail with a confusing message telling you it failed to connect to the IPv6 address. I don't know if there is a way for yum to figure out whether the current network connection to the Internet is IPv4 or IPv6. But if there is a way, it might make a usability improvement. A lot of people have no idea what IPv6 is and would be confused. I was confused myself at first, wondering if DHCP pulled in IPv6 from the router. -- -=- Sent my from my laptop, may not be able to respond timely

4 7

Extending a CentOS disk without reboot
by Sander Kuusemets 07 Jan '16

07 Jan '16

Hello, Today a virtual server under my administration ran out of disk space, so I had to get extra space to it.. while it was running, because it's an important web server without any kind of HA/Load Balancing (don't do that, kids). So what happened, is that after another administrator had extended the disk from VMWare, I tried to extend it from the OS side. Everything went well, listing my steps here: * echo 1 > /sys/class/scsi_device/2\:0\:0\:0/device/rescan * fdisk /dev/sdb (the usual, delete partition and make a new, bigger one) Now's when the problems happened. After writing the partition table I got the usual "Busy" error. But I needed to do this without downtime. So, what did I try to get the kernel acknowledge the partition size change: * hdparm -z /dev/sdb * partx -a -v /dev/sdb * partprobe -s * echo "1" > /sys/block/sdb/device/rescan And while dmesg reported that it recognized the partition change, LVM did still not see it. So eventually, I was still forced to reboot, after which everything (pvresize, lvresize, resize2fs) worked fine. Environment: * A VMWare virtual machine * CentOS 6.7 (Final) Is there any other way I'm missing? Is this caused by the fact that I was trying to resize a partition that is under the root file system? If so, then is it really impossible to do it live? Thanks, -- Sander Kuusemets University of Tartu, High Performance Computing, IT Specialist

4 5

systemd-sysctl not running on boot
by Ofer Hasson 06 Jan '16

06 Jan '16

Hey all, After upgrading to CentOS 7.2, non of my servers run systemd-sysctl on boot. So far, I tried running manually /usr/lib/systemd/systemd-sysctl, it runs smoothly and updates all the parameters. I also ran sysctl --system, which also executes successfully. I checked within systemd, and systemd-sysctl is wanted by the sysinit.target which is wanted by the multi-user.target - the one I boot into. I can't find anything by doing journalctl | grep sysctl Or by looking through /var/log/messages (I run rsyslog as well). Any idea's ? Thanks

3 10

Centos 7, grub2-mkconfig, unsupported sector
by m.roth＠5-cent.us 02 Jan '16

02 Jan '16

Hi, folks, Well, I get back from vacation, and three CentOS 7 boxes didn't come up this morning (my manager and the other admin did the update & reboot). On these three - but *not* another one or two, and I don't think those others are Dells, they're supermicro's - the 327 kernel fell into the rdosshell, I guess. I finally got one the three up by going back to the 228.14 kernel. Now, after googling and finding the CentOS bugzilla, 0009860, that referenced the upstream bugzilla, I applied the workaround discussed in it, Adding initcall_blacklist=clocksource_done_booting to GRUB_CMDLINE_LINUX in /etc/default/grub and then grub2-mkconfig -o /etc/grub2.cfg" On one. On the other, that's got a *large* RAID appliance (a JetStor w/ 42 4TB drives...), it seemed to work... then gave me a dozen or so ERROR: unsupported sector size 4096 on /dev/sdd. ERROR: unsupported sector size 4096 on /dev/sde. 0. Did the grub2-mkconfig actually work correctly? 1. Is it safe to ignore the errors and reboot? 2. This seems to be an old bug in os-prober, that was fixed years ago - has it slipped back in? mark

3 3

NFS problem after 7.2
by Mark2015 01 Jan '16

01 Jan '16

I just updated my fileserver to version 7.2 and got some NFS problems after that. In /etc/exports I have the following line /path hostname(ro,insecure) Now that host can no longer mount that share. I get mount.nfs: access denied by server while mounting x Also when I do restart of the NFS server I get following in the logs Dec 30 21:59:33 files systemd[1]: Starting NFS server and services... Dec 30 21:59:33 files nfsdcltrack[31076]: sqlite_query_reclaiming: unable to prepare select statement: no such column: has_session Dec 30 21:59:33 files polkitd[28879]: Unregistered Authentication Agent for unix-process:31032:12640806 (system bus name :1.635, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8) (disconnected from bus) Dec 30 21:59:34 files nfsdcltrack[31412]: sqlite_insert_client: insert statement prepare failed: table clients has 2 columns but 3 values were supplied What to do?

6 9

CentOS 7, annoyances in the logs
by m.roth＠5-cent.us 31 Dec '15

31 Dec '15

Annoyances: 1. I'm seeing a lot of noise in the logfile for a workstation that I just built a couple months ago. One complaint is that Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway. *Should* anything named <servicename>.service have any permissions other than readable (and write for root)? 2. A lot of python: SELinux is preventing /usr/sbin/NetworkManager from write access on the directory /sys.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that NetworkManager should be allowed write access on the sys directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# grep NetworkManager /var/log/audit/audit.log | audit2allow -M mypol#012# semodule -i mypol.pp#012 Which policy I implemented, but why is that incorrect in the first place? 3. Finally, the noisiest of all, NetworkManager[7723]: <warn> error requesting auth for org.freedesktop.NetworkManager.settings.modify.hostname: (0) Authorization check failed: GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message did not receive a reply (timeout by message bus) and for what seems like every possible network type NetworkMangler handles, including wifi, and I yum removed NetwoworkManager-wifi.... Anyone have any answers so I can shut this up? mark

1 0

Re: [CentOS] routing with 2 public ips
by Gordon Messmer 31 Dec '15

31 Dec '15

On 12/28/2015 01:19 AM, Александр Кириллов wrote: > Are you sure? You assume the destination of the incoming traffic is > the gateway. What if it isn't? Can you explain what you mean? Not only am I not assuming that, I can hardly conceive of any situation in which a host will receive traffic for its own gateway.

5 8

Centos7 and clamd
by Robert Moskowitz 31 Dec '15

31 Dec '15

On my Centos6 mailserver (really Redsleeve6), I installed clamav and clamd (and lots more). I am working up to moving to Centos7 (really Centos7-arm), and no clamd. clamav is there. So is the clamd functions moved into clamav now or what do I do to get whatever clamd did for me? :) thanks

2 2

Systemd and systemd-sysv-generator
by Mike - st257 30 Dec '15

30 Dec '15

Hello CentOS List, I have a server that has SysV script supplied by a hardware manufacturer, which is not functioning properly. From my reading, systemd-sysv-generator should handle them (like it did for Dell OpenManage software which supplied SysV init scripts). /usr/lib/systemd/system-generators/systemd-sysv-generator Takes no or 3 arguments (it tells me), but I didn't find clear documentation on this binary. And no arguments doesn't seem to fix the issue. The particular software in question is LSI MegaRaid SNMP daemon. I retrieved the latest version from LSI's site which was provided for EL7. ~]# systemctl lsi_mrdsnmpd.service start Unknown operation 'lsi_mrdsnmpd.service'. ~]# service lsi_mrdsnmpd start Reloading systemd: [ OK ] Starting lsi_mrdsnmpd (via systemctl): Failed to start lsi_mrdsnmpd.service: Unit lsi_mrdsnmpd.service failed to load: No such file or directory. [FAILED] ~]# /etc/init.d/lsi_mrdsnmpd start Reloading systemd: [ OK ] Starting lsi_mrdsnmpd (via systemctl): Failed to start lsi_mrdsnmpd.service: Unit lsi_mrdsnmpd.service failed to load: No such file or directory. [FAILED] ~]# /etc/init.d/lsi_mrdsnmpd status lsi_mrdsnmpagent is stopped ~]# ls -1 /etc/init.d/ dataeng dsm_om_connsvc dsm_om_shrsvc dsm_sa_ipmi functions instsvcdrv lsi_mrdsnmpd netconsole network racsvc racsvc.sh README # in /etc/init.d/README "Note that traditional init scripts continue to function on a systemd system. An init script /etc/rc.d/init.d/foobar is implicitly mapped into a service unit foobar.service during system initialization." ~]# ls -1 /etc/rc.d/init.d/ dataeng dsm_om_connsvc dsm_om_shrsvc dsm_sa_ipmi functions instsvcdrv lsi_mrdsnmpd netconsole network racsvc racsvc.sh README Thoughts as to why systemd didn't "implicitly" handle this SysV script (and have it work)? Suggestions as to where I go from here to properly solve this problem? Thanks! -- ---~~.~~--- Mike // SilverTip257 //

5 15

Re: [CentOS] hostname service?
by Nicholas Geovanis 30 Dec '15

30 Dec '15

>The service you are referring to is hostnamed [1]. hostnamed is >designed to start on request and terminate after an idle period. >Programs on your computer are probably querying the service to >determine if your hostname has changed. I see that I couldn't previously find it with systemctl because it is a "static" service, neither enabled nor disabled. What is "static" really intended to mean here? The other static services seem to be boot-time related for the most part, eg anaconda, pvscan.... Man for hostnamectl (also new to me) indicates some potential uses for the hostnamed-maintained names, yet I see nothing obvious making use of that info. Can you give me an example? Thanks for the clues.....Nick Geovanis >Date: Sun, 27 Dec 2015 18:14:55 -0700 >From: Brandon Vincent <Brandon.Vincent(a)asu.edu> >To: CentOS mailing list <centos(a)centos.org> >Subject: Re: [CentOS] hostname service? >Message-ID: <CAJm423-e2+EnrDyaSvt4RKUXPsAZNbW8V9muexNAm7F150EZXQ(a)mail.gmail.com> >Content-Type: text/plain; charset=UTF-8 >On Sun, Dec 27, 2015 at 4:03 PM, Nicholas Geovanis ><nickgeovanis(a)gmail.com> wrote: >> On CentOS 7, I find in /var/log/messages several times daily messages >> "localhost systemd: Started Hostname Service.". However I can't seem t>o >> find such a service using the systemctl command. What is the >"Hostname >> Service", what does it do and why is it being restarted frequently? Many >> thanks....Nick >Hi Nick, >The service you are referring to is hostnamed [1]. hostnamed is >designed to start on request and terminate after an idle period. >Programs on your computer are probably querying the service to >determine if your hostname has changed. >This is normal behavior. >Brandon Vincent

2 1

Re-booting into CentOS-7.2 - advice sought
by Timothy Murphy 30 Dec '15

30 Dec '15

I have a remote home server updated to CentOS-7.2.1511 (as stated in /etc/redhat-release) but I have not re-booted since the update. The machine is currently running kernel 3.10.0-229.11.1.el7.x86_64. I'm wondering if anyone has advice on any safety steps I can take before re-booting, so that in the event of failure I can give simple instructions to my daughter at the other end on how to get the system running? Any suggestions gratefully received. -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

2 1

weird usb/sound problem on C7
by Fred Smith 30 Dec '15

30 Dec '15

I'm running C7, fully up to date. I'm also running the MATE desktop (from epel) though the original installation was Gnome. a couple weeks ago my USB headset worked as both earphones and mic. today when I plug it in I get nothing. right-clicking on the speaker icon in the upper panel I can choose "sound preferences" (as an aside, how can I figure out what program that actually is? it has no help or about option) and in the "Hardware" tab it shows several devices. One of them is the 'Plantronics C320' and it is listed as "Disabled". As far as I know I've done nothing to make it disabled, can anyone advise me how to UN-disable it? I can't figure it out... since this isn't windoze, I'm not in the habit of rebooting every time something weird happens, but I'm wondering if that's the practical solution for this, or not. thanks for any advice Fred PS: Oh, regarding what program it is, what appears to be the same program also exists in the menus from the top panel under System/Preferences/ Hardware/Sound. It still doesn't identify itself, but if I right-click on it and choose add launcher to desktp, I can then right-click on it, choose Properties, and see it is "mate-volume-control". I'll do some searching on that name for advice, and if I turn up anything I'll post it here. -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

1 0

moving LDAP from one domain to another
by Dan Hyatt 29 Dec '15

29 Dec '15

Hello, I am moving LDAP from one domain to another We have moved off of a.wustl.edu network to b.school.edu network. I have searched vi /etc/nslcd.conf vi /etc/openldap/ldap.conf and removed all referances to "a" I restarted /etc/init.d/nscd restart this is redhat 6.7, and my ldap server is now ldap.b.wustl.edu:389 a.school.edu to b.school.edu I keep getting messages that Dec 29 14:50:19 linuscs133 nslcd[7438]: [709c39] ldap_start_tls_s() failed: Can't contact LDAP server (uri="ldap://ldap.a.wustl.edu/") Dec 29 14:50:19 linuscs133 nslcd[7438]: [709c39] failed to bind to LDAP server ldap://ldap.a.wustl.edu/: Can't contact LDAP server Dec 29 14:50:19 linuscs133 nslcd[7438]: [709c39] no available LDAP server found Dec 29 14:50:28 linuscs133 rpc.mountd[12501]: authenticated mount request from IP:833 for /vol/aggr1/filefs (/vol/aggr1) Dec 29 14:50:41 linuscs133 rpc.mountd[12501]: authenticated mount request from ... for /vol/aggr1/dsg_external_collab (/vol/aggr1) Dec 29 14:55:19 linuscs133 nslcd[7438]: [f48f70] ldap_start_tls_s() failed: Can't contact LDAP server (uri="ldap://ldap.a.wustl.edu/") Dec 29 14:55:19 linuscs133 nslcd[7438]: [f48f70] failed to bind to LDAP server ldap://ldap.a.school.edu/: Can't contact LDAP server Dec 29 14:55:19 linuscs133 nslcd[7438]: [f48f70] no available LDAP server found Where else is the a.wustl.edu domain set? Thanks in advance Dan

2 2

KVM Network (NetworkManager) broken
by Günther J. Niederwimmer 29 Dec '15

29 Dec '15

Hello, CentOS 7.2 I have a bad big problem with my Server running KVM Client. I have the most time restarting (reboot) the system a not running network !!! my interfaces change the name from eth1 to ensX or a Interface is not starting? I mean I have all Situation tested with NetworkManager without NetworkManager but the problem exist!!! I have 4 Interfaces created on install ens10 ens11 eth0 eth1 this was created on install? have any a idea what is going wrong with centos Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer

3 2

firewalld services
by Robert Moskowitz 29 Dec '15

29 Dec '15

I am familiar with using commands like: firewall-cmd --permanent --add-service=http To enable firewalld services. I am also aware that this is through xml 'scripts' in: /usr/lib/firewalld/services/ But what I find interesting is what services are there and which are not. I went a'lookin with: grep "port=" /usr/lib/firewalld/services/*|more And found some like: http, https, imaps, smtp, and pop3s What I do not find are others that I would think are 'standard' like: pop3 (110) and imap (143) I can understand 587 not being included, but imap? I can always just add them with: firewall-cmd --permanent --add-port=587/tcp But I want to use the standard files. Perhaps because they are there. Have I missed how some are handled? thanks

2 1

routing with 2 public ips
by Joey 28 Dec '15

28 Dec '15

Hello, i have a server with 2 public ips on 2 devices. I want that the request of incoming traffic dont use the default gateway. Incoming traffic sould be answered using the gateway of the incoming device Could i realize this with firewalld? Or directly iptables? Greeting J

5 9

Perl DBI 1.52 on el6
by Erick Ocrospoma 28 Dec '15

28 Dec '15

Hello guys, I was told by the client to install Perl DBI version 1.52 on a el6 box, by default el6 branch comes with DBI version 1.6x, this version is AFAIK not the desired one. First I tried installing DBI 1.52 from some rpm package [1], which had some dependencies, Perl 5.8.8 and dbd.4.4.x, this last package was also present el6, so it made conflict and it was not possible to install DBI 1.52 from a rpm. Then, I downloaded version 1.52 [2], and tried to compiled it, but it failed while doing the make test. I'm not sure if it is not a problem, because while doing make, it did not show error/failure messages. Finally, it seems I'd have to compile Perl 5.8.8 by hand, and then try to add DBI module also. Is this possible to install it safely and make it coexist with default Perl version (5.10.1) in el6 ? I'm also writing to DBI user list, about make test failure messages. But maybe, I guess, it is failing because it is not supported by Perl 5.10.1 and Perl 5.8.8 does. No clue about this, in my opinion it should compile with Perl 5.10.1 Regards. -- Erick. --- IRC : zerick Blog : http://zerick.me About : http://about.me/zerick Linux User ID : 549567

2 1

Fiber Channel target with CentOS 6.7?
by Joacim Melin 28 Dec '15

28 Dec '15

Hi all, I've been googling for this for a day now and I can't seem to find a coherent structured way to build a fiber channel storage box where CentOS 6.7 is used both at the fiber channel target and initiator ends. My Brocade HBA:s are installed and the driver loads just fine in both boxes. Any ideas, pointers or URL:s are more than welcome. Thanks, Joacim

1 0

CentOS 7 pcp-pmda-nvidia-gpu SELinux problems
by David O'Shea 28 Dec '15

28 Dec '15

Hi all, I installed Performance Co-Pilot 3 days ago, and installed the nVidia PMDA according to the instructions at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/ht… and was able to view metrics about my video card using pmchart. I then played around a little with the lmsensors PMDA (but it doesn't look too useful to me - it doesn't support my sensors, and I think it's for a 2.x kernel). After not looking at PCP at all for a few days, today I tried using pmchart to look at the nVidia metrics again but they were unavailable, and after checking /var/log/messages I found SELinux complaints. After a few iterations of the suggested 'grep pmdanvidia /var/log/audit/audit.log | audit2allow -M [...]', 'semodule -i [...].pp', restarting the PCP service, getting new SELinux errors, going back to step 1, I ended up with this content in the .te file: """ module doshea-selinux-pcp-pmda-nvidia-gpu 1.0; require { type xserver_misc_device_t; type pcp_pmcd_t; class capability sys_admin; class chr_file { read write ioctl open }; } #============= pcp_pmcd_t ============== allow pcp_pmcd_t self:capability sys_admin; #!!!! This avc is allowed in the current policy allow pcp_pmcd_t xserver_misc_device_t:chr_file { read write ioctl open }; """ I don't get why this worked 3 days ago and not today. I haven't installed many packages in the meantime. Should I file a bug somewhere about this? I don't know much about SELinux - I have a slight ability to edit those .te files and I think I remember what to do with them afterwards - but it seems like the sys_admin capability is pretty significant to be granting. Is there any way to work out why that's needed? Thanks in advance, David

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2015