Discuss February 2015

discuss@lists.centos.org

153 participants
158 discussions

KISS networking with CentOS 7
by Niki Kovacs 10 Feb '15

10 Feb '15

Hi, I'm currently experimenting with CentOS 7 on a couple of installations. I'm reasonably proficient with CentOS 5.x and 6.x. I'd like to manage networking using a more traditional approach (Keep It Simple Stupid). Here's what I tried so far, starting from a minimal install: Install net-tools (to be able to use ifconfig). Get rid of NetworkManager: # yum remove NetworkManager* Add 'net.ifnames=0' and 'biosdevname=0' to kernel boot options to name interfaces eth0, eth1, etc. Edit '/etc/sysconfig/network-scripts/ifcfg-eth{0,1}' like I did under previous versions. Eventually, edit '/etc/udev/rules.d/70-persistent-net.rules' to switch interfaces: # /etc/udev/rules.d/70-persistent-net.rules # # eth0 SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", \ ATTR{address}=="00:1e:c9:42:84:7b", ATTR{type}=="1", \ KERNEL=="eth*", NAME="eth0" # eth1 SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", \ ATTR{address}=="00:30:f1:6a:2f:40", ATTR{type}=="1", \ KERNEL=="eth*", NAME="eth1" So far, no way to bring either eth0 or eth1 up. What am I doing wrong here? Is NetworkManager now a mandatory part of the base system? Some other mistake somewhere else? I'm a bit puzzled here. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 1

Re: [CentOS] SELinux context for ssh host keys?
by James B. Byrne 10 Feb '15

10 Feb '15

On Tue, February 10, 2015 04:18, Andrew Holway wrote: > On 10 February 2015 at 06:32, Mark Tinberg <mark.tinberg(a)wisc.edu> > wrote: > >> >> > On Feb 9, 2015, at 12:27 PM, Robert Nichols >> <rnicholsNOSPAM(a)comcast.net> >> wrote: >> > >> > On 02/09/2015 11:14 AM, James B. Byrne wrote: >> >> So, I decided to run restorecon -v to >> >> >> ... >> >> restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context >> >> unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0 >> > > Why are you putting your SSH key in /etc/ ? > > With SELinux its normally better to go with the flow. find out which > directories have the desired label and keep your objects in there. > > I'm guessing in this case ~/.ssh/ > > -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

Gnome-3 - can't drag menu items out
by Les Mikesell 10 Feb '15

10 Feb '15

I've mostly been using MATE from epel when I use GUI access on CentOS7 because it works with x2go, but just noticed on a system with Gnome3 that I can't drag items out of the menus to the desktop or top bar for easier access. Is there some way to make the desktop space useful for more than pretty wallpaper? -- Les Mikesell lesmikesell(a)gmail.com

2 2

Packages installation in CentOs
by Venkateswara Rao Dokku 10 Feb '15

10 Feb '15

Hi, I have a customized CentOS 5.5 kernel. I want it to upgrade it to CentOS 7. The approach I have decided was to take the CentOS 7 and then install the customized packages that are there in the CentOS 5.5. While trying to install the customized packages, I could install most of the packages, but I couldn't install the below in the latest CentOS 7. 1. rhpl 2. mod_perl 3. notification-daemon 4. vixie-cron 5. kudzu 6. redhat-lsb 7. mod_pyton 8. webalizer 9. pam_ccreds 10. libnotify 11. irda_utils 12. readahead 13. Mkinitrd 14. Alchemist 15. Cadevar 16. sustem-config-network-tui 17. firstboot-tui I tried to install the above packages as other packages using *YUM*, it is complaining that no such package. So I tried installing them by rpm's. But, installing rpm's giving "failed dependencies" error. Can you please suggest best way to install the above listed packages on CentOs 7? Are the packages listed above deprecated for CentOS 7 or merged into some other packages? Thanks for the help. -- Thanks & Regards, Venkateswara Rao Dokku.

3 4

SELinux context for ssh host keys?
by James B. Byrne 10 Feb '15

10 Feb '15

I generated a new host key for one of our systems using: ssh-keygen -t rsa -b 4096 -f ssh_host_rsa_key_4096 I then ran 'ls -Z on the keys' ll -Z *key* -rw-------. root root system_u:object_r:sshd_key_t:s0 ssh_host_dsa_key -rw-r--r--. root root system_u:object_r:sshd_key_t:s0 ssh_host_dsa_key.pub -rw-------. root root system_u:object_r:sshd_key_t:s0 ssh_host_key -rw-r--r--. root root system_u:object_r:sshd_key_t:s0 ssh_host_key.pub -rw-------. root root system_u:object_r:sshd_key_t:s0 ssh_host_rsa_key -rw-------. root root unconfined_u:object_r:sshd_key_t:s0 ssh_host_rsa_key_4096 -rw-r--r--. root root unconfined_u:object_r:sshd_key_t:s0 ssh_host_rsa_key_4096.pub -rw-r--r--. root root system_u:object_r:sshd_key_t:s0 ssh_host_rsa_key.pub As it seems odd, to me, that all the other files had a system_u user while the new had unconfined_u. So, I decided to run restorecon -v to presumably set the SELinux user correctly for the new keys: But that is not what happened: restorecon -v * restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0 restorecon reset /etc/ssh/ssh_host_rsa_key_4096.pub context unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0 As you can see, not only did the user not get set to system_u but the type was changed to etc_t. Why were the new key files changed from sshd_key_t types to the generic etc_t types? Why was the user not changed in either case from unconfined_u to system_u or vice versa? There is no REQUIREMENT that a host key have a particular file name is there? The sshd_config provides for setting one explicitly and doing so seems to cause no problems with ssh connections that I have yet encountered. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Recommendations for good CentOS 7 documentation
by Niki Kovacs 10 Feb '15

10 Feb '15

Hi, I'm looking for recommendations for documentation about the specificities of RHEL/CentOS 7.x. It can be either online or in printed book format, and I'm fluent in german, french and english. I have a good books about 5.x: "RHEL 5 Unleashed" from Sams, "Foundations of CentOS Linux" and "The Definitive Guide to CentOS", both from Apress. Can anyone recommend anything similar on 7.x? Cheers from South France, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

4 5

Another Fedora decision
by Scott Robbins 09 Feb '15

09 Feb '15

So, probably some of you, at least, follow Fedora, perhaps in part to see what new desktop user oriented decision will make it into the next version of RHEL/CentOS. You may have noticed how if Fedora, by some odd scheme, deems your password unworthy, you have to click Done two times. So, the latest Ananconda takes this one step further. Passwords that the system considers weak will no longer be allowed. While this will probably only be a minor inconvenience, (add 3 bangs to the end or something equally meaningless), a few on the fedora-testing list, including myself, think it's just one more solution seeking a problem. At present, I don't know where one can lodge a protest. Hopefully, someone will care enough to file a bugzilla RFE. Others may think it's a great idea--at last, users can't install with a password of 1234. Anyway, as part of their push for it is that no one minds it, thought I'd mention it here, as many of the desktop oriented decisions get into Fedora, then into RH and it's already too late. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

12 15

reboot - is there a timeout on filesystem flush?
by Les Mikesell 09 Feb '15

09 Feb '15

I've had a few systems with a lot of RAM and very busy filesystems come up with filesystem errors that took a manual 'fsck -y' after what should have been a clean reboot. This is particularly annoying on remote systems where I have to talk someone else through the recovery. Is there some time limit on the cache write with a 'reboot' (no options) command or is ext4 that fragile? -- Les Mikesell lesmikesell(a)gmail.com

9 19

lost at 'repository' entry installing centos7
by g 08 Feb '15

08 Feb '15

greetings. while attempting to install c7, i got lost at 'repository' entry. i canceled, loaded centos.org, looked for help for installing c7, but did not find. i know, i did not look in right place. if such has been posted, i missed. so what/where is 'the right place'? much appreciate some help. -- peace out. in a world with out fences, who needs gates. CentOS GNU/Linux 6.6 tc,hago. g .

5 13

anthem details
by Chris Wensink 08 Feb '15

08 Feb '15

Hello Everyone, Does anyone have any more detail about what kind of system Anthem / Blue Cross was running and what kind of attack broke into their system? It's terrible that it happened, but I think it would benefit all Admins everywhere to learn how it happened so that we can secure our systems from a similar breach of information. Anyone know? Chris

8 9

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2015