Discuss April 2015

discuss@lists.centos.org

168 participants
185 discussions

SIG - Hardening
by Earl A Ramirez 23 Apr '15

23 Apr '15

Dear All, About a week ago; I posted a proposal over on the centos-devel mailing list, the proposal is for a SIG 'CentOS hardening', there were a few of the members of the community who are also interested in this. Therefore, I am extending that email to this community; where there is a larger community. Some things that we will like to achieve are as follows: SSH: disable root (uncomment 'PermitRootLogin' and change to no) enable 'strictMode' modify 'MaxAuthTries' modify 'ClientAliveInterval' modify 'ClientAliveCountMax' Gnome: disable Gnome user list Console: Remove reboot, halt poweroff from /etc/security/console.app Applying security best practises from various compliance perspective, e.g. STIG, SOX, PCI etc... We may also use NSA RHEL 5 secure configuration guide to get some insight or use it as a baseline. The members of the community who are interested in this SIG or are willing to contribute are: Leam Hall Corey Henderson Jason Pyeron You can find the post here [0] We will really like to get SIG approved by the CentOS board so if anyone is interested or willing to contribute we will be happy to have you onboard. [0] http://lists.centos.org/pipermail/centos-devel/2015-April/013197.html -- Earl A Ramirez <earlaramirez(a)gmail.com>

8 12

[OT] Anyone using OSSIM to monitor their CentOS systems?
by James B. Byrne 23 Apr '15

23 Apr '15

We just installed an OSSIM iso as a KVM guest to monitor one of our networks. For those unfamiliar with the product it is a Debian based distro positioned as a security appliance. I am wondering if anyone here has had any experience with it and would care to comment on its usefulness, or lack thereof. Off-list is probably best unless there are any CentOS specific issues that arise. Thanks, -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Test. Do Not Respond
by Chris Weisiger 23 Apr '15

23 Apr '15

2 1

CentOS 7.0.1406, nfs automount issue
by m.roth＠5-cent.us 23 Apr '15

23 Apr '15

I added Domain = ourdomain to /etc/idpmapd.conf, and restarted rpc-idmapd, then autofs. And nfslock, for good measure. service nfs-idmap status Redirecting to /bin/systemctl status nfs-idmap.service nfs-idmap.service - NFSv4 ID-name mapping daemon Loaded: loaded (/usr/lib/systemd/system/nfs-idmap.service; disabled) Active: active (running) since Thu 2015-04-23 11:23:24 EDT; 2min 59s ago Process: 14618 ExecStart=/usr/sbin/rpc.idmapd $RPCIDMAPDARGS (code=exited, status=0/SUCCESS) Main PID: 14620 (rpc.idmapd) CGroup: /system.slice/nfs-idmap.service `-14620 /usr/sbin/rpc.idmapd Apr 23 11:23:24 paris.cit.nih.gov systemd[1]: Starting NFSv4 ID-name mapping.... Apr 23 11:23:24 paris.cit.nih.gov systemd[1]: Started NFSv4 ID-name mapping .... Hint: Some lines were ellipsized, use -l to show in full. but when I ssh into the server as myself, I'm mounted owned by nobody:nobody. What else do I need to do for systemd? mark "really need to order that rubber chicken to sacrifice"

1 0

semi-OT: t-bird mime type on .pdf attachment is wrong
by m.roth＠5-cent.us 23 Apr '15

23 Apr '15

I was sending my manager a copy of a form, and attached it (not inline), using -t-bird, and he complains it didn't want to open. Looking at the message source, t-bird had decided that the mime type was all/allfiles, though the name ended in .pdf. I've searched via the config editor, and I've been googling, and not finding anything. (I just *adore* the current google: I have +"all/allfiles" in the search terms, and in the para it displays on a hit I see "all somethingorother", with the word "all" bolded....) Anyone got ideas? I've looked in .thunderbird/<blah>.default/mime_types.rdf, and everything looks good in there. mark

3 3

Probs with Routing (CentOS7 , KVM)
by Andreas.Reschke＠mahle.com 23 Apr '15

23 Apr '15

Hi there, I've installed a new KVM-Server. The routing in all instances are only working after "arp -s ip_of_router mac_of_router" Server: CentOS7, KVM Clients: CentOS6 and Fedora 21 What going wrong? [root@bgstkvmlr01 ~]# ifconfig bond0: flags=5187<UP,BROADCAST,RUNNING,MASTER,MULTICAST> mtu 1500 inet6 fe80::3ed9:2bff:fe0b:c706 prefixlen 64 scopeid 0x20<link> ether 3c:d9:2b:0b:c7:06 txqueuelen 0 (Ethernet) RX packets 7341811 bytes 9977559369 (9.2 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 2649574 bytes 3041071431 (2.8 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.20.91.233 netmask 255.255.255.0 broadcast 10.20.91.255 inet6 fe80::3ed9:2bff:fe0b:c706 prefixlen 64 scopeid 0x20<link> ether 3c:d9:2b:0b:c7:06 txqueuelen 0 (Ethernet) RX packets 502795 bytes 41156803 (39.2 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 404863 bytes 2871651286 (2.6 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp3s0f0: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 1500 ether 3c:d9:2b:0b:c7:06 txqueuelen 1000 (Ethernet) RX packets 7318606 bytes 9975484026 (9.2 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 2649122 bytes 3041013575 (2.8 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp3s0f1: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 1500 ether 3c:d9:2b:0b:c7:06 txqueuelen 1000 (Ethernet) RX packets 23205 bytes 2075343 (1.9 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 452 bytes 57856 (56.5 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Lokale Schleife) RX packets 587461 bytes 3015361475 (2.8 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 587461 bytes 3015361475 (2.8 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 virbr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255 ether 52:54:00:04:a7:50 txqueuelen 0 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 vnet0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::fc54:ff:fe63:59c4 prefixlen 64 scopeid 0x20<link> ether fe:54:00:63:59:c4 txqueuelen 500 (Ethernet) RX packets 362 bytes 29416 (28.7 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 3751 bytes 310945 (303.6 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 vnet1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::fc54:ff:fea4:7493 prefixlen 64 scopeid 0x20<link> ether fe:54:00:a4:74:93 txqueuelen 500 (Ethernet) RX packets 594280 bytes 54135245 (51.6 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 6887388 bytes 9904127165 (9.2 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@bgstkvmlr01 ~]# route -n Kernel IP Routentabelle Ziel Router Genmask Flags Metric Ref Use Iface 0.0.0.0 10.20.91.1 0.0.0.0 UG 0 0 0 br0 10.20.91.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 169.254.0.0 0.0.0.0 255.255.0.0 U 1011 0 0 br0 192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0 [root@bgstkvmlr01 ~]# Mit freundlichen Grüßen / Kind regards Mr. Andreas Reschke MAHLE International GmbH Unix/Linux-Administration (FIG5.1) Pragstr. 26 - 46, 70376 Stuttgart, Germany Phone: +49 711 501-47598, Fax: +49 711 501-44 47598 Mobile: 0173-3197397 andreas.reschke(a)mahle.com, http://www.mahle.com MAHLE International GmbH, Location: Stuttgart, Registered: Amtsgericht Stuttgart, HRB 16413 Management Board: Prof. Dr. Heinz K. Junker, Arnd Franz, Michael Frick, Michael Glowatzki

2 2

CentOS-announce Digest, Vol 122, Issue 12
by centos-announce-request＠centos.org 23 Apr '15

23 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0871 CentOS 6 dbus BugFix Update (Johnny Hughes) 2. CESA-2015:0869 Important CentOS 5 kvm Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 22 Apr 2015 14:46:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0871 CentOS 6 dbus BugFix Update Message-ID: <20150422144628.GA14662(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 154884ae0ff5a4a9ed7aff22f58bb5539f932f18ca469890a30193e10e21da45 dbus-1.2.24-8.el6_6.i686.rpm 1032a57d04f2f53d29f758562d5a58490ca395fdfa59b96d4a8845becbe9c601 dbus-devel-1.2.24-8.el6_6.i686.rpm 5e3ebdeaec7d9e936bed965c6126fa5c2e09cae009d9113ab2fd3ab524108ca5 dbus-doc-1.2.24-8.el6_6.noarch.rpm 831edc20cf2faf3c49c669de67053534dcd46c21a9320331441bbb5667d952c1 dbus-libs-1.2.24-8.el6_6.i686.rpm dc5db046ac22f2ba0520805021f4a3207290fbff10226befa0bd2f36e706f3c7 dbus-x11-1.2.24-8.el6_6.i686.rpm x86_64: 62d7b03f9a215c2ed46745f01d8840de1dda8747eee4eae317fad942850c43f8 dbus-1.2.24-8.el6_6.x86_64.rpm 1032a57d04f2f53d29f758562d5a58490ca395fdfa59b96d4a8845becbe9c601 dbus-devel-1.2.24-8.el6_6.i686.rpm 82901ad649682842fedda2f2641b44a32a536d2eaeb431c0d5dee96d54fa9302 dbus-devel-1.2.24-8.el6_6.x86_64.rpm 5e3ebdeaec7d9e936bed965c6126fa5c2e09cae009d9113ab2fd3ab524108ca5 dbus-doc-1.2.24-8.el6_6.noarch.rpm 831edc20cf2faf3c49c669de67053534dcd46c21a9320331441bbb5667d952c1 dbus-libs-1.2.24-8.el6_6.i686.rpm e412f3b9c5a250d9b08617f967ff5a0b81cddd7dc31c57bd4dc6a8fba2fee7da dbus-libs-1.2.24-8.el6_6.x86_64.rpm e5af547513f8bd81ad1b52eea43b7d93b3a00304c882e072744634b25727ba9b dbus-x11-1.2.24-8.el6_6.x86_64.rpm Source: 97c5927a869793f0edd404c59b0d89d15c2d4db3b466b49ed25f00949b1eca84 dbus-1.2.24-8.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 22 Apr 2015 14:47:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0869 Important CentOS 5 kvm Security Update Message-ID: <20150422144716.GA9232(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0869 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 110cfc729e2e536ea057491fa59ad58b2a601de7a68914954d47b359df8ce677 kmod-kvm-83-270.el5.centos.x86_64.rpm f23c984edf95cb75ab3a14337693c29cc031b98a2c83203742910742bfbb2a4a kmod-kvm-debug-83-270.el5.centos.x86_64.rpm efd27316bb50ba740b8572395eda046d47b82c0cfa4fb17954a6414442d55c83 kvm-83-270.el5.centos.x86_64.rpm be2b6fe5f10ea4ae06b261269c6b2b4cd1a960b40322770584a23515ecde78da kvm-qemu-img-83-270.el5.centos.x86_64.rpm d5c445566348626991bb0d9a11a62e8002df8e542d79c8ecdd7bc4b4d30d673f kvm-tools-83-270.el5.centos.x86_64.rpm Source: eb82ad54a0dd3a25e5f95c1c2a4ea4c9bb4d8e9039427c55c485edaef20a0fc5 kvm-83-270.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 12 ************************************************

1 0

Bridg and dhclient
by Subscriber 23 Apr '15

23 Apr '15

Hi. Anyone can help me? I have Linux 3.10.0-123.20.1.el7.x86_64 # cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" I added new virtual interfaces (br71 and vlan71) via NetworkManager # cat /etc/sysconfig/network-scripts/ifcfg-br71 DEVICE=br71 STP=no TYPE=Bridge BOOTPROTO=none IPV6INIT=no NAME=br71 ONBOOT=yes # cat /etc/sysconfig/network-scripts/ifcfg-vlan71 VLAN=yes TYPE=Vlan DEVICE=vlan71 PHYSDEV=team0 VLAN_ID=71 REORDER_HDR=0 BOOTPROTO=none IPV6INIT=no NAME=vlan71 ONBOOT=yes NM_CONTROLLED=yes BRIDGE=br71 Q: When interface going up (nmcli connection up br71) it was trying to get ip-addres via dhclient (but options BOOTPROTO=none uses). Why? nmcli device status DEVICE TYPE STATE CONNECTION vlan71 vlan connected vlan71 br71 bridge connecting (getting IP configuration) br71 Something wrong in my config files? Thx.

1 0

hostname on centos 7.1
by Jerry Geis 23 Apr '15

23 Apr '15

I have a file /etc/sysconfig/network and in the file is cat /etc/sysconfig/network # Created by anaconda HOSTNAME=zotac_c7.msgnet.com [root@localhost ~]# I rebooted and the prompt is still localhost ? What is the new thing in CentOS 7 to set the host name such that then the prompt is correct also? Thanks Jerry

5 5

About CentOS Live CD
by WangMike 23 Apr '15

23 Apr '15

In CentOS 7.x, two new Live CDs are introduced: CentOS-7.0-1406-x86_64-GnomeLive.iso and CentOS-7.0-1406-x86_64-KdeLive.iso My question is: is this a long term strategy? or in other words, will they be maintained in all future CentOS 7.x releases? Since CentOS 6.4 or 6.5, many system tools are removed from Live CD. That limits many use cases. I am checking that if I can rely on the new Gnome/KDE based Live CD which contains more system tools.

1 0

← Newer
1
2
3
4
5
6
7
8
...
19
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2015