April 2016 - Discuss - lists.centos.org

system-config-printer samba broken
by Andreas Benzler 28 Apr '16

28 Apr '16

Hello guys… while i was working with special printer setup fallow problems are there: samba: 1. system-config-printer 1.4.1 - printers not browsable. Fixed by fedora. can be found here. Patch included http://centos.cms4all.org/centos/7/printing/SRPM/ <http://centos.cms4all.org/centos/7/printing/SRPM/> system-config-printer-1.4.1-20.el7.centos.src.rpm <http://centos.cms4all.org/centos/7/printing/SRPM/system-config-printer-1.4.…> 2. system-config-printer Verify … works as expected 3. "Prompt user if authentication is required“ - never happens 4. Set authentication details now: Fail because of realm Only User - fail WORKGROUP\User fail How to fill the username to get realm passed? Thanks for advice Andy In the meantime i update my gutenprint for more printers. needs to be tested.

1 1

Any CentOS 6 Issues on Lenovo Y700?
by Brian Bernard 28 Apr '16

28 Apr '16

Hi all, I'm looking at buying a Lenovo Y700 Notebook, and wondering if it would work with CentOS 6. Or if anyone has experience with using it under CentOS 6. I assume that the WiFi could be an issue as it uses an Intel 8260 card. I want to make the correct decision. Thank you, Brian Bernard

2 1

systemctl enable httpd failure
by Michael H 28 Apr '16

28 Apr '16

Hi List, [root@mail1 ~]# systemctl enable httpd Failed to execute operation: Invalid argument I can disable and re-enable other services without issue, I'm also seeing the same error when I run [root@mail1 ~]# systemctl enable mailman Failed to execute operation: Invalid argument Any suggestions? Michael

1 1

CentOS-announce Digest, Vol 134, Issue 15
by centos-announce-request＠centos.org 28 Apr '16

28 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0695 Critical CentOS 5 firefox Security Update (Johnny Hughes) 2. CESA-2016:0695 Critical CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 27 Apr 2016 15:22:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0695 Critical CentOS 5 firefox Security Update Message-ID: <20160427152207.GA28572(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0695 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 72c6e8cc275f769961ec0e7349e27cd04a850cf2b446c87be3199f30bebf83e6 firefox-45.1.0-1.el5.centos.i386.rpm x86_64: 72c6e8cc275f769961ec0e7349e27cd04a850cf2b446c87be3199f30bebf83e6 firefox-45.1.0-1.el5.centos.i386.rpm 6c47031dd9e2de144e681e433f01aee9c58913b829ac00f8189d933a010b8088 firefox-45.1.0-1.el5.centos.x86_64.rpm Source: 1cf7031e1734831a5cfcdcb95c11af0447e427cced104533bf6f5ac07d4e2b7f firefox-45.1.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 27 Apr 2016 15:34:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0695 Critical CentOS 6 firefox Security Update Message-ID: <20160427153455.GA19503(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0695 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1b99b117160ab472b6f7b02e7daa067de60820352c24b30f9b0d6da90a21a148 firefox-45.1.0-1.el6.centos.i686.rpm x86_64: 1b99b117160ab472b6f7b02e7daa067de60820352c24b30f9b0d6da90a21a148 firefox-45.1.0-1.el6.centos.i686.rpm ef5c69545d39336f0e84ea7588841f770dbffde26cfdde9192fd009e2a614a11 firefox-45.1.0-1.el6.centos.x86_64.rpm Source: 5d2602205b09daa7e5f1fbde0c84131ceabfcb34a11f5fb3ed43844f652adf71 firefox-45.1.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 15 ************************************************

1 0

Bourne shell deprecated?
by Jack Bailey 28 Apr '16

28 Apr '16

Hello List, Today someone in a meeting claimed the Bourne shell is deprecated, one of the reasons being it supposedly has security issues. Well that's all news to me, and I cannot find anything online to corroborate the claim. Is this true, is it a bash vs. Bourne FUD, or something else? Thanks, Jack

16 26

Apache logs missing
by Adrian Jenzer 28 Apr '16

28 Apr '16

Hi all I just saw that I miss some log files in /var/log/httpd. There is a gap in January/February2016, no logs are available for this period. It seemed to work fine with the earlier logs as you can see. Has someone an explanation for this? It's a Centos 7.2 VM with Apache 2.4 running ownCloud only. Default logrotate config. -rw-r--r-- 1 root root 3367604 Apr 20 16:12 ssl_access_log -rw-r--r-- 1 root root 67982 Jul 12 2015 ssl_access_log-20150712.gz -rw-r--r-- 1 root root 43515 Jul 18 2015 ssl_access_log-20150719.gz -rw-r--r-- 1 root root 36096 Jul 26 2015 ssl_access_log-20150727.gz -rw-r--r-- 1 root root 25088 Aug 1 2015 ssl_access_log-20150802.gz -rw-r--r-- 1 root root 12733 Aug 9 2015 ssl_access_log-20150810.gz -rw-r--r-- 1 root root 89873 Aug 15 2015 ssl_access_log-20150816.gz -rw-r--r-- 1 root root 70627 Aug 23 2015 ssl_access_log-20150823.gz -rw-r--r-- 1 root root 91576 Aug 31 2015 ssl_access_log-20150831.gz -rw-r--r-- 1 root root 218188 Sep 6 2015 ssl_access_log-20150906.gz -rw-r--r-- 1 root root 181084 Sep 14 2015 ssl_access_log-20150914.gz -rw-r--r-- 1 root root 247666 Sep 20 2015 ssl_access_log-20150920.gz -rw-r--r-- 1 root root 221203 Sep 28 2015 ssl_access_log-20150928.gz -rw-r--r-- 1 root root 173962 Oct 4 2015 ssl_access_log-20151004.gz -rw-r--r-- 1 root root 131480 Oct 11 2015 ssl_access_log-20151011.gz -rw-r--r-- 1 root root 141485 Oct 19 2015 ssl_access_log-20151019.gz -rw-r--r-- 1 root root 89379 Oct 25 03:37 ssl_access_log-20151025.gz -rw-r--r-- 1 root root 149943 Nov 1 13:30 ssl_access_log-20151102.gz -rw-r--r-- 1 root root 150219 Nov 8 03:11 ssl_access_log-20151108.gz -rw-r--r-- 1 root root 131524 Nov 14 20:13 ssl_access_log-20151115.gz -rw-r--r-- 1 root root 153841 Nov 22 03:42 ssl_access_log-20151122.gz -rw-r--r-- 1 root root 134209 Nov 29 23:41 ssl_access_log-20151130.gz -rw-r--r-- 1 root root 336448 Dec 6 03:11 ssl_access_log-20151206.gz -rw-r--r-- 1 root root 357256 Dec 14 03:15 ssl_access_log-20151214.gz -rw-r--r-- 1 root root 354106 Dec 20 03:38 ssl_access_log-20151220.gz -rw-r--r-- 1 root root 204874 Dec 28 03:41 ssl_access_log-20151228.gz -rw-r--r-- 1 root root 13621 Jan 3 03:05 ssl_access_log-20160103.gz -rw-r--r-- 1 root root 4385823 Mar 27 04:19 ssl_access_log-20160327 -rw-r--r-- 1 root root 4345075 Apr 4 03:40 ssl_access_log-20160404 -rw-r--r-- 1 root root 4743540 Apr 10 03:04 ssl_access_log-20160410 -rw-r--r-- 1 root root 6065044 Apr 17 03:20 ssl_access_log-20160417 Regards Adrian Jenzer

3 3

Re: [CentOS] Any CentOS 6 Issues on Lenovo Y700?
by Mike Mohr 28 Apr '16

28 Apr '16

Don't flame me, but I really recommend using Ubuntu on laptops. If you really want CentOS, you should go with version 7. Many new laptops won't work well with that either though. CentOS 6 only works well these days on older hardware or on virtual machines. On Apr 27, 2016 7:27 PM, "Brian Bernard" <brian.brianbernard(a)gmail.com> wrote: Hi all, I'm looking at buying a Lenovo Y700 Notebook, and wondering if it would work with CentOS 6. Or if anyone has experience with using it under CentOS 6. I assume that the WiFi could be an issue as it uses an Intel 8260 card. I want to make the correct decision. Thank you, Brian Bernard _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos

3 2

CentOS CI Testing Prior to Releasing Packages
by Johnny Hughes 27 Apr '16

27 Apr '16

In another thread I talked about running CI testing on a packge before release. I thought I would explain that a bit more AND ask for tests, if they are needed. Prior to pushing newly released packages into the main CentOS os, updates, extras, cr, or fasttrack repositories, we run our t_functional CI test suite on the entire repo set. So if we are releasing an update, it would be against the os and updates repositories. Or if we release fasttrack package, it would be os, updates, fasttrack repositories. We also run this test suite on the final OS repository during point release upgrades. Here is information on the t_functional suite. https://wiki.centos.org/QaWiki/AutomatedTests/WritingTests/t_functional And here is where I actually run the suite prior to releasing updates: https://ci.centos.org/view/CentOS-Core/ The reason I bring this up is we will accept updates to the tests to check for things that should be tested prior to release of a repository. If you know of something that we sometimes get wrong and create a test that returns exit code other than 0 for a fail, and if you can convince us (on the CentOS-Devel mailing list) that it should be included, then you can help us release better updates to CentOS Linux. Thanks, Johnny Hughes

1 0

where, if at all, is my virtual printer output?
by Michael Hennebry 27 Apr '16

27 Apr '16

I recently installed the package that allows having virtual printers under CUPS. I used the localhost:631 GUI to add a virtual pdf printer. I do not remember what I did. Now there are two virtual printers, one named Cups-PDF and the one I named pdfprinter. I cannot find the output from either. I do not know how to ask them. >From firefox, print to file still works, but does not do what I want. Even if it did, I'd still want to know what's going on with my virtual printers. >From an error log: Unable to create avahi client: Resource temporarily unavailable" -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

Mod_radius_auth for apache?
by Eero Volotinen 27 Apr '16

27 Apr '16

Any package with srpm available for radius auth on apache? Eero

1 0

Re: [CentOS] Bourne shell deprecated?
by Gordon Messmer 27 Apr '16

27 Apr '16

On 04/27/2016 05:20 AM, Joerg Schilling wrote: > While older versions of the Bourne Shell are not POSIX compliant, recent > versions only miss the feature "arithmetic expansion" and are otherwise > probably closer to POSIX than bash or dash. Note that "dash" does not support > multi-byte characters and thus cannot be certified for a full UNIX system but > only for embedded UNIX systems. That's good to know. But, since there seem to be several forks of Bourne shell, currently, is there a reference for the differences between them? > As far as I can see, this was related to "mailx" and not to the shell. I looked for substantiation of the original claim that the bourne shell had security problems. Apparently I should have looked closer. Thanks for catching that.

1 0

Semi-OT: very weird vi behaviour
by m.roth＠5-cent.us 27 Apr '16

27 Apr '16

This is weird. As in, *deeply* weird. I ssh as root from one box to another (there are keys involved), and I go to vi a file, such as # line 1 # # line 2 # # line 3 # line 4 And what I see in vi is # line 3 # line 4 BUT, if I scroll the cursor over each line with the arrow key... I see all four lines. I've also looked at another file, and same thing. Just checked it out on the server I ssh'd in from, and no problem. And now, I just ssh'd in from another windows, same way... and the weirdness isn't there. Anyone have any clues as to what's going on with that one session? mark file

6 7

Re: [CentOS] Apache/PHP Installation - opinions
by m.roth＠5-cent.us 27 Apr '16

27 Apr '16

Alice Wonder wrote: > On 04/27/2016 01:21 AM, Brandon Vincent wrote: >> On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen <rkampen(a)kampensonline.com> wrote: >>> Sounds good, but how many domain MX servers have set up these >>> fingerprint keys - 1%, maybe 2%, so how do you code for that? I guess I'm thinking >>> it uses it if available. So even if you do post it on your DNS, how many clients out there are using DANE on their set up? By the time it becomes more than a tiny % and generally useful, it will be in CentOS 8. It >>> also requires certificates to be implemented more ubiquitously than at present - although we do now have affordable solutions, so this one may resolve >>> more quickly. >> > Security and Privacy on the Internet are both severely broken. > > If you read the white papers from when the Internet was first being designed, security was rarely even mentioned. <snip> Just as a point of information, when those RFCs were written, the Internet was *only* for US gov't, and selected research and educational organizations, and NO ONE else. The open 'Net only came in in the nineties - so security wasn't broken and insecure, back then there was physical security and careful selection as to who was allowed on, at all. mark

3 3

Re: [CentOS] Bourne shell deprecated?
by m.roth＠5-cent.us 27 Apr '16

27 Apr '16

Scott Robbins wrote: > On Tue, Apr 26, 2016 at 07:27:26PM -0700, Alice Wonder wrote: >> >> Some of the BSDs use to have a bourne shell and maybe some do, I don't know. >> > Yup. > >> bash is mostly compatible with bourne (can run most bourne scripts) which is why /bin/sh is a symlink to /bin/bash on GNU and most other *nix systems. > > Bash can run Bourne, but not necessarily vice versa, which can be problematic if, say, moving a Linux script to a BSD or AIX box. I remember something I'd done which used, IIRC, $UID, without realizing it was a bashism, instead of using id -u. I'll also note that all *production* scripts were once required to be bourne, but by the mid-ninties, management was starting to mandate that they be Korn shell, instead, for many reasons - capabilities, etc. Bash - I don't think I saw that till I started running RH 5.1, I think it was, about 18 years ago.... mark

2 1

Apache/PHP Installation - opinions
by Tim Dunphy 27 Apr '16

27 Apr '16

Hey guys, I tend to work on small production environments for a large enterprise. Never more than 15 web servers for most sites. But most are only 3 to 5 web servers. Depends on the needs of the client.I actually like to install Apache and PHP from source and by hand. Although I know that's considered sacrilege in some shops. I do this because on RH flavored systems like CentOS the versions of Apache, php and most other software are a little behind the curve in terms of versions. And that's intentionally so! Because the versions that usually go into the various repos are tested and vetted thoroughly before going into the repos. I like to use the latest, stable versions of apache and php for my clients without having to create a custom RPM every time a new version comes out. So what I'd like to know is it better in your opinion to install from repos than to install by source as a best practice? Is it always better to use puppet, chef, ansible etc even if the environment is small? I'm sure this is a matter preference, but I would like to know what your preferences are. Thanks, Tim Sent from my iPhone

10 17

DNSSEC / Security stats (forked from php thread)
by Alice Wonder 27 Apr '16

27 Apr '16

I don't have a source, I'd have to dig through my browser history, but I looked at some of these stats just last month. Roughly 2% of the top 1000 domains in the United States had deployed DNSSEC - which I *think* is double what it was a year ago. Roughly 7% of ISP recursive DNS servers enforce DNSSEC. Comcast does and Google's public DNS does. Those are the big ones that enforce DNSSEC on their recursive servers. I do not see any statistics for DANE adoption, either on port 443 or port 25 (the two where it is most common currently) Roughly 20% of all e-mail traffic in the United States was not encrypted. Of the e-mail traffic that was not even encrypted, a large percentage of it was spam. What wasn't spam was often sent by scripting languages (e.g. php) running blogs or other web services. Only a small percentage of e-mail sent by clients through a SMTP server was not encrypted in the MTA to MTA transfer. -=-=- What we can do as sysadmins, we can run unbound on our local machines, it defaults to DNSSEC enforcing. That way we don't have to worry if the recursive resolver our ISP uses is part of the 7%. Linode enforced last time I checked, but I don't know about other hosting services. Still safer to just run unbound listening only on the localhost, and configure /etc/resolv.conf to point to ::1 (or 127.0.0.1) If at all possible, deploy DNSSEC on any zones you have control over. Even without DANE, DNSSEC greatly improves security for the 7% (and growing) recursive resolvers that enforce DNSSEC. Before deploying DNSSEC do a lot of reading on it, because if you screw it up, those 7% enforcing recursive resolvers won't resolve your zone. I personally use a 2048-bit KSK and a 1024-bit ZSK. The KSK is what you have to get the DS record for uploaded to your TLS, and it should be rotated once a year. The ZSK is just in your zone, best practice says to rotate once a month but I rotate once a week, every Sunday. It should be automated, so it doesn't hurt to do it more often than the once a month. Doing it once a week means if my zone signing server is down or under DDoS when the signing happens, it isn't a big deal, because it happens 4X the best practices recommended anyway. With our web applications that send e-mail, don't use the SMTP services of the scripting language. Yes it is cool that you can play SMTP server with PHP etc. and yes, if PHP is built against a TLS library it can encrypt, but don't use PHP to play SMTP. Run postfix on the web server and have your web applications connect to the SMTP on the local host. This isn't just for the benefit of encrypting, it also lets you do things like sign the message with DKIM and if your postfix is new enough, check the DANE records of the MX record the message is being sent to. I don't know why so many web applications try to play SMTP themselves, it is a very bad habit and usually results in mail being sent without TLS and sometimes rejected by spam filters if the domain it allegedly comes from uses DKIM but the web application doesn't. -=-=- Hope I didn't bore too many people, or offend anyone, these are just my opinions and this is a topic I am passionate about. I think system administrators need to do a better job at securing Internet infrastructure.

1 0

CentOS-announce Digest, Vol 134, Issue 14
by centos-announce-request＠centos.org 27 Apr '16

27 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0695 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 26 Apr 2016 23:59:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0695 Critical CentOS 7 firefox Security Update Message-ID: <20160426235906.GA46943(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0695 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7ad87030365ab1016abb60f1e290685ad331c5a5f1562bde57106a7ccacaf69b firefox-45.1.0-1.el7.centos.i686.rpm 9d5a9f3245ea81a0750082d056031816b6d1d05fe278641a0aad4fd44f367c05 firefox-45.1.0-1.el7.centos.x86_64.rpm Source: ea6c6ab0a63372cae9b1c76d642de69e23866e790dc41d5a91f56b99d352ec34 firefox-45.1.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 14 ************************************************

1 0

Storage cluster advise, anybody?
by Valeri Galtsev 27 Apr '16

27 Apr '16

Dear Experts, I would like to ask everybody: what would you advise to use as a storage cluster, or as a distributed filesystem. I made my own research of what I can do, but I hit a snag with my seemingly best choice, so I decided to stay away from it finally, and ask clever people what they would use. My requirements are: 1. I would like to have one big (say, comparable to petabyte) filesystem, accessible on more than one machine, composed of disk space leftovers on a bunch of machines having 1 gigabit per second ethernet connections 2. It can be a bit slow, as filesystem one would need for backups onto it (say, using bacula or bareos), and/or for long term storage of large datasets, portions of which can be copied over to faster storage for processing if necessary. I would be thinking in 1-2 TB of data written to it daily. 3. It would be great to have it single machine failure/reboot resilient 4. metadata machines should be redundant (or at least backup medatada host should be manually convertible into master metadata host if fatal failure to master or corruption of its data happens) What I would like to avoid/exclude: 1. Proprietary commercial solutions, as: a. I would like to stay on as minimal budget as possible b. I want to be able to predict that it will exist for long time, and I have better experience with my predictions of this sort about open source projects as opposed to proprietary ones 2. Open source solutions using portions of proprietary closed source binaries/libraries (e.g., I would like to stay away from google proprietary code/binaries/libraries/modules) 3. Kernel level modifications. I really would like to have this independent of OS as much as I can, or rather available on multiple OSes (though I do not like Java based things - just my personal experience with some of them). I have a bunch of Linux boxes and a bunch of FreeBSD boxes, and I do not want to exclude neither of them if possible. Also, the need to have custom Linux kernel specifically scares me: Linux kernels get critical updates often, and having customizations lagging behind the need of critical update is as unpleasant as rebooting the machine because of kernel update is. I'm not too scared of a "split nature" projects: proprietary projects having open source satellite. I have mixed experience with those, using open source satellite I mean. Some of them are indeed not neglected, and even though you may be missing some features commercial counterpart has, some are really great ones: they are just missing commercial support, and maybe having a bit sparse documentation, thus making you to invest more effort into making it work, which I don't mind: I can earn my sysadmin's salary here. I would say I more often had good experience with those than bad one (and I have a list of early indications of potential bad outcome, so I can more or less predict my future with this kind of projects). <rant> I really didn't mean to write this, but I figure it probably will surface once I start getting your advices, so here it is. I did my research having my requirements in mind and came up with the solution: moosefs. It is not reviewed much, no reviews with criticism at all, and not much you can ("I could" I should say) find howtos about customizations, performance tuning etc. It installs without a hitch. It runs well, until you start stress writing a lot to it in parallel, then it started performing exponentially badly for me. Here is where extensive attempts to find performance tuning documentation faces lack of success. What made my decision to never ever use it in a future was the following. I started migrating data back from moosefs to local UFS (that is FreeBSD box) filesystem using rsync command. What I observed was: source files after they have been touched by rsync changed their timestamps. As if instead of creation timestamp it is an access timestamp on moosefs. This renders rsync from moosefs useless, as you can not re-run failed rsync, and you obliterate some of metadata of the source ("creation" timestamp). I wrote e-mail to sourceforge moosefs mail list, mentioning all this and the fact that I am using open source moosefs. Next day they replied asking whether I use version 3."this" or version 3."that", as they want to know in which of them they have a bug. Whereas latest open source version they have everywhere, including sourceforge is older version: 2.0.88. Basically, my decision was made. Sorry for venting it out here, but I figured, it will happen some moment when I will get your advises. </rant> Thanks a lot for all your advises! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

6 7

username.pem
by m.roth＠5-cent.us 27 Apr '16

27 Apr '16

Hi, folks, Our system gets/creates /var/lib/ssh-x509-auth/<username>,pem, then deletes it when the log out. selinux (in permissive mode) complains. First, I changed the context to cert_t, and *now* it complains that ksh93 wants write, etc access on the directory. grep ssh-x509-auth /var/log/audit/audit.log | audit2allow offers me this: #============= sshd_t ============== allow sshd_t cert_t:dir write; allow sshd_t var_lib_t:file { write getattr create open ioctl }; So: first, is this an expected behavior; second, is that the correct fcontext, and, finally, is it safe for me to create this as a local policy? Thanks in advance. mark

2 1

cron
by Marcin Trendota 26 Apr '16

26 Apr '16

What the heck is wrong with cron? */1 * * * * nobody /usr/bin/php /var/www/html/osticket/api/cron.php in /etc/cron.d doesn't get executed at all (ran from console works of course!). But the SAME file in /tmp runs flawlessly: */1 * * * * nobody /usr/bin/php /tmp/cron.php It's CentOS7 on VPS with no SELinux. I've noticed similiar behavior before (on bare metal server with SELinux). -- Over And Out MoonWolf

13 23

evolution libsoup and samba bug 765106
by Andreas Benzler 26 Apr '16

26 Apr '16

Hello everyone, while i was play around with winhq install winbind-clients. After this I never can open evolution with exchange ews connector. https://bugzilla.gnome.org/show_bug.cgi?id=765106 I patches libsoup by my self diff -up ./libsoup/soup-auth-ntlm.c.prev ./libsoup/soup-auth-ntlm.c --- ./libsoup/soup-auth-ntlm.c.prev 2016-04-15 14:18:02.680276592 +0200 +++ ./libsoup/soup-auth-ntlm.c 2016-04-15 15:20:00.337116508 +0200 @@ -359,6 +359,7 @@ soup_auth_ntlm_update_connection (SoupCo conn->state = SOUP_NTLM_SSO_FAILED; success = FALSE; } else if (!g_ascii_strcasecmp (response, "PW")) { + conn->state = SOUP_NTLM_SSO_FAILED; priv->sso_available = FALSE; g_free (response); } else { @@ -489,7 +490,7 @@ soup_auth_ntlm_get_connection_authorizat priv->sso_available = FALSE; } } else { - g_warning ("NTLM single-sign-on using %s failed", NTLM_AUTH); + g_debug ("NTLM single-sign-on using %s failed", NTLM_AUTH); } } /* If NTLM single-sign-on fails, go back to original @@ -525,7 +526,7 @@ soup_auth_ntlm_get_connection_authorizat #ifdef USE_NTLM_AUTH case SOUP_NTLM_SSO_FAILED: /* Restart request without SSO */ - g_warning ("NTLM single-sign-on by using %s failed", NTLM_AUTH); + g_debug ("NTLM single-sign-on by using %s failed", NTLM_AUTH); priv->sso_available = FALSE; header = soup_ntlm_request (); conn->state = SOUP_NTLM_SENT_REQUEST; and rebuild mock SRPMS/libsoup-2.48.1-4.el7.centos.src.rpm Now I can open evolution with winbind-cients installed. http://centos.cms4all.org/centos/7/other/SRPMS/libsoup-2.48.1-4.el7.centos.… Hopefully without any other side effect. Sincerely Andy

1 0

CentOS-announce Digest, Vol 134, Issue 13
by centos-announce-request＠centos.org 26 Apr '16

26 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0684 Moderate CentOS 5 nspr Security Update (Johnny Hughes) 2. CESA-2016:0684 Moderate CentOS 5 nss Security Update (Johnny Hughes) 3. CESA-2016:0685 Moderate CentOS 7 nspr Security Update (Johnny Hughes) 4. CESA-2016:0685 Moderate CentOS 7 nss-util Security Update (Johnny Hughes) 5. CESA-2016:0685 Moderate CentOS 7 nss-softokn Security Update (Johnny Hughes) 6. CESA-2016:0685 Moderate CentOS 7 nss Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 25 Apr 2016 13:19:01 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0684 Moderate CentOS 5 nspr Security Update Message-ID: <20160425131901.GA13582(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0684 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0684.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2542e599e93d78a8b51ee1e9ad58b24edf8d70029defc49f8b032e4b5782c6bf nspr-4.11.0-1.el5_11.i386.rpm 5dedec41a954bc0562095cd6d5c43165056c256a66cf1389df0d8414e7c96105 nspr-devel-4.11.0-1.el5_11.i386.rpm x86_64: 2542e599e93d78a8b51ee1e9ad58b24edf8d70029defc49f8b032e4b5782c6bf nspr-4.11.0-1.el5_11.i386.rpm f54f893419cc8223d491056a96e33c327a1a6b3e6585c9d91edcaf227a546dc3 nspr-4.11.0-1.el5_11.x86_64.rpm 5dedec41a954bc0562095cd6d5c43165056c256a66cf1389df0d8414e7c96105 nspr-devel-4.11.0-1.el5_11.i386.rpm d0bc78381c24c31a38ea4297e6ec8f6b2dceb676fa83be84d07d8213f9b1c441 nspr-devel-4.11.0-1.el5_11.x86_64.rpm Source: 27c20b9b8a0d828b87cf67ca091669580d1506904edac211c643a8ab5f2fcaa6 nspr-4.11.0-1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 25 Apr 2016 13:20:12 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0684 Moderate CentOS 5 nss Security Update Message-ID: <20160425132012.GA13713(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0684 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0684.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 22a25171db9d8a514be909e7a8eef944e73b3194d6dc51c1e4e351adfb62035e nss-3.21.0-6.el5_11.i386.rpm 28ae63c316cc4f13f29e8cb0dfcf13b004dd591386eeed974b5721adf1b62f5d nss-devel-3.21.0-6.el5_11.i386.rpm bd69e9a3c779a8fc3a9c5f1d2db5cecc2c30b92fbb7a3d1f65cdc86f4cf04339 nss-pkcs11-devel-3.21.0-6.el5_11.i386.rpm d70335c291e0b4b34b7e7e4294a284b59d26617edb92d601b2e281c3e48995aa nss-tools-3.21.0-6.el5_11.i386.rpm x86_64: 22a25171db9d8a514be909e7a8eef944e73b3194d6dc51c1e4e351adfb62035e nss-3.21.0-6.el5_11.i386.rpm 891293a24f0e8664504d9bf777844c333efb8f77d7bed69163857dea240e0425 nss-3.21.0-6.el5_11.x86_64.rpm 28ae63c316cc4f13f29e8cb0dfcf13b004dd591386eeed974b5721adf1b62f5d nss-devel-3.21.0-6.el5_11.i386.rpm c442280aab2f2064a0ef4b0794ac1f926422eb44a1e8c0759a54f6f0f71e9cce nss-devel-3.21.0-6.el5_11.x86_64.rpm bd69e9a3c779a8fc3a9c5f1d2db5cecc2c30b92fbb7a3d1f65cdc86f4cf04339 nss-pkcs11-devel-3.21.0-6.el5_11.i386.rpm f412a80e0611d89981d883653a2bb309afbd20dd825770d45ef0d267e6ee18e7 nss-pkcs11-devel-3.21.0-6.el5_11.x86_64.rpm ae5698473b4847dc48f6e13ed0747c092487843889f88df8741692076fd6ff25 nss-tools-3.21.0-6.el5_11.x86_64.rpm Source: 4813046342f6562e761c0d1f6c782de5cebaa62fa06523482498dcd1b2c2e8ea nss-3.21.0-6.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 25 Apr 2016 17:49:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nspr Security Update Message-ID: <20160425174911.GA16668(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: daf7526f2f1ccc56ec97e57940cde39049a4a111951b01197b2c18b4bc7ec1cb nspr-4.11.0-1.el7_2.i686.rpm d784f223e384f756a5c594925512c5fd6d46aaad66f85936b51453a0dc2dbd8a nspr-4.11.0-1.el7_2.x86_64.rpm 56037499e8d01dd812e5ff3a2752c9aa108dd45fd816269abae28fd6eaa751b1 nspr-devel-4.11.0-1.el7_2.i686.rpm 5b3fbd8326f1249e287423a753d2b249e4d7281c669943c367a62d6f839dfde5 nspr-devel-4.11.0-1.el7_2.x86_64.rpm Source: 6520f99cd5afa95d605bcc653f47c828e2fb491a548e057d0c99e91a57a1dac3 nspr-4.11.0-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 25 Apr 2016 17:49:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nss-util Security Update Message-ID: <20160425174924.GA16739(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 73472239f7a39dfce534c7a7d354a0c47c56d4164bd751e9709285dc52526a52 nss-util-3.21.0-2.2.el7_2.i686.rpm ebe0bba24d7b4477830fe4dbb025e91ca30a619e5806241a84c7e4c420bab53c nss-util-3.21.0-2.2.el7_2.x86_64.rpm e512d5a51c14dca89b2207be8a6aa792cf3e5e549f4f525f5d26800b705b8a72 nss-util-devel-3.21.0-2.2.el7_2.i686.rpm 2013f4efb5ccdee9431259c717c2f473dff61f0b26f39a2e46012764f7a127c5 nss-util-devel-3.21.0-2.2.el7_2.x86_64.rpm Source: e90e5e5834289fae968dd2d04f9d563d7a67e3c733ebc2291b7ab131f93c5e14 nss-util-3.21.0-2.2.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Mon, 25 Apr 2016 17:49:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nss-softokn Security Update Message-ID: <20160425174935.GA16820(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3119ce33b30bd2aee2e386f0a3f2f01c90c9869ae2cb39a685f913e7a4d0e14a nss-softokn-3.16.2.3-14.2.el7_2.i686.rpm d207816db9a598d15c0856a925b28221f4166968fba76d09aa01aa9ea6c44170 nss-softokn-3.16.2.3-14.2.el7_2.x86_64.rpm e544515243939f744d849b645cfb308bf0d4f73e57c29d52d4023fb264b61298 nss-softokn-devel-3.16.2.3-14.2.el7_2.i686.rpm 5e8c6639e808aaa869b50e9c1c5b827ab6960c5dcc371c1ba42b4dddbae6888e nss-softokn-devel-3.16.2.3-14.2.el7_2.x86_64.rpm c579edfa53c72797701474fbbbc1c19d90ed7c407046d7718e25234b0887acb7 nss-softokn-freebl-3.16.2.3-14.2.el7_2.i686.rpm 9253b359efea3686548eeb043ed0e0bf5e859a677c98452e1bec39d500756e94 nss-softokn-freebl-3.16.2.3-14.2.el7_2.x86_64.rpm 871ddd52d4894f9a515683607b009e206dd7c181158f5a7bb1f88349236fbbc8 nss-softokn-freebl-devel-3.16.2.3-14.2.el7_2.i686.rpm bccc6cb31656273c92f1288717bcc7f8578b3c42670433812f68e9164dd326f2 nss-softokn-freebl-devel-3.16.2.3-14.2.el7_2.x86_64.rpm Source: 698e112d5ce13a9e9703bac655fe9d2a75fa85bc828af64a965bbc0e880c62d2 nss-softokn-3.16.2.3-14.2.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Mon, 25 Apr 2016 17:49:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nss Security Update Message-ID: <20160425174947.GA16905(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: acc0e05d8f247791db76ab9b21359abc7908c1ab9ead506964b52955287fe25b nss-3.21.0-9.el7_2.i686.rpm 33e2a1aa657f809c53449627200616b683de444300a5b2c2a79510e3e5912b00 nss-3.21.0-9.el7_2.x86_64.rpm bce90a8604496832d35d0cfefa05a552f9f3e1d866d5f6dfb0c1763d5ad34009 nss-devel-3.21.0-9.el7_2.i686.rpm ab4370a426efcdbf15bc1730f3a077150a597edb103ebbabaceb39d84f0fb96c nss-devel-3.21.0-9.el7_2.x86_64.rpm 87f7e4956ae9aeff3821b2b28b9f3500b94b0037d9280b10149833b3e4a65902 nss-pkcs11-devel-3.21.0-9.el7_2.i686.rpm e1ac83844836b6605c439bb5fa70be50163b9154d27ffcb45fc01c183fdc9c29 nss-pkcs11-devel-3.21.0-9.el7_2.x86_64.rpm 2a0881f7703e23a95aa8db53858285793eb30ceb198a7a20fa816c60e472a15d nss-sysinit-3.21.0-9.el7_2.x86_64.rpm abb98d8a2a2737ab4031c145c1503cf31bb3b2b54983547e2675b0b08805eaf6 nss-tools-3.21.0-9.el7_2.x86_64.rpm Source: 7b8295c752cbd420b5ae52a8b4aa8fa9b6979c57f9caa8279c14e3865ce62883 nss-3.21.0-9.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 13 ************************************************

1 0

what does firefox have against sans-serif
by Michael Hennebry 24 Apr '16

24 Apr '16

I've been struggling to get Firefox to render text in a sans-serif font. So far, I've only been able to do that by setting the default font as sans-serif. DejaVu Sans Mono and DajaVu Sans are the only other listed fonts that I'm reasonalbly sure are sans-serif. Helvetica and Arial are not there. sans-serif does work on Konqueror. Does anyone know how to affect the font-family on Firefox 38.7.0 ? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

CentOS-announce Digest, Vol 134, Issue 12
by centos-announce-request＠centos.org 23 Apr '16

23 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2016:0682 CentOS 6 qla2xxx Enhancement Update (Johnny Hughes) 2. CEEA-2016:0683 CentOS 5 tzdata Enhancement Update (Johnny Hughes) 3. CEEA-2016:0683 CentOS 6 tzdata Enhancement Update (Johnny Hughes) 4. CEEA-2016:0683 CentOS 7 tzdata Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 22 Apr 2016 17:30:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0682 CentOS 6 qla2xxx Enhancement Update Message-ID: <20160422173059.GA52900(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0682 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0682.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: beb8bae27284f3d614fc06a783956a67bdf4954962014a9e79e6dca337a4d65f kmod-qla2xxx-8.07.00.26.06.8_k-1.el6_7.i686.rpm x86_64: 913727d84d304f885ac611a8205e8e4783400d0769146cb63794bf9148645e10 kmod-qla2xxx-8.07.00.26.06.8_k-1.el6_7.x86_64.rpm Source: 5bf20afc610114f1aacc3163db44e1c9789775f29edc191e30055ba505028fc6 qla2xxx-8.07.00.26.06.8_k-1.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 22 Apr 2016 17:36:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0683 CentOS 5 tzdata Enhancement Update Message-ID: <20160422173627.GA1517(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0683 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 54d05bf911d8ee5756581ca4a6f680a17331a8ad81a78a4c2fab444eef4ae4a4 tzdata-2016d-1.el5.i386.rpm 3ba460b1fc6d3e5087a34f29d94b02d80b0cfb96291e4325d5dade203120279c tzdata-java-2016d-1.el5.i386.rpm x86_64: a3f76a48da798cf6074da566312ef38d3453f1bc4f47e57650bd4d8287ac2147 tzdata-2016d-1.el5.x86_64.rpm b85b0e326c82dc3ed6cc03ea4d555662977fd3ff169a31f3c6113320a9b445dd tzdata-java-2016d-1.el5.x86_64.rpm Source: f50acf35e30f529551db9e8d38ffa214a3b5f518e52195e5ffc96d04ec8fb796 tzdata-2016d-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 22 Apr 2016 17:38:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0683 CentOS 6 tzdata Enhancement Update Message-ID: <20160422173821.GA53191(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0683 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 648b5c1c0dc0890ee3194aad413b0d952e28cc0325247548f24092d2cfef222a tzdata-2016d-1.el6.noarch.rpm a3aa69f440c5d5ff03192f8b14bd80903232c52bf61533d5d54423fac7b382be tzdata-java-2016d-1.el6.noarch.rpm x86_64: 648b5c1c0dc0890ee3194aad413b0d952e28cc0325247548f24092d2cfef222a tzdata-2016d-1.el6.noarch.rpm a3aa69f440c5d5ff03192f8b14bd80903232c52bf61533d5d54423fac7b382be tzdata-java-2016d-1.el6.noarch.rpm Source: 69641ac33c2b4de7bf4ad934fd885e90d13efbf377f0a12e2b9001666c67dd82 tzdata-2016d-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Fri, 22 Apr 2016 17:58:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0683 CentOS 7 tzdata Enhancement Update Message-ID: <20160422175814.GA10802(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0683 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 57d7e4c3f03b35ab0b95808de779bede15909718a3a3c09637ec82e9eb9ad53d tzdata-2016d-1.el7.noarch.rpm 43bf52c3c30e55eb107bbde5235c12d9afd1009ae6f12c5310c76fd4145a00da tzdata-java-2016d-1.el7.noarch.rpm Source: daa340cc9b6340c361d5feb3b1dc93e7ef0c19719738aa29d4d4a6e3b74bf528 tzdata-2016d-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 12 ************************************************

1 0

FirewallD issue
by Marcin Trendota 23 Apr '16

23 Apr '16

Hello everybody. Recently i moved external interface to zone "external" on my home server/router. And something strange is hapening. From my router (chamber, CentOS7) everything is fine: [root@chamber ~]# firewall-cmd --list-all home (default, active) interfaces: enp3s0 tun0 virbr0 sources: services: dhcp dhcpv6-client dns http https imaps ipp-client mdns nfs samba samba-client vnc-server ports: 143/tcp 26666/tcp masquerade: no forward-ports: icmp-blocks: rich rules: [root@chamber ~]# firewall-cmd --list-all --zone=external external (active) interfaces: enp1s0 sources: services: ports: 26666/tcp masquerade: yes forward-ports: icmp-blocks: rich rules: [root@chamber ~]# nmap 10.0.49.14 Starting Nmap 6.40 ( http://nmap.org ) at 2016-04-21 11:57 CEST Nmap scan report for 10.0.49.14 Host is up (0.00045s latency). Not shown: 997 closed ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https MAC Address: 52:54:00:D6:6D:4A (QEMU Virtual NIC) Nmap done: 1 IP address (1 host up) scanned in 0.18 seconds But from host in another location (connected through VPN): moonwolf  ~  nmap 10.0.49.14 Starting Nmap 7.12 ( https://nmap.org ) at 2016-04-21 11:59 CEST Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn Nmap done: 1 IP address (0 hosts up) scanned in 0.06 seconds moonwolf  ~  nmap 10.0.49.14 -Pn -p22 Starting Nmap 7.12 ( https://nmap.org ) at 2016-04-21 11:59 CEST Nmap scan report for svn.karakkhaz.dwarfs (10.0.49.14) Host is up (0.015s latency). PORT STATE SERVICE 22/tcp filtered ssh Nmap done: 1 IP address (1 host up) scanned in 0.05 seconds moonwolf  ~  ping 10.0.49.14 PING 10.0.49.14 (10.0.49.14) 56(84) bytes of data. 64 bytes from 10.0.49.14: icmp_seq=1 ttl=62 time=9.45 ms 64 bytes from 10.0.49.14: icmp_seq=2 ttl=62 time=26.0 ms ^C --- 10.0.49.14 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 9.459/17.754/26.050/8.296 ms What could cause this behavior? Before interface move everything was working as expected. -- Over And Out MoonWolf

3 6

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2016