Discuss August 2016

discuss@lists.centos.org

131 participants
137 discussions

HEIST https
by Alessandro Baggi 05 Aug '16

05 Aug '16

Hey there, today I've ridden about HEIST. https://www.google.it/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&ved=0ahUKEwj… What about Centos?

1 0

firwalld 0.4+ ipset root.
by Jon LaBadie 05 Aug '16

05 Aug '16

Before firewalld I used to use ipsets to blacklist several countries. Firewalld added support for ipsets with version 0.4, a year ago. Centos 7.2 is still at 0.3.9. Anyone know of a newer Centos package? jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

1 0

Systemd and network startup/shutdown ?
by James Pearson 05 Aug '16

05 Aug '16

I've just started to dip my toe in the water with CentOS 7 - and have started looking at porting custom CentOS 6 init.d/xinetd/whatever scripts and configs to systemd, but notice that CentOS 7 appears to use /etc/rc.d/init.d/network as the method for starting/stopping the network Is this correct - or am I missing something? Thanks James Pearson

2 1

Re: [CentOS] curl build system is broken and so is mock
by James B. Byrne 04 Aug '16

04 Aug '16

On Wed, August 3, 2016 22:53, Alice Wonder wrote: > > I didn't realize ldd was recursive. I may have known that at one > point (been using linux since MK Linux DR3 and building RPMs since > 1999), but have a head injury results in memory problems with > pieces of knowledge I don't frequently use. Most of us have that problem; head injuries or not. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] php55w-fpm on CentOS 7: settings location
by James B. Byrne 04 Aug '16

04 Aug '16

On Wed, August 3, 2016 14:19, Always Learning wrote: > > On Wed, 2016-08-03 at 13:55 -0400, Jason Welsh wrote: > >> What I do is create a php.php file on the root of my fileserver >> with >> the following >> >> <?php phpinfo() ?> > > I use a text command: php -i > > > php -i > php-i.txt echo '<?php phpinfo() ?>' | php > php-echo.txt diff php-i.txt php-echo.txt 709,710c709,710 < _SERVER["PHP_SELF"] => < _SERVER["SCRIPT_NAME"] => --- > _SERVER["PHP_SELF"] => - > _SERVER["SCRIPT_NAME"] => - 714c714 < _SERVER["REQUEST_TIME"] => 1470317489 --- > _SERVER["REQUEST_TIME"] => 1470317531 716a717 > [0] => - 719c720 < _SERVER["argc"] => 0 --- > _SERVER["argc"] => 1 I do not see much to choose between them in terms of output and 'php -i' is certainly handier when in a terminal session on the host. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CentOS-announce Digest, Vol 138, Issue 2
by centos-announce-request＠centos.org 04 Aug '16

04 Aug '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:1551 Critical CentOS 6 firefox Security Update (Johnny Hughes) 2. CESA-2016:1551 Critical CentOS 7 firefox Security Update (Johnny Hughes) 3. CESA-2016:1539 Important CentOS 7 kernel Security Update (Johnny Hughes) 4. CESA-2016:1551 Critical CentOS 5 firefox Security Update (Johnny Hughes) 5. CEEA-2016:1558 CentOS 7 ixgbe Enhancement Update (Johnny Hughes) 6. CEEA-2016:1559 CentOS 7 bnx2x Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 3 Aug 2016 13:34:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:1551 Critical CentOS 6 firefox Security Update Message-ID: <20160803133444.GA33715(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:1551 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-1551.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9df10ccea2612e3a15c8efda9ba170b5a56d097c3fe5693519da7dc174afc91c firefox-45.3.0-1.el6.centos.i686.rpm x86_64: 9df10ccea2612e3a15c8efda9ba170b5a56d097c3fe5693519da7dc174afc91c firefox-45.3.0-1.el6.centos.i686.rpm 63f8ab8d2156549bb98daf269c1670f2f600477d4e0af4d13d7b02b4cdb44912 firefox-45.3.0-1.el6.centos.x86_64.rpm Source: 3a05bc5c24a4b0c24b77b918e1361be00493395f27aaa5afa4d743d00e192826 firefox-45.3.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 3 Aug 2016 14:06:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:1551 Critical CentOS 7 firefox Security Update Message-ID: <20160803140618.GA39590(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:1551 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-1551.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0b6e166fc20500ed20985a8d668eea12cfbdfb39e0fd714061f8f82b30a34ba5 firefox-45.3.0-1.el7.centos.i686.rpm 5e8927756bd707eca7f3fa012a794a11f8008a2434876e95a85faec926d32fe5 firefox-45.3.0-1.el7.centos.x86_64.rpm Source: d3d2fd8370693a06da5827a5006161d1701fa1280e0a094169a9e0e8e242ee60 firefox-45.3.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 3 Aug 2016 14:05:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:1539 Important CentOS 7 kernel Security Update Message-ID: <20160803140549.GA39501(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:1539 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-1539.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a0e90ff663ac2a387e16320bf1e766ba0dd3191de684a637cd624f436fe8f7a0 kernel-3.10.0-327.28.2.el7.x86_64.rpm ad03e7f34c5410790b1a15655313203706cbf062629f1958f370974fa2568817 kernel-abi-whitelists-3.10.0-327.28.2.el7.noarch.rpm d17cc0f7b3ffac0e1f083a8a687f20689dd7a5a0c27811cfa7302a6cfccd82b6 kernel-debug-3.10.0-327.28.2.el7.x86_64.rpm e23bf54b2e5354a7984445cd6a79b0d2d3e4985a3586d96f848cc8e601dbaac7 kernel-debug-devel-3.10.0-327.28.2.el7.x86_64.rpm a8c5c03fd36b7ab9d171613d5048007cf71e2272b7b93c26ae09668381ef4fe3 kernel-devel-3.10.0-327.28.2.el7.x86_64.rpm c2587858a6ae29a3ae81e7c8b451b4c832ed7758478729e1ef16a88f4aa24151 kernel-doc-3.10.0-327.28.2.el7.noarch.rpm a1472c9948b043b614e92946ad65cde38a6380ca15eec601013429ded0258e7b kernel-headers-3.10.0-327.28.2.el7.x86_64.rpm 96800a0be6263a40d4fa9731f8d80f7a15edb605f47952df53e0b384baf222fc kernel-tools-3.10.0-327.28.2.el7.x86_64.rpm 2830cf235d377d6756550ad3a1649f1be8e5093039ef2b2387eaaf5181924aba kernel-tools-libs-3.10.0-327.28.2.el7.x86_64.rpm 506b7604b85cd0d93eabe143844be07c4aa639e3aa550615988e4a948fac1060 kernel-tools-libs-devel-3.10.0-327.28.2.el7.x86_64.rpm deaaceaad64b48a3bbd5a449dca8c2641914b8f363057facbba0f9c090c9a751 perf-3.10.0-327.28.2.el7.x86_64.rpm 917f414ae910bd6800e6920a9fd3a710bc48257685b79205b979251587e4df4c python-perf-3.10.0-327.28.2.el7.x86_64.rpm Source: fe45609a3f959507325df652f681c0ae18ce494e5bc9385152adc6c5230f415f kernel-3.10.0-327.28.2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 3 Aug 2016 14:41:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:1551 Critical CentOS 5 firefox Security Update Message-ID: <20160803144111.GA21019(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:1551 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-1551.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cd4063a3a38e1a483f394963d77c8ed68ffa6410bccc0021fe9c7a0f173b22f0 firefox-45.3.0-1.el5.centos.i386.rpm x86_64: cd4063a3a38e1a483f394963d77c8ed68ffa6410bccc0021fe9c7a0f173b22f0 firefox-45.3.0-1.el5.centos.i386.rpm 9f4bb40cec40e6445c0c2d3c22f84f33b206ac138c3f70042d627dfc12edbad4 firefox-45.3.0-1.el5.centos.x86_64.rpm Source: 3585eb31593e09b0b9570b77733fb41f1d01df7efd77623c438868604220011e firefox-45.3.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 3 Aug 2016 16:27:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:1558 CentOS 7 ixgbe Enhancement Update Message-ID: <20160803162722.GA42711(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:1558 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-1558.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b22b497499e1a61eee0931930295a1bcb9391ab357d4b6d347193e00827bdaf2 kmod-ixgbe-4.4.0_k-1.el7_2.x86_64.rpm Source: 62bf19c831a07d6fe124c0a3a7048d747b3d0ecc929df8bca42a4d96909b26ab ixgbe-4.4.0_k-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Wed, 3 Aug 2016 16:27:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:1559 CentOS 7 bnx2x Enhancement Update Message-ID: <20160803162741.GA42772(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:1559 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-1559.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 8402640a0d9a8a72c4978ce2a954d4a01cffaadc7e6a0619b94907de432ccb2f kmod-bnx2x-1.712.30-1.el7_2.x86_64.rpm dff7734ffe162aa1303c60509111bf58a63ce454d4977bd2433f98a2f29a0a30 kmod-bnx2x-firmware-1.712.30-1.el7_2.x86_64.rpm Source: b5b33229b5927d4bfed139c71f0dc9357606a4ab8e150c918fb61753bc3410ef bnx2x-1.712.30-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 138, Issue 2 ***********************************************

1 0

curl build system is broken and so is mock
by Alice Wonder 04 Aug '16

04 Aug '16

I'm having a major frustration with curl. When building curl, if libssl.so.10 is present the curl binary WILL link against it. If curl is configured with an ssl option - the library WILL link against it. If you change the curl configuration options to use a different TLS library (e.g. nss like CentOS does) the curl binary and library will still link against the OpenSSL library. There's definitely something funny about curl's ./configure - If you disable features but they are still pulled in by mock as dependencies for the build environment, the curl library will respect your configure options and won't link against those features (except it will for libssl.so.10 if ANY tls option is chosen) but the binary will link against the libraries if it is there. EVEN IF THE DEVEL PACKAGE WITH HEADER FILES IS NOT PRESENT. There is something very broken about how curl builds. If I was a skilled blackhat, I might look for ways that causes it to be exploitable, because the building of curl doesn't do what the user expects. I tried building curl creating a mock build environment where openssl is forbidden. There's a bug in mock. In both base and updates I have exclude=openssl* I had to rebuild many packages against LibreSSL to get that to work. That btw is what I'm trying to do with curl - build it against LibreSSL and it does, but also links against libssl.so.10 and there is the problem - it's not safe to have a library (or binary) that links against both OpenSSL and LibreSSL. With the presence of those excludes - mock does prevent the installation of openssl packages *in some cases* but it allows it others. rpm depends upon curl and curl from the CentOS packages depends upon libssl.so.10 and mock pulls in rpm and thus pulls in curl and thus pulls in openssl-libs and so if building curl in mock - it will link against openssl. I went through everything in the mock buildroot with ldd and curl is the ONLY package installed that has anything linked against openssl. I tried building an intermediate curl for mock to pull in without any TLS capabilities - it works for the library but the curl binary still links against openssl. I tried building an intermediary RPM package that doesn't require curl - but something else in the build system is pulling in curl resulting in libssl.so.10 being installed. I wish mock didn't have this bug as if it actually respected the excludes on base and updates, it would tell me what packages are pulling in openssl-libs but unfortunately there are cases where the excludes are not respected. This is really frustrating. I tried looking through the curl buildsystem to see if I could patch that but it seems messy to me and I can't find why the binary links against libraries you disable with configure and I can't see why the library always links against openssl if any TLS is chosen. It's very frustrating. -=- No other package I've rebuilt against LibreSSL has this problem. With curl its a big problem. It definitely should not be linking against libraries it doesn't even have the right headers for.

3 18

php55w-fpm on CentOS 7: settings location
by Boris Epstein 04 Aug '16

04 Aug '16

Hello all, Does anybody know where to enter settings for php-fpm? I have tried a number of things, including starting it with "-c /etc/php.ini" but that seemed to have any effect. Any idea on how to control it? What am I doing wrong? :) Thanks in advance. Cheers, Boris.

5 5

CentOS 6.8 with current kernel fails with pm-hibernate (cifsd refuses to freeze)
by Jari Fredriksson 03 Aug '16

03 Aug '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Now, this is not apparently very common to CentOS or EL server, but I need to hibernate one of myservers after a batch job daily. Current kernel appears to fail with pm-hibernate now. $ cat /etc/redhat-release CentOS release 6.8 (Final) $ uname -a Linux xxxx 2.6.32-642.3.1.el6.x86_64 #1 SMP Tue Jul 12 18:30:56 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux pm-hibernate tries but apparently fails. cpuinfo: processor : 0 vendor_id : GenuineIntel cpu family : 15 model : 4 model name : Intel(R) Pentium(R) 4 CPU 3.00GHz stepping : 3 microcode : 5 cpu MHz : 2999.964 cache size : 2048 KB physical id : 0 siblings : 2 core id : 0 cpu cores : 1 apicid : 0 initial apicid : 0 fpu : yes fpu_exception : yes cpuid level : 5 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc pebs bts pni dtes64 monitor ds_cpl est cid cx16 xtpr bogomips : 5999.92 clflush size : 64 cache_alignment : 128 address sizes : 36 bits physical, 48 bits virtual power management: processor : 1 vendor_id : GenuineIntel cpu family : 15 model : 4 model name : Intel(R) Pentium(R) 4 CPU 3.00GHz stepping : 3 microcode : 5 cpu MHz : 2999.964 cache size : 2048 KB physical id : 0 siblings : 2 core id : 0 cpu cores : 1 apicid : 1 initial apicid : 1 fpu : yes fpu_exception : yes cpuid level : 5 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc pebs bts pni dtes64 monitor ds_cpl est cid cx16 xtpr bogomips : 5999.92 clflush size : 64 cache_alignment : 128 address sizes : 36 bits physical, 48 bits virtual power management: Track dump here: https://static.bitwell.biz/trace.txt OK. Last line says the process causing this is cifsd. Anything to fix this? - -- jarif(a)iki.fi -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAleg/I8ACgkQKL4IzOyjSrb9RwCfSo/1Pd8ivYvQeT3T4mvpXOe0 v3gAoK7l++foIUetgtP09/uoAdLQ1kAP =fJBs -----END PGP SIGNATURE-----

2 3

Mirror sync strategy or problem?
by Gianluca Cecchi 03 Aug '16

03 Aug '16

Hello, I have a CentOS 7 server, right installed. I notice that some packages that are present at http://mirror.centos.org/centos/7/updates/x86_64/Packages/ are not present yet at some other mirrors (that are the ones my fastestmirror plugin picks up... even after a clean): http://centos.datente.com/media/7/updates/x86_64/Packages/ or http://ct.mirror.garr.it/mirrors/CentOS/7/updates/x86_64/Packages/ For example packages like glibc, bash and dbus have updates dated 02 August on the main mirror site but not yet at the other two sites. if in Centos-Base.repo file, [updates] section, I use baseurl instead of mirrorlist entry and run sudo yum clean all sudo yum update I then get these packages' list: Dependencies Resolved ===================================================================================================================== Package Arch Version Repository Size ===================================================================================================================== Updating: bash x86_64 4.2.46-20.el7_2 updates 1.0 M dbus x86_64 1:1.6.12-14.el7_2 updates 306 k dbus-libs x86_64 1:1.6.12-14.el7_2 updates 151 k dbus-x11 x86_64 1:1.6.12-14.el7_2 updates 46 k device-mapper-persistent-data x86_64 0.6.2-1.el7_2 updates 366 k glibc x86_64 2.17-106.el7_2.8 updates 3.6 M glibc-common x86_64 2.17-106.el7_2.8 updates 11 M gssproxy x86_64 0.4.1-8.el7_2 updates 84 k initscripts x86_64 9.49.30-1.el7_2.3 updates 429 k iscsi-initiator-utils x86_64 6.2.0.873-33.el7_2.2 updates 419 k iscsi-initiator-utils-iscsiuio x86_64 6.2.0.873-33.el7_2.2 updates 82 k libblkid x86_64 2.23.2-26.el7_2.3 updates 167 k libgovirt x86_64 0.3.3-1.el7_2.4 updates 64 k libgudev1 x86_64 219-19.el7_2.12 updates 66 k libmount x86_64 2.23.2-26.el7_2.3 updates 169 k libsss_idmap x86_64 1.13.0-40.el7_2.12 updates 104 k libsss_nss_idmap x86_64 1.13.0-40.el7_2.12 updates 103 k libtiff x86_64 4.0.3-25.el7_2 updates 169 k libuuid x86_64 2.23.2-26.el7_2.3 updates 74 k mdadm x86_64 3.3.2-7.el7_2.1 updates 393 k microcode_ctl x86_64 2:2.1-12.el7_2.1 updates 535 k open-vm-tools x86_64 9.10.2-5.el7_2 updates 472 k open-vm-tools-desktop x86_64 9.10.2-5.el7_2 updates 161 k sssd-client x86_64 1.13.0-40.el7_2.12 updates 158 k systemd x86_64 219-19.el7_2.12 updates 5.1 M systemd-libs x86_64 219-19.el7_2.12 updates 358 k systemd-python x86_64 219-19.el7_2.12 updates 99 k systemd-sysv x86_64 219-19.el7_2.12 updates 53 k util-linux x86_64 2.23.2-26.el7_2.3 updates 1.9 M Transaction Summary ===================================================================================================================== Upgrade 29 Packages Total download size: 28 M Is this ok [y/d/N]: What are typical delays in mirrors' sync? Or is there any problem in mirrors updates? Thanks, Gianluca

3 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2016