Discuss February 2017

discuss@lists.centos.org

118 participants
122 discussions

selinux contexts for openntpd portable
by Jordan Ladora 08 Feb '17

08 Feb '17

I was wondering if someone could help with selinux context for the portable openntpd library on centos7. I compiled openntpd-6.0p1 and it runs great on centos7, but have not had much luck with selinux contexts for it. This is what I tried- semanage fcontext -a -t ntp_conf_t /usr/local/etc/ntpd.conf # seems to work semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpd # gets reset on reboot to bin_t and/or stops ntpd from working semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpctl # stops ntpd from working semanage fcontext -a -t ntp_drift_t /usr/local/var/db/ntpd.drift # seems ok No idea about context for /usr/local/var/db/ntpd.sock Thanks in advance for any help, jl

1 0

Rebuild gstreamer
by Jerry Geis 07 Feb '17

07 Feb '17

Hi all, I have a need to rebuild the gstreamer and gst-plugins in CentOS 7. So I found the wiki for rebuilding a source package... I downloaded the vault.centos.org files, installed them with dependencies. I did the rpmbuild -ba for each of the four packages. All seemed to go well. No errors reported. However - the /usr/bin/gst-inspect* listing shows the files as OLD ls -l /usr/bin/gst-inspect* -rwxr-xr-x 1 root root 16000 Jun 9 2014 /usr/bin/gst-inspect -rwxr-xr-x 1 root root 45488 Jun 9 2014 /usr/bin/gst-inspect-0.10 -rwxr-xr-x 1 root root 45552 Nov 20 2015 /usr/bin/gst-inspect-1.0 However the file was genereated as shows here: pwd /root/rpmbuild/BUILD/gstreamer-0.10.36/tools [root@W530 tools]# ls -l gst-inspect* -rwxr-xr-x 1 root root 36632 Feb 7 08:42 gst-inspect -rwxr-xr-x 1 root root 8436 Feb 7 08:42 gst-inspect-0.10 -rw-r--r-- 1 root root 1768 Feb 7 08:42 gst-inspect-0.10.1 -rw-r--r-- 1 silentm silentm 1768 Dec 11 2011 gst-inspect.1.in -rw-r--r-- 1 silentm silentm 53933 Feb 7 08:42 gst-inspect.c -rw-r--r-- 1 silentm silentm 47400 Dec 29 2011 gst-inspect.c.rpm-provides So the package built... why did /usr/bin/gst-inspect* not match the above directory. Did I miss something? Thanks, Jerry

4 5

Re: [CentOS] Rebuild gstreamer
by Andreas Benzler 07 Feb '17

07 Feb '17

Hello Jerry, don't know why you need to upgrade gst-inspect plugin. But I did update gstreamer plugin last year. If you like to take a view http://centos.cms4all.org/repo/7/gstreamer/ cms4all.repo [cms4all-gstreamer] name=cms4all-gstreamer #baseurl=http://centos.cms4all.org/repo/7/gstreamer/ baseurl=file:///srv/repo/centos/7/gstreamer gpgcheck=0 enabled=1 This are private package, does it fit or what you are looking for? Plays all my personaly files. Sincerely Andy PS: Enable midi, ffmpeg dvd(css) lame etc... > > Hi all, > > > > I have a need to rebuild the gstreamer and gst-plugins in CentOS 7. > > So I found the wiki for rebuilding a source package... > > I downloaded the vault.centos.org files, installed them with dependencies. > > > > I did the rpmbuild -ba for each of the four packages. All seemed to go well. > > No errors reported. > > > > However - the /usr/bin/gst-inspect* listing shows the files as OLD > > ls -l /usr/bin/gst-inspect* > > -rwxr-xr-x 1 root root 16000 Jun 9 2014 /usr/bin/gst-inspect > > -rwxr-xr-x 1 root root 45488 Jun 9 2014 /usr/bin/gst-inspect-0.10 > > -rwxr-xr-x 1 root root 45552 Nov 20 2015 /usr/bin/gst-inspect-1.0 > > > > However the file was genereated as shows here: > > pwd > > /root/rpmbuild/BUILD/gstreamer-0.10.36/tools > > [root@W530 tools]# ls -l gst-inspect* > > -rwxr-xr-x 1 root root 36632 Feb 7 08:42 gst-inspect > > -rwxr-xr-x 1 root root 8436 Feb 7 08:42 gst-inspect-0.10 > > -rw-r--r-- 1 root root 1768 Feb 7 08:42 gst-inspect-0.10.1 > > -rw-r--r-- 1 silentm silentm 1768 Dec 11 2011 gst-inspect.1.in > > -rw-r--r-- 1 silentm silentm 53933 Feb 7 08:42 gst-inspect.c > > -rw-r--r-- 1 silentm silentm 47400 Dec 29 2011 gst-inspect.c.rpm-provides > > > > > > So the package built... why did /usr/bin/gst-inspect* not match the above > > directory. > > > > Did I miss something? > > Thanks, > > > > Jerry > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos >

1 0

Trick to compile older packages
by Jerry Geis 07 Feb '17

07 Feb '17

I am trying to add a package (I know its older - but it should work) gst-rtsp-server-0.10.8 to CentOS 7. The gstreamer 0.10 packages are included in C7 and they compile just fine. When I extract and try to compile gst-rtsp-server 0.10.8 the ./configure goes fine. but the make results in errors: make make all-recursive make[1]: Entering directory `/home/silentm/LayeredSolutions/webkit-0.10/gst-rtsp-server-0.10.8.2' Making all in gst make[2]: Entering directory `/home/silentm/LayeredSolutions/webkit-0.10/gst-rtsp-server-0.10.8.2/gst' Making all in rtsp-server make[3]: Entering directory `/home/silentm/LayeredSolutions/webkit-0.10/gst-rtsp-server-0.10.8.2/gst/rtsp-server' CC libgstrtspserver_0.10_la-rtsp-media.lo rtsp-media.c: In function 'gst_rtsp_media_class_init': rtsp-media.c:143:3: error: 'g_thread_create' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:104): Use 'g_thread_new' instead [-Werror=deprecated-declarations] klass->thread = g_thread_create ((GThreadFunc) do_loop, klass, TRUE, &error); ^ rtsp-media.c: In function 'gst_rtsp_media_init': rtsp-media.c:160:3: error: 'g_mutex_new' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:277) [-Werror=deprecated-declarations] media->lock = g_mutex_new (); ^ rtsp-media.c:161:3: error: 'g_cond_new' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:281) [-Werror=deprecated-declarations] media->cond = g_cond_new (); ^ rtsp-media.c: In function 'gst_rtsp_media_finalize': rtsp-media.c:242:3: error: 'g_mutex_free' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:279) [-Werror=deprecated-declarations] g_mutex_free (media->lock); ^ rtsp-media.c:243:3: error: 'g_cond_free' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:283) [-Werror=deprecated-declarations] g_cond_free (media->cond); ^ rtsp-media.c: In function 'gst_rtsp_media_get_status': rtsp-media.c:1504:5: error: 'g_cond_timed_wait' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:285) [-Werror=deprecated-declarations] if (!g_cond_timed_wait (media->cond, media->lock, &timeout)) { ^ How to I get this package to compile just like the gst-plugins (bad, good, base) 0.10 for C7? I was trying to look at the spec file for the other packages - but I dont see the trick. Any pointers? Jerry

2 1

CentOS-announce Digest, Vol 144, Issue 3
by centos-announce-request＠centos.org 07 Feb '17

07 Feb '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0253 Moderate CentOS 6 spice-server Security Update (Johnny Hughes) 2. CESA-2017:0252 Moderate CentOS 6 ntp Security Update (Johnny Hughes) 3. CESA-2017:0252 Moderate CentOS 7 ntp Security Update (Johnny Hughes) 4. CESA-2017:0254 Moderate CentOS 7 spice Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Feb 2017 11:24:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0253 Moderate CentOS 6 spice-server Security Update Message-ID: <20170206112447.GA35597(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0253 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0253.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 679c8a61f4dcc929e8ee00e7d8fc676579060a4a987a89496733aecdcc1c5f0c spice-server-0.12.4-13.el6_8.2.x86_64.rpm 7e48a65bb2f1adf110ea3e49fc802310c06ced45787c02bccbdf51d26fa516b7 spice-server-devel-0.12.4-13.el6_8.2.x86_64.rpm Source: 582f4684ddfbee8b14740b6543f8bfa6a1d4edebc2a05933fee8dcbb1adf1540 spice-server-0.12.4-13.el6_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 6 Feb 2017 11:25:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0252 Moderate CentOS 6 ntp Security Update Message-ID: <20170206112517.GA35860(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0252 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0252.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b9dfb7436c9ef8ab1b0cb6068d042d27f0c7e6d0f21315b8485b789c90bf8492 ntp-4.2.6p5-10.el6.centos.2.i686.rpm ba89750ee097aa27f63b351d309a55d1d3b3b4ad296d01d1668b971f5f96859e ntpdate-4.2.6p5-10.el6.centos.2.i686.rpm 6a1819a41222249fdd0ee1be5d17baf889e449083b43d04fc2816b19e55a7dcc ntp-doc-4.2.6p5-10.el6.centos.2.noarch.rpm 2e1a9c4fcd6be3e8d11c6568545d904e046eae02884897951f1efbdf9a1b2a51 ntp-perl-4.2.6p5-10.el6.centos.2.i686.rpm x86_64: 8400f1a18a703e7d5f8074261635d1ddf6439278309f59b8715c46180eb07403 ntp-4.2.6p5-10.el6.centos.2.x86_64.rpm 5c0f9d494d781918b20f11db573fd81e33f07286d60696dd8e3d5384988fff1f ntpdate-4.2.6p5-10.el6.centos.2.x86_64.rpm 6a1819a41222249fdd0ee1be5d17baf889e449083b43d04fc2816b19e55a7dcc ntp-doc-4.2.6p5-10.el6.centos.2.noarch.rpm de075c90b1050f370fa713a83b83e403f3971460626f6eaf2817354505a701bd ntp-perl-4.2.6p5-10.el6.centos.2.x86_64.rpm Source: 771f9b7b1d9e5e109fb35ac6d98f52bfc29c2ece60d09a07254033212046695a ntp-4.2.6p5-10.el6.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 6 Feb 2017 12:22:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0252 Moderate CentOS 7 ntp Security Update Message-ID: <20170206122253.GA49275(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0252 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0252.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: eb1819614fa19cf5cf8ca7ed7c3372bc38bf4942c93ac4637c0c51f2d815c31f ntp-4.2.6p5-25.el7.centos.1.x86_64.rpm 8457f5c379cdddc6e0580b7d2a79c457591dc4bee292b5a4315a3909025a0114 ntpdate-4.2.6p5-25.el7.centos.1.x86_64.rpm 6c99631e1924b51dceba0c8ec17248c20e99e6b7149297bc96802cc17938b8ca ntp-doc-4.2.6p5-25.el7.centos.1.noarch.rpm ab24d7808313a1c65d0fc3154ca92707becaa9c0a463ae122eb1dadcfd2aa48b ntp-perl-4.2.6p5-25.el7.centos.1.noarch.rpm 1b63fb91ae4e32d626e855c7abbbc96afbd4efd7756f54131b3f8f58a07b20f7 sntp-4.2.6p5-25.el7.centos.1.x86_64.rpm Source: 3ecac3a33e3dc48362b5a52174ddeb6a552d571f1e19baa33f4cf8799a6cd5d4 ntp-4.2.6p5-25.el7.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 6 Feb 2017 12:23:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0254 Moderate CentOS 7 spice Security Update Message-ID: <20170206122323.GA49344(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0254 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0254.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f579cf6528ad3b90eb6c2c6c779d899db2f3d7d424fa044bfa544429c17874f7 spice-server-0.12.4-20.el7_3.x86_64.rpm d953580820c483452db1771e8f2f902a74920c3d7aabfeefd3d22b30c19fc690 spice-server-devel-0.12.4-20.el7_3.x86_64.rpm Source: 9990cf4655bafdc4c5b7d4ec78400898cce6dfb8f345854911a61ded403d4af5 spice-0.12.4-20.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 144, Issue 3 ***********************************************

1 0

Chrony vd NTP
by Robert Moskowitz 06 Feb '17

06 Feb '17

I have read: http://thegeekdiary.com/centos-rhel-7-chrony-vs-ntp-differences-between-ntp… My server is up all the time and will serve time to internal systems (via DHCP options). Caveat is that my server is an armv7 (Cubieboard2) which does not have an RTC (no battery). So whenever the system boots, the time is ZERO (Dec 31, 1969 or some such). Chrony fixes this really fast; shortly after boot the time is good. Chrony CAN be configed as an internal time server. But chrony does not seem to step the clock for any adjustments needed. It is more important that this systems time be right all the time than to avoid clock steps. This brings me back to NTP, which normally takes hours to bring the time from ZERO to current, but keeps the time correct. So: Can Chrony check the time, say once a day? Or can NTP make a BIG time jump all at once (on system restart)? thanks

4 5

install of audacity kills audio
by ken 06 Feb '17

06 Feb '17

# uname -r 3.10.0-514.6.1.el7.x86_64 # cat /etc/centos-release CentOS Linux release 7.3.1611 (Core) Prior to the below the sound/audio on my system worked just fine. Then a yum of install of audacity with dependencies: ... Downloading packages: (1/6): vamp-plugin-sdk-2.5-4.el7.x86_64.rpm | 172 kB 00:03 (2/6): wxGTK-2.8.12-20.el7.x86_64.rpm | 2.9 MB 00:00 (3/6): audacity-2.1.1-1.el7.x86_64.rpm | 4.3 MB 00:08 (4/6): portaudio-19-16.el7.x86_64.rpm | 88 kB 00:09 (5/6): libid3tag-0.15.1b-17.el7.x86_64.rpm | 48 kB 00:09 (6/6): wxBase-2.8.12-20.el7.x86_64.rpm | 588 kB 00:10 ... Now nothing which is supposed to output is working; e.g., something as simple as "play file.wav" hangs at the start and outputs no sound at all. Two minutes prior to the install the exact same command worked. Same story with other apps using sound. I "erased" (rpm -e ...) all of the installed packages listed above. That didn''t fix the problem. My guess is that the install loaded one or more bogus kernel modules, it would be nice if lsmod showed WHEN the modules were loaded, but it doesn't. Is there some way to find this out? # lspci -vv -s 00:1f.3 00:1f.3 Audio device: Intel Corporation Sunrise Point-H HD Audio (rev 31) Subsystem: Hewlett-Packard Company Device 80ee Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+ Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx- Latency: 32, Cache Line Size: 64 bytes Interrupt: pin A routed to IRQ 130 Region 0: Memory at 96220000 (64-bit, non-prefetchable) [size=16K] Region 4: Memory at 96210000 (64-bit, non-prefetchable) [size=64K] Capabilities: [50] Power Management version 3 Flags: PMEClk- DSI- D1- D2- AuxCurrent=55mA PME(D0-,D1-,D2-,D3hot+,D3cold+) Status: D0 NoSoftRst+ PME-Enable- DSel=0 DScale=0 PME- Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Address: 00000000fee003d8 Data: 0000 Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel # rmmod snd_hda_intel rmmod: ERROR: Module snd_hda_intel is in use snd_hda_intel probably isn't the offending module anyway. I recall having this same problem five or ten years ago with an audacity install, but don't recall what I did to fix it. Anyone here closer to this issue? Thanks much.

1 0

Delaying services starting at boot
by Robert Moskowitz 06 Feb '17

06 Feb '17

Back to the challenge of a server with no RTC. Chrony advances the clock some 14B sec a bit after bootup. So sometimes services like httpd start with a bad time of Dec 31, 1969. Is there some way to delay services starting until Chrony has done its job to bring the clock up? I think it matters to some extent, as /var/log/http/error.log is filled this time with messages about http starting with that 1969 date. Other times, on boot, I don't see these messages, and thus guess that Chrony set the time before httpd started. thanks

1 0

CentOS 7.3.1611 scap-security-guide issue
by Michał Jankowski 06 Feb '17

06 Feb '17

Hello, I have noticed that pci-dss profile, ssg-centos7-xccdf.xml will always fail on test and remediation for disable_prelink rule. That seem to be caused by insufficient CentOS RPM customization of upstream code. Specifically this: https://github.com/OpenSCAP/scap-security-guide/blob/master/shared/oval/dis… <https://github.com/OpenSCAP/scap-security-guide/blob/master/shared/oval/dis…> That condition will always fail on CentOS because it misses: <extend_definition comment="Installed OS is CentOS7" definition_ref=" installed_OS_is_centos7" /> I was thinking about raising a bug on https://bugs.centos.org or committing a fix in https://git.centos.org/summary/rpms!scap-security-guide but I am unsure as to what action should I take. The other issue I'm facing is trying to workaround the disable_prelink rule by simply taking it out of tests. I have create a tailor file but it doesn't seem to be taken into consideration. The file: <?xml version="1.0" encoding="UTF-8"?> <cdf-11-tailoring:Tailoring xmlns:cdf-11-tailoring=" http://open-scap.org/page/Xccdf-1.1-tailoring" xmlns:xccdf=" http://checklists.nist.gov/xccdf/1.1" id="xccdf_scap-workbench_tailoring_default"> <cdf-11-tailoring:benchmark href="/private/tmp/ssg-centos7-xccdf.xml"/> <cdf-11-tailoring:version time="2017-01-31T14:41:00">1</cdf-11-tailoring:version> <xccdf:Profile id="pci-dss_disable_rule_prelink" extends="pci-dss"> <xccdf:title xmlns:xhtml="http://www.w3.org/1999/xhtml" xml:lang="en-US" override="true">PCI-DSS v3 Control Baseline for CentOS Linux 7 [CUSTOMIZED]</xccdf:title> <xccdf:description xmlns:xhtml="http://www.w3.org/1999/xhtml" xml:lang="en-US" override="true">This is a *draft* profile for PCI-DSS v3</xccdf:description> <xccdf:select idref="disable_prelink" selected="false"/> </xccdf:Profile> </cdf-11-tailoring:Tailoring> Then the oscap command I tried: oscap xccdf eval --remediate --tailoring-file tailor.xml --profile pci-dss --fetch-remote-resources /usr/share/xml/scap/ssg/content/ssg-centos7-xccdf.xml It is my debut on the list, thank you for your consideration :-)

2 2

CentOS 6, 8, mplayer, "vector smash protection is enabled"
by m.roth＠5-cent.us 06 Feb '17

06 Feb '17

This *just* started happening. Video works, but if I try to play streaming audio, I get nothing. In .xsession-errors, I see that message, along with others Object::connect: No such slot TaskManager::GroupManager::taskDestroyed(QObject*) ALSA lib pulse.c:243:(pulse_connect) PulseAudio: Unable to connect: Connection refused ###!!! [Parent][MessageChannel::Call] Error: (msgtype=0xAA0001,name=PPluginInstance::Msg___delete__) Channel error: cannot send/recv Based on a brief google, it *appears* as though vector smash protection is protecting me from playing music. Note that mplayer does play videos with no audio (i.e., from our surveillance cameras in our secure rooms). Can I turn it off, or is there something else blocking me? Let me note that flash-plugin works to play music... except, as I noted last week, it crashes every 15-20 minutes, so I was going to mplayer from the command line.... mark

1 0

← Newer
1
...
7
8
9
10
11
12
13
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2017