Discuss September 2017

discuss@lists.centos.org

128 participants
124 discussions

compile webkit
by Jerry Geis 02 Oct '17

02 Oct '17

I am trying to compile webkitgtk I downloaded the webkit source, extracted CMake Error at Source/cmake/OptionsGTK.cmake:12 (message): GCC 4.9.0 is required to build WebKitGTK+, use a newer GCC version or clang I downloaded 2.14.7 - just like CentOS 7.4 has, how can I be getting a GCC error ? My goal is to get the MediaSource package in webkit working. It seems to not be enabled. Is there a better way ? Thanks, Jerry

3 2

prevent users from fiddling with network?
by Valeri Galtsev 02 Oct '17

02 Oct '17

Dear Experts, "this is system from the hell!" Than was my first reaction when I realized that logged in with GUI (X11) user can turn off (and on) network interfaces. Without being in sudoers file. Wow, this is scary to see on workstations I manage centrally. Even though I did consider local user to be able to execute the command "shutdown" (which distinguished RedHat and CentOS from other Linux flavors: after all local user can yank power cord off the wall). Sorry about my little rant above. Could someone point me into right direction as to how do I disable the ability of (local, logged in through X11) users to fiddle with network interfaces. Even worse, they can create new profile and define for interfaces to behave differently... In the past I could just add USERCTL="no" into interface ifcfg-... file inside /etc/sysconfig/network-scripts which doesn't seen to have any effect on latest CentOS 7. What is my pilot error here? (Ignorant in new shiny extremely MS Windows like for _ignorant_ person - me - system). Thanks a lot for all your help! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

6 13

MP4/H.264 codec for Firefox?
by Roman Kennke 02 Oct '17

02 Oct '17

Hello, I am trying to get MP4/H.264 playback in Firefox to work on my CentOS laptop (for vimeo). I installed the gstreamer plugins as described here: https://wiki.centos.org/TipsAndTricks/MultimediaOnCentOS7 (No, I did not install Flash, VLC and all the other stuff. I only want HTML5 MP4 playback..) I enabled the nux repos. I did install all available gstreamer plugins, i.e. -good -bad -ugly -ffmpeg etc. No success. Has anybody got mp4 playback working? Here's a test page: https://www.quirksmode.org/html5/tests/video.html Help would be appreciated! Best regards, Roman

6 8

[Fwd: Re: [HEADS UP] Default value of SELinux boolean httpd_graceful_shutdown will changed.]
by m.roth＠5-cent.us 01 Oct '17

01 Oct '17

---------------------------- Original Message ---------------------------- Subject: Re: [HEADS UP] Default value of SELinux boolean httpd_graceful_shutdown will changed. From: "Lukas Vrabec" <lvrabec(a)redhat.com> Date: Fri, September 29, 2017 10:26 To: devel(a)lists.fedoraproject.org "Selinux List at Fedora Project" <selinux(a)lists.fedoraproject.org> -------------------------------------------------------------------------- On 09/29/2017 03:57 PM, Alexander Bokovoy wrote: > On pe, 29 syys 2017, Lukas Vrabec wrote: >> I'm planning change the default value of httpd_graceful_shutdown >> boolean in Fedora Rawhide because of improving SELinux configuration. >> Rawhide builds with this change will be available in ~5 days. >> >> Together with Dan Walsh, we agreed on that httpd_graceful_shutdown >> boolean should be by default turned off. This boolean allows HTTPD to >> connect to port 80 for graceful shutdown, but it's breaking the >> functionality of another boolean called: httpd_can_network_connect. >> This boolean allows HTTPD scripts and modules to connect to the >> network using TCP and it's turned off by default. >> >> Turning this boolean off can cause some troubles, on web-servers where >> processes with httpd_t SELinux domain connecting to tcp ports: 80, 81, >> 443, 488, 8008, 8009, 8443, 9000 >> >> If you would like to turn in on again, use semanage command: >> # semanage boolean -m --on httpd_graceful_shutdown > In FreeIPA we have httpd_can_network_connect enabled. I just checked a F26 > system and I have both booleans enabled. > > # getsebool -a|egrep 'httpd_graceful_shutdown|httpd_can_network_connect ' > httpd_can_network_connect --> on > httpd_graceful_shutdown --> on > > So I'm a bit confused: disabling httpd_graceful_shutdown will have or > wouldn't have an effect on httpd_can_network_connect being enabled? > httpd_graceful_shutdown is subset of httpd_can_network_connect. Turning on httpd_graceful_shutdown you allow httpd_t domain connecting just to ports labeled as httpd_port_t. Turning on httpd_can_network_connect you allow httpd_t domain connecting to all ports from SELinux POV. Right now, we ship selinux-policy with httpd_graceful_shutdown turned on and httpd_can_network_connect turned off. But it's confusing for users because they have httpd_can_connect turned off but httpd_t domain can still connect co http_port_t ports becuase of httpd_gracefull_shudown. I hope it's more clear now. > Do I need to do anything in FreeIPA setup? > No if httpd_can_network_connect is enabled during FreeIPA setup, you don't need to change anything. Lukas. -- Lukas Vrabec Software Engineer, Security Technologies Red Hat, Inc. _______________________________________________ selinux mailing list -- selinux(a)lists.fedoraproject.org To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org

2 1

CentOS-announce Digest, Vol 151, Issue 9
by centos-announce-request＠centos.org 30 Sep '17

30 Sep '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:2832 Important CentOS 7 nss Security Update (Johnny Hughes) 2. CESA-2017:2831 Critical CentOS 7 firefox Security Update (Johnny Hughes) 3. CESA-2017:2832 Important CentOS 6 nss Security Update (Johnny Hughes) 4. CESA-2017:2831 Critical CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 29 Sep 2017 19:46:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:2832 Important CentOS 7 nss Security Update Message-ID: <20170929194618.GA10802(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:2832 Important Upstream details at : https://access.redhat.com/errata/RHSA-2017:2832 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5b9f01457f88d0b6b4f442b2f7c4d5318962b9a3321ee79fee9d9f541513d439 nss-3.28.4-12.el7_4.i686.rpm 8443f61e40876db42ec1e5ea0fcb45cb2d0cc2647752a5e2ae03939d3ff08628 nss-3.28.4-12.el7_4.x86_64.rpm 3431721d1a3876799351c45b6923d123c69847ccdea17de5d82151412c979c33 nss-devel-3.28.4-12.el7_4.i686.rpm 1116f9a4e85302f4b85fc4511153e2623841c22b6a733d9b061331be46c5022d nss-devel-3.28.4-12.el7_4.x86_64.rpm c16e3a00b15df077d56996572a16482593795c0e798a3e879af186a7987ea93f nss-pkcs11-devel-3.28.4-12.el7_4.i686.rpm a8998872a428c177201f6db49c3f24472eb78729ebb1a15731440739a2155da1 nss-pkcs11-devel-3.28.4-12.el7_4.x86_64.rpm de14017234abf879caf5843aacc732719dbde7e033d824b57224bd34f55b73ae nss-sysinit-3.28.4-12.el7_4.x86_64.rpm 66b4b4bb2a679ddfe0471a33774aa1c0f17388a04b319056cb9dd3ed5060f230 nss-tools-3.28.4-12.el7_4.x86_64.rpm Source: 6725abae2df7fbc35d33545095c51e4e3bfc559fc323b73bf07d19f06e062bee nss-3.28.4-12.el7_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 29 Sep 2017 19:47:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:2831 Critical CentOS 7 firefox Security Update Message-ID: <20170929194705.GA10851(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:2831 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2017:2831 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c50ba8648e3b2c32b65ed9d0a6718e34a19fb2180cd113f473a6b6eb5e87900b firefox-52.4.0-1.el7.centos.i686.rpm 29bdc5ec8e8155854d7ac2605fdacb15ad40bcb8728825c4b1531b0e5da3df67 firefox-52.4.0-1.el7.centos.x86_64.rpm Source: fba2da970bd16d5519beed16bc239ee8dcc3c4298217af7a2ba390c36e69a01a firefox-52.4.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 29 Sep 2017 19:42:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:2832 Important CentOS 6 nss Security Update Message-ID: <20170929194208.GA10473(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:2832 Important Upstream details at : https://access.redhat.com/errata/RHSA-2017:2832 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 56099ae34645fa89d00010fe614df83a79a1925be3830dcbb67e9b00b38894a9 nss-3.28.4-4.el6_9.i686.rpm 025a8491a6c1e927bc9662eb305f6482240491f389e90ed0e7ab835344d95c96 nss-devel-3.28.4-4.el6_9.i686.rpm 0f3a6773e86d60fcb4bcda3aaa1fba7428440bdd81aa3bd926faebf3ff72dca9 nss-pkcs11-devel-3.28.4-4.el6_9.i686.rpm 3dd0702db2d70534d11377ae3f8624f7775671d3118a1b4780b5ff9bcbb7e91c nss-sysinit-3.28.4-4.el6_9.i686.rpm 2f80dcab9ee5602fb3764cbbceef4d14c4e720d3a680f930c00db47a1871c2b6 nss-tools-3.28.4-4.el6_9.i686.rpm x86_64: 56099ae34645fa89d00010fe614df83a79a1925be3830dcbb67e9b00b38894a9 nss-3.28.4-4.el6_9.i686.rpm 9443be70c900ba4987de5f794275c757aafadfe2f6f0445cd296857c371caa0b nss-3.28.4-4.el6_9.x86_64.rpm 025a8491a6c1e927bc9662eb305f6482240491f389e90ed0e7ab835344d95c96 nss-devel-3.28.4-4.el6_9.i686.rpm 615d1ebd1932ec30b3f94a50140646848036aa273d0d80593bc23817dd40b252 nss-devel-3.28.4-4.el6_9.x86_64.rpm 0f3a6773e86d60fcb4bcda3aaa1fba7428440bdd81aa3bd926faebf3ff72dca9 nss-pkcs11-devel-3.28.4-4.el6_9.i686.rpm 4ed35c5d70b8699c1e4cfb545718a7e06c009b3acfbf7282bc468a84dd62b6a8 nss-pkcs11-devel-3.28.4-4.el6_9.x86_64.rpm 3ba7c3ccb98ffb6545175105f6023c11fdb59c7e64a03e93662ea54e8e5b4bfa nss-sysinit-3.28.4-4.el6_9.x86_64.rpm ad77a286969f96d8edf181d2489ec6dff094a91ceb7fe3da27b75e5492340c80 nss-tools-3.28.4-4.el6_9.x86_64.rpm Source: 2679e522de097abe0fd65de3ab24fdf9d1e5b5ec71f677b601dafc9d45b9b53e nss-3.28.4-4.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Fri, 29 Sep 2017 19:44:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:2831 Critical CentOS 6 firefox Security Update Message-ID: <20170929194459.GA10667(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:2831 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2017:2831 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 212c25531aad7cec6beca513117f0670480cd67b006eac0daeb242bf8fc73805 firefox-52.4.0-1.el6.centos.i686.rpm x86_64: 212c25531aad7cec6beca513117f0670480cd67b006eac0daeb242bf8fc73805 firefox-52.4.0-1.el6.centos.i686.rpm 052aac090689b63de266e303cad69eb2a39a39c21e06a813562390904315a6e5 firefox-52.4.0-1.el6.centos.x86_64.rpm Source: f990185e5803de42e5351d31c276001677afaa4120bcb9b3f6d11190267805e1 firefox-52.4.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 151, Issue 9 ***********************************************

1 0

yum repo issue
by Stijn De Weirdt 30 Sep '17

30 Sep '17

hi all, i'm trying to understand an issue i'm having with a yum repo (it's a mirror of the c74 repo). there's an rpm in the repo (ibutils-libs in this case); but the client using this repo says it cannot find this rpm (i did yum info ibutils-libs --disablerepo=* --enablerepo=c74 to exclude all other repos). other rpms are ok to use, so nothing structural going wrong (i think) the repo sqlite.bz2 on the client (in /var/cache/yum/...) mentions the rpm (bunzip ...sqlite3.bz2; sqlite3 ...sqlite .dump |grep ibutils-libs), so i guess that one is ok. i downloaded the rpm from our repo and official mirror, same md5sum. the weird thing is that yum localinstall also fails: > [root@hyp101 tmp]# yum localinstall ibutils-libs-1.5.7-13.el7.x86_64.rpm > Loaded plugins: priorities, versionlock > Examining ibutils-libs-1.5.7-13.el7.x86_64.rpm: ibutils-libs-1.5.7-13.el7.x86_64 > Nothing to do > [root@hyp101 tmp]# rpm -q ibutils-libs > package ibutils-libs is not installed anyone any hints how to debug this or some clues what could be going wrong here. stijn

3 4

CentOS 7.4 live .iso
by FHDATA 29 Sep '17

29 Sep '17

hello, I would like to download the live iso of latest centos 7.4-1708 (desktop flavor does not matter) I looked here and pages underneath it.... https://www.centos.org/download/ but I am not finding it. is there any other place I need to look at or may be it's just a matter of time and it will show up later on centos.org site when it's availability? thank you, F-

2 2

X-Window system ?
by Günther J. Niederwimmer 29 Sep '17

29 Sep '17

Hello List, I have a big Problem to install a KVM Client with virt-manager, after Update to CentOS 7.4 it is not more possible to start the virt-manager :-(. Is there a way to configuration the system to start virt-manager again without to install "GNOME" Thanks for a answer -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

3 2

Strange problem with CentOS 7 and guest additions in VirtualBox
by Nicolas Kovacs 29 Sep '17

29 Sep '17

Hi, I'm having a very weird problem with CentOS as a VirtualBox guest. Let me explain it step by step. tl;dr: I can install VirtualBox Guest Additions and configure a fullscreen 1280x1024 graphical resolution on a full install, but not on a reduced install with a lightweight window manager. Here's what I did. 1. Install vanilla CentOS 7 with KDE. 2. Boot to reduced 1024x768 resolution. 3. Install gcc, make and kernel-devel. 4. Build VirtualBox Guest Additions. 5. Reboot to full 1280x1024 resolution. ==> perfect On a vanilla desktop installation, this works perfectly. Now here's my second attempt. 1. Install minimal CentOS 7. 2. Install X11: yum groupinstall "X Window System" 3. Install WindowMaker from Nux repo. 4. Launch WindowMaker (startx) to reduced 1024x768 resolution. 5. Install gcc, make and kernel-devel. 6. Build VirtualBox Guest Additions. 7. Reboot and still have a reduced 1024x768 resolution. ==> meh I made another attempt with Xfce instead of WindowMaker (yum autoremove WindowMaker && yum groupinstall Xfce), but with the same result. Any idea what's going on here? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

Thunderbird in CentOS 7.4
by Alice Wonder 29 Sep '17

29 Sep '17

With the current Thunderbird I can not connect to one of my IMAP servers that uses a self-signed cert. Virtually identical IMAP servers that use CA signed certs work I was a bit out of date when I updated to 7.4 and was running Thunderbird 45.6.x and it worked. When I connected from evolution (which I do not like) it worked. When I connected with my laptop still running 45.6.x it works. so - I rebuilt thunderbird 45.8.0 from 7.3 updates (newest that isn't 5x.x.x series) and did an --oldpackage update with RPM and it works again. When rebuilding the old thunderbird in mock I had to add the following: BuildRequires: dbus-glib-devel Either the build system used by CentOS automatically includes that, or a build dependency use to pull that it but no longer does. Anyway if anyone is having a similar problem, that's a solution. -=- This is what I see in the mail server log when current CentOS thunderbird tries to connect: Sep 25 20:17:49 librelamp dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=2600:1010:b064:f260:e83e:562d:2316:18df, lip=2600:3c01::f03c:91ff:fee4:310c, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48, session=<u7agQAlasK8mABAQsGTyYOg+Vi0jFhjf> --- Since it works with current evolution and with older thunderbird, I assume it is a bug in current thunderbird when the server is using a self-signed cert. Don't know if same thing happens on pop. I use IMAP on 143 using starttls

4 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2017