Discuss October 2018

discuss@lists.centos.org

114 participants
69 discussions

Restarting Named on CentOS-6 gives SE Error
by James B. Byrne 12 Oct '18

12 Oct '18

Restarting one of our named services produces this entry in the system log file: Oct 12 08:47:45 inet08 setroubleshoot: SELinux is preventing /usr/sbin/named from search access on the directory . For complete SELinux messages. run sealert -l 9eabadb9-0e03-4238-bdb8-c5204333a0bf Checking the selinux incident reference shows this: # sealert -l 9eabadb9-0e03-4238-bdb8-c5204333a0bf SELinux is preventing /usr/sbin/named from search access on the directory . ***** Plugin catchall (100. confidence) suggests *************************** If you believe that named should be allowed search access on the directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep named /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:system_r:named_t:s0 Target Context system_u:object_r:sysctl_vm_t:s0 Target Objects [ dir ] Source named Source Path /usr/sbin/named Port <Unknown> Host inet08.hamilton.harte-lyne.ca Source RPM Packages bind-9.8.2-0.62.rc1.el6_9.5.x86_64 Target RPM Packages Policy RPM selinux-policy-3.7.19-307el6_9.3.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name inet08.hamilton.harte-lyne.ca Platform Linux inet08.hamilton.harte-lyne.ca 2.6.32-696.30.1.el6.x86_64 #1 SMP Tue May 22 03:28:18 UTC 2018 x86_64 x86_64 Alert Count 16 First Seen Tue Aug 18 18:05:47 2015 Last Seen Fri Oct 12 08:47:35 2018 Local ID 9eabadb9-0e03-4238-bdb8-c5204333a0bf Raw Audit Messages type=AVC msg=audit(1539348455.165:43003): avc: denied { search } for pid=31815 comm="named" scontext=unconfined_u:system_r:named_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=dir type=AVC msg=audit(1539348455.165:43003): avc: denied { read } for pid=31815 comm="named" scontext=unconfined_u:system_r:named_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=file type=SYSCALL msg=audit(1539348455.165:43003): arch=x86_64 syscall=open success=yes exit=ECHILD a0=7f3203a41f60 a1=80000 a2=61f a3=26640 items=0 ppid=31813 pid=31815 auid=0 uid=25 gid=25 euid=25 suid=25 fsuid=25 egid=25 sgid=25 fsgid=25 tty=(none) ses=6575 comm=named exe=/usr/sbin/named subj=unconfined_u:system_r:named_t:s0 key=(null) Hash: named,named_t,sysctl_vm_t,dir,search audit2allow #============= named_t ============== allow named_t sysctl_vm_t:dir search; allow named_t sysctl_vm_t:file read; audit2allow -R #============= named_t ============== allow named_t sysctl_vm_t:dir search; allow named_t sysctl_vm_t:file read; Is this a bug or an unset boolean? Or something else? It appears to have been present for quite some time and we have no DNS resolver issues of which we are aware. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Booting CentOS 6 with Grub from CentOS 7
by Yves Bellefeuille 11 Oct '18

11 Oct '18

I had CentOS 6 installed on an MBR hard disk. I converted the disk to GPT (with UEFI) and installed CentOS 7 on a new partition. CentOS 7 itself seems to work properly. Grub from CentOS 7 automatically created an entry for CentOS 6, but I get an error if I try to boot CentOS 6. The menu entry is: menuentry 'CentOS release 6.10 (Final) (on /dev/sda7)' --class gnu-linux --class gnu --class os $menuentry_id_option 'osprober-gnulinux-simple-92dcc576-4e61-41f3-ae42-d06b3aec01ae' { insmod part_gpt insmod ext2 set root='hd0,gpt7' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt7 --hint-efi=hd0,gpt7 --hint-baremetal=ahci0,gpt7 92dcc576-4e61-41f3-ae42-d06b3aec01ae else search --no-floppy --fs-uuid --set=root 92dcc576-4e61-41f3-ae42-d06b3aec01ae fi linux /boot/vmlinuz-2.6.32-754.3.5.el6.centos.plus.x86_64 ro root=UUID=92dcc576-4e61-41f3-ae42-d06b3aec01ae rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=cf rd_NO_MD LANG=fr_FR.UTF-8 SYSFONT=latarcyrheb-sun16 rd_NO_LVM rd_NO_DM crashkernel=auto initrd /boot/initramfs-2.6.32-754.3.5.el6.centos.plus.x86_64.img } When I try to boot, I get a message that "linux" and "initrd" aren't valid commands. If I change them to "linuxefi" and initrdefi", I get this error: error: kernel too old error: you need to load the kernel first The information in the entry seems correct (partition, UUID, etc.). I've searched on Google quite a bit, but didn't find anything useful. Are there any suggestions? -- Yves Bellefeuille <yan(a)storm.ca>

4 5

Issue with latest update of CentOS6
by Walter H. 11 Oct '18

11 Oct '18

Hello, after I did update all my CentOS6 boxes - VMs and router; two of them (one VM and the router) are my local DNS resolvers; and I'm using the DNSSECTLSAvalidator plugin from nic.cz: https://www.dnssec-validator.cz/ before the update this plugin worked using my resolvers, after the update I get: "Failure - bogus DNSSEC reply, DNSSEC validation not possible with current settings" of course, when telling using a custom resolver (the one of nic.cz) it works, but before mine worked, too ... Thanks, Walter

2 1

I need SERIOUS help on GRUB in CentOS 7.5 1804
by Turritopsis Dohrnii Teo En Ming 11 Oct '18

11 Oct '18

Good afternoon from Singapore, I need SERIOUS help on GRUB in CentOS 7.5 1804. Please refer to my installation notes at http://lists.linuxfromscratch.org/pipermail/lfs-chat/2018-October/028964.ht… According to Petros' instructions, I need GRUB Legacy 0.97 for my Extremely Simple Linux. But GRUB Legacy 0.97 has been deprecated in CentOS 7.5. GRUB2 is installed by default on CentOS 7.5. So I defied Petros' instructions and used GRUB2 for my Extremely Simple Linux compilation, with the end result that I do not see any operating system selection menu on GRUB2. What I get is a grub prompt and I need to enter the following GRUB2 commands: grub> linux /boot/vmlinuz-4.18.12 root=/dev/sda1 ro quiet grub> boot (1) If I seriously want to use GRUB2 for my Extremely Simple Linux, I would need to modify /boot/grub/grub.cfg to suit GRUB2. Because Petros' /boot/grub/grub.cfg is meant for GRUB Legacy. Am I right? I am no expert on GRUB. (2) If I want to use GRUB Legacy for my Extremely Simple Linux, I would need to use CentOS 6 instead of CentOS 7? (3) If I insist on using CentOS 7.5, is there any way of getting rid of GRUB2 and installing GRUB Legacy instead? If you watch my short 2-min YouTube video at https://www.youtube.com/watch?v=YrJADssqaQU , I am not getting any operating system selection menu on GRUB2. I am getting a grub> prompt only. Please advise. Thank you. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE===

2 2

CentOS-announce Digest, Vol 164, Issue 2
by centos-announce-request＠centos.org 11 Oct '18

11 Oct '18

1 0

Gutenprint - Gimp - Color pcl files
by Gregory P. Ennis 10 Oct '18

10 Oct '18

Everyone, I am trying to create a 'color' *.pcl from a pdf file with the use of gimp and the gutenprint gimp plugin. I have done this easily to create a black & white *.pcl file, but have not found a way to create a file that contains the 'color' commands for an HP laser printer. I am running Centos 7.5 with all of the latest updates. gutenprint- 5.2.9-18.el7.x86_64 is the current version in the Centos repositories While using the gutenprint plugin within gimp I am allowed to select from a list of HP color printers : HP Color LaserJet 2500 HP Color LaserJet 4500 HP Color LaserJet 4550 HP Color LaserJet 4600 HP Color LaserJet 5 HP Color LaserJet 5000 HP Color LaserJet 5500 HP Color LaserJet 8550GM But when I use any of these I am not allowed to select 'Color' on the output tab. I have tried to use other drivers like 'HP DesignJet 450C' and am able to select color options without a problem and to produce a color *.pcl file, but the file created obviously does not work on a hp color laser printer. I tried installing gutenprint 5.3.1 from https://sourceforge.net/projec ts/gimp-print/files/gutenprint-5.3/5.3.1/ , and things seem to go well, but I have little experience with the process, and after the installation and reboot there were no differences with the use of the HP Color LaserJet drivers. I would like to be able to create a color *.pcl file for an HP Laser printer; if any of you have suggestions as to how to do this with gimp or even cups I would sure appreciate your help. -- Greg Ennis

1 0

CentOS-announce Digest, Vol 164, Issue 1
by centos-announce-request＠centos.org 10 Oct '18

10 Oct '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:2881 Critical CentOS 6 firefox Security Update (Johnny Hughes) 2. centos-release-7-5.1804.5.el7.centos update (Johnny Hughes) 3. CESA-2018:2884 Critical CentOS 7 firefox Security Update (Johnny Hughes) 4. CEBA-2018:2901 CentOS 6 device-mapper-multipath BugFix Update (Johnny Hughes) 5. CEBA-2018:2895 CentOS 6 libcgroup BugFix Update (Johnny Hughes) 6. CEBA-2018:2894 CentOS 6 mailx BugFix Update (Johnny Hughes) 7. CEBA-2018:2897 CentOS 6 zsh BugFix Update (Johnny Hughes) 8. CEBA-2018:2899 CentOS 6 ypserv BugFix Update (Johnny Hughes) 9. CEBA-2018:2896 CentOS 6 nfs-utils BugFix Update (Johnny Hughes) 10. CESA-2018:2892 Moderate CentOS 6 glusterfs Security Update (Johnny Hughes) 11. CEBA-2018:2900 CentOS 6 dhcp BugFix Update (Johnny Hughes) 12. CEBA-2018:2893 CentOS 6 gcc-libraries BugFix Update (Johnny Hughes) 13. CESA-2018:2898 Moderate CentOS 6 nss Security Update (Johnny Hughes) 14. CESA-2018:2846 Important CentOS 6 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Oct 2018 13:32:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2881 Critical CentOS 6 firefox Security Update Message-ID: <20181009133255.GA54948(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2881 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:2881 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 52a8c565585e060a4831873f817da6752bc8aa34c3d61d0a0396a4ec8ce0fffd firefox-60.2.2-1.el6.centos.i686.rpm x86_64: 52a8c565585e060a4831873f817da6752bc8aa34c3d61d0a0396a4ec8ce0fffd firefox-60.2.2-1.el6.centos.i686.rpm 801571cf810e5504a5984d9fa07b27756c6ba16a2a7d5751d0023865abd28923 firefox-60.2.2-1.el6.centos.x86_64.rpm Source: 8cf4e4a20edc98086d4610d2924bbf09ef0ee05c300da00bd55a4b373860716c firefox-60.2.2-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 9 Oct 2018 10:37:51 -0500 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] centos-release-7-5.1804.5.el7.centos update Message-ID: <eaefbf04-3eae-8257-6d9a-6246129a93da(a)centos.org> Content-Type: text/plain; charset="utf-8" We have released an update to the centos-release that changes some of the architectures to use mirrorlist.centos.org (which also uses external mirrors) .. instead of having all alternative arches use only mirror.centos.org.? This should male updates happen faster for these arches as it spreads the load from our mirror.centos.org servers (normally 20-30 worldwide mirrors) to more than 600 world wide mirrors in 83 countries in mirrorlist. ?? The files in this release are (only the applicable rpm will install on your CentOS instance, based on its architecture): centos-release-7-5.1804.5.el7.centos.a.aarch64.rpm centos-release-7-5.1804.5.el7.centos.p.ppc64.rpm centos-release-7-5.1804.5.el7.centos.p9.ppc64le.rpm centos-release-7-5.1804.5.el7.centos.p.ppc64le.rpm centos-release-7-5.1804.5.el7.centos.i.i686.rpm centos-release-7-5.1804.5.el7.centos.x86_64.rpm All these RPMs are built from the same Source RPM: http://vault.centos.org/7.5.1804/updates/Source/SPackages/centos-release-7-… You can also get the centos-release sources from these git repos: SPEC file and patches: https://github.com/CentOS/sig-core-AltArch/tree/master/centos-release Exploded Tarball: https://github.com/CentOS/sig-core-AltArch/tree/master/centos-release-repo Thanks, Johnny Hughes

1 0

mount points @install time
by lejeczek 09 Oct '18

09 Oct '18

hi everyone, is there a way to add custom mount points at installation point? And if there is would you say /usr should/could go onto a separate partition? many thanks, L.

6 5

I can't find grub-install in CENTOS 7 1804
by Turritopsis Dohrnii Teo En Ming 09 Oct '18

09 Oct '18

Good morning from Singapore, How can I install it? It looks like this grub-install cannot be easily installed. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE=== Get Outlook for Android<https://aka.ms/ghei36>

4 3

This weekend, Ohio LinuxFest
by Rich Bowen 08 Oct '18

08 Oct '18

This weekend, CentOS is sponsoring Ohio LinuxFest in Columbus. Please do stop by the booth for your CentOS bumper sticker and fridge magnets. If you have time and expertise, and would like to do a shift or two at the table, please indicate your availability here: https://docs.google.com/spreadsheets/d/1TqTqaLoswMYzyfvQCnzjkVazlQkP87CCKBS… See you in Columbus! --Rich -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2018