Discuss August 2018

discuss@lists.centos.org

80 participants
77 discussions

Remote update OS from 6 to 7
by Jerry Geis 29 Aug '18

29 Aug '18

Hello all... I have a remote machine running C6. I desire to update it to C7. Not possible to be on-site. Can I copy the Everything ISO for C7 to the machine, mount -o loop C7.Everything.iso /media/cdrom then do a "yum upgrade" ? Will that work? The server is using software raid. Thanks Jerry

3 2

CentOS-announce Digest, Vol 162, Issue 5
by centos-announce-request＠centos.org 29 Aug '18

29 Aug '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:2571 Important CentOS 6 bind Security Update (Johnny Hughes) 2. CESA-2018:2557 Important CentOS 7 postgresql Security Update (Johnny Hughes) 3. CESA-2018:2570 Important CentOS 7 bind Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 28 Aug 2018 15:39:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2571 Important CentOS 6 bind Security Update Message-ID: <20180828153955.GA34287(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2571 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2571 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 248124b6482789bfbb5f6e656a98e915769c55168b3d23009652527526e331a8 bind-9.8.2-0.68.rc1.el6_10.1.i686.rpm f1c0a5f60d808dafd3d67b4ce198019bc13632e07f71cefb29a75ebe2af4fd63 bind-chroot-9.8.2-0.68.rc1.el6_10.1.i686.rpm 87bffb7bd45681565d5ef4b18579169f187d4fa66fbec4741c570430ee0c06d2 bind-devel-9.8.2-0.68.rc1.el6_10.1.i686.rpm 2f6f7ac42ca47afd420d62c6f21ef2d4e7d1505fedb6a9a70bc9b2c6461e50d9 bind-libs-9.8.2-0.68.rc1.el6_10.1.i686.rpm 1ed256461a14d8fe827d6aaa3aa46a8e6ed9ce55532aa3c27a5eba1921f06257 bind-sdb-9.8.2-0.68.rc1.el6_10.1.i686.rpm 7e481a255c517a66d7222957ad199ef61455f918f1ba80160ab42a07f1b1f544 bind-utils-9.8.2-0.68.rc1.el6_10.1.i686.rpm x86_64: 960846e8ce3a15bab85789a29ad4e9ac3e9d00b9d9fe158a07ab16eec065fabc bind-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm 09b0b1148ddb2de55b5165b51be9c3c250ccb981fbdc4e01934c8a23a1c4c098 bind-chroot-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm 87bffb7bd45681565d5ef4b18579169f187d4fa66fbec4741c570430ee0c06d2 bind-devel-9.8.2-0.68.rc1.el6_10.1.i686.rpm 0018e4f38542d2d56fa15893ffb5cd34e8023fdc2b30a3b42d28666fe55d946a bind-devel-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm 2f6f7ac42ca47afd420d62c6f21ef2d4e7d1505fedb6a9a70bc9b2c6461e50d9 bind-libs-9.8.2-0.68.rc1.el6_10.1.i686.rpm a885a7dd62446139f83677fde3dc9769ba2990463575cba4e8f4914d7ffa22a5 bind-libs-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm dc3892983716d2275054bbfea53267131b78806cb2926444a8ea6d846193929b bind-sdb-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm baf936fc48052e6ba44bd76af3a14094c0b16c26c92923ff83ffc597a58ed23e bind-utils-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm Source: 8564b64b5870e90091523c0fb7e9bc86d99d43faefafa91132f4be497e8eb259 bind-9.8.2-0.68.rc1.el6_10.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 28 Aug 2018 15:47:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2557 Important CentOS 7 postgresql Security Update Message-ID: <20180828154741.GA34512(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2557 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2557 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 435c54da90ac6a986123ebeed8a46ca06198945148412400bcc25165b20b0901 postgresql-9.2.24-1.el7_5.i686.rpm 88083a8c3867858fc230fb8e123d1884ad447630af3d0b7cdbc9f415a2cb7691 postgresql-9.2.24-1.el7_5.x86_64.rpm 26607e1d2c701a5a0a8203fc4a4ddd74c3f7d5ed6d9b121753535c673bf3df82 postgresql-contrib-9.2.24-1.el7_5.x86_64.rpm fae26c6c1a2e35d21388f9e9bb601e2e65ebf6ebee491c7879fe3e841c89d2bd postgresql-devel-9.2.24-1.el7_5.i686.rpm 97d1b913fd93b28fedcff9d9889b74a86c1c8fc80619ca2a9f9050cc21a2c840 postgresql-devel-9.2.24-1.el7_5.x86_64.rpm f06e0c08f35f44e82d81c6a953a2095229c5c8ea6a1ed557ed3428b2d982b2a0 postgresql-docs-9.2.24-1.el7_5.x86_64.rpm 5fb3d8e7c46ef84c38761fbf8eb0fa45b3d6bb78271be062d864d7038ce42dcf postgresql-libs-9.2.24-1.el7_5.i686.rpm d8435352291ac2627b65f0a3a65f41906390307cf2300d020dfb793e705cdb06 postgresql-libs-9.2.24-1.el7_5.x86_64.rpm 2a20977c047a2a3e7efef79b589ba8bf95285a5fad766dd485f258d33b8b3201 postgresql-plperl-9.2.24-1.el7_5.x86_64.rpm 8b0d205949e154882da55d7d472489ba7414b856ed59039614b6590c75a45c60 postgresql-plpython-9.2.24-1.el7_5.x86_64.rpm 75fe3d5666368c6f0bc80e64c203b91286f1e4c81ed82bbd5db988b9425fcbbd postgresql-pltcl-9.2.24-1.el7_5.x86_64.rpm 6955c0e9151487a7bde24418fee9af6072916190e1879c20a8ee95623cb56e05 postgresql-server-9.2.24-1.el7_5.x86_64.rpm 2232aae0691e140707437ba1422329bd6193aacb98929508838f8f8a37f062b8 postgresql-static-9.2.24-1.el7_5.i686.rpm a1ec84aeb970a247c7075be4e2e44dc1d1662a5f4ce63b20b65ebd69fad3aeae postgresql-static-9.2.24-1.el7_5.x86_64.rpm 70a4adbd0edfe7f982395b928129e82da3cc6ce4bcee4e30dd395116da1c60b4 postgresql-test-9.2.24-1.el7_5.x86_64.rpm fd8c23fc70230e52d47f56b0ed72325152e59e9dcdb777b55805acef4ac96ce7 postgresql-upgrade-9.2.24-1.el7_5.x86_64.rpm Source: 9fd884c340f9aae296653aff2b30fcc4362acba9912508bb07c8778dc8e78f9e postgresql-9.2.24-1.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 28 Aug 2018 15:48:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2570 Important CentOS 7 bind Security Update Message-ID: <20180828154800.GA34656(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2570 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2570 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ee4027789eafae8c2855a1702e117ff6dc517820a231df6eab0aed16eece8fab bind-9.9.4-61.el7_5.1.x86_64.rpm 45e7ad9b9c08a7ca8e78b95084a9b61caf86d664290d660c3ee6fd41661058f3 bind-chroot-9.9.4-61.el7_5.1.x86_64.rpm 303502657386d0c4e394811ba56b8d72025c92be2237e2045eb85c2661233807 bind-devel-9.9.4-61.el7_5.1.i686.rpm 1e2110e750b3adb5857904f19167109f418ee1f430f900308f1e009c7c1944d8 bind-devel-9.9.4-61.el7_5.1.x86_64.rpm 44328049069dfe2efbfb2c5e14c10d5482e23d39009eec290032232697d91cbb bind-libs-9.9.4-61.el7_5.1.i686.rpm db10791c7f7966843cd78ec1b71025935d4caee8746b01622068eb8cb404bea2 bind-libs-9.9.4-61.el7_5.1.x86_64.rpm 8850fc3b588e95fc9a72b857cbccfd18093cc1c69b95b85eeec608433964d044 bind-libs-lite-9.9.4-61.el7_5.1.i686.rpm c3fff9b6f6fca10a4fe77653fde96568f6a6353d8bf6fd87d526c45de7bed1a2 bind-libs-lite-9.9.4-61.el7_5.1.x86_64.rpm 2953e193ef6197ac414bf6ed2d15f59e3c85ffb824dd89a06f98189844eb1010 bind-license-9.9.4-61.el7_5.1.noarch.rpm 5c9df998d37413f862f619d0815e3131eba2e172ae63decf0efbeb5259fe633f bind-lite-devel-9.9.4-61.el7_5.1.i686.rpm d77653fd680bfeef0dfd799fe1a8f2f6027e63693108567e3c6bba2474d0cd87 bind-lite-devel-9.9.4-61.el7_5.1.x86_64.rpm 1ef96a7ea43061542dbc97c4c7a2b1d9dc26b002d1593b0980b6027ca343a7aa bind-pkcs11-9.9.4-61.el7_5.1.x86_64.rpm 6f0afbee32b1536325fbdcffccbe81aff3b47d8e2de0dedc981cd393c22120c4 bind-pkcs11-devel-9.9.4-61.el7_5.1.i686.rpm 6e27874eaa335a46cede258f11e23ad20e8ef7678886698d275cd7c3e8bfc8d9 bind-pkcs11-devel-9.9.4-61.el7_5.1.x86_64.rpm 971f7b0c47c778862444dffafc36616cb7dba597af7e721d8ab9e92e0be8e2ce bind-pkcs11-libs-9.9.4-61.el7_5.1.i686.rpm a865deb5b2c4771820fdbdea2e42a01a891644d6ed9ca0a06fb532142c411044 bind-pkcs11-libs-9.9.4-61.el7_5.1.x86_64.rpm 65d05f02bdf025e23ea9d9142e3255432ec39c5c6b29e5fe6920dfd665bf8b99 bind-pkcs11-utils-9.9.4-61.el7_5.1.x86_64.rpm 790f90103359863a59b552100ba8a3c03067795bab42fb518625fa54143e66ca bind-sdb-9.9.4-61.el7_5.1.x86_64.rpm a3bbb400e22a538a3c2b98e8a241714d58fb2713e2f3bb6a2f140068b606283f bind-sdb-chroot-9.9.4-61.el7_5.1.x86_64.rpm 3c474addd9b809ec82d7d8f9cad68ea950b658d43c2a362fc4ffe94ad2e3f12d bind-utils-9.9.4-61.el7_5.1.x86_64.rpm Source: 3b9245b26b6677828475193eface9f2e30c478bf3b38f37e507398b04e082b8c bind-9.9.4-61.el7_5.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 162, Issue 5 ***********************************************

1 0

Stuck on Loading CentOS
by Dhanasekaran Balakrishnan 29 Aug '18

29 Aug '18

Hello, I am currently using CentOS 7 and for the last two days GUI is not working in my computer and the operating system is not starting. Black Screen lists something like in Red Color [ ] Started show Plymouth Boot screen [ ] Reached target Paths [ ] Reached target Basic System . . . . . . [ ] Stopped Apply Kernel Variables [ ] Stopping Apply Kernel Variables [ ] Stopping udev Kernel Device Manager Please do let me know the way for starting the device properly. Thank you. Kind Regards, Dhana

2 1

OpenLDAP support in future versions of CentOS
by Alicia Smith 28 Aug '18

28 Aug '18

Hello! I just joined this mailing list, so I apologize in advance if this topic has already been covered. Red Hat and Suse announced they are no longer supporting OpenLDAP in future releases. https://www.ostechnix.com/redhat-and-suse-announced-to- withdraw-support-for-openldap/ However, we mainly use CentOS and while it's a RH derivative, I wanted to find out what CentOS plans on doing in this regard. Will you continue to include OpenLDAP or will it simply be removed? I wasn't able to find any CentOS related articles in response to this, and the only thing I did find that said CentOS hasn't released whether they will continue to support it or not is from two years ago? https://daasi.de/en/2017/09/25/red-hat-wont-continue-openldap-support-rhel-… Any updates/feedback/information is appreciated :) Thank you! -- Alicia Smith @phrozyn Information Security Engineer asmith(a)mozilla.com

8 8

Where are my /tmp and /var/tmp files?
by Kenneth Porter 28 Aug '18

28 Aug '18

I was pulling my hair out this morning trying to figure out why my PHP web script could see files in /var/tmp/scriptname but I couldn't see them with ls or my text editor. I was certain I'd gotten rootkitted. Then I thought maybe it was a new chroot in the latest Apache config. It turns out it's systemd's unit file for Apache, which containerizes /tmp and /var/tmp for selected apps. The httpd.service unit file includes the PrivateTmp setting. Here's some details for anyone else confused by this: https://access.redhat.com/blogs/766093/posts/1976243

1 0

Very odd: /proc/sys/net/ipv6/conf/all/disable_ipv6
by mark 27 Aug '18

27 Aug '18

CentOS 7.5, and on one system, I'm getting: setroubleshoot: SELinux is preventing /usr/sbin/sendmail.sendmail from read access on the file disable_ipv6 ll -Z shows -rw-r--r--. root root system_u:object_r:sysctl_net_t:s0 /proc/sys/net/ipv6/conf/all/disable_ipv6 I find this peculiar. Anyone have a resolution, or is this a bug? mark

1 0

Re: [CentOS] Mail has quit working
by TE Dukes 27 Aug '18

27 Aug '18

Third time trying respond! -------- Original Message -------- Subject: Re: [CentOS] Mail has quit working From: Gordon Messmer < <mailto:gordon.messmer@gmail.com> gordon.messmer(a)gmail.com> Date: Tue, July 24, 2018 10:31 am To: <mailto:centos@centos.org> centos(a)centos.org On 07/23/2018 03:39 PM, TE Dukes wrote: > Mail has come to an abrupt stop. Running C7, postfix and dovecot. > ... > Crond is no longer send mail. In one terminal: "tail -f /var/log/maillog" or "journalctl -f" In another, "echo test | mail -s test your(a)email.address" What do you see in the maillog at that time? What does the "df" command output? _______________________________________________ CentOS mailing list <mailto:CentOS@centos.org> CentOS(a)centos.org <https://lists.centos.org/mailman/listinfo/centos> https://lists.centos.org/mailman/listinfo/centos Thanks, Output from tail: Jul 24 10:05:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:15:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:25:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:35:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:35:59 ts130 postfix/qmgr[8283]: C33128410546: from=< <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com>, size=949, nrcpt=1 (queue active) Jul 24 10:36:29 ts130 postfix/smtp[19763]: connect to <http://paalmettodomains.com> paalmettodomains.com[198.105.254.65]:25: Connection timed out Jul 24 10:36:59 ts130 postfix/smtp[19763]: connect to <http://paalmettodomains.com> paalmettodomains.com[104.239.198.84]:25: Connection timed out Jul 24 10:36:59 ts130 postfix/smtp[19763]: C33128410546: to=< <mailto:tdukes@paalmettodomains.com> tdukes(a)paalmettodomains.com>, relay=none, delay=13075, delays=13015/0.02/60/0, dsn=4.4.1, status=deferred (connect to <http://paalmettodomains.com> paalmettodomains.com[104.239.198.84]:25: Connection timed out) Jul 24 10:45:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:55:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 11:04:19 ts130 postfix/pickup[19912]: 55271840D734: uid=0 from=<root> Jul 24 11:04:19 ts130 postfix/cleanup[21840]: 55271840D734: message-id=< <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com> Jul 24 11:04:19 ts130 postfix/qmgr[8283]: 55271840D734: from=< <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com>, size=466, nrcpt=1 (queue active) Jul 24 11:04:20 ts130 postfix/smtpd[21846]: connect from localhost[127.0.0.1] Jul 24 11:04:20 ts130 postfix/smtpd[21846]: 49161841ED92: client=localhost[127.0.0.1] Jul 24 11:04:20 ts130 postfix/cleanup[21840]: 49161841ED92: message-id=< <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com> Jul 24 11:04:20 ts130 postfix/qmgr[8283]: 49161841ED92: from=< <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com>, size=951, nrcpt=1 (queue active) Jul 24 11:04:20 ts130 postfix/smtpd[21846]: disconnect from localhost[127.0.0.1] Jul 24 11:04:20 ts130 amavis[423]: (00423-03) Passed CLEAN {RelayedInbound}, [127.0.0.1] < <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com> -> < <mailto:tdukes@palmettodomains.com> tdukes(a)palmettodomains.com>, Message-ID: < <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com>, mail_id: eYD2cL7fZ7rY, Hits: -0.001, size: 466, queued_as: 49161841ED92, 941 ms Jul 24 11:04:20 ts130 postfix/smtp[21842]: 55271840D734: to=< <mailto:tdukes@palmettodomains.com> tdukes(a)palmettodomains.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=1, delays=0.07/0.01/0/0.94, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 49161841ED92) Jul 24 11:04:20 ts130 postfix/qmgr[8283]: 55271840D734: removed Jul 24 11:04:20 ts130 dovecot: lda(tdukes): msgid=< <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com>: saved mail to INBOX Jul 24 11:04:20 ts130 postfix/local[21847]: 49161841ED92: to=< <mailto:tdukes@palmettodomains.com> tdukes(a)palmettodomains.com>, relay=local, delay=0.09, delays=0.02/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to command: /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT") Jul 24 11:04:20 ts130 postfix/qmgr[8283]: 49161841ED92: removed >From df: Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/cl-root 97605056 12762640 84842416 14% / devtmpfs 8025676 0 8025676 0% /dev tmpfs 8043100 70176 7972924 1% /dev/shm tmpfs 8043100 59284 7983816 1% /run tmpfs 8043100 0 8043100 0% /sys/fs/cgroup tmpfs 262144 0 262144 0% /var/spool/MailScanner/incoming /dev/mapper/cl-home 97605056 34632 97570424 1% /home /dev/sda2 993004 391180 601824 40% /boot /dev/mapper/cl-data 3685467928 1205578432 2479889496 33% /data /dev/sdb1 3845548044 2677536044 972662756 74% /media tmpfs 1608620 56 1608564 1% /run/user/0

12 70

kernel-plus (plus 1?)
by lejeczek 24 Aug '18

24 Aug '18

hi guys did you notice, if you use kernel-plus on 7.5 this CentOS Linux (3.10.0-862.11.6.el7.centos.plus.1.x86_64) 7 (Core) CentOS Linux (3.10.0-862.11.6.el7.centos.plus.x86_64) 7 (Core) is that "plus.1" a new naming convention or just one off? regards, L

2 3

using lpadmin to add printers in CentOS 7 (v. CentOS 6)
by Zube 24 Aug '18

24 Aug '18

In CentOS 6, I could do: lpinfo -m then pick the model I want and put it as the option to -m in lpadmin (line wrapped): /usr/sbin/lpadmin -p printer -o printer-is-shared=false -o Duplex=None -o Resolution=600dpi -m 'gutenprint.5.2://pcl-g_5e/expert Generic PCL 5e Printer - CUPS+Gutenprint v5.2.5' -v 'socket://mydomain.edu' Alas, in CentOS 7, no matter what I do, I always get: Unable to copy PPD file! and the error in the cups error log: Returning IPP server-error-internal-error for CUPS-Add-Modify-Printer (ipp://localhost:631/printers/printer) from localhost Bad ppd-name "gutenprint.5.2://pcl-g_5e/simple Generic PCL 5e Printer - CUPS+Gutenprint v5.2.9 Simplified" (-6)! copy_model: empty PPD file I assumed this was due to the newer version of cups. To make it work (kinda, sorta) the way it used to: 1) mkdir -p /usr/share/cups/model/gutenprint/5.2 2) cups-genppd.5.2 3) lpinfo -m, but choose one that is a file, not a gutenprint.5.2:// URL (?): /usr/sbin/lpadmin -p printer -o printer-is-shared=false -o Duplex=None -o Resolution=600dpi -m 'gutenprint/5.2/stp-hp-lj_4250.5.2.ppd.gz' -v 'socket://mydomain.edu' And this is fine, but I assume the other way should work as well. What am I missing? Thanks for any clues. Cheers, Zube

1 0

selinux question
by Nataraj 23 Aug '18

23 Aug '18

I have a web application which uses sudo to invoke python scripts as the user under which the application runs (NO root access). Is there any reason why sudo would would require sys_ptrace access for this? I only get this violation intermittenly, and not with every call to sudo. Here's the violation: Summary: SELinux is preventing sudo (httpd_t) "sys_ptrace" to <Unknown> (httpd_t). Detailed Description: SELinux denied access requested by sudo. It is not expected that this access is required by sudo and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package. Additional Information: Source Context system_u:system_r:httpd_t Target Context system_u:system_r:httpd_t Target Objects None [ capability ] Source sudo Source Path /usr/bin/sudo Port <Unknown> Host myhost.mydomain.com Source RPM Packages sudo-1.7.2p1-29.el5_10 Target RPM Packages Policy RPM selinux-policy-2.4.6-351.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall Host Name myhost.mydomain.com Platform Linux myhost.mydomain.com 2.6.18-419.el5 #1 SMP Fri Feb 24 22:06:09 UTC 2017 i686 i686 Alert Count 359 First Seen Tue Oct 8 09:24:50 2013 Last Seen Tue Aug 21 10:26:26 2018 Local ID 717eb9a4-cc7f-4ed1-b638-5db1a841abe4 Line Numbers Raw Audit Messages host=myhost.mydomain.com type=AVC msg=audit(1534872386.726:9642): avc: denied { sys_ptrace } for pid=8458 comm="sudo" capability=19 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:system_r:httpd_t:s0 tclass=capability host=myhost.mydomain.com type=SYSCALL msg=audit(1534872386.726:9642): arch=40000003 syscall=3 success=yes exit=166 a0=1a a1=b7ff4000 a2=400 a3=89cabf0 items=0 ppid=8979 pid=8458 auid=4294967295 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:httpd_t:s0 key=(null) Thank You, Nataraj

4 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2018