Discuss September 2018

discuss@lists.centos.org

77 participants
63 discussions

Enable FIPS mode for apache?
by mark 26 Sep '18

26 Sep '18

Here's a question that I have3n't found the answer to yet: does anyone know the effect of enabling FIPS mode for apache? Will it break existing websites? Does code need changing? Configuration, other than enabling it? mark

3 2

CVE-2018-14634 and kernel-debuginfo ?
by Zube 26 Sep '18

26 Sep '18

The current mitigation for CVE-2018-14634 is a systemtap script mentioned here: https://access.redhat.com/security/cve/cve-2018-14634 It also mentions that one can build a kernel module to distribute to other machines, but in any case one needs the corresponding debuginfo packages to do either. After enabling CentOS-Debug.repo, what I get is: kernel-debuginfo-2.6.32-754.3.5.el6.centos.plus.x86_64 which doesn't match, since I'm not running the centos.plus kernel, so the systemtap script fails (tested only on CentOS 6 for the moment). Is there some way to get kernel-debuginfo-2.6.32-754.3.5.el6.x86_64? Thanks for any help. Cheers, Zube

3 3

Which is the best open source ecommerce platform?
by Turritopsis Dohrnii Teo En Ming 26 Sep '18

26 Sep '18

Good afternoon from Singapore, There are far too many choices when it comes to open source ecommerce solutions. Are there any credible rankings of open source ecommerce platforms? Which open source ecommerce solution do you think is the best and tell me why. Thank you. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ <https://tdtemcerts.wordpress.com/>[2] http://tdtemcerts.blogspot.sg/ <http://tdtemcerts.blogspot.sg/>[3] https://www.scribd.com/user/270125049/Teo-En-Ming <https://www.scribd.com/user/270125049/Teo-En-Ming>===END SIGNATURE===

2 1

Help with multi-monitor Xorg stuff
by Richard G 24 Sep '18

24 Sep '18

I have an unusual use case. I wonder if anyone can help. We use a PC with 8 HDMI outputs for powering a video wall in an operations centre. We use two Matrox video cards, each with 4 outputs. "lspci" reports these cards as" [AMD/ATI] Cape Verde PRO [FirePro W600]". On an older version of CentOS 7, I used the proprietary AMD/ATI driver. This had a utility (I roorget the name) that generated a working xorg.conf file. I could them throw up the "matchbox-window-manager" on each monitor in turn using "DISPLAY=:0.0", "DISPLAY=:0.1" etc and then throw up a full-screen chrome web browser in kiosk mode on each monitor after that. This all worked great. In a recent version of CentOS 7, this all broke. The proprietary driver no longer works. The good news is that the open source driver seems to work fine with multi-monitor in Gnome for example. My only issue is that I don't want to use Gnome across multiple monitors. I want to use matchbox-window-manager or similar, and specify individual X screen (":0.0", ":0.1" etc). How do I generate an xorg.conf file with the new open source drivers? Am I doing this all wrong? Thanks!

1 2

Re: [CentOS] Centos on Dell XPS15
by Patrick Laimbock 24 Sep '18

24 Sep '18

-----Original message----- > From:H <agents(a)meddatainc.com> > Sent: Monday 3rd September 2018 14:52 > To: Centos Mailing List <centos(a)centos.org> > Subject: [CentOS] Centos on Dell XPS15 > > Is anyone successfully running Centos 7 on a Dell XPS15? If so, which model? If not, what was the problem? > > Thank you! I only ran Fedora 28 Workstation Live from USB stick on the latest XPS15 (9570) and did not try CentOS 7. Fedora 28 ran great and the 4K screen is beautiful but the laptop had some issues so I sent it back. Issues: - the CPU throttles when putting it under load. The "fix"was to undervolt the CPU, turn off Turbo speed in the BIOS and turn off HT in the BIOS. This issue seems similar to the thermal problem the latest MacBook Pro had. IIRC Apple fixed it in a BIOS update. I don't know if/when Dell will fix it (or if they even can fix it). - fingerprint reader does not work. With the latest XPS13 (9370) Developer Edition, Dell "fixed" it by removing the fingerprint reader. - no separate PageUp and PageDown keys. The latest XPS13 does have them but on the XPS15 there were 2 gaps in the keyboard where those keys should be but aren't. - it's not possible to open the screen 180 degrees - the webcam at the bottom of the screen (aka NoseCam) is really annoying As an alternative to the XPS15 there's the new Inspiron 15 7000 series and the Lenovo Thinkpad X1 Extreme (though I have no idea if either of them runs CentOS 7). HTH, Patrick

6 11

[CentOS7] Firewall trouble with Kickstart
by Patrick Begou 24 Sep '18

24 Sep '18

helow my goal is to install via kickstart a CentOS 7 NFS server but I fail to set the firewall rules at installation time. In my kickstart file I set: # Firewall configuration # ssh and NFS # Ports 111 and 875 are for rquotad firewall --enabled --ssh --service=nfs --port=111:tcp,111:upd,875:tcp,875:upd On the installed server, /root/anaconda-ks.cfg contains: # Firewall configuration firewall --enabled --port=111:tcp,111:upd,875:tcp,875:upd --service=ssh,nfs But after install "firewall-cmd --list-all" returns: public (active) target: default icmp-block-inversion: no interfaces: p4p1 sources: services: ssh dhcpv6-client ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: An idea about my mistake ? Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

2 2

C7 and default sound
by Jerry Geis 24 Sep '18

24 Sep '18

When I right click on desktop and bring up "sound". I have two items. Digital output (S/PDIF) buildin audio HDMI/Displayport 2 - Gk208 HDMI audio controller It seems I always default to S/PDIF.... How can I get this to default to HDMI always ? If I select HDMI and reboot it goes back to S/PDIF. I am running pulse audio. Thanks, Jerry

1 0

Has something replaced rhn-ssl-tool?
by Lachlan Musicman 24 Sep '18

24 Sep '18

Using CentOS 7.5, I can't (and don't expect) to see rhn-ssl-tool. But I was expecting to find something similar. I can't see anything in the recent RH documentation about it - I presume it was remove/changed with the move from Spacewalk to Satellite - but I presume the functionality is still required? Has something replaced it? Cheers L. ------ '...postwork futures are dismissed with the claim that "it is not in our nature to be idle", thereby demonstrating at once an essentialist view of labor and an impoverished imagination of the possibilities of nonwork.' Kathi Weeks, *The Problem with Work: Feminism, Marxism, Antiwork Politics and Postwork Imaginaries* <https://www.dukeupress.edu/The-Problem-with-Work/>

1 1

Type enforcement / mechanism not clear
by Leon Fauster 23 Sep '18

23 Sep '18

Any SElinux expert here - briefly: # getenforce Enforcing # sesearch -ACR -s httpd_t -c file -p read |grep system_conf_t <no output> # sesearch -ACR -s httpd_t -c file -p read |grep syslog_conf_t <no output> # ls -laZ /etc/sysctl.conf /etc/rsyslog.conf -rw-r--r--. root root system_u:object_r:syslog_conf_t:s0 /etc/rsyslog.conf -rw-r--r--. root root system_u:object_r:system_conf_t:s0 /etc/sysctl.conf # ausearch -m avc --start recent type=SYSCALL msg=audit(1536457230.922:85): arch=c000003e syscall=6 success=no exit=-13 a0=7fff6460dcf0 a1=7fff6460dbe0 a2=7fff6460dbe0 a3=11 items=0 ppid=1362 pid=1364 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="php-fpm" exe="/usr/sbin/php-fpm" subj=system_u:system_r:httpd_t:s0 key=(null) type=AVC msg=audit(1536457230.922:85): avc: denied { getattr } for pid=1364 comm="php-fpm" path="/etc/rsyslog.conf" dev=dm-0 ino=138287 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:syslog_conf_t:s0 tclass=file My test PHP script can read /etc/sysctl.conf but not /etc/rsyslog.conf. For both no rule are found (sesearch above). So, why the script can read sysctl.conf? -- Thanks, LF

3 7

LVM and Backups
by Alessandro Baggi 21 Sep '18

21 Sep '18

Hey there, I'm testing LVM snapshot to make backups and I've some questions about snapshot lvm. In my test case I have httpd, postgresql db and a dataset on a VM. Running a backup I follow this steps: 1) Stop httpd 2) Create lvm snapshot on the dataset 3) Backup database 4) restart httpd (to avoid more downtime) 5) mount the snapshot and execute backup 6) umount and remove the snapshot I think that this could be fine (if not please correct me) Now when bacula performs the backup what happen if bacula are copying a specified file and this specified file is modified? Bacula will copy the right file using inode (this will copy the wrong file?) or copy entire file located in the snapshot? Thanks in advance.

3 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2018