Discuss June 2019

discuss@lists.centos.org

72 participants
50 discussions

iptables - how to block established connections with fail2ban?
by MRob 28 Jun '19

28 Jun '19

I am working to a CentOS 6 server with nonstandard iptables system without rule for ACCEPT ESTABLISHED connections. All tables and chains empty (flush by legacy custom script) so only filter/INPUT chain has rules (also fail2ban chain): Chain INPUT (policy ACCEPT) target prot opt source destination f2b-postfix tcp -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 192.168.0.0/16 0.0.0.0/0 ACCEPT all -- 127.0.0.0/8 0.0.0.0/0 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 Chain f2b-postfix (1 references) target prot opt source destination REJECT all -- 200.23.235.30 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 177.11.167.57 0.0.0.0/0 reject-with icmp-port-unreachable RETURN all -- 0.0.0.0/0 0.0.0.0/0 When fail2ban block a IP address, established connections are allowed to continue, but with no rule to accept established connections how is that possible? Why doesn't f2b first rule block established connections?

5 4

Webmin Login via Url including user and password
by Ralf Prengel 28 Jun '19

28 Jun '19

Hallo, is ist possible to enter webin using a url including user and password. I ve to give some users access to the bind module via a status-webpage. Thanks Ralf

2 1

Replacing kernel-headers with custom compiled version (from kernel.org) - safe?
by Bagas Sanjaya 28 Jun '19

28 Jun '19

Hello CentOS users, Currently I have compiled kernel version 4.19.37, which the source is from kernel.org. I compiled the kernel by following steps: - get the kernel tarball and unpack it - install prerequisties as described in https://wiki.centos.org/HowTos/Custom_Kernel (in addition bc and openssl-devel) - copy the kernel configuration: $ cp /boot/config-3.10.0-957.21.3.el7.x86_64 ~/linux-4.19.37/.config - create configuration: $ cd ~/linux-4.19.37 $ make olddefconfig $ make nconfig - compile and create RPM package: $ make vmlinux $ make modules $ make rpm-pkg - install kernel RPM: # yum install ~/rpmbuild/RPMS/x86_64/kernel-*.rpm However, in the last step (installing kernel RPM), I got following notice: ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: kernel x86_64 4.19.37_sentinel_custom-1 /kernel-4.19.37_sentinel_custom-1.x86_64 209 M kernel-devel x86_64 4.19.37_sentinel_custom-1 /kernel-devel-4.19.37_sentinel_custom-1.x86_64 817 M kernel-headers x86_64 4.19.37_sentinel_custom-1 /kernel-headers-4.19.37_sentinel_custom-1.x86_64 4.6 M replacing kernel-headers.x86_64 3.10.0-957.21.3.el7 Transaction Summary ================================================================================ Install 3 Packages There, the compiled kernel-headers package (4.19.37_sentinel_custom-1) is about to replace stock version (3.10.0-957.21.3.el7). Is it safe to continue installing from compiled RPM package above, or install kernel manually? Regards, Bagas

3 3

Alternitives to Firefox...
by Robert Heller 27 Jun '19

27 Jun '19

OK, I recently ugraded to the current ESR release of Firefox for CentOS 6. And I am having problems with the user interface (basically it has become hard [for me] to use). What alternitives are there? (Chrome and Chromium are not possible with CentOS, and Chrome and Chromium are actually worse). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

12 17

About PCYNLITX project and its innovations ( for C+++ multi-threading )
by Erkam Murat Bozkurt 27 Jun '19

27 Jun '19

Previously, I have presented my project to you. The current name of my project is PCYNLITX. PCYNLITX platform offers completely new programming technology which can be named as Programmable Meta-Programming System and PCYNLITX platform is just a particular application of this new programming methodology. Basically, PCYNLITX is an intelligent integrated development environment ( IDE ) which can produce an application-specific multi-threading library based on your needs and assists you in multi-thread software development process. PCYNLITX is not a multi-threading library. Instead, it is a multi-threading library generator. You can find out very comprehensive documentation about pcynlitx project from both project web site and source code repository. The addresses of the project web page and source code repository are given in below links. www.pcynlitx.tech https://sourceforge.net/projects/pcynlitx The outcome of the PCYNLITX platform acts as an autonomous thread management system provides deterministic scheduling of the threads. You can control the thread with the numbers given by you and determine the relation of the threads. In other words, different from the other multi-threading tools, you can directly schedule the threads independently from the operating system. The scientific journal of the project is under review on IEEE Transactions on Software Engineering. Currently, the PCYNLITX platform only works on Linux based operating systems and the other versions ( Windows and McOSx ) are under development. The License of the PCYNLITX platform is GNU GPLv3 Free Software License. You can find out many other documents including scientific introduction of the project (“Technical Introduction” ), code examples and GUI tutorial form the project web sites. You can also find out a documents introducing std::thread programming, pthread programming and OpenMP programming on the web sites. I am always waiting your valuable comments and contributions. Thanks and best regards. Erkam Murat Bozkurt M.Sc in Control Systems

1 0

Strange Network Bug Locks Up CentOS 7 Laptop
by Virgo, Paul E. (GSFC-610.2)[ADNET SYSTEMS INC] 25 Jun '19

25 Jun '19

All, I have a user who has a Dell Precision 7520 laptop, and we're running CentOS 7, latest kernel. This morning he had two lockup incidents. Nothing in /var/log/messages stands out so far, but did get this information when running 'abrt-cli list --since 1560891312': id c48278a875c27dd4369d971bcfc7db4267766c6d reason: WARNING: CPU: 0 PID: 0 at net/sched/sch_generic.c:356 dev_watchdog+0x248/0x260 time: Thu 23 May 2019 07:12:57 PM EDT cmdline: BOOT_IMAGE=/vmlinuz-3.10.0-957.12.1.el7.x86_64 root=/dev/mapper/SysVG00-ROOT ro crashkernel=auto rd.lvm.lv=SysVG00/ROOT rd.luks.uuid=luks-29590e52-c08e-4c11-a784-cf2f3ffd98b2 rd.lvm.lv=SysVG00/SWAP rhgb quiet LANG=en_US.UTF-8 package: kernel uid: 0 (root) count: 4 Directory: /var/spool/abrt/oops-2019-05-23-19:12:57-28561-0 Reported: cannot be reported Has anyone seen this behavior before or this message? Seems like something related to network scheduling (?) or something. Any feedback would be appreciated. Thanks. PE Virgo

2 2

Civ 6 on CentOS?
by mark 25 Jun '19

25 Jun '19

Being as how we're looking at putting my SO on Linux (she's *so* fed up with Windoze), big question for her: Civ 6 on CentOS? Will it run on C 7? Wait for C 8 (which I was sort of thinking of doing, anyway)? mark

4 4

mplayer
by Chris Olson 25 Jun '19

25 Jun '19

We recently installed CentOS 7 from DVD. Our install selection was the GNOME desktop option. yum update yielded about 465 megabytes of updates all of which were successful with no warnings. The multi media option was not chosen because KDE was listed. GNOME was not apparent in the software list for the multi media workstation install. Google searches led us to instructions for installing mplayer. The repo update appears to be successful as indicated below. Dependency resolution at the time of mplayer installation yielded twelve errors. Are there other packages that could be installed prior to another attempt at mplayer installation that might provide the missing items? Might these errors have been avoided by choosing the multi media workstation install? Thanks. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [user@computer ~]$ yum repolist Loaded plugins: fastestmirror, langpacks Determining fastest mirrors * base: centos-distro.cavecreek.net * epel: mirrors.sonic.net * extras: centos-distro.cavecreek.net * nux-dextop: mirror.li.nux.ro * updates: centos-distro.cavecreek.net repo id repo name status base/7/x86_64 CentOS-7 - Base 10,019 epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 13,237 extras/7/x86_64 CentOS-7 - Extras 419 nux-dextop/x86_64 Nux.Ro RPMs for general desktop use 1,603 updates/7/x86_64 CentOS-7 - Updates 2,137 repolist: 27,415 [user@computer ~]$ --> Finished Dependency Resolution Error: Package: mplayer-1.1-33.20150505svn.el6.nux.x86_64 (nux-dextop) Requires: libgnutls.so.26()(64bit) Error: Package: ffmpeg-libs-2.6.8-3.el6.nux.x86_64 (nux-dextop) Requires: libopenjpeg.so.2()(64bit) Error: Package: mplayer-1.1-33.20150505svn.el6.nux.x86_64 (nux-dextop) Requires: libcdio.so.10()(64bit) Error: Package: mplayer-1.1-33.20150505svn.el6.nux.x86_64 (nux-dextop) Requires: libcdio_cdda.so.0(CDIO_CDDA_0)(64bit) Error: Package: librtmp-2.4-0.3.20110811gitc58cfb3e.el6.nux.x86_64 (nux-dextop) Requires: libgnutls.so.26()(64bit) Error: Package: ffmpeg-libs-2.6.8-3.el6.nux.x86_64 (nux-dextop) Requires: libgnutls.so.26()(64bit) Error: Package: faac-1.28-2.el6.nux.x86_64 (nux-dextop) Requires: libmp4v2.so.0()(64bit) Error: Package: mplayer-1.1-33.20150505svn.el6.nux.x86_64 (nux-dextop) Requires: libcdio_paranoia.so.0()(64bit) Error: Package: ffmpeg-libs-2.6.8-3.el6.nux.x86_64 (nux-dextop) Requires: libgnutls.so.26(GNUTLS_1_4)(64bit) Error: Package: mplayer-1.1-33.20150505svn.el6.nux.x86_64 (nux-dextop) Requires: libcdio_paranoia.so.0(CDIO_PARANOIA_0)(64bit) Error: Package: librtmp-2.4-0.3.20110811gitc58cfb3e.el6.nux.x86_64 (nux-dextop) Requires: libgnutls.so.26(GNUTLS_1_4)(64bit) Error: Package: mplayer-1.1-33.20150505svn.el6.nux.x86_64 (nux-dextop) Requires: libcdio_cdda.so.0()(64bit) You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest [root@root user]#

2 1

CentOS-announce Digest, Vol 172, Issue 5
by centos-announce-request＠centos.org 25 Jun '19

25 Jun '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:1587 Important CentOS 7 python Security Update (Johnny Hughes) 2. CEEA-2019:1344 CentOS 7 python-azure-sdk Enhancement Update (Johnny Hughes) 3. CEEA-2019:1342 CentOS 7 python-msrest Enhancement Update (Johnny Hughes) 4. CEEA-2019:1343 CentOS 7 python-msrestazure Enhancement Update (Johnny Hughes) 5. CEEA-2019:1341 CentOS 7 python-adal Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Jun 2019 17:07:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:1587 Important CentOS 7 python Security Update Message-ID: <20190624170731.GA28648(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:1587 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:1587 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 30971bebf9a775bade8fd92dfae46d628c183e7b3393639d10cb6c57f9878023 python-2.7.5-80.el7_6.x86_64.rpm 4f60c2723cc4c6e74315cd19b0a839bb24ca40c8fbd6afabad5552e6e0a6027b python-debug-2.7.5-80.el7_6.x86_64.rpm 18869a5b87820a168393b5736a116ca830f21181acc443cb76f3a68b75c10c0c python-devel-2.7.5-80.el7_6.x86_64.rpm d389b32897d53a9f5273fdcf409ce93489f2431738c784676ab5b6a2702b0561 python-libs-2.7.5-80.el7_6.i686.rpm cc0b71f98796a2ce8da2b172217d9bb17363ddcf70dc149b6407e47eb95ed9ec python-libs-2.7.5-80.el7_6.x86_64.rpm b2c0ec8c82cf112d39a9eb25b2505167d59198445421f69e4513ea413607fd18 python-test-2.7.5-80.el7_6.x86_64.rpm cd78ea79e66c28a8f5f918e9779f08bd13a3a68abe4d71feaef251c2e4cd9a58 python-tools-2.7.5-80.el7_6.x86_64.rpm 7fcc438d8b6f3d8a5b96aaa320be5db062d9f4aabb09530f412cbd52fb340f8d tkinter-2.7.5-80.el7_6.x86_64.rpm Source: ea536d12f9f73ffb32a41b16771165c256c35fa0933e0414f6ad7ce6f7562b64 python-2.7.5-80.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 24 Jun 2019 17:08:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:1344 CentOS 7 python-azure-sdk Enhancement Update Message-ID: <20190624170843.GA28764(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:1344 Upstream details at : https://access.redhat.com/errata/RHEA-2019:1344 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9737c0143eaab0b5e70f134d7e7b28ab7e4c56edd128b5468bbbbafec97be4d0 python-azure-sdk-4.0.0-0.el7_6.1.noarch.rpm Source: 83b9bd900428d518e68f6228c8fb801a65ae65ee6222657ef15443b60b9e1e31 python-azure-sdk-4.0.0-0.el7_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 24 Jun 2019 17:09:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:1342 CentOS 7 python-msrest Enhancement Update Message-ID: <20190624170902.GA28853(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:1342 Upstream details at : https://access.redhat.com/errata/RHEA-2019:1342 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2b7707efdd4389d9360b8675b65ecec0961d8e3a9497ba767c225cffcfcb68ee python-msrest-0.5.4-0.el7_6.1.noarch.rpm Source: cf71c5558af8fd15aaf4f88c10606b8211a1c4f867be1eb54a66904430ec6776 python-msrest-0.5.4-0.el7_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 24 Jun 2019 17:09:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:1343 CentOS 7 python-msrestazure Enhancement Update Message-ID: <20190624170921.GA28954(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:1343 Upstream details at : https://access.redhat.com/errata/RHEA-2019:1343 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bb04c8e22fe081c7d22a3a7df9c856608ce3ed71dff58ef7315d209e967ad962 python-msrestazure-0.5.1-0.el7_6.1.noarch.rpm Source: 151d5558178b7f72f58f23898ad5a6b8354a4d3ff2cd3aed5e9d993d692d3bef python-msrestazure-0.5.1-0.el7_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Mon, 24 Jun 2019 17:09:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:1341 CentOS 7 python-adal Enhancement Update Message-ID: <20190624170940.GA29051(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:1341 Upstream details at : https://access.redhat.com/errata/RHEA-2019:1341 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fe2663af350f36f79fa0673c451db5bd8d7561af969af0e617c280053c218158 python-adal-0.6.0-0.el7_6.1.noarch.rpm Source: 0ba40817dc6bce65e3a74ba1bbe2c0f2206aaf815b71628aaaca6cea6ba3f9e3 python-adal-0.6.0-0.el7_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 172, Issue 5 ***********************************************

1 0

Disk Performance Issue
by Chris Olson 25 Jun '19

25 Jun '19

We have a very old Dell desk top machine that has been running CentOS 6 for the past five years. It received a new, 1 TB disk and additional memory before the OS installation. It has been the primary Linux machine in our smallest and most remote field office. It has been updated at least once a week and has all current dates installed. Boot-up this morning lasted about six times as long as usual. Disk access, as indicated by the disk activity light, is almost continuous and for extended periods of time when ever something is done that requires the disk. Everything observed happens whether or not the machine is connected to our network. All of our files appear to be accessible if one is patient. One theory put forward is that some application is running that uses up CPU and disk bandwidth. Another theory is that thereare disk errors, mostly corrected by EDCS features. We do not see any rogue applications and error logs show no disk issues. This is a mysterious issue that we hope to circumvent by putting a new disk and installing CentOS 7 from DVD. Our hope is that the current disk can be mounted externally on the new CentOS system using a USB to SATA adapter and that data can be moved off of the old disk. Advice regarding this issue and any possible diagnostic methods will be greatly appreciated. df -k output: +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/vg_delle520-lv_root 51475068 12110896 36742732 25% / tmpfs 1928152 176 1927976 1% /dev/shm /dev/sda1 487652 211073 250979 46% /boot /dev/mapper/vg_delle520-lv_home 905124888 246856176 612284356 29% /home +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

6 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2019