Discuss January 2020

discuss@lists.centos.org

93 participants
74 discussions

CentOS-announce Digest, Vol 179, Issue 1
by centos-announce-request＠centos.org 15 Jan '20

15 Jan '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0086 Critical CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 14 Jan 2020 17:25:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0086 Critical CentOS 6 firefox Security Update Message-ID: <20200114172532.GA16036(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0086 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2020:0086 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 779b010362374979244a758804f47018e5bd87c5bce89c2f19e038dbe22bdf18 firefox-68.4.1-1.el6.centos.i686.rpm x86_64: 779b010362374979244a758804f47018e5bd87c5bce89c2f19e038dbe22bdf18 firefox-68.4.1-1.el6.centos.i686.rpm 271e9cc23da6f431ca2aaf101c991b99bdee8d4668cb1cf3078e72f5db54d7e5 firefox-68.4.1-1.el6.centos.x86_64.rpm Source: 4d07eed77a70bcc4ed1526f5cc36240325b2323f1269e69e8d522e54c0a713cf firefox-68.4.1-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 179, Issue 1 ***********************************************

1 0

Adding options to grub
by Mauricio Tavares 14 Jan '20

14 Jan '20

So I want to add a few options to the kernel (say iommu support). I have been told before to avoid using grub2-mkconfig because it would apply the changes to all currently available (to boot from) boot kernels. Instead, I should edit just the latest kernel entry in the grub.cfg file, adding the option to the line that used to start with "linux16" in centos6. This way, if it went boink, all I had to do is reboot, pick another kernel from the grub menu and off I went. And, it seems that every future kernel upgrade would incorporate this change. Looking at a centos7.7 setup, I take the equivalent line in /boot/grub/grub.conf is kernel /boot/vmlinuz-3.10.0-123.4.4.el7.x86_64 console=hvc0 xencons=tty0 root=/dev/xvda ro I am now looking into a centos8 and its grub.cfg (/boot/efi/EFI/centos/grub.cfg in this case) looks rather different. Is what I have described above still the safest way to customize the kernel? Or is there a cleaner way to do the same while still leaving me the option to go back to the grub menu and pick an undisturbed kernel?

1 0

Problems with firewalld-0.7.0
by Orion Poplawski 13 Jan '20

13 Jan '20

After upgrading one of our systems to CentOS 8 CR and firewalld-0.7.0-5.el8.noarch it no longer accepts connections allowed in one of the two active zones. I've reported the issue here: https://bugzilla.redhat.com/show_bug.cgi?id=1790681 but wondered if anyone else was seeing problems with multi-zone firewalld configurations. - Orion -- Orion Poplawski Manager of NWRA Technical Systems 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

1 0

firefox update
by Steve Clark 13 Jan '20

13 Jan '20

Any idea when firefox-68.4.1 will be available? Thanks, Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

2 1

Problem with disconnecting SSH-sessions
by H 12 Jan '20

12 Jan '20

I am running CentOS 7 on a workstation and CentOS 6 and 7 on a couple of servers I am remotely connecting to using the same username and thus ssh configuration. However, one of the servers running CentOS 6 I keep getting disconnected from whereas I have no such problems with another CentOS 6 server and CentOS 7 server. The latter two are on two different hosted server setups far, far away whereas the problematic one is my own physical hardware in the same building. I have tried to make sure the sshd configuration on all servers are identical but still have this problem. I can rule out a general problem with the router in my office since all connections are via that router, the only difference is that the problematic server is in the same building and the connection loops back via the same router but through an external IP address. /var/log/secure on the workstation offers no clues with no messages regarding any disconnection. If anyone has suggestions what I should check, it would be greatly appreciated!

3 8

Blocking attacks from a range of IP addresses
by H 12 Jan '20

12 Jan '20

I am being attacked by an entire subnet where the first two parts of the IP address remain identical but the last two parts vary sufficiently that it is not caught by fail2ban since the attempts do not meet the cut-off of a certain number of attempts within the given time. Has anyone created a fail2ban filter for this type of attack? As of right now, I have manually banned a range of IP addresses but would like to automate it for the future.

9 11

Re: [CentOS] Block attacks from a range of IP addresses
by Adrian van Bloois 12 Jan '20

12 Jan '20

Hi, I'm using sshguard to acomplish this. You can acutally choose tthe size of the range you want to block, /8 of /16, no problem. It works perfect! It is included in the repo both for C7 and C8. Adrian -- Adri P. van Bloois "Elegance is not a dispensable luxury but a factor that decides between success and failure." Edsger W. Dijkstra

1 0

Unresolved dependencies when upgrade on centOS 8
by Ebed 11 Jan '20

11 Jan '20

Hi, Guys i got unresolved dependencies when trying to upgrade centOS 8, what should i do to fix this? [root@ws1 ebedsat]# dnf upgrade Last metadata expiration check: 0:14:27 ago on Sat 11 Jan 2020 12:16:02 PM WIB. Error: Problem 1: cannot install the best update candidate for package kmod-iwlegacy-0.0-1.el8.elrepo.x86_64 - nothing provides kernel >= 4.18.0-147.el8 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(__pci_register_driver) = 0xe85eaefe needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_unregister_driver) = 0x4883cfc3 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_set_master) = 0xe724f530 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(kmalloc_caches) = 0x8200293d needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_disable_device) = 0x24796ca2 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_enable_device) = 0x982a3dc2 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_release_regions) = 0xbf4a2a75 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_request_regions) = 0x9c656956 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_write_config_byte) = 0x21935607 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_read_config_word) = 0x3dc485cf needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_disable_msi) = 0xc174fcd7 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_enable_msi) = 0xda24a9c7 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_write_config_word) = 0x4b15b75c needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_disable_link_state) = 0x02f2f3f8 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(generic_file_llseek) = 0xc27ffb37 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_create_dir) = 0x2f4ce417 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_create_file) = 0x501d615e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_alloc_hw_nm) = 0xba0c6cb1 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_beacon_get_tim) = 0x3e9fc88e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_free_hw) = 0x1a211787 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_register_hw) = 0x94f9cf8d needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_rx_napi) = 0xe42fba8f needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_queue) = 0x14b3a816 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_queues) = 0x5d5f40f9 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_unregister_hw) = 0x740a5bb2 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_wake_queue) = 0xfa79b997 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_wake_queues) = 0xa900f2df needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(led_classdev_unregister) = 0x9fd8b0e4 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(of_led_classdev_register) = 0xe2dcc6bc needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(wiphy_rfkill_set_hw_state) = 0x1df077cc needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_remove) = 0x9ef3e60b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_remove_recursive) = 0x4668b613 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(default_llseek) = 0x384172fd needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pcie_capability_read_word) = 0xa785480e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(__ieee80211_create_tpt_led_trigger) = 0x0d0ddd5f needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(__ieee80211_get_radio_led_name) = 0xd1d478f1 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_chswitch_done) = 0xced3a36a needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_find_sta) = 0xc579589b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_rate_control_register) = 0xabcd1b6e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_rate_control_unregister) = 0x22eec09c needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_restart_hw) = 0x779336b9 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_scan_completed) = 0x70edbf96 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_sta_block_awake) = 0xf9257828 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_start_tx_ba_cb_irqsafe) = 0xbd303a44 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_start_tx_ba_session) = 0xa96bdcd7 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_tx_ba_cb_irqsafe) = 0x963e9d4a needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_tx_ba_session) = 0xf0bb0c05 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_tx_status_irqsafe) = 0xdb983f1b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_ioremap_bar) = 0x5a71258b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(rate_control_send_low) = 0x3f7dc196 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 Problem 2: cannot install the best update candidate for package qt-creator-4.9.2-3.el8.x86_64 - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 Problem 3: package qt-creator-doc-4.9.2-4.el8.noarch requires qt-creator = 4.9.2-4.el8, but none of the providers can be installed - cannot install the best update candidate for package qt-creator-doc-4.9.2-3.el8.noarch - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 Problem 4: package qt-creator-data-4.9.2-4.el8.noarch requires qt-creator = 4.9.2-4.el8, but none of the providers can be installed - cannot install the best update candidate for package qt-creator-data-4.9.2-3.el8.noarch - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 Problem 5: package qt-creator-translations-4.9.2-4.el8.noarch requires qt-creator-data = 4.9.2-4.el8, but none of the providers can be installed - package qt-creator-data-4.9.2-4.el8.noarch requires qt-creator = 4.9.2-4.el8, but none of the providers can be installed - cannot install the best update candidate for package qt-creator-translations-4.9.2-3.el8.noarch - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) [root@ws1 ebedsat]# uname -mrs Linux 5.4.10-1.el8.elrepo.x86_64 x86_64

2 2

Building and packaging httpd
by Benson Muite 10 Jan '20

10 Jan '20

Hi, Am rebuilding httpd from scratch to enable http2 and minimize extra modules on Cent Os 8. Am having trouble understanding the spec file [0] and systemd initialization [1][2][3] (these are very similar to those extracted from [4]). Why are 3 scripts needed to start the service and why is a pid setting not needed as used in the httpd.service file at [5]? Benson [0] https://src.fedoraproject.org/rpms/httpd/blob/HEAD/f/httpd.spec [1] https://src.fedoraproject.org/rpms/httpd/tree/f31 [2] https://src.fedoraproject.org/rpms/httpd/blob/f31/f/httpd.service [3] https://src.fedoraproject.org/rpms/httpd/blob/f31/f/httpd-init.service [4] http://vault.centos.org/8.0.1905/AppStream/Source/SPackages/httpd-2.4.37-12… [5] https://blacksaildivision.com/how-to-install-apache-httpd-on-centos

2 2

copying files to fill flash drives
by Frank Cox 10 Jan '20

10 Jan '20

Back in the days of DOS I had a program that I obtained from somewhere called FILL. FILL would take the name of a directory and then start writing files from that directory onto a series of floppy disks in such a way that each disk was made as full as possible, but without modifying the files that it was writing. So you might end up with disk 1 having files A B and D on them since D fitted but C was too big so it went onto Disk 2 along with files E and F. Before I re-invent the wheel here, does someone already have a way to do this with Linux so you can write a series of flash drives and fill them with the contents of a specified directory without modifying the files that get written? The reason that I specify without modifying the files is that I could do this easily with tar and split, but then I end up with a tar file and can't just look on disk 1 and copy file A off of it later on. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

6 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss January 2020