Discuss February 2020

discuss@lists.centos.org

85 participants
65 discussions

gpgcheck of rpms / anaconda / kickstart / composer install
by Leon Fauster 19 Feb '20

19 Feb '20

Hi all, I wonder if the gpgchecks are done while installing a system via anaconda? Any experts here? I was playing with the livemedia-creator and had a 3rd party repo in my ks file. The packages were installed without any problems although having not any key in the rpm db imported. So that leads me to the assumption that the gpgchecks are not done. How to get the integrity check done? reposync and manual check as a pre composer step? I appreciate any hints ... -- Leon

2 1

Need info on adobe flash player plugin 32 for CentOS7
by Kay Schenk 19 Feb '20

19 Feb '20

Hello all-- I kept getting messages that my old Flash Player 31 was obsolete so I went in search of an update. I came across several references for getting flash plugin 32 that basically were the same as this page -- https://www.if-not-true-then-false.com/2010/install-adobe-flash-player-10-o… However, it seems the site -- |http://linuxdownload.adobe.com/ does NOT resolve. Does anyone have any insight into how to install Flash Player Plugin v 32 on CentOS 7? | -- "And in the end, only kindness matters." -- Jewel, "Hands" ______ MzK

7 10

CentOS-announce Digest, Vol 180, Issue 4
by centos-announce-request＠centos.org 19 Feb '20

19 Feb '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0521 Important CentOS 6 firefox Security Update (Johnny Hughes) 2. CESA-2020:0515 Important CentOS 6 ksh Security Update (Johnny Hughes) 3. CESA-2020:0520 Important CentOS 7 firefox Security Update (Johnny Hughes) 4. CESA-2020:0541 Important CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) 5. CESA-2020:0540 Important CentOS 7 sudo Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 18 Feb 2020 16:27:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0521 Important CentOS 6 firefox Security Update Message-ID: <20200218162759.GA17517(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0521 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0521 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d43d61853b40107c46c134fd55a9c534d542ac46eaf41fb552229f8f2847f611 firefox-68.5.0-2.el6.centos.i686.rpm x86_64: d43d61853b40107c46c134fd55a9c534d542ac46eaf41fb552229f8f2847f611 firefox-68.5.0-2.el6.centos.i686.rpm c5c89229eb8001aae7c67813ab6decbad01f1490eed0ad6dacf6179d3f1ae909 firefox-68.5.0-2.el6.centos.x86_64.rpm Source: d76a824ccbbd2969af061d8b0e1fc79d69ad4ce24d4048d538b54d88aaa91f48 firefox-68.5.0-2.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 18 Feb 2020 16:29:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0515 Important CentOS 6 ksh Security Update Message-ID: <20200218162910.GA17688(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0515 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0515 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 60f31eb1eeb85ee75993562ed776948f2fa42f5cb3daa55b34d32e8314717099 ksh-20120801-38.el6_10.i686.rpm x86_64: 0065fa89236a838064da000de793fc751f17bdf3cd13f554a2d504d30dc9524b ksh-20120801-38.el6_10.x86_64.rpm Source: f2e78f2920502527bf67d56c6f4823fb037680e241954770b01e7d46452163d0 ksh-20120801-38.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 18 Feb 2020 22:18:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0520 Important CentOS 7 firefox Security Update Message-ID: <20200218221844.GA30020(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0520 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0520 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: cabd0f607b8b426403c5f833334f15cb36b727b8792d122f3bb2547d4d965618 firefox-68.5.0-2.el7.centos.i686.rpm 11046ce36b466eeb0619c65b9df1ed10137bb07f3f01eba9a97d05648a04d714 firefox-68.5.0-2.el7.centos.x86_64.rpm Source: 377fa5d423b415ca61552036614942832b1570258973ad8541056292981425b4 firefox-68.5.0-2.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Tue, 18 Feb 2020 22:20:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0541 Important CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20200218222002.GA30238(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0541 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0541 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7ccac31a20eab804358cb7c553b075ff9f5a300262c4aa2c9f296125de67c450 java-1.7.0-openjdk-1.7.0.251-2.6.21.0.el7_7.x86_64.rpm eb646678be3d37c16ccd39579a10a467ba7dd876ddc0053ea1e534c75a28377b java-1.7.0-openjdk-accessibility-1.7.0.251-2.6.21.0.el7_7.x86_64.rpm e971fbcc7df4cf4163c9202e05a3d5caaacfe883a75b12385f34673e0c2de388 java-1.7.0-openjdk-demo-1.7.0.251-2.6.21.0.el7_7.x86_64.rpm a523046069f991a1502a7ca9038dd026a6021b31c25ff73e6488a8db8033b9b7 java-1.7.0-openjdk-devel-1.7.0.251-2.6.21.0.el7_7.x86_64.rpm 3b5fa3921cfbaedaae0ebbe3d9a8f3edb45ba1633e833f9d1a0de6f05173db69 java-1.7.0-openjdk-headless-1.7.0.251-2.6.21.0.el7_7.x86_64.rpm 6ea98165a303975ffbb5ff65047e35edcbf6591ea94e33d5e8a56d29d8953b70 java-1.7.0-openjdk-javadoc-1.7.0.251-2.6.21.0.el7_7.noarch.rpm d91fa4acea0080dbaf53e951619da4c3e399431b98ee3bcee01e13fcd86e40f2 java-1.7.0-openjdk-src-1.7.0.251-2.6.21.0.el7_7.x86_64.rpm Source: 8269ca9f1035bba4c25eb23f0d351e74f4c165681a733a66bdebf71579a0b1e9 java-1.7.0-openjdk-1.7.0.251-2.6.21.0.el7_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Tue, 18 Feb 2020 22:21:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0540 Important CentOS 7 sudo Security Update Message-ID: <20200218222138.GA30381(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0540 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0540 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0b16241f174a79ef2ea31283a5e80ea9988e61a9a55e9ac92bda0a3194884341 sudo-1.8.23-4.el7_7.2.x86_64.rpm 0426b76a0384baa6e5e6468f6ca13daf8b9a2183640e0edcfab4344af3bc60dd sudo-devel-1.8.23-4.el7_7.2.i686.rpm 414ce69b8c36398980c743d5935c255a47dad04f9e00cfe74d6b96da32b949d0 sudo-devel-1.8.23-4.el7_7.2.x86_64.rpm Source: 35152b61efed27551102dc09051870aeccb1d65ef82ee393195beae4d9635ac2 sudo-1.8.23-4.el7_7.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 180, Issue 4 ***********************************************

1 0

From network-scripts to NetworkManager on a router : questions
by Nicolas Kovacs 18 Feb '20

18 Feb '20

Hi, I'm running CentOS 7 on all my servers, in three different contexts : 1. simple local server 2. public facing server 3. router/gateway/firewall I'm currently in the process of moving my KISS-style network-scripts-style configurations to something more orthodox based on NetworkManager. Scenarios (1) and (2) caused no problems, but (3) is giving me some headache. Let me take an example. The router in my office is a PC Engines routerboard running CentOS 7. It has three NICs, and I use two of these. WAN-facing NIC : # /etc/sysconfig/network-scripts/ifcfg-enp1s0 DEVICE=enp1s0 TYPE=Ethernet ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.1 NETMASK=255.255.255.0 LAN-facing NIC : DEVICE=enp2s0 TYPE=Ethernet ONBOOT=yes BOOTPROTO=static IPADDR=192.168.2.1 NETMASK=255.255.255.0 Third NIC is disabled : # /etc/sysconfig/network-scripts/ifcfg-enp3s0 DEVICE=enp3s0 TYPE=Ethernet ONBOOT=no Gateway information : # /etc/sysconfig/network GATEWAY=192.168.1.254 The router is running Dnsmasq : # /etc/resolv.conf nameserver 127.0.0.1 Packet forwarding is enabled and handled through the firewall script. No need to go into the details for that. This setup works perfectly as is. Now I'd like to move it to a NetworkManager-based configuration, and I have a couple questions about that. I'm using NetworkManager TUI (nmtui) to configure my connections. I'm defining two profiles WAN (enp1s0) and LAN (enp2s0). With NetworkManager I have to configure gateway and DNS information on a per-interface basis. 1. Which interface should have the gateway information ? 2. In a similar manner, which interface should have the DNS server information ? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

6 10

anybody runs HPE ProLiant DL385 Gen10 ?
by lejeczek 17 Feb '20

17 Feb '20

hi guys, what I would like to ask is DDR4 3200Mhz in these server - has anybody tried? many thanks, L.

2 1

CentOS 7 : network interface renamed from eth0 to eth1 after reboot
by Nicolas Kovacs 17 Feb '20

17 Feb '20

Hi, I've done my fair share of CentOS 7 installations, but this is the first time I have this kind of weird problem. Here goes. In my office I have a battered Dell Optiplex 320 PC with two NICs that I'm using as a bare metal sandbox server for testing purposes. The CentOS 7 installer sees the connected network card as eth0. But after the first reboot, the interface comes up as eth1. My first reflex was to rename ifcfg-eth0 to ifcfg-eth1 and edit it accordingly. Weirdly enough, on the subsequent reboot the interface comes back as eth0. I took a peek in /etc/udev/rules.d to see if there was any persistent interface definition, but the directory is empty. On a side note, I installed Ubuntu Server 16.04 LTS on that same machine and got the exact same problem. Debian installer sees the main network interface as eth0, but on the first reboot the interface comes back as eth1. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

8 12

NetworkManager on servers
by Nicolas Kovacs 16 Feb '20

16 Feb '20

Hi, I'm currently reading the upstream "Considerations in adopting RHEL 8" document. The chapter about networking states that traditional networking scripts (shipped with the network-scripts package) are considered obsolete. I bluntly admit I don't see the point in this. As far as I'm concerned, I've been a happy user of NetworkManager since the early days (when folks used to call it NotworkManager :oD). It's one of those nifty pieces of software that brought the Linux desktop to the masses - or at least a bit nearer to them - since it allows managing wireless and wired interfaces transparently and easily on a laptop or any computer with a wireless card. On servers though, one of the first post-installation steps I performed was to get rid of Network-Manager and all its components. The servers I'm working on are relatively small-scale and have from one to four network interfaces. Each interface has a corresponding configuration in /etc/sysconfig/network-scripts, and that's it. From there, I rarely - if ever - touch it. In all my setups, NetworkManager is merely a useless layer of abstraction, and I like sticking to the KISS principle and shave off useless layers. Maybe there's a reason to make NetworkManager more or less mandatory from now on, but I don't see it. So I thought I'd rather ask on this list. Cheers from the foggy South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

10 17

Teo En Ming's Manual for Setting Up Samba 4.11.6 and CentOS 8.1 (1911) Linux Server QEMU/KVM Virtual Machine as an Active Directory Domain Controller (AD DC)
by Turritopsis Dohrnii Teo En Ming 15 Feb '20

15 Feb '20

Links to reading materials: [1] https://lkml.org/lkml/2020/2/15/16 [2] http://lkml.iu.edu/hypermail/linux/kernel/2002.1/10224.html [3] https://marc.info/?l=linux-kernel&m=158174694431737&w=2 [4] http://lists.linuxfromscratch.org/pipermail/lfs-chat/2020-February/029090.h… [5] https://lists.samba.org/archive/samba/2020-February/228348.html [6] https://marc.info/?l=kvm&m=158174875032089&w=2 [7] https://marc.info/?l=kvm-ia64&m=158174885032130&w=2 [8] https://marc.info/?l=kvm-ppc&m=158174912932190&w=2 -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

1 0

Monitor email for office365.com with fetchmail
by Jerry Geis 13 Feb '20

13 Feb '20

I am trying to use fetchmail to monitor box in office365.com. Its not working. Is there a "better" way to monitor and inbox ? I have verified all the ports are open, using 993, using ssl, using sslproto SSL3 etc.. Anyone done this ? Got it working. I basically have: machine outlook.office365.com login myuser@mydomain password mypassword fetchmail --ssl --sslproto SSL3 --smtpname X -u X outlook.office365.com Thanks, jerry

3 2

CentOS 7, Fail2ban and SELinux
by Nicolas Kovacs 13 Feb '20

13 Feb '20

Hi, I'm running CentOS 7 on an Internet-facing server. SELinux is in permissive mode for debugging. I've removed FirewallD and replaced it with a custom-made Iptables script. I've also installed and configured Fail2ban (fail2ban-server package) to protect the server from brute force attacks. Out of the box, Fail2ban doesn't seem to play well with SELinux. Here's what I get. $ sudo sealert -a /var/log/audit/audit.log 100% done found 5 alerts in /var/log/audit/audit.log ------------------------------------------------------------ SELinux is preventing /usr/bin/python2.7 from read access on the file disable. ***** Plugin catchall (100. confidence) suggests ***** If you believe that python2.7 should be allowed read access on the disable file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'f2b/f.sshd' --raw | audit2allow -M my-f2bfsshd # semodule -i my-f2bfsshd.pp ... As far as I can tell - and please correct me if I'm wrong - if a package doesn't play well with SELinux in the default configuration, this should be considered as a bug. In that case, the appropriate reaction would be to file a bug on the EPEL mailing list, since EPEL provides the fail2ban-server package. Other than that, the solution suggested by sealert seems to work. $ sudo ausearch -c 'f2b/f.sshd' --raw | sudo audit2allow -M my-f2bfsshd ******************** IMPORTANT *********************** To make this policy package active, execute: semodule -i my-f2bfsshd.pp $ sudo ausearch -c 'f2b/f.sshd' --raw | sudo audit2allow -M my-f2bfsshd ******************** IMPORTANT *********************** To make this policy package active, execute: semodule -i my-f2bfsshd.pp $ sudo semodule -i my-f2bfsshd.pp $ echo | sudo tee /var/log/audit/audit.log $ sudo systemctl restart fail2ban $ sudo sealert -a /var/log/audit/audit.log 100% done found 0 alerts in /var/log/audit/audit.log Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

4 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2020