April 2020 - Discuss - lists.centos.org

Re: [CentOS] [Off topic] sending mail from Comcast was: Sendmail not working
by Jason Pyeron 19 Apr '20

19 Apr '20

> -----Original Message----- > From: Tim Evans > Sent: Sunday, April 19, 2020 12:50 PM > > On 4/19/20 12:38 PM, S.Bob wrote: > > > > On 4/19/20 10:36 AM, Tim Evans wrote: > >> On 4/19/20 12:28 PM, S.Bob wrote: > >>> All; > >>> > >>> > >>> I installed sendmail via yum, but if I test it like this: > >>> > >>> > >> > >>> The original message was received at Sun, 19 Apr 2020 10:02:56 -0600 > >>> from localhost [127.0.0.1] > >>> > >>> ----- The following addresses had permanent fatal errors ----- > >>> <sbob(a)quadratum-braccas.com> > >>> (reason: 554 5.7.1 Service unavailable; Client host > >>> [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; > >>> https://www.spamhaus > >>> .org/query/ip/50.243.150.81) > >> > >> Is 50.243.150.81 your system's IP address? If so, as this shows, that > >> IP is on spamhaus' blacklist of addresses. Thus, your sendmail is > >> working fine. Problem is elsewhere. > >> > >> anything I can do to fix it? > > Assuming this is your IP address, visit https://www.spamhaus.org/lookup/ > and request that it be removed from the blacklisted IP's. > > However, looking at the headers from your message, it appears Comcast > may be your ISP, and this 50.243.150.81 IP address appears to be a > Comcast address, so you may need to contact Comcast tech support for > help in getting the blacklist designation removed. There are a few situations here. 1. You are a business customer with a static IP, and are entitled to send/receive SMTP by your ISP (Comcast) 2. You are a business/residential customer who is allowed to send (not likely allowed to receive) SMTP and you have a domain elsewhere to receive replies to your email 3. You are a business/residential customer who is NOT allowed to send SMTP except for your ISP (Comcast) provided email. Only you would know which on for sure is you, but it is very likely #3. The advice provided previously is for case #1 - contact Comcast and inform them that your contracted services are not working because of .... and you will need to beable to work with them on testing and suggesting fixes. They have a dedicated support phone number (which they provided you if you are actually a #1 type customer - e.g. gigabit pro, metro Ethernet, etc.) In case you are a #2 or #3 type customer, you may want to use a smart host configuration - e.g. define('SMART_HOST','[smtp.comcast.net]') . For postfix, use relayhost = [smtp.comcast.net] . Now when you send mail to that relay it will relay it. This is provided you are entitled to have your email relayed - contact Xfinity customer service for help there. If using this relay does not work, please post the exchange starting with the HELO (check your maillog or do it by hand with telnet). -- Jason Pyeron | Architect PD Inc | 10 w 24th St | Baltimore, MD | .com: jpyeron(a)pdinc.us tel : 202-741-9397

5 15

Sendmail not working
by S.Bob 19 Apr '20

19 Apr '20

All; I installed sendmail via yum, but if I test it like this: echo "Subject: sendmail test" | sendmail sbob(a)quadratum-braccas.com I get a local mail on the server with this every time: Message 1: From MAILER-DAEMON(a)kdb-bugs.example.com Sun Apr 19 10:15:00 2020 Return-Path: <MAILER-DAEMON(a)kdb-bugs.example.com> Date: Sun, 19 Apr 2020 10:15:00 -0600 From: Mail Delivery Subsystem <MAILER-DAEMON(a)kdb-bugs.example.com> To: <root(a)kdb-bugs.example.com> Content-Type: multipart/report; report-type=delivery-status; boundary="03JGF0ni013558.1587312900/kdb-bugs.example.com" Subject: Returned mail: see transcript for details Auto-Submitted: auto-generated (failure) Status: R Part 1: The original message was received at Sun, 19 Apr 2020 10:02:56 -0600 from localhost [127.0.0.1] ----- The following addresses had permanent fatal errors ----- <sbob(a)quadratum-braccas.com> (reason: 554 5.7.1 Service unavailable; Client host [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; https://www.spamhaus .org/query/ip/50.243.150.81) ----- Transcript of session follows ----- ... while talking to in1-smtp.messagingengine.com.: >>> RCPT To:<sbob(a)quadratum-braccas.com> <<< 554 5.7.1 Service unavailable; Client host [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; https://www.spamhaus.org/quer y/ip/50.243.150.81 554 5.0.0 Service unavailable >>> DATA <<< 421 4.4.2 mx5.messagingengine.com Error: timeout exceeded ... while talking to in2-smtp.messagingengine.com.: >>> DATA <<< 421 4.4.2 wmx2.messagingengine.com Error: timeout exceeded Thanks in advance If it helps, here is my sendmail.mc file: [root@kdb-bugs ~]# cat /etc/mail/sendmail.mc divert(-1)dnl dnl # dnl # This is the sendmail macro config file for m4. If you make changes to dnl # /etc/mail/sendmail.mc, you will need to regenerate the dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is dnl # installed and then performing a dnl # dnl # /etc/mail/make dnl # include(`/usr/share/sendmail-cf/m4/cf.m4')dnl VERSIONID(`setup for linux')dnl OSTYPE(`linux')dnl dnl # dnl # Do not advertize sendmail version. dnl # dnl define(`confSMTP_LOGIN_MSG', `$j Sendmail; $b')dnl dnl # dnl # default logging level is 9, you might want to set it higher to dnl # debug the configuration dnl # dnl define(`confLOG_LEVEL', `9')dnl dnl # dnl # Uncomment and edit the following line if your outgoing mail needs to dnl # be sent out through an external mail server: dnl # dnl define(`SMART_HOST', `smtp.your.provider')dnl dnl # define(`confDEF_USER_ID', ``8:12'')dnl dnl define(`confAUTO_REBUILD')dnl define(`confTO_CONNECT', `1m')dnl define(`confTRY_NULL_MX_LIST', `True')dnl define(`confDONT_PROBE_INTERFACES', `True')dnl define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl define(`ALIAS_FILE', `/etc/aliases')dnl define(`STATUS_FILE', `/var/log/mail/statistics')dnl define(`UUCP_MAILER_MAX', `2000000')dnl define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl define(`confAUTH_OPTIONS', `A')dnl dnl # dnl # The following allows relaying if the user authenticates, and disallows dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links dnl # dnl define(`confAUTH_OPTIONS', `A p')dnl dnl # dnl # PLAIN is the preferred plaintext authentication method and used by dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do dnl # use LOGIN. Other mechanisms should be used if the connection is not dnl # guaranteed secure. dnl # Please remember that saslauthd needs to be running for AUTH. dnl # dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl # dnl # Rudimentary information on creating certificates for sendmail TLS: dnl # cd /etc/pki/tls/certs; make sendmail.pem dnl # Complete usage: dnl # make -C /etc/pki/tls/certs usage dnl # dnl define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/sendmail.pem')dnl dnl # dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's dnl # slapd, which requires the file to be readble by group ldap dnl # dnl define(`confDONT_BLAME_SENDMAIL', `groupreadablekeyfile')dnl dnl # dnl define(`confTO_QUEUEWARN', `4h')dnl dnl define(`confTO_QUEUERETURN', `5d')dnl dnl define(`confQUEUE_LA', `12')dnl dnl define(`confREFUSE_LA', `18')dnl define(`confTO_IDENT', `0')dnl dnl # If you're operating in a DSCP/RFC-4594 environment with QoS dnl define(`confINET_QOS', `AF11')dnl dnl FEATURE(delay_checks)dnl FEATURE(`no_default_msa', `dnl')dnl FEATURE(`smrsh', `/usr/sbin/smrsh')dnl FEATURE(`mailertable', `hash -o /etc/mail/mailertable.db')dnl FEATURE(`virtusertable', `hash -o /etc/mail/virtusertable.db')dnl FEATURE(redirect)dnl FEATURE(always_add_domain)dnl FEATURE(use_cw_file)dnl FEATURE(use_ct_file)dnl dnl # dnl # The following limits the number of processes sendmail can fork to accept dnl # incoming messages or process its message queues to 20.) sendmail refuses dnl # to accept connections once it has reached its quota of child processes. dnl # dnl define(`confMAX_DAEMON_CHILDREN', `20')dnl dnl # dnl # Limits the number of new connections per second. This caps the overhead dnl # incurred due to forking new sendmail processes. May be useful against dnl # DoS attacks or barrages of spam. (As mentioned below, a per-IP address dnl # limit would be useful but is not available as an option at this writing.) dnl # dnl define(`confCONNECTION_RATE_THROTTLE', `3')dnl dnl # dnl # The -t option will retry delivery if e.g. the user runs over his quota. dnl # FEATURE(local_procmail, `', `procmail -t -Y -a $h -d $u')dnl FEATURE(`access_db', `hash -T<TMPF> -o /etc/mail/access.db')dnl FEATURE(`blacklist_recipients')dnl EXPOSED_USER(`root')dnl dnl # dnl # For using Cyrus-IMAPd as POP3/IMAP server through LMTP delivery uncomment dnl # the following 2 definitions and activate below in the MAILER section the dnl # cyrusv2 mailer. dnl # dnl define(`confLOCAL_MAILER', `cyrusv2')dnl dnl define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')dnl dnl # dnl # The following causes sendmail to only listen on the IPv4 loopback address dnl # 127.0.0.1 and not on any other network devices. Remove the loopback dnl # address restriction to accept email from the internet or intranet. dnl # DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl dnl # dnl # The following causes sendmail to additionally listen to port 587 for dnl # mail from MUAs that authenticate. Roaming users who can't reach their dnl # preferred sendmail daemon due to port 25 being blocked or redirected find dnl # this useful. dnl # dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl dnl # dnl # The following causes sendmail to additionally listen to port 465, but dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1. dnl # dnl # For this to work your OpenSSL certificates must be configured. dnl # dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl dnl # dnl # The following causes sendmail to additionally listen on the IPv6 loopback dnl # device. Remove the loopback address restriction listen to the network. dnl # dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl dnl # dnl # enable both ipv6 and ipv4 in sendmail: dnl # dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6') dnl # dnl # We strongly recommend not accepting unresolvable domains if you want to dnl # protect yourself from spam. However, the laptop and users on computers dnl # that do not have 24x7 DNS do need this. dnl # FEATURE(`accept_unresolvable_domains')dnl dnl # dnl FEATURE(`relay_based_on_MX')dnl dnl # dnl # Also accept email sent to "localhost.localdomain" as local email. dnl # LOCAL_DOMAIN(`localhost.localdomain')dnl dnl # dnl # The following example makes mail from this host and any additional dnl # specified domains appear to be sent from mydomain.com dnl # dnl MASQUERADE_AS(`mydomain.com')dnl dnl # dnl # masquerade not just the headers, but the envelope as well dnl # dnl FEATURE(masquerade_envelope)dnl dnl # dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well dnl # dnl FEATURE(masquerade_entire_domain)dnl dnl # dnl MASQUERADE_DOMAIN(localhost)dnl dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl dnl MASQUERADE_DOMAIN(mydomain.lan)dnl MAILER(smtp)dnl MAILER(procmail)dnl dnl MAILER(cyrusv2)dnl -- `When you say "I wrote a program that crashed Windows", people just stare at you blankly and say "Hey, I got those with the system, *for free*".' (By Linus Torvalds)

5 7

Netfilter fails to filter traffic from a netblock?
by Jeffrey Walton 19 Apr '20

19 Apr '20

Hi Everyone, We rent a CentOS 7 VM from GoDaddy. We received a warning about excessive cpu usage, and a threat to cancel our service. We tracked it down to Apache and someone hammering our web server. The offending host is 59.64.129.175. To err on the side of caution we attempted to block the entire netblock. According to whois data, that's 59.64.128.0-59.64.159.255. iptables -A INPUT -s 59.64.128.0/19 -p TCP -j DROP After reboot cpu usage is still high and access_log still shows useless requests from the host: 59.64.129.175 - - [19/Apr/2020:08:53:53 -0400] "GET /w/index.php?title=Special:WhatLinksHere&limit=50& printable=yes HTTP/1.1" 301 311 I seem to be missing something. That's not surprising since I am not a server administrator. How do I filter the unwanted traffic from the netblock? Thanks in advance.

6 11

CentO 8 and nftables default policy
by Alessandro Baggi 19 Apr '20

19 Apr '20

Hi list, I'm studying nftables. I'm using CentOS 8.1 (Gnome) and I disabled firewalld. I noticed that a default policy is created with tables and chains probably for firewalld. So I created a .nft script where I stored my rules with a flush for previous ruleset, then saved on /etc/sysconfig/nftables.conf and the enabled nftables service. Running the script with nft -f script.nft all work as expected but when rebooting, running nft list ruleset I find my rules and the default policy (chains and tables) that I would not have in my configuration. My nftables.conf contains only my ruleset. For example, running nft list tables I found several default tables like: table ip filter table ip6 filter table bridge filter table ip nat table ip mangle So probably there is something that is applying its policy but I ignore what is. Can someone point me in the right direction? Thank you in advance.

2 3

Strangeness on X11 screen capture
by Jerry Geis 19 Apr '20

19 Apr '20

Hi all, I am running CentOS 7 on a NUC5CPYB. Intel video: 00:02.0 VGA compatible controller: Intel Corporation Atom/Celeron/Pentium Processor x5-E8000/J3xxx/N3xxx Integrated Graphics Controller (rev 35) When I take a screen shot I get "different" things. I use: export DISPLAY=:0.0 /usr/bin/xwd -silent -root -out screen; convert screen screen.png I tried import also for the screen capture and its the same random images. Granted the images are all things I have showing previously - but most times its not what is showing now. I have verified the Intel driver is loaded: [ 19.009] (II) LoadModule: "intel" [ 19.010] (II) Loading /usr/lib64/xorg/modules/drivers/intel_drv.so [ 19.012] (II) Module intel: vendor="X.Org Foundation" [ 19.012] compiled for 1.20.1, module version = 2.99.917 [ 19.012] Module class: X.Org Video Driver [ 19.012] ABI class: X.Org Video Driver, version 24.0 [ 19.012] (II) intel: Driver for Intel(R) Integrated Graphics Chipsets: i810, i810-dc100, i810e, i815, i830M, 845G, 854, 852GM/855GM, 865G, 915G, E7221 (i915), 915GM, 945G, 945GM, 945GME, Pineview GM, Pineview G, 965G, G35, 965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33, GM45, 4 Series, G45/G43, Q45/Q43, G41, B43 [ 19.015] (II) intel: Driver for Intel(R) HD Graphics [ 19.015] (II) intel: Driver for Intel(R) Iris(TM) Graphics [ 19.015] (II) intel: Driver for Intel(R) Iris(TM) Pro Graphics [ 19.015] (++) using VT number 1 [ 19.016] (II) intel(0): Using Kernel Mode Setting driver: i915, version 1.6.0 20181204 [ 19.018] (--) intel(0): Integrated Graphics Chipset: Intel(R) HD Graphics [ 19.019] (--) intel(0): CPU: x86-64, sse2, sse3, ssse3, sse4.1, sse4.2; using a maximum of 2 threads [ 19.019] (II) intel(0): Creating default Display subsection in Screen section "Default Screen Section" for depth/fbbpp 24/32 [ 19.019] (==) intel(0): Depth 24, (--) framebuffer bpp 32 [ 19.019] (==) intel(0): RGB weight 888 [ 19.019] (==) intel(0): Default visual is TrueColor [ 19.023] (II) intel(0): Output DP1 has no monitor section [ 19.024] (II) intel(0): Enabled output DP1 [ 19.024] (II) intel(0): Output HDMI1 has no monitor section [ 19.025] (II) intel(0): Enabled output HDMI1 [ 19.025] (II) intel(0): Output DP2 has no monitor section [ 19.026] (II) intel(0): Enabled output DP2 [ 19.026] (II) intel(0): Output HDMI2 has no monitor section [ 19.027] (II) intel(0): Enabled output HDMI2 [ 19.027] (--) intel(0): Using a maximum size of 256x256 for hardware cursors [ 19.027] (II) intel(0): Output VIRTUAL1 has no monitor section [ 19.027] (II) intel(0): Enabled output VIRTUAL1 [ 19.028] (--) intel(0): Output HDMI2 using initial mode 1920x1080 on pipe 2 What can be doing this ? How do I track it down? Thanks, Jerry

2 2

CentOS 8 and xhost
by Jerry Geis 18 Apr '20

18 Apr '20

I am trying to run 'xhost +' on CentOS 8 (such that I can grab a screen shot) but its not letting me. On boot of X I run the "xhost +" then later with SSH into hte box - I run export DISPLAY=:0.0 gnome-screenshot -f jj.png and I get the cannot open display message. This works on the older CentOS 7. What is the magic for C8? Thanks, Jerry

3 4

phpMyAdmin for Centos 8
by Ranbir 18 Apr '20

18 Apr '20

Has anyone seen a phpMyAdmin rpm for Centos 8 out in the wild? I've been using the Centos 7 EPEL package for phpMyAdmin for many years. When I went there to look for the Centos 8 version of the rpm, I couldn't find one. O_O -- Ranbir

1 0

fail2ban firewalld problems with current CentOS 7
by Andreas Haumer 17 Apr '20

17 Apr '20

Hi! I have a server running CentOS 7.7 (1908) with all current patches installed. I think this server should be a quite standard installation with no specialities On this server I have fail2ban with an apache and openvpn configuration. I'm using firewalld to manage the firewall rules. Fail2an is configured to use firewalld: [root@server ~]# ll /etc/fail2ban/jail.d/ insgesamt 12 -rw-r--r--. 1 root root 356 21. Jan 05:12 00-firewalld.conf -rw-r--r--. 1 root root 610 15. Nov 19:55 apache.local -rw-r--r--. 1 root root 115 15. Nov 19:10 openvpn.local [root@server ~]# cat /etc/fail2ban/jail.d/00-firewalld.conf # This file is part of the fail2ban-firewalld package to configure the use of # the firewalld actions as the default actions. You can remove this package # (along with the empty fail2ban meta-package) if you do not use firewalld [DEFAULT] banaction = firewallcmd-ipset[actiontype=<multiport>] banaction_allports = firewallcmd-ipset[actiontype=<allports>] A few days ago I noticed that on restart firewalld complains about a missing ipset: [root@server ~]# systemctl restart firewalld [root@server ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Do 2020-04-09 09:25:28 CEST; 5s ago Docs: man:firewalld(1) Main PID: 8324 (firewalld) CGroup: /system.slice/firewalld.service └─8324 /usr/bin/python2 -Es /usr/sbin/firewalld --nofork --nopid Apr 09 09:25:28 server.my.domain systemd[1]: Starting firewalld - dynamic firewall daemon... Apr 09 09:25:28 server.my.domain systemd[1]: Started firewalld - dynamic firewall daemon. Apr 09 09:25:30 server.my.domain firewalld[8324]: ERROR: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-apache doesn't exist. Error occurred at line: 2... Apr 09 09:25:30 server.my.domain firewalld[8324]: ERROR: COMMAND_FAILED: Direct: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-apache doesn't exist. Error occurred at line: 2... Hint: Some lines were ellipsized, use -l to show in full. Indeed there is no ipset named "f2b-apache", there is no set configured at all: [root@server ~]# ipset list There is no error when restarting fail2ban: [root@server ~]# systemctl restart fail2ban [root@server ~]# systemctl status fail2ban ● fail2ban.service - Fail2Ban Service Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; vendor preset: disabled) Active: active (running) since Do 2020-04-09 09:26:13 CEST; 4s ago Docs: man:fail2ban(1) Process: 8539 ExecStop=/usr/bin/fail2ban-client stop (code=exited, status=0/SUCCESS) Process: 8543 ExecStartPre=/bin/mkdir -p /run/fail2ban (code=exited, status=0/SUCCESS) Main PID: 8545 (f2b/server) CGroup: /system.slice/fail2ban.service └─8545 /usr/bin/python -s /usr/bin/fail2ban-server -xf start Apr 09 09:26:13 server.my.domain systemd[1]: Stopped Fail2Ban Service. Apr 09 09:26:13 server.my.domain systemd[1]: Starting Fail2Ban Service... Apr 09 09:26:13 server.my.domain systemd[1]: Started Fail2Ban Service. Apr 09 09:26:13 server.my.domain fail2ban-server[8545]: Server ready Fail2ban seems to be running fine: [root@server ~]# fail2ban-client status Status |- Number of jail: 6 `- Jail list: apache, apache-badbots, apache-nohome, apache-noscript, apache-overflows, openvpn No errors loged in fail2ban.log on restart: [...] 2020-04-09 09:26:13,773 fail2ban.server [8545]: INFO Starting Fail2ban v0.10.5 2020-04-09 09:26:13,799 fail2ban.database [8545]: INFO Connected to fail2ban persistent database '/var/lib/fail2ban/fail2ban.sqlite3' 2020-04-09 09:26:13,801 fail2ban.jail [8545]: INFO Creating new jail 'apache-badbots' 2020-04-09 09:26:13,805 fail2ban.jail [8545]: INFO Jail 'apache-badbots' uses poller {} 2020-04-09 09:26:13,805 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,838 fail2ban.filter [8545]: INFO maxRetry: 1 2020-04-09 09:26:13,838 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,839 fail2ban.actions [8545]: INFO banTime: 172800 2020-04-09 09:26:13,839 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,840 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,840 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,841 fail2ban.jail [8545]: INFO Creating new jail 'apache-noscript' 2020-04-09 09:26:13,843 fail2ban.jail [8545]: INFO Jail 'apache-noscript' uses poller {} 2020-04-09 09:26:13,843 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,851 fail2ban.filter [8545]: INFO maxRetry: 3 2020-04-09 09:26:13,851 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,851 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,852 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,853 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,854 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,855 fail2ban.jail [8545]: INFO Creating new jail 'apache-overflows' 2020-04-09 09:26:13,857 fail2ban.jail [8545]: INFO Jail 'apache-overflows' uses poller {} 2020-04-09 09:26:13,857 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,863 fail2ban.filter [8545]: INFO maxRetry: 2 2020-04-09 09:26:13,863 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,864 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,864 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,865 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,865 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,866 fail2ban.jail [8545]: INFO Creating new jail 'apache-nohome' 2020-04-09 09:26:13,867 fail2ban.jail [8545]: INFO Jail 'apache-nohome' uses poller {} 2020-04-09 09:26:13,868 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,872 fail2ban.filter [8545]: INFO maxRetry: 2 2020-04-09 09:26:13,873 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,873 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,873 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,874 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,875 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,876 fail2ban.jail [8545]: INFO Creating new jail 'apache' 2020-04-09 09:26:13,878 fail2ban.jail [8545]: INFO Jail 'apache' uses poller {} 2020-04-09 09:26:13,879 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,898 fail2ban.filter [8545]: INFO maxRetry: 3 2020-04-09 09:26:13,899 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,899 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,900 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,900 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,901 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,902 fail2ban.jail [8545]: INFO Creating new jail 'openvpn' 2020-04-09 09:26:13,931 fail2ban.jail [8545]: INFO Jail 'openvpn' uses systemd {} 2020-04-09 09:26:13,932 fail2ban.jail [8545]: INFO Initiated 'systemd' backend 2020-04-09 09:26:13,944 fail2ban.filtersystemd [8545]: INFO [openvpn] Added journal match for: '_SYSTEMD_UNIT=openvpn-server(a)xss.service + _COMM=openvpn' 2020-04-09 09:26:13,944 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,944 fail2ban.filter [8545]: INFO maxRetry: 2 2020-04-09 09:26:13,944 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,945 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,949 fail2ban.jail [8545]: INFO Jail 'apache-badbots' started 2020-04-09 09:26:13,952 fail2ban.jail [8545]: INFO Jail 'apache-noscript' started 2020-04-09 09:26:13,954 fail2ban.jail [8545]: INFO Jail 'apache-overflows' started 2020-04-09 09:26:13,956 fail2ban.jail [8545]: INFO Jail 'apache-nohome' started 2020-04-09 09:26:13,961 fail2ban.jail [8545]: INFO Jail 'apache' started 2020-04-09 09:26:13,964 fail2ban.jail [8545]: INFO Jail 'openvpn' started [...] BUT: SELinux complains about fail2ban: type=AVC msg=audit(1586413496.76:53507): avc: denied { read } for pid=1324 comm="f2b/f.apache" name="disable" dev="sysfs" ino=1481 scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=0 So it seems somehow fail2ban does not add the required ip sets correctly. From what I see in firewalld logfile it seems these problems started after the last updates on April 2nd. On this day I did a "yum update" which executed without errors and installed: augeas-libs-1.4.0-9.el7_7.1.x86_64 Do 02 Apr 2020 20:14:27 CEST restic-0.9.6-1.el7.x86_64 Do 02 Apr 2020 20:14:25 CEST python-perf-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:14:23 CEST python3-pip-9.0.3-7.el7_7.noarch Do 02 Apr 2020 20:14:23 CEST borgbackup-1.1.11-1.el7.x86_64 Do 02 Apr 2020 20:14:19 CEST libgudev1-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:14:18 CEST kernel-tools-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:14:16 CEST pcp-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:14:01 CEST kernel-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:13:44 CEST systemd-python-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:13:27 CEST systemd-sysv-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:13:26 CEST rsyslog-8.24.0-41.el7_7.4.x86_64 Do 02 Apr 2020 20:13:26 CEST python2-certbot-apache-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:25 CEST sssd-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:24 CEST firewalld-0.6.3-2.el7_7.4.noarch Do 02 Apr 2020 20:13:24 CEST sssd-proxy-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:23 CEST sssd-krb5-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:23 CEST sssd-ldap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:22 CEST sssd-ipa-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:22 CEST sssd-ad-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:22 CEST sssd-krb5-common-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:21 CEST sssd-common-pac-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:21 CEST sssd-common-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:20 CEST http-parser-2.7.1-8.el7_7.2.x86_64 Do 02 Apr 2020 20:13:19 CEST python-firewall-0.6.3-2.el7_7.4.noarch Do 02 Apr 2020 20:13:18 CEST certbot-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:11 CEST python2-certbot-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:10 CEST python2-acme-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:09 CEST python-requests-2.6.0-9.el7_7.noarch Do 02 Apr 2020 20:13:08 CEST systemd-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:13:05 CEST kmod-20-25.el7_7.1.x86_64 Do 02 Apr 2020 20:13:02 CEST binutils-2.27-41.base.el7_7.3.x86_64 Do 02 Apr 2020 20:13:00 CEST pcp-selinux-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:12:48 CEST libsss_autofs-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:47 CEST kernel-tools-libs-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:12:46 CEST python-sssdconfig-1.16.4-21.el7_7.3.noarch Do 02 Apr 2020 20:12:45 CEST libsss_sudo-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:45 CEST firewalld-filesystem-0.6.3-2.el7_7.4.noarch Do 02 Apr 2020 20:12:44 CEST sssd-client-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:43 CEST libsss_nss_idmap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:42 CEST libipa_hbac-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:42 CEST pcp-libs-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:12:41 CEST pcp-conf-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:12:41 CEST kmod-libs-20-25.el7_7.1.x86_64 Do 02 Apr 2020 20:12:40 CEST libsss_idmap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:39 CEST libsss_certmap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:33 CEST systemd-libs-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:12:32 CEST The firewalld errors start exactly after the updates were installed. Does anyone else see similar problems since the last updates? I googled and found some older postings, but nothing matching the problems I see exactly. I have other CentOS 7 servers with fail2ban and firewalld which should be updated soon, but before I do this I first want to solve this issue. Any idea? Thanks! - andreas -- Andreas Haumer | mailto:andreas@xss.co.at *x Software + Systeme | http://www.xss.co.at/ Karmarschgasse 51/2/20 | Tel: +43-1-6060114-0 A-1100 Vienna, Austria | Fax: +43-1-6060114-71

4 6

HPC question: torques replacement
by Valeri Galtsev 17 Apr '20

17 Apr '20

Dear Experts, I know there are many HPC (high performance computing) experts on this list. I'd like to ask your advise. Almost two decades ago I chose to go with OpenPBS (turned down condor and other alternatives for whatever reason) for clusters and number crunchers I support for the Department at the university. It turned out to be not bad, long lived choice. At some point I smoothly migrated to torque which was advertised as open source project (based on PBS, but it was much less hassle to compile...). Torque ceased to be open source two years ago, it is proprietary now. At some point I have to migrate away from torque for this reason. One of the ways would be to switch (back) to open source PBS Pro (pbspro.org) I wonder what other options experts would recommend. Hopefully, not too far from torque (or PBS) from user prospective. Thanks a lot for all your advises! Valeri -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 2

Re: [CentOS] Thank You
by david 17 Apr '20

17 Apr '20

At 07:59 PM 4/16/2020, you wrote: >Just reaching out to say thanks to all the folks that keep CentOS, >EPEL, this mailing list, etc running. It is probably partly due to >having used Red Hat for over two decades, but I always have a good >experience with CentOS. The recent servers that I have setup with >CentOS 8 are purring along. Thanks for the work and support. > >Cheers, >Ian Ian It is an absolute delight to see a posting like yours. No questions, no complaints, no "you shouldn't be doing that, and no non-answers. Thank you for confirming my belief that the open-source community is there to help. I, too, started with RedHat Linux when it was 'free', converted to WhiteHat, then Centos. I control servers of x86_64, Raspberry Pi, mostly on Centos 7, all for fun, not as a job. I'm working on the C8.... Now, ... I haven't had as good luck with C8 s you allege. There were several things I had to deal with: - new firewall - new mailer (sendmail -> postfix) - new system management (systemd) - new yum (introduction of software streams, whatever they are) But, it keeps me busy during this lockdown time. David San Francisco

2 1

Thank You
by Ian P. 17 Apr '20

17 Apr '20

Just reaching out to say thanks to all the folks that keep CentOS, EPEL, this mailing list, etc running. It is probably partly due to having used Red Hat for over two decades, but I always have a good experience with CentOS. The recent servers that I have setup with CentOS 8 are purring along. Thanks for the work and support. Cheers, Ian

1 0

A
by MOHD HOMAIDUR RAHMAN 16 Apr '20

16 Apr '20

-- ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' *M*d* H*omaidur* R**ahman *( Research Scholar ) Lab No. 510, Computational Biophysics Lab. Department of Biotechnology Indian Institute of Technology-Madras Chennai-600 036, India *Mobile No = +91- 7845991785* '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

1 0

Asking again: CentOS 7, KDE, logout needed twice
by mark 15 Apr '20

15 Apr '20

Every single time, no matter if I chose leave->logout from the start menu, or from ctrl-alt-delete, it does *not* log me out, but restarts KDE. The second time, doesn't matter which way I go, it *does* log me out. Anyone got a clue? Googling hasn't found anything.... mark

2 1

bcc tools and bpftrace packages misbuilt?
by Eric Zuck 15 Apr '20

15 Apr '20

After upgrading to 8.1.1911, bcc-tools and bpftrace seem to be broken. Current package versions I have: bpftrace-0.9-3.el8.x86_64 and bcc-tools-0.8.0-4.el8.x86_64 Both of these seem to be pulling in LLVM version 7, rather than the version 8 that is in 8.1.1911: [root@localhost ~]# bpftrace bpftrace: error while loading shared libraries: libclangFrontend.so.7: cannot open shared object file: No such file or directory [root@localhost ~]# /usr/share/bcc/tools/opensnoop Traceback (most recent call last): File "/usr/share/bcc/tools/opensnoop", line 19, in <module> from bcc import ArgString, BPF File "/usr/lib/python3.6/site-packages/bcc/__init__.py", line 27, in <module> from .libbcc import lib, bcc_symbol, bcc_symbol_option, _SYM_CB_TYPE File "/usr/lib/python3.6/site-packages/bcc/libbcc.py", line 17, in <module> lib = ct.CDLL("libbcc.so.0", use_errno=True) File "/usr/lib64/python3.6/ctypes/__init__.py", line 343, in __init__ self._handle = _dlopen(self._name, mode) OSError: libclangFrontend.so.7: cannot open shared object file: No such file or directory Looking through the CentosBug tracker, I see https://bugs.centos.org/view.php?id=16922: qt5-doctools-5.11.1-9.el8 from CentOS CR/8-stream is misbuilt https://bugs.centos.org/view.php?id=16930: rust-1.37.0-1.module_el8.1.0+246+1f1fd47e built against old libLLVM-7.so So, I gather that bcc-tools and bpftrace are not the only packages affected by an LLVM mismatch. Short of downloading and rebuilding the packages, does anyone have any suggestions about workarounds? Regards, -EricZ

1 1

Samba Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE SessSetup = -13
by Ralf Prengel 15 Apr '20

15 Apr '20

Hallo, perhaps someone hat a hint vor me. My centos 7 samba Server ist working fine using Win10 Clienst with Domaine-Integration. Shares are browseable and access is possible with a sepearte login. My problem: I want to mount this shares from a centos7 client. This fails with the following mesages. I tried several variations in my fstab found in the internet. Can anyone give me a hint to to access an samba-server that is working fine against a Win2016 Domain-Cotroller? Thanks Rakf Apr 15 05:37:47 6805ca01a270 kernel: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE Apr 15 05:37:47 6805ca01a270 kernel: CIFS VFS: Send error in SessSetup = -13 Apr 15 05:37:47 6805ca01a270 kernel: CIFS VFS: cifs_mount failed w/return code = -13 Apr 15 05:37:52 6805ca01a270 kernel: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE Apr 15 05:37:52 6805ca01a270 kernel: CIFS VFS: Send error in SessSetup = -13 Apr 15 05:37:52 6805ca01a270 kernel: CIFS VFS: cifs_mount failed w/return code = -13 smb.conf [global] Workgroup = COMLINE security = ads encrypt passwords = yes passdb backend = tdbsam realm = comline.de printing = cups printcap name = cups load printers = yes cups options = raw map to guest = bad user [share_gov_srvgovrcpbuild_clients] comment = share für gov projekt rcpbuild clients path = /mnt/raid01/share_volumes_gov_srvgovrcpbuild_clients_smb browseable = yes comment = Share für alle guest ok = yes writeable = yes read only = no force user = root create mask = 0777 directory mask = 0777 public = yes

3 5

Centos 7: cups-pdf Postprocessing prevented by selinux :(
by hw 15 Apr '20

15 Apr '20

Hi, how can I make it so that printing to a cups PDF printer can successfully run the postprocessing script I specified in /etc/cups/cups-pdf.conf? It does work with 'sentenforce permissve', and after creating and installing some selinux modules from audit.log entries, it still doesn't work, and there doesn't seem to be anything else that might prevent the postprocessing script from being run.

2 1

Red Hat Enterprise Linux 8.2 Beta now available
by Turritopsis Dohrnii Teo En Ming 14 Apr '20

14 Apr '20

Link: https://www.redhat.com/en/blog/red-hat-enterprise-linux-82-beta-now-availab… -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

1 0

SELinux denies login
by Gordon Messmer 13 Apr '20

13 Apr '20

We have a CentOS 7 workstation whose user has started reporting periodic login failures. This seems to be the result of the krb5 cache aging out, and sssd's krb5_child attempting and failing to remove the old cache file. The AVC follows: type=AVC msg=audit(1586670874.327:73041): avc: denied { unlink } for pid=28735 comm="krb5_child" name="krb5cc_1985100122_oxJnH7" dev="dm-0" ino=67978294 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file permissive=0 The policy allows sssd_t to unlink user_tmp_type: sesearch -s sssd_t --allow: allow sssd_t user_tmp_type : file { ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open } ; Is the problem that the credential cache files in /tmp are being created with the wrong label, or is there some other problem I'm not seeing?

1 0

CentOS 8 NIS
by Mark LaPierre 13 Apr '20

13 Apr '20

Hey all, Does anyone know where I can get NIS for CentOS 8? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

8 14

Display system logs in chroot ?
by kikinovak 12 Apr '20

12 Apr '20

Hi, This morning my day began quite badly, since my main production server wasn't responsive anymore. For public hosting I'm using a "Dedibox Pro" server at the french provider Online that's recently been acquired by Scaleway. I'm currently managing half a dozen public servers at that provider, all running CentOS 7. For debugging purposes, Online's web console enables you to boot the machine into a live rescue system, in that case Ubuntu 18.04. Once I managed to connect via SSH to the live system, here's what I did. Mount the root partition : # mount /dev/sda2 /mnt Mount the /boot partition : # mount /dev/sda1 /mnt/boot Then : # mount --rbind /proc /mnt/proc # mount --rbind /dev /mnt/dev # mount --rbind /sys /mnt/sys And then I chroot into the system : # chroot /mnt /bin/bash I had networking in the chroot environment. I tried to disable a handful of services like fail2ban and firewalld to begin with, but systemctl won't run in a chroot. So what I did was simply remove everything related to fail2ban and firewalld. Next thing was to look at the system logs to know what went wrong on startup, but I don't know how to do that from within a chroot. Any suggestions? Cheers, Niki PS : sorry for bad formatting. Since the unresponsive server is also running all my mails, I had to setup a Protonmail account to post on this list. Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Zoom?
by mark 11 Apr '20

11 Apr '20

Hi, folks, After I did a complete reinstall of current 7, with KDE instead of minimal, I'm mostly ok... except for Zoom. Has anyone gotten sound working with firefox? I get video, but it keeps claiming that my browser (the default firefox) can't access the system sound. Given that even as I type this, I'm streaming WUMB through its player.... I have noScript, but I enabled everything (except google-analytics), and no joy. I'd *really* rather use my browser than trust their app.... mark

11 15

CentOS 7 : broken dependencies
by Nicolas Kovacs 09 Apr '20

09 Apr '20

Hi, I got an alert from Yum-Cron this morning: Failed to check for updates with the following error message: Failed to build transaction: sclo-php72-php-pecl-imagick-3.4.4-1.el7.x86_64 requires libMagickCore.so.5()(64bit) sclo-php72-php-pecl-imagick-3.4.4-1.el7.x86_64 requires libMagickWand.so.5()(64bit) The CR repository is activated on this server, so I guess that's why. Which leads me to the more general question of: enable CR on a production server, yes or no? Pros : get security updates sooner Cons : expect breakage like the one above Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

4 8

CentOS-announce Digest, Vol 182, Issue 2
by centos-announce-request＠centos.org 09 Apr '20

09 Apr '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:1349 Important CentOS 6 krb5-appl Security Update (Johnny Hughes) 2. CESA-2020:1331 Important CentOS 6 ipmitool Security Update (Johnny Hughes) 3. CESA-2020:1335 Important CentOS 6 telnet Security Update (Johnny Hughes) 4. CESA-2020:1339 Critical CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Apr 2020 15:29:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1349 Important CentOS 6 krb5-appl Security Update Message-ID: <20200408152938.GA12312(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1349 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1349 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2cffa95c73d5b9662a971f9eddbd67ce1bf396911127e3d31b52caf60c90d984 krb5-appl-clients-1.0.1-10.el6_10.i686.rpm b7af46946a015ebf805991e9a9341163aec0ecbd1d9edb7cfc0234fbcc2b40cb krb5-appl-servers-1.0.1-10.el6_10.i686.rpm x86_64: 6309ea0347c159b5270abe84ad36d6e6d94c563c41ba107190a79a2a8210ccb6 krb5-appl-clients-1.0.1-10.el6_10.x86_64.rpm 3dced1fba4d6aa65537dedc85ef52ec6d7093edd165279e6284aac7e326f5579 krb5-appl-servers-1.0.1-10.el6_10.x86_64.rpm Source: 24b1ce1567946fff000259c1904aeb7b4736bbd067b6ca929d9869dcab4787e7 krb5-appl-1.0.1-10.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 8 Apr 2020 15:29:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1331 Important CentOS 6 ipmitool Security Update Message-ID: <20200408152949.GA12427(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1331 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1331 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fe098e08061bc5f26a3ccf7cf13727bcb81372ed1b075f8f6bb72760b554a839 ipmitool-1.8.15-3.el6_10.i686.rpm x86_64: 07ff5fac0cc78ed7bc23e72e668073b9ed878ecc9255021783e22d1f4fe3fcbb ipmitool-1.8.15-3.el6_10.x86_64.rpm Source: 00383fb3bf567a510f400d60bf8e8626bc350a00fbaeac9280db242b7f770bcb ipmitool-1.8.15-3.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 8 Apr 2020 15:30:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1335 Important CentOS 6 telnet Security Update Message-ID: <20200408153005.GA12627(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1335 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1335 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 923d72923ba2cd24753cc70ac63cf25d24718d3c228f6f92d2254ec7d73ef590 telnet-0.17-49.el6_10.i686.rpm 63af65efc0cf601f982af8bc595e12980d43b3c4b9872a273b518d05057c07b6 telnet-server-0.17-49.el6_10.i686.rpm x86_64: 591ba5f1a15b7b68106ddd4021fb4ff5f9c405535efe3b72375fec756ac414c9 telnet-0.17-49.el6_10.x86_64.rpm 4fb370c991172abffe095b182b70b2ed7badea2ae9db89e33c28d66b5c9c339c telnet-server-0.17-49.el6_10.x86_64.rpm Source: 7aba1d5e792fe1bbf45000f404f712727a55724523c36c88f26abe3c0cd1e91b telnet-0.17-49.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 8 Apr 2020 15:31:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1339 Critical CentOS 6 firefox Security Update Message-ID: <20200408153117.GA13046(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1339 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2020:1339 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 459d53b5c53d356ac22b15f40bdb6d7c046d1ceb8bfda60a717325677780533f firefox-68.6.1-1.el6.centos.i686.rpm x86_64: 459d53b5c53d356ac22b15f40bdb6d7c046d1ceb8bfda60a717325677780533f firefox-68.6.1-1.el6.centos.i686.rpm e83b453b7ccedac2c51fe1c6885e7d93d94940bf9011bbba921b98e75b6d4bc7 firefox-68.6.1-1.el6.centos.x86_64.rpm Source: cb52c089eb51c556b126bca5243dfa28125152405f1e77de20dbc247c0288733 firefox-68.6.1-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 182, Issue 2 ***********************************************

1 0

Re: [CentOS] RHEL 7.8 is out
by Thomas Stephen Lee 08 Apr '20

08 Apr '20

On Wed, Apr 8, 2020 at 2:01 AM Kenneth Porter <shiva(a)sewingwitch.com> wrote: > Some useful info for the list. Release notes! ;) > > < > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/ht… > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > Is this https://wiki.centos.org/About/Building_7 the place to look ? thanks. -- Lee

2 1

CentOS 7 and USB 3.1
by Jerry Geis 08 Apr '20

08 Apr '20

I am getting these errors on my machine for an external USB connection. Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: ERROR Transfer event for unknown stream ring slot 4 ep 3 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: @00000020155b24c0 00000000 00000000 1a001000 04048001 Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#3 uas_eh_abort_handler 0 uas-tag 4 inflight: CMD OUT Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#3 CDB: Write(10) 2a 00 35 b8 db ff 00 04 00 00 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: ERROR Transfer event for unknown stream ring slot 4 ep 3 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: @00000020155b24e0 00000000 00000000 1a001000 04048001 Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#2 uas_eh_abort_handler 0 uas-tag 3 inflight: CMD OUT Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#2 CDB: Write(10) 2a 00 35 b8 d7 ff 00 04 00 00 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: ERROR Transfer event for unknown stream ring slot 4 ep 3 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: @00000020155b2500 00000000 00000000 1a001000 04048001 Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#1 uas_eh_abort_handler 0 uas-tag 2 inflight: CMD OUT The device is a Crucial MX300 SSD 2T disk. I ran badblocks on it and nothing was reported. Why might I be getting errors ? Jerry

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2020