Discuss April 2020

discuss@lists.centos.org

90 participants
72 discussions

bcc tools and bpftrace packages misbuilt?
by Eric Zuck 15 Apr '20

15 Apr '20

After upgrading to 8.1.1911, bcc-tools and bpftrace seem to be broken. Current package versions I have: bpftrace-0.9-3.el8.x86_64 and bcc-tools-0.8.0-4.el8.x86_64 Both of these seem to be pulling in LLVM version 7, rather than the version 8 that is in 8.1.1911: [root@localhost ~]# bpftrace bpftrace: error while loading shared libraries: libclangFrontend.so.7: cannot open shared object file: No such file or directory [root@localhost ~]# /usr/share/bcc/tools/opensnoop Traceback (most recent call last): File "/usr/share/bcc/tools/opensnoop", line 19, in <module> from bcc import ArgString, BPF File "/usr/lib/python3.6/site-packages/bcc/__init__.py", line 27, in <module> from .libbcc import lib, bcc_symbol, bcc_symbol_option, _SYM_CB_TYPE File "/usr/lib/python3.6/site-packages/bcc/libbcc.py", line 17, in <module> lib = ct.CDLL("libbcc.so.0", use_errno=True) File "/usr/lib64/python3.6/ctypes/__init__.py", line 343, in __init__ self._handle = _dlopen(self._name, mode) OSError: libclangFrontend.so.7: cannot open shared object file: No such file or directory Looking through the CentosBug tracker, I see https://bugs.centos.org/view.php?id=16922: qt5-doctools-5.11.1-9.el8 from CentOS CR/8-stream is misbuilt https://bugs.centos.org/view.php?id=16930: rust-1.37.0-1.module_el8.1.0+246+1f1fd47e built against old libLLVM-7.so So, I gather that bcc-tools and bpftrace are not the only packages affected by an LLVM mismatch. Short of downloading and rebuilding the packages, does anyone have any suggestions about workarounds? Regards, -EricZ

1 1

Samba Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE SessSetup = -13
by Ralf Prengel 15 Apr '20

15 Apr '20

Hallo, perhaps someone hat a hint vor me. My centos 7 samba Server ist working fine using Win10 Clienst with Domaine-Integration. Shares are browseable and access is possible with a sepearte login. My problem: I want to mount this shares from a centos7 client. This fails with the following mesages. I tried several variations in my fstab found in the internet. Can anyone give me a hint to to access an samba-server that is working fine against a Win2016 Domain-Cotroller? Thanks Rakf Apr 15 05:37:47 6805ca01a270 kernel: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE Apr 15 05:37:47 6805ca01a270 kernel: CIFS VFS: Send error in SessSetup = -13 Apr 15 05:37:47 6805ca01a270 kernel: CIFS VFS: cifs_mount failed w/return code = -13 Apr 15 05:37:52 6805ca01a270 kernel: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE Apr 15 05:37:52 6805ca01a270 kernel: CIFS VFS: Send error in SessSetup = -13 Apr 15 05:37:52 6805ca01a270 kernel: CIFS VFS: cifs_mount failed w/return code = -13 smb.conf [global] Workgroup = COMLINE security = ads encrypt passwords = yes passdb backend = tdbsam realm = comline.de printing = cups printcap name = cups load printers = yes cups options = raw map to guest = bad user [share_gov_srvgovrcpbuild_clients] comment = share für gov projekt rcpbuild clients path = /mnt/raid01/share_volumes_gov_srvgovrcpbuild_clients_smb browseable = yes comment = Share für alle guest ok = yes writeable = yes read only = no force user = root create mask = 0777 directory mask = 0777 public = yes

3 5

Centos 7: cups-pdf Postprocessing prevented by selinux :(
by hw 15 Apr '20

15 Apr '20

Hi, how can I make it so that printing to a cups PDF printer can successfully run the postprocessing script I specified in /etc/cups/cups-pdf.conf? It does work with 'sentenforce permissve', and after creating and installing some selinux modules from audit.log entries, it still doesn't work, and there doesn't seem to be anything else that might prevent the postprocessing script from being run.

2 1

Red Hat Enterprise Linux 8.2 Beta now available
by Turritopsis Dohrnii Teo En Ming 14 Apr '20

14 Apr '20

Link: https://www.redhat.com/en/blog/red-hat-enterprise-linux-82-beta-now-availab… -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

1 0

SELinux denies login
by Gordon Messmer 13 Apr '20

13 Apr '20

We have a CentOS 7 workstation whose user has started reporting periodic login failures. This seems to be the result of the krb5 cache aging out, and sssd's krb5_child attempting and failing to remove the old cache file. The AVC follows: type=AVC msg=audit(1586670874.327:73041): avc: denied { unlink } for pid=28735 comm="krb5_child" name="krb5cc_1985100122_oxJnH7" dev="dm-0" ino=67978294 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file permissive=0 The policy allows sssd_t to unlink user_tmp_type: sesearch -s sssd_t --allow: allow sssd_t user_tmp_type : file { ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open } ; Is the problem that the credential cache files in /tmp are being created with the wrong label, or is there some other problem I'm not seeing?

1 0

CentOS 8 NIS
by Mark LaPierre 13 Apr '20

13 Apr '20

Hey all, Does anyone know where I can get NIS for CentOS 8? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

8 14

Display system logs in chroot ?
by kikinovak 12 Apr '20

12 Apr '20

Hi, This morning my day began quite badly, since my main production server wasn't responsive anymore. For public hosting I'm using a "Dedibox Pro" server at the french provider Online that's recently been acquired by Scaleway. I'm currently managing half a dozen public servers at that provider, all running CentOS 7. For debugging purposes, Online's web console enables you to boot the machine into a live rescue system, in that case Ubuntu 18.04. Once I managed to connect via SSH to the live system, here's what I did. Mount the root partition : # mount /dev/sda2 /mnt Mount the /boot partition : # mount /dev/sda1 /mnt/boot Then : # mount --rbind /proc /mnt/proc # mount --rbind /dev /mnt/dev # mount --rbind /sys /mnt/sys And then I chroot into the system : # chroot /mnt /bin/bash I had networking in the chroot environment. I tried to disable a handful of services like fail2ban and firewalld to begin with, but systemctl won't run in a chroot. So what I did was simply remove everything related to fail2ban and firewalld. Next thing was to look at the system logs to know what went wrong on startup, but I don't know how to do that from within a chroot. Any suggestions? Cheers, Niki PS : sorry for bad formatting. Since the unresponsive server is also running all my mails, I had to setup a Protonmail account to post on this list. Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Zoom?
by mark 11 Apr '20

11 Apr '20

Hi, folks, After I did a complete reinstall of current 7, with KDE instead of minimal, I'm mostly ok... except for Zoom. Has anyone gotten sound working with firefox? I get video, but it keeps claiming that my browser (the default firefox) can't access the system sound. Given that even as I type this, I'm streaming WUMB through its player.... I have noScript, but I enabled everything (except google-analytics), and no joy. I'd *really* rather use my browser than trust their app.... mark

11 15

CentOS 7 : broken dependencies
by Nicolas Kovacs 09 Apr '20

09 Apr '20

Hi, I got an alert from Yum-Cron this morning: Failed to check for updates with the following error message: Failed to build transaction: sclo-php72-php-pecl-imagick-3.4.4-1.el7.x86_64 requires libMagickCore.so.5()(64bit) sclo-php72-php-pecl-imagick-3.4.4-1.el7.x86_64 requires libMagickWand.so.5()(64bit) The CR repository is activated on this server, so I guess that's why. Which leads me to the more general question of: enable CR on a production server, yes or no? Pros : get security updates sooner Cons : expect breakage like the one above Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

4 8

CentOS-announce Digest, Vol 182, Issue 2
by centos-announce-request＠centos.org 09 Apr '20

09 Apr '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:1349 Important CentOS 6 krb5-appl Security Update (Johnny Hughes) 2. CESA-2020:1331 Important CentOS 6 ipmitool Security Update (Johnny Hughes) 3. CESA-2020:1335 Important CentOS 6 telnet Security Update (Johnny Hughes) 4. CESA-2020:1339 Critical CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Apr 2020 15:29:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1349 Important CentOS 6 krb5-appl Security Update Message-ID: <20200408152938.GA12312(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1349 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1349 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2cffa95c73d5b9662a971f9eddbd67ce1bf396911127e3d31b52caf60c90d984 krb5-appl-clients-1.0.1-10.el6_10.i686.rpm b7af46946a015ebf805991e9a9341163aec0ecbd1d9edb7cfc0234fbcc2b40cb krb5-appl-servers-1.0.1-10.el6_10.i686.rpm x86_64: 6309ea0347c159b5270abe84ad36d6e6d94c563c41ba107190a79a2a8210ccb6 krb5-appl-clients-1.0.1-10.el6_10.x86_64.rpm 3dced1fba4d6aa65537dedc85ef52ec6d7093edd165279e6284aac7e326f5579 krb5-appl-servers-1.0.1-10.el6_10.x86_64.rpm Source: 24b1ce1567946fff000259c1904aeb7b4736bbd067b6ca929d9869dcab4787e7 krb5-appl-1.0.1-10.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 8 Apr 2020 15:29:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1331 Important CentOS 6 ipmitool Security Update Message-ID: <20200408152949.GA12427(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1331 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1331 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fe098e08061bc5f26a3ccf7cf13727bcb81372ed1b075f8f6bb72760b554a839 ipmitool-1.8.15-3.el6_10.i686.rpm x86_64: 07ff5fac0cc78ed7bc23e72e668073b9ed878ecc9255021783e22d1f4fe3fcbb ipmitool-1.8.15-3.el6_10.x86_64.rpm Source: 00383fb3bf567a510f400d60bf8e8626bc350a00fbaeac9280db242b7f770bcb ipmitool-1.8.15-3.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 8 Apr 2020 15:30:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1335 Important CentOS 6 telnet Security Update Message-ID: <20200408153005.GA12627(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1335 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1335 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 923d72923ba2cd24753cc70ac63cf25d24718d3c228f6f92d2254ec7d73ef590 telnet-0.17-49.el6_10.i686.rpm 63af65efc0cf601f982af8bc595e12980d43b3c4b9872a273b518d05057c07b6 telnet-server-0.17-49.el6_10.i686.rpm x86_64: 591ba5f1a15b7b68106ddd4021fb4ff5f9c405535efe3b72375fec756ac414c9 telnet-0.17-49.el6_10.x86_64.rpm 4fb370c991172abffe095b182b70b2ed7badea2ae9db89e33c28d66b5c9c339c telnet-server-0.17-49.el6_10.x86_64.rpm Source: 7aba1d5e792fe1bbf45000f404f712727a55724523c36c88f26abe3c0cd1e91b telnet-0.17-49.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 8 Apr 2020 15:31:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1339 Critical CentOS 6 firefox Security Update Message-ID: <20200408153117.GA13046(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1339 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2020:1339 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 459d53b5c53d356ac22b15f40bdb6d7c046d1ceb8bfda60a717325677780533f firefox-68.6.1-1.el6.centos.i686.rpm x86_64: 459d53b5c53d356ac22b15f40bdb6d7c046d1ceb8bfda60a717325677780533f firefox-68.6.1-1.el6.centos.i686.rpm e83b453b7ccedac2c51fe1c6885e7d93d94940bf9011bbba921b98e75b6d4bc7 firefox-68.6.1-1.el6.centos.x86_64.rpm Source: cb52c089eb51c556b126bca5243dfa28125152405f1e77de20dbc247c0288733 firefox-68.6.1-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 182, Issue 2 ***********************************************

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2020