Discuss October 2021

discuss@lists.centos.org

39 participants
28 discussions

how to set a directory to system_u?
by hw 04 Oct '21

04 Oct '21

Hi, I'm trying to a lable a directory for ejabberd to store files that were uploaded with the http_upload module. Apparently I should set this to 'system_u:object_r:ejabberd_var_lib_t:s0' since all the files in /var/lib/ejabberd are. So: ls -laZ /srv/data/ unconfined_u:object_r:ejabberd_var_lib_t:s0 320 Jul 29 23:55 ejabberd semanage fcontext -a -t ejabberd_var_lib_t -s system_u '/srv/data/ejabberd(/.*)?' restorecon -R /srv/data/ejabberd/ ls -laZ /srv/data/ unconfined_u:object_r:ejabberd_var_lib_t:s0 320 Jul 29 23:55 ejabberd Why doesn't this work? Why can't they finally write some decent tool to use selinux that allows us to keep it enabled??? How can I set up the directory for ejabberd to store files in?

3 4

Installing openLDAP on Centos 7
by Gary Stainburn 03 Oct '21

03 Oct '21

I am following the howto on https://linuxhostsupport.com/blog/how-to-install-ldap-on-centos-7/ which matches a number of other howto's. I have tried this on two Centos 7 boxes and both fail in the same way when trying to set the certificates. I have tried <insert search engine here> without success. I found that by adding '-d 1' you enable debugging, but the debugging did not help. Anyone got any suggestions? All steps prior to this worked successfully. Gary [root@eddie ldap]# ldapmodify -Y EXTERNAL -H ldapi:/// -f certs.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config" ldap_modify: Other (e.g., implementation specific) error (80) [root@eddie ldap]# cat certs.ldif dn: cn=config changetype: modify replace: olcTLSCertificateFile olcTLSCertificateFile: /etc/openldap/certs/myldap.ringways.com.cert dn: cn=config changetype: modify replace: olcTLSCertificateKeyFile olcTLSCertificateKeyFile: /etc/openldap/certs/myldap.ringways.com.key [root@eddie ldap]# ll /etc/openldap/certs/ total 72 -rw-r--r--. 1 ldap ldap 65536 Sep 30 11:19 cert8.db -rw-r--r--. 1 ldap ldap 16384 Sep 30 11:19 key3.db -rw-r--r--. 1 ldap ldap 1493 Sep 30 12:16 myldap.ringways.com.cert -rw-r--r--. 1 ldap ldap 1704 Sep 30 12:16 myldap.ringways.com.key -r--r-----. 1 ldap ldap 45 Jul 29 2020 password -rw-r--r--. 1 ldap ldap 16384 Jul 29 2020 secmod.db [root@eddie ldap]#

2 1

kvm/qemu: USB passthrough
by hw 01 Oct '21

01 Oct '21

Hi, I'm trying to pass an USB port (or hub) to a kvm/qemu guest, to no avail. To find out which physical port I can use, I plugged a device into the port, and dmesg on the host says: usb 3-3: new high-speed USB device number 10 using xhci_hcd Which device on the host is that? lspci | grep -i usb 00:14.0 USB controller: Intel Corporation C610/X99 series chipset USB xHCI Host Controller (rev 05) 00:1a.0 USB controller: Intel Corporation C610/X99 series chipset USB Enhanced Host Controller #2 (rev 05) 00:1d.0 USB controller: Intel Corporation C610/X99 series chipset USB Enhanced Host Controller #1 (rev 05) lsusb -t /: Bus 04.Port 1: Dev 1, Class=root_hub, Driver=xhci_hcd/6p, 5000M /: Bus 03.Port 1: Dev 1, Class=root_hub, Driver=xhci_hcd/15p, 480M |__ Port 6: Dev 5, If 0, Class=Human Interface Device, Driver=usbhid, 1.5M |__ Port 13: Dev 3, If 0, Class=Human Interface Device, Driver=usbhid, 12M |__ Port 14: Dev 4, If 0, Class=Human Interface Device, Driver=usbhid, 12M /: Bus 02.Port 1: Dev 1, Class=root_hub, Driver=ehci-pci/3p, 480M |__ Port 1: Dev 2, If 0, Class=Hub, Driver=hub/8p, 480M /: Bus 01.Port 1: Dev 1, Class=root_hub, Driver=ehci-pci/3p, 480M |__ Port 1: Dev 2, If 0, Class=Hub, Driver=hub/6p, 480M I tried to add the USB port to the domain by editing it and adding: <hostdev mode='subsystem' type='usb' managed='yes'> <source> <vendor id='0x1d6b'/> <product id='0x0003'/> </source> </hostdev> The domain (a windows 10) starts with that, but no USB port shows up. The documentation about this totally sucks, and I couldn't find any answer that would work with a search engine, either. When I try to use the bus and port attributes, I'm getting domain verification errors from virsh edit. Is it even possible to pass an usb port or hub through? I just need one USB port in the guest.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2021