July 2021 - Discuss - lists.centos.org

Memory vs. Display Card
by Rick 28 Oct '25

28 Oct '25

Since memory has become quite cheap lately I decided to move from 2 GB to 6. When I installed the memory every thing was fine until I went to run level 5. At that point the screen turned to garbage and the system froze. Is there a way to fix this so I can use the memory I bought? Do I need a new display card? Current hardware: Intel D975XBX2 Motherboard VGA compatible controller: ATI Technologies Inc RV505 [Radeon X1550 64-bit] -- http://www.spinics.net/lists/

13 19

SSD for Centos SWAP /tmp & /var/ partition
by Keith Roberts 03 Sep '25

03 Sep '25

Has anyone actually used a SSD in a Centos setup? My little experiment with a s/h WD drive for /tmp and SWAP partitions kicked the bucket on Wednesday, when the poor WD drive caught the click-of-death. It was a s/h drive to start with and lasted about 4 months. But that was without the /var/log/ partition being written to it, as I mounted that back onto /var/log from the original drive. So I had to install another (WD) drive, and repartion it and rebuild my RPM package database, from the backed-up Packages file. That seems to be all OK now. I'm wondering if it would be a good idea to use a new SSD for moving all the disk i/o to, that Linux likes to do so often. Plus putting SWAP onto a decent SSD should speed things up somewhat. Here's a short video of a laptop fitted with a SSD drive booting macOS, compared to a similar laptop booting from the standard HDD. The laptop with the SSD boots and loads some apps in 28 seconds. The other one takes twice as long. http://eshop.macsales.com/shop/SSD/OWC/Mercury_Extreme_Pro_6G/?utm_source=t… Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

33 96

Problems with CentOS 8 kickstart
by Hooton, Gerard 23 Jun '25

23 Jun '25

Hi All, I am having problems with a kickstart install of CentOS 8 When I try to do a completely automated install using PXE/UEFI it get to the point where it reads the kickstart config file. Then I see the following message "kickstart install Started cancel waiting for multipath siblings for nvme0n1" This is what I have in the kickstart file # Clear the Master Boot Record zerombr # Partition clearing information clearpart --all --initlabel autopart --nohome --type=lvm --fstype=xfs ================ When I install from a USB drive it works OK and I have the following in /dev/disk/by-id lrwxrwxrwx. 1 root root 13 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810 -> ../../nvme0n1 lrwxrwxrwx. 1 root root 13 Jul 5 10:28 nvme-eui.002538b11102f46d -> ../../nvme0n1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 lvm-pv-uuid-5Dg4mg-saHa-hJJ6-n5a8-MxBS-gdFi-5jPoNn -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part2 UNG_MZVL2512HCJQ-0-> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part2 -> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part2 -> ../../nvme0n1p2 drwxr-xr-x. 2 root root 400 Jul 5 10:28 . lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkKtEdtLjwJQyIdxJcSvPv8TEAjwYGMv6yU -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkKAooqrczySYJyiHvUAUji9oScPN2cVi7J -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-swap -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-root -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkK5HZXbR2ow5xKGuD7jVe4UPzZm2qRLLXI -> ../../dm-2 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-home -> ../../dm-2 It's looks like that I am not doing the disk drive stuff in the config file correctly. -- Gerard Hooton. Senior Technical Officer School of Engineering. University College Cork. College Road. Cork. Ireland. Loc8: WDR-04-60G Tel: +353 21 4902296 Mobile: +353 852813491

3 7

Issues booting centos7 [dracut is failing to enable centos/root, centos/swap LVs]
by Yannis Milios 01 Feb '25

01 Feb '25

Hello, I'm having a strange problem booting a new centos7 installation. Below some background on this. [I have attached the tech details at the bottom of this message] I started a new CentOS7 installation on a VM, so far all good, o/s boots fine. Then I decided to increase VM disk size (initially was 10G) to 13G. Powered off the VM, increased the vhd via the hypervisor, booted from CentOS livecd, selected "recover my centos installation". Then I used the following sequence of commands to make the new vhd size "visible" to the o/s ... - ran fdisk /dev/sda and deleted partition 2. (This is the LVM partition where the o/s is stored. The first partition is /boot [xfs] partition *non lvm*.) - created a new partition with same starting sector as before deleting it, but a different ending sector (to reflect to the increased space). - set partition type to 8e (lvm), saved settings and exit. - ran pvresize and lvresize to make new space visible to the o/s.All good, I can see the space increase on 'lvdisplay centos/root'. - ran 'mount /dev/mapper/centos-root /mnt/root' to temporarily mount the o/s partition. - ran 'xfs_growfs /mnt/root' to resize the o/s fs to the new size. It was successful and I could actually chroot to the o/s and verify new disk size. - rebooted and tried to boot from hdd this time. Grub menu shows up and loads default kernel (3.10.0-862.9.1.el7.x86_64). - after initial kernel boot up process, booting continues to initrd and then it's where the problem starts... - looks like dracut has issues locating/enabling /dev/mapper/centos-root (lv) and as a result it cannot boot to the 'real' root fs (/). - while in dracut shell, I execute the following command sequence: 1. lvm lvchange -ay /dev/centos/root 2. lvm lvchange -ay /dev/centos/swap 3. ln -s /dev/mapper/centos-root /dev/root 4. exit ...and the o/s boots fine...so looks like the pv,vg,lv is detected properly while in initrd, but somehow dracut has difficulties enabling the root,swap LVs ? - While in o/s, I rebuild initrd by using: 'dracut -f -v -a lvm' Note, I have to use '-a lvm' as for some reason, if don't, the lvm utils (lvm,lvm_scan) are not being included to the initrd, not sure why this happens. After rebooting, same thing happens, I have to manually boot the system via dracut shell. I'm a bit stuck at this point, any clues what I'm doing wrong in here ? As I previously said, this is a new installation, so I could simply reinstall the whole thing, but I would rather try to find out some answer to why is this happening ... :-) [curiosity] Some additional details: ================== I've attached /run/initramfs/rdsosreport.txt file [generated while in inird] here: https://privatebin.net/?fdc4052c0c402884#gdB/QYR3IeR55SxUbjfrkZPQfJ7jMxiUxq… o/s ver=CentOS Linux release 7.5.1804 (Core) [root@localhost ~]# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 13G 0 disk ├─sda1 8:1 0 500M 0 part /boot └─sda2 8:2 0 12.5G 0 part ├─centos-root 253:0 0 11.5G 0 lvm / └─centos-swap 253:1 0 1G 0 lvm [SWAP] [root@localhost ~]# cat /etc/default/grub GRUB_TIMEOUT=5 GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)" GRUB_DEFAULT=saved GRUB_DISABLE_SUBMENU=true GRUB_TERMINAL_OUTPUT="console" GRUB_CMDLINE_LINUX="rd.lvm.lv=centos/root rd.lvm.lv=centos/swap rd.shell rhgb" GRUB_DISABLE_RECOVERY="true"

4 11

Microsoft Teams on CentOS 7. Does the latest version work?
by Toralf Lund 03 Dec '21

03 Dec '21

Does anyone else run Microsoft Teams on CentOS 7? I've used it for a while now, and it's generally worked reasonably well. However, after upgrading to the latest version from the Microsoft repos, it doesn't start up properly. Processes start and remain active until I give up and kill them, but I can't see a window or a tray icon or anything. Has anyone else seen this? Is there anything I can do to make the GUI appear? This is not a big deal as everything just works fine if I revert to the previous release, but it would be interesting to know if this is a general problem with the software, or I have some weird issue with my system. The release that doesn't work is 1.4.00.13653. The one that does is 1.4.00.7556. - Toralf

14 31

MATE 1.20 test build for CentOS 7 available
by Greg Bailey 14 Oct '21

14 Oct '21

Hi everyone, There's been discussions in the past about updating MATE RPMs in EPEL-7: https://bugzilla.redhat.com/show_bug.cgi?id=1436260 https://lists.centos.org/pipermail/centos/2019-August/173154.html (and lots of others...) As a proof-of-concept, I've written some scripts that clone specific commits from the Fedora master branches, and then runs a tool to re-apply RPM scriptlets that are required by EL7 but removed from the Fedora .spec files. The scripts are available at: https://github.com/gebailey/mate-rpms/tree/master/1.20/el7 There's also instructions there if you want to try upgrading to MATE 1.20 w/o rebuilding them yourself. If these packages work for others, perhaps we can revisit the idea of updating the epel7 branches of the Fedora git repos and submitting an official update. There's nothing here (yet) about building MATE 1.22 (which might require a newer gcc for EL7), or building anything on CentOS 8, but thought the CentOS 7 users might find this helpful. -Greg

6 17

Transition test report going from CentOS8 to Debian 10.
by Lamar Owen 06 Aug '21

06 Aug '21

Sorry for the length.... I'm posting this here since this particular transition has been mentioned on-list as one possibility for a path forward for current CentOS Linux users. AlmaLinux, the Developer Subscription RHEL, Rocky, CentOS Stream, Springdale, upgrading to full RHEL; all these are also possibilities, too, and all have different strengths and weaknesses. The transition to Debian has a lot of strengths, including a long track-record of support (even if the support time for a particular release is shorter), a fully-open development model with no 'corporate overlord' that I know of, a large set of supported packages, and a huge community of developers and users. For the CentOS user the main weakness is having to learn a few areas of difference in the way the system is setup and maintained; of course, if a ten-year 'stable' timeframe is really that important to you the lack of that is also a weakness. So, last week I transitioned, as a test of sorts, my working CentOS 8 main laptop to Debian 10. I kept a complete backup of the C8 install should I wish to go back to it, and installed Buster to a new mSATA SSD, but ported the two SATA drives (Dell Precision M6700 - has an mSATA slot plus two SATA bays) straight over after making full backups. I posted a pretty complete rundown on the scientific linux users mailing list, so I won't recap it all here. The bottom line was the the transition was not any more difficult, really, than moving from CentOS 7 to CentOS 8. The software versions in Buster are pretty close to what is in CentOS 8, although I have yet to need any third-party repository (PPA) for anything I've needed to install. All the packages I have worked with so far have worked fine with a little bit of massaging. These include commercial (and costly) software such as Harrison Consoles' Mixbus32C, Qoppa's PDFStudio2019 Professional, and others. So if you were to decide that this is the route for you to take, it does work and I found it to be not nearly as hard as I had thought it might be. If you install GNOME 3 you get GNOME 3; it feels pretty much the same as a non-Classic CentOS GNOME 3, just with a different set of extensions installed by default. That's on the workstation. On the server side, I'm evaluating Proxmox for the virtualization solution, and so far I'm finding it to be a pretty easy migration. I'm using the 'non-subscription' repository, so this is a no-cost option. Even getting the box registered to our EMC Clariion SAN was relatively easy; EMC provides the Unisphere Server Utility for Linux x64 in RPM form; the latest I have is "ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm" (which is fairly old, but I did say Clariion arrays, so they're pretty old, too). Debian has provided the 'alien' tool for some time; after installing alien, a simple 'alien -i ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm' installed the EMC RPM in the correct place. Proxmox already included everything that serverutilcli requires; on a plain Buster install I had to install dm-multipath and the device mapper libraries and tools before serverutilcli would find the arrays; but it ran just like it did on CentOS 8 (and 7). I haven't decided whether to stay on Debian or not; too early to tell. I have time to test and evaluate. My CentOS 7 installs aren't goin anywhere, though, at least until late 2023. And I've registered for a Developer subscription of RHEL so that I can properly evaluate that option, too. This is the beauty of open source: we have OPTIONS.

11 23

hosts.deny, fail2ban etc.
by H 04 Aug '21

04 Aug '21

|Running CentOS 7. I was under the impression - seemingly mistaken - that by adding a rule to /etc/hosts.deny such as ALL: aaa.bbb.ccc.* would ban all attempts from that network segment to connect to the server, ie before fail2ban would (eventually) ban connection attempts. This, however, does not seem correct and I could use a pointer to correct my misunderstanding. How is hosts.deny used and what have I missed? Is it necessary to run: iptables -I INPUT -s aaa.bbb.ccc.0/24 -j DROP to drop incoming connection attempts from that subnet? Thank you! |

9 17

how do I get an OLD Version like 6.3
by Jerry Geis 04 Aug '21

04 Aug '21

I need to example a really old version like 6.3. Where can I get a download for that ? Thanks Jerry

3 3

CentOS 8: two external network adapters, two ISPs - routing problems
by Konstantin Boyandin 02 Aug '21

02 Aug '21

Hello! Given: a CentOS 8-powered computer with three network adapters. eth0, eth2: external, connected to two different ISPs eth1: faces home network (intranet) The task: allow accessing certain internal services from either ISP. There are several services, I only mention SSH below. In the configs below: IP1: external IP at first ISP (ISP1), assigned to eth0 Gateway1: IP of gateway provided by ISP1 Network1,Netmask1: related to IP1 IP2: external IP at second ISP (ISP2), assigned to eth2 Gateway2: IP of gateway provided by ISP2 Network2,Netmask2: related to IP2 LocalSSHIP: IP in intranet (eth1) where SSH server is running Current configs follow. Routing tables: echo "200 isp1" >> /etc/iproute2/rt_tables echo "201 isp2" >> /etc/iproute2/rt_tables Routing policies: /etc/sysconfig/network-scripts/route-eth0 Network1 dev eth0 src IP1 table isp1 default via Gateway1 dev eth0 table isp1 /etc/sysconfig/network-scripts/route-eth2 Network2 dev eth2 src IP2 table isp2 default via Gateway2 dev eth2 table isp2 Routing rules: /etc/sysconfig/network-scripts/rule-eth0 from IP1/32 table isp1 /etc/sysconfig/network-scripts/rule-eth2 from IP2/32 table isp2 iptables snippets. External traffic forwarded to local SSH server from both interfaces: iptables -A PREROUTING -t nat -i eth0 -p tcp -d IP1 --dport 22 -j DNAT --to LocalSSHIP:22 iptables -A PREROUTING -t nat -i eth2 -p tcp -d IP2 --dport 22 -j DNAT --to LocalSSHIP:22 iptables -A FORWARD -p tcp -d LocalSSHIP --dport 22 -j ACCEPT eth0 is default gateway: $ ip route default via Gateway1 dev eth0 proto static metric 100 default via Gateway2 dev eth2 proto static metric 101 ... $ ip rule 0: from all lookup local 32764: from IP2 lookup isp2 32765: from IP1 lookup isp1 32766: from all lookup main 32767: from all lookup default SNAT is applied for the traffic originating from eth1: iptables -t nat -A POSTROUTING -i eth1 -o eth0 -j SNAT --to-source IP1 Current situation: - All services forwarded from eth0 are working normally. - All traffic originating from intranet passes out and back normally. - All the attempts to access services from eth2 time out. There are no obvious hints in /var/log/messages (such as complaints about "martian IPs"). I am somewhat at a loss here, all the pieces of advice would be very welcome. -- Sincerely, Konstantin Boyandin

3 2

It's been six days since CVD-2021-33909 was patched in RHEL, what's the holdup for Stream 8?
by Steven Rosenberg 29 Jul '21

29 Jul '21

This bug in the kernel was patched in RHEL on 7/20. Every other mainstream Linux distro patched it that day or the day after. That includes Rocky and Alma. https://access.redhat.com/security/cve/CVE-2021-33909 It's still not patched six days later in CentOS Stream 8. This Bugzilla entry makes it clear that when it comes to security, CentOS Stream falls behind RHEL. But this far behind? https://bugzilla.redhat.com/show_bug.cgi?id=1975182 This doesn't make a good argument for Stream being a viable CentOS Linux replacement.

3 5

Old CentOS 6.3 grub.conf
by Jerry Geis 28 Jul '21

28 Jul '21

I am trying to "add" an entry to grub.conf on CentOS 6.3 - and change the default=0 to default=1 # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You do not have a /boot partition. This means that # all kernel and initrd paths are relative to /, eg. # root (hd0,0) # kernel /boot/vmlinuz-version ro root=/dev/sda1 # initrd /boot/initrd-[generic-]version.img #boot=/dev/sda default=1 timeout=5 splashimage=(hd0,0)/boot/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-279.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-279.el6.x86_64 ro root=UUID=09337d96-de39-43f1-99c2-8a6a1fadd465 rd_NO_LUKS rd_NO_LVM LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=auto KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet initrd /boot/initramfs-2.6.32-279.el6.x86_64.img title Boot Other root (hd0,0) kernel /boot/vmlinuz initrd /boot/initrd I then run "grub-install /dev/sda" and reboot. If I cursor down - my new title is present - but the default is still the first title. What did I miss ? Thanks, jerry

1 0

heads up: stream8 cloud-init rebase 20 to 21
by Leon Fauster 26 Jul '21

26 Jul '21

FYI and everyone on C8S: cloud-init does run on deployed cloud vm's anymore succesfully after update (it was rebased from 20. to 21.). Fix: before rebooting run "cloud-init clean" -- Leon

1 0

Folio Infobase
by J Martin Rushton 26 Jul '21

26 Jul '21

Does anyone know any way to read .nfo files from Folio infobases. The best suggestion I've seen so far is to run up a VM with Windows 98 on it, does anyone know where I can get a copy of that! BTW, these are not the .nfo files used to describe scenes. -- J Martin Rushton MBCS

1 0

yum quiet not really quiet anymore?
by Gionatan Danti 24 Jul '21

24 Jul '21

Hi all, I noticed that "yum -q" (or "dnf" -q) on CentOS 8 is not really quiet anymore. For example (notiche the "upgraded" line): [root@localhost cron.d]# yum upgrade -y -q Upgraded: python3-perf-4.18.0-305.10.2.el8_4.x86_64 While yum historically had issue with the quiet option [1], this specific issue seems new to me. Do you have any suggestion (short of redirecting stdout to /dev/null)? Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 2

OT: firefox question
by Valeri Galtsev 24 Jul '21

24 Jul '21

Dear Experts, My question is OT, as it is related to firefox, not CentOS system per se. Even more: my firefox runs on FreeBSD workstation. But I figured this list have largest likelihood of having experts in firefox (as well as on other things), so... My firefox behavior changed after one of recent updates.. When one logs in to website that is locked using web password (e.g., set in .htacess/.htpasswd in apache), one gives username/password once. Then firefox remembers that while firefox is running, and you don't have to give credentials (though authentication does happen behind the scenes all the time since). But not anymore for me at least on my (FreeBSD) workstation: in the morning I discover firefox (though it had not been restarted) asks yet again credentials to websites I have been logged to. As if firefox purges credentials to websites after some period of time (or inactivity on those websites). This stared happening not long ago after one of updates firefox is known to release annoyingly often (as in: mozilla foundation forgot the meaning of the word "release" which means well debugged code some time about decade ago...). I tried to find relevant setting in GUI preferences to no avail (maybe it is just me?), and hope, experts know deeper lying preferences, and may point me to relevant one. All in all, I'm forced back onto my pursuit for replacement for firefox browser... Thanks a lot for all your answers. And my apologies for rant (which I was not able to separate due to my frustration...). Valeri -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 2

Difference between CentOS Linux and CentOS Stream
by Kaushal Shriyan 23 Jul '21

23 Jul '21

Hi, I am confused between CentOS Linux and CentOS Stream as per https://www.centos.org/download/. Please guide me on which one I need to use in the production environment. Is there a difference between CentOS Linux and CentOS Stream? Thanks in advance and I look forward to hearing from you. Best Regards, Kaushal

15 18

Annoyances with sound
by mark 23 Jul '21

23 Jul '21

Hi, folks, Running C7, updated the beginning of this month. KDE, I go to the start menu->multimedia. and select kmix, the pretty cursor bounces for a while, then apparently ends with nothing running. Nothing in .xerrors. I try selecting audacity - which I don't trust, given that the last time, weeks ago, that I ran it from the command line, after about 5 min, it hung my system (16G RAM, Core I-7) so hard I had to power cycle. From the start menu... I get a popup "an error has occured." What's going on here? mark

1 0

CentOS-announce Digest, Vol 196, Issue 4
by centos-announce-request＠centos.org 23 Jul '21

23 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2725 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2021:2784 Important CentOS 7 java-11-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 Jul 2021 13:52:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2725 Important CentOS 7 kernel Security Update Message-ID: <20210722135255.GA22110(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2725 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2725 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e07580dc20cee29ddae2c26b7d4782a6e7671477d7f4ae210d2cef6cc71555cb bpftool-3.10.0-1160.36.2.el7.x86_64.rpm 91d2cf4d7a40fe66ba14583d4d5f045850fefc8b26b7e0adc2634f5ec9f9a775 kernel-3.10.0-1160.36.2.el7.x86_64.rpm 6ce4b480a292b7fa51c31777377a1711c2537597c5cf02d8aa14b345321b67bf kernel-abi-whitelists-3.10.0-1160.36.2.el7.noarch.rpm 1cd93bcccbab328b508e869ff3ceeaa30e1ab5ac781b7a6c3b91207832226025 kernel-debug-3.10.0-1160.36.2.el7.x86_64.rpm 5ec120d1c66453ab1a85e5107b0b4457686f595cf2e8dfc5ca04adcec4f0ade0 kernel-debug-devel-3.10.0-1160.36.2.el7.x86_64.rpm ba5a53ea9bd2aff2765fd9fc38a3f75ecd5d3e617e1c2cb85f6a9a793063506c kernel-devel-3.10.0-1160.36.2.el7.x86_64.rpm 28f85ca5b6e7c2b1e3ab7c4b31675583e8a72c18188f86f288a9a9bc046a202c kernel-doc-3.10.0-1160.36.2.el7.noarch.rpm 68cfd2b5e2aa6b9bad7a4040def6ccec2aa6ca31c6acf4758e98b507e8efc105 kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm 53ebea1b387c7333eb49334b5bf8e867d5307742f502d7d40091abe8eb42387b kernel-tools-3.10.0-1160.36.2.el7.x86_64.rpm c3571b20ed80af5bcdad26c4ffded5902a413e69a9f36e66ea22eb7f0b7343be kernel-tools-libs-3.10.0-1160.36.2.el7.x86_64.rpm d0f3c1d37d812e6fbf2b4e853fb66fd0ffe2a908b0bd0749ea1f99b53198ad71 kernel-tools-libs-devel-3.10.0-1160.36.2.el7.x86_64.rpm cc99796988903240582ca2234451a6b7eaa5f9534e910f4f9838cbd024cc7b0a perf-3.10.0-1160.36.2.el7.x86_64.rpm d1779b88b2029c7b3cd102334127e7013a0a71479581fd2f04f0d23bbc8a0463 python-perf-3.10.0-1160.36.2.el7.x86_64.rpm Source: e82932562eb31affee526927b3cbc2280750983a88182a0fcc49e511e6836691 kernel-3.10.0-1160.36.2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 22 Jul 2021 13:56:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2784 Important CentOS 7 java-11-openjdk Security Update Message-ID: <20210722135657.GA22487(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2784 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2784 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a2e3eec180d90a42cea830a8b5f0fa6890394a9b51d4349667c8010da5d2d418 java-11-openjdk-11.0.12.0.7-0.el7_9.i686.rpm f8d118dd0c38e6be586da71c24bb8639d30d388d9b57e276ec52b9ac2f649ead java-11-openjdk-11.0.12.0.7-0.el7_9.x86_64.rpm c1a1ba3ae8f745008a0b7e5c0e4663241db1a386d16bd54eef846e125686ceba java-11-openjdk-demo-11.0.12.0.7-0.el7_9.i686.rpm 708f19a2413ea0ae0ab9a7619a05c06675c69004d477b56b71ac6ec988ee1cc4 java-11-openjdk-demo-11.0.12.0.7-0.el7_9.x86_64.rpm 1a762e2d8882a0c051d0a322eb97ba3c2fbdb843e16699bb702cecd284f238fa java-11-openjdk-devel-11.0.12.0.7-0.el7_9.i686.rpm 5b9c35a49f05bdae1d6d9ae13688adb2f1aa9eed15604ea80e3126af3ad89c77 java-11-openjdk-devel-11.0.12.0.7-0.el7_9.x86_64.rpm 155a01df2abb9e5b0463d2bbe0314d3147245d1540cc0e5026de16abc670d0e6 java-11-openjdk-headless-11.0.12.0.7-0.el7_9.i686.rpm f1402f59f4309e9a2ad497a9699c098b61381170de7f600a6a7636db589400d5 java-11-openjdk-headless-11.0.12.0.7-0.el7_9.x86_64.rpm 49275f52aa1c71edc688e6802a1f2c8b136594807077f4aa90e4e2686edd8ddb java-11-openjdk-javadoc-11.0.12.0.7-0.el7_9.i686.rpm f3c1504a0f9e8be3e261212092e89009d8b01f3fe0f1804ed10e767846e87d26 java-11-openjdk-javadoc-11.0.12.0.7-0.el7_9.x86_64.rpm d17d23e9f3e2cd89c98f84ba07345a6c51f1dc3d67f5d52d483e6f2ed2d93751 java-11-openjdk-javadoc-zip-11.0.12.0.7-0.el7_9.i686.rpm 4c7a4b1402ce62b471994dd364f3e883167ad5ba8ebba01d67f8ceee2f63d6a5 java-11-openjdk-javadoc-zip-11.0.12.0.7-0.el7_9.x86_64.rpm 2596d8e58b7977e350ac45b39a8c22507bf5f23a48e5c5af3025b81016622b58 java-11-openjdk-jmods-11.0.12.0.7-0.el7_9.i686.rpm b346f29da69c21241a449decf0f47b1117502c6f136b70a23a24f1438e919766 java-11-openjdk-jmods-11.0.12.0.7-0.el7_9.x86_64.rpm f544bc64d6a690d2e5853b042cb5a8c7eb50879dacd1acf3c3eca69966d25370 java-11-openjdk-src-11.0.12.0.7-0.el7_9.i686.rpm c55fbad2b511346ebf2a848c75861a87c98b38738226ac74429144324281ef52 java-11-openjdk-src-11.0.12.0.7-0.el7_9.x86_64.rpm 8f21403b3615c8a3c67833bcb49d11b4c3b80d768a6bdba42abe5d2b299d9cb3 java-11-openjdk-static-libs-11.0.12.0.7-0.el7_9.i686.rpm 8319e904c4b86f6892579492778456a31dcdbb29d4f7b62060dba26486be2a85 java-11-openjdk-static-libs-11.0.12.0.7-0.el7_9.x86_64.rpm Source: 31ba75ab61265b2d9377e08747ee05ef445f4fb160a5d4e4f4d2d1b1bcb78b56 java-11-openjdk-11.0.12.0.7-0.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 4 ***********************************************

1 0

CentOS8 nouveau errors
by Bill Gee 21 Jul '21

21 Jul '21

I am running the stream version of CentOS 8 on a system that hosts a bunch of VirtualBox guests. Recently, like about a month ago, a problem started showing up. When working at the console, the system is almost completely unresponsive. In a terminal session, any key that you press might show up a minute later. Any mouse movement might show up a minute later. About every ten seconds the screen switches to a completely different display for maybe a few tens of milliseconds and then switches back. This happens so fast it is almost subliminal. The log fills with tens of thousands of messages per day that look like this: Jul 21 07:21:06 vmhost2 kernel: Hardware name: Supermicro C7SIM-Q/C7SIM-Q, BIOS 1.2a 06/02/2017 Jul 21 07:21:06 vmhost2 kernel: Workqueue: events_unbound nv50_disp_atomic_commit_work [nouveau] Jul 21 07:21:06 vmhost2 kernel: RIP: 0010:nv50_dmac_wait+0x1e1/0x230 [nouveau] Jul 21 07:21:06 vmhost2 kernel: Code: 8d 48 04 48 89 4a 68 c7 00 00 00 00 20 49 8b 46 38 41 c7 86 20 01 00 00 00 00 00 0 0 49 89 46 68 e8 d4 fc ff ff e9 76 fe ff ff <0f> 0b b8 92 ff ff ff e9 ed fe ff ff 49 8b be 80 00 00 00 e8 b7 fc Jul 21 07:21:06 vmhost2 kernel: RSP: 0018:ffff9ab3c2077d60 EFLAGS: 00010282 Jul 21 07:21:06 vmhost2 kernel: RAX: ffffffffffffff92 RBX: ffff9ab3c2077d60 RCX: 0000000000000000 Jul 21 07:21:06 vmhost2 kernel: RDX: ffffffffffffff92 RSI: ffff9ab3c2077ca0 RDI: ffff9ab3c2077d40 Jul 21 07:21:06 vmhost2 kernel: RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffc0365fd0 Jul 21 07:21:06 vmhost2 kernel: R10: 0000000000000006 R11: ffffffffc03733c0 R12: 00000000fffffffb Jul 21 07:21:06 vmhost2 kernel: R13: ffff8c141b820b68 R14: ffff8c141b820ba8 R15: ffff8c1144d21e00 Jul 21 07:21:06 vmhost2 kernel: FS: 0000000000000000(0000) GS:ffff8c142fd80000(0000) knlGS:0000000000000000 Jul 21 07:21:06 vmhost2 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jul 21 07:21:06 vmhost2 kernel: CR2: 000055e49fe63ef0 CR3: 00000001a5410000 CR4: 00000000000006e0 Jul 21 07:21:06 vmhost2 kernel: Call Trace: Jul 21 07:21:06 vmhost2 kernel: base507c_update+0x2f/0x70 [nouveau] Jul 21 07:21:06 vmhost2 kernel: nv50_disp_atomic_commit_wndw.isra.16+0x5f/0x80 [nouveau] Jul 21 07:21:06 vmhost2 kernel: nv50_disp_atomic_commit_tail+0x669/0x9b0 [nouveau] Jul 21 07:21:06 vmhost2 kernel: process_one_work+0x1a7/0x360 Jul 21 07:21:06 vmhost2 kernel: worker_thread+0x30/0x390 Jul 21 07:21:06 vmhost2 kernel: ? create_worker+0x1a0/0x1a0 Jul 21 07:21:06 vmhost2 kernel: kthread+0x116/0x130 Jul 21 07:21:06 vmhost2 kernel: ? kthread_flush_work_fn+0x10/0x10 Jul 21 07:21:06 vmhost2 kernel: ret_from_fork+0x35/0x40 Jul 21 07:21:06 vmhost2 kernel: ---[ end trace 43122b13e20cf558 ]--- Jul 21 07:21:08 vmhost2 kernel: nouveau 0000:01:00.0: DRM: base-0: timeout The daily logwatch report has thousands of lines like this: --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present WARNING: CPU: 0 PID: 131209 at drivers/gpu/drm/n ...: 201 Time(s) WARNING: CPU: 0 PID: 131356 at drivers/gpu/drm/n ...: 450 Time(s) WARNING: CPU: 0 PID: 132285 at drivers/gpu/drm/n ...: 3 Time(s) WARNING: CPU: 0 PID: 15274 at drivers/gpu/drm/no ...: 1245 Time(s) WARNING: CPU: 0 PID: 15808 at drivers/gpu/drm/no ...: 144 Time(s) WARNING: CPU: 0 PID: 62 at drivers/gpu/drm/nouve ...: 1080 Time(s) WARNING: CPU: 1 PID: 131209 at drivers/gpu/drm/n ...: 336 Time(s) WARNING: CPU: 1 PID: 131356 at drivers/gpu/drm/n ...: 828 Time(s) WARNING: CPU: 1 PID: 132030 at drivers/gpu/drm/n ...: 18 Time(s) WARNING: CPU: 1 PID: 132285 at drivers/gpu/drm/n ...: 12 Time(s) WARNING: CPU: 1 PID: 15274 at drivers/gpu/drm/no ...: 903 Time(s) WARNING: CPU: 1 PID: 15808 at drivers/gpu/drm/no ...: 108 Time(s) (repeat for 2 megabytes of text) With all VB guests stopped, htop shows CPU usage in the range of 1% or less. Sessions opened by ssh run normally. Sessions opened to a guest with xrdp run normally. Guests do not report any errors in their log files. Where do I begin to troubleshoot something like this? Thanks - ======== Bill Gee

1 1

local privilege escalation in kernel and systemd
by Kenneth Porter 21 Jul '21

21 Jul '21

<https://www.bleepingcomputer.com/news/security/new-linux-kernel-bug-lets-yo…> Two related bugs involve mounting a very long path. The kernel bug requires passing a 1 GB path string, while the systemd bug involves an 8 MB path that overflows its stack. Technical details here: <https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/sequoia-…> <https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/cve-2021…>

1 0

CentOS IRC
by Earl Ramirez 20 Jul '21

20 Jul '21

Good day, Did CentOS moved from freenode to LibraIRC? -- Kind Regards, Earl A. Ramirez 2021-07-20T21:27:00 (PST +0800)

2 2

Warning: No matches found for: clamav on CentOS Linux release 7.9.2009 (Core)
by Kaushal Shriyan 20 Jul '21

20 Jul '21

Hi, I am running CentOS Linux release 7.9.2009 (Core) and installed epel repository. # rpm -qa | grep epel epel-release-7-13.noarch # cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) #yum search clamav Loaded plugins: fastestmirror Determining fastest mirrors * base: mirrors.piconets.webwerks.in * extras: mirrors.piconets.webwerks.in * updates: mirrors.piconets.webwerks.in base | 3.6 kB 00:00:00 docker-ce-stable | 3.5 kB 00:00:00 elastic-7.x | 1.3 kB 00:00:00 extras | 2.9 kB 00:00:00 ius | 1.3 kB 00:00:00 mariadb | 2.9 kB 00:00:00 nginx | 2.9 kB 00:00:00 updates | 2.9 kB 00:00:00 (1/10): base/7/x86_64/group_gz | 153 kB 00:00:00 (2/10): extras/7/x86_64/primary_db | 242 kB 00:00:00 (3/10): elastic-7.x/primary | 288 kB 00:00:00 (4/10): docker-ce-stable/7/x86_64/primary_db | 62 kB 00:00:00 (5/10): docker-ce-stable/7/x86_64/updateinfo | 55 B 00:00:00 (6/10): ius/x86_64/primary | 100 kB 00:00:01 (7/10): updates/7/x86_64/primary_db | 8.8 MB 00:00:04 (8/10): base/7/x86_64/primary_db | 6.1 MB 00:00:05 (9/10): nginx/7/x86_64/primary_db | 67 kB 00:00:04 (10/10): mariadb/primary_db | 36 kB 00:00:05 elastic-7.x 880/880 ius 467/467 Warning: No matches found for: clamav No matches found Am I missing anything? Please suggest further. Thanks in Advance. Best Regards, Kaushal

5 8

Samba Problem with AD Connection
by Mr Typo 17 Jul '21

17 Jul '21

Hello all, i hope you can help me. I have successfully set up a connection with samba to my domain controller. What works: * wbinfo -u / wbinfo -g * wbinfo -a * bet ads info i hope you can help me! thank you! ============ net ads info LDAP server: 10.40.130.10 LDAP server name: sv1-dc01p.pfw.local Realm: PFW.LOCAL Bind Path: dc=PFW,dc=LOCAL LDAP port: 389 Server time: Sat, 17 Jul 2021 13:32:03 CEST KDC server: 10.40.130.10 Server time offset: 0 Last machine account password change: Sat, 17 Jul 2021 10:55:08 CEST =========== ======== wbinfo -a srvadmsar Enter srvadmsar's password: plaintext password authentication succeeded Enter srvadmsar's password: challenge/response password authentication succeeded ======= when i try to connect with smbclient and a domain user i get the error SPNEGO login failed: The attempted logon is invalid. This is either due to a bad username or authentication information. session setup failed: NT_STATUS_LOGON_FAILURE in the Logfiles ob the samba server i get a NT_STATUS_OK (when i join with a domain joined windows system, i get NT_STATUS_OK, but windows then wants a username and password. below you can find the logs from /var/log/samba/* i hope you can help me, i am trying for hours... ==> /var/log/samba/log.127.0.0.1 <== [2021/07/17 13:38:05.792287, 5] ../../source3/param/loadparm.c:1396(free_service) free_service: Freeing service shareshare [2021/07/17 13:38:05.792319, 5] ../../source3/param/loadparm.c:1396(free_service) free_service: Freeing service IPC$ [2021/07/17 13:38:05.792339, 3] ../../source3/param/loadparm.c:3945(lp_load_ex) lp_load_ex: refreshing parameters [2021/07/17 13:38:05.792349, 5] ../../source3/param/loadparm.c:1371(free_param_opts) Freeing parametrics: [2021/07/17 13:38:05.792434, 3] ../../source3/param/loadparm.c:551(init_globals) Initialising global parameters [2021/07/17 13:38:05.792535, 3] ../../source3/param/loadparm.c:2847(lp_do_section) Processing section "[global]" doing parameter workgroup = PFW doing parameter realm = PFW.LOCAL doing parameter security = ads doing parameter password server = 10.40.130.10 doing parameter idmap config * : backend = autorid doing parameter idmap config * : range = 100000-19999999 doing parameter idmap config * : rangesize = 1000000 doing parameter template homedir = /home/%D/%U doing parameter template shell = /bin/bash doing parameter winbind use default domain = true doing parameter ntlm auth = yes doing parameter winbind offline logon = true doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter log level = 5 [2021/07/17 13:38:05.792740, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 doing parameter load printers = no [2021/07/17 13:38:05.792873, 2] ../../source3/param/loadparm.c:2864(lp_do_section) Processing section "[shareshare]" doing parameter path = /storage/share doing parameter browsable = yes doing parameter writable = yes doing parameter read only = no doing parameter guest ok = yes doing parameter valid users = PFW\SRVADMSAR [2021/07/17 13:38:05.792992, 4] ../../source3/param/loadparm.c:3987(lp_load_ex) pm_process() returned Yes [2021/07/17 13:38:05.793023, 3] ../../source3/param/loadparm.c:1648(lp_add_ipc) adding IPC service [2021/07/17 13:38:05.793057, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 [2021/07/17 13:38:05.793459, 2] ../../source3/lib/interface.c:345(add_interface) added interface ens192 ip=192.168.110.104 bcast=192.168.110.255 netmask=255.255.255.0 [2021/07/17 13:38:05.793493, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.793563, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.793659, 3] ../../source3/smbd/oplock.c:1427(init_oplocks) init_oplocks: initializing messages. [2021/07/17 13:38:05.793672, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 774 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793681, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 778 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793692, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 770 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793700, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 801 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793706, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 787 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793713, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 779 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793723, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2021/07/17 13:38:05.793740, 5] ../../source3/lib/messages.c:740(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2021/07/17 13:38:05.793751, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2021/07/17 13:38:05.793762, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 16 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793773, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x55fecf14d350 [2021/07/17 13:38:05.793783, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 33 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793793, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2021/07/17 13:38:05.793804, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 790 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793815, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2021/07/17 13:38:05.793826, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2021/07/17 13:38:05.793836, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2021/07/17 13:38:05.793889, 3] ../../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 214 (0 toread) [2021/07/17 13:38:05.793943, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:05.793963, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:05.793979, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:05.794013, 5] ../../source3/smbd/uid.c:494(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2021/07/17 13:38:05.794036, 4] ../../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2021/07/17 13:38:05.794045, 4] ../../source3/smbd/uid.c:562(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2021/07/17 13:38:05.794056, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2021/07/17 13:38:05.794064, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:05.794070, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:05.794125, 4] ../../source3/smbd/sec_ctx.c:438(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:05.794151, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 [2021/07/17 13:38:05.794366, 3] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot) Selected protocol SMB3_11 [2021/07/17 13:38:05.794393, 5] ../../source3/auth/auth.c:540(make_auth3_context_for_ntlm) Making default auth method list for server role = 'domain member' [2021/07/17 13:38:05.794417, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend anonymous [2021/07/17 13:38:05.794436, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'anonymous' [2021/07/17 13:38:05.794450, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam [2021/07/17 13:38:05.794467, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam' [2021/07/17 13:38:05.794480, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2021/07/17 13:38:05.794493, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2021/07/17 13:38:05.794501, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam_netlogon3 [2021/07/17 13:38:05.794517, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam_netlogon3' [2021/07/17 13:38:05.794529, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend winbind [2021/07/17 13:38:05.794539, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'winbind' [2021/07/17 13:38:05.794549, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match anonymous [2021/07/17 13:38:05.794560, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method anonymous has a valid init [2021/07/17 13:38:05.794571, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2021/07/17 13:38:05.794582, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam has a valid init [2021/07/17 13:38:05.794593, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind [2021/07/17 13:38:05.794604, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method winbind has a valid init [2021/07/17 13:38:05.794611, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam_ignoredomain [2021/07/17 13:38:05.794617, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam_ignoredomain has a valid init [2021/07/17 13:38:05.794730, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC mechanism spnego [2021/07/17 13:38:05.794813, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC submechanism gse_krb5 ==> /var/log/samba/log.smbd <== [2021/07/17 13:38:05.791006, 2] ../../source3/lib/tallocmsg.c:84(register_msg_pool_usage) Registered MSG_REQ_POOL_USAGE [2021/07/17 13:38:05.791086, 5] ../../source3/passdb/pdb_interface.c:155(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2021/07/17 13:38:05.791103, 5] ../../source3/passdb/pdb_interface.c:176(make_pdb_method_name) Found pdb backend tdbsam [2021/07/17 13:38:05.791143, 5] ../../source3/passdb/pdb_interface.c:187(make_pdb_method_name) pdb backend tdbsam has a valid init [2021/07/17 13:38:05.791248, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.791344, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.791502, 3] ../../lib/util/access.c:371(allow_access) Allowed connection from 127.0.0.1 (127.0.0.1) [2021/07/17 13:38:05.791563, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 ==> /var/log/samba/log.127.0.0.1 <== [2021/07/17 13:38:08.966773, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:08.966824, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:08.966839, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:08.966873, 5] ../../source3/smbd/uid.c:494(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2021/07/17 13:38:08.966910, 5] ../../lib/dbwrap/dbwrap.c:148(dbwrap_lock_order_lock) dbwrap_lock_order_lock: check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967145, 5] ../../lib/dbwrap/dbwrap.c:180(dbwrap_lock_order_unlock) dbwrap_lock_order_unlock: release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967170, 5] ../../source3/auth/auth.c:540(make_auth3_context_for_ntlm) Making default auth method list for server role = 'domain member' [2021/07/17 13:38:08.967183, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match anonymous [2021/07/17 13:38:08.967216, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method anonymous has a valid init [2021/07/17 13:38:08.967239, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2021/07/17 13:38:08.967251, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam has a valid init [2021/07/17 13:38:08.967261, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind [2021/07/17 13:38:08.967271, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method winbind has a valid init [2021/07/17 13:38:08.967281, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam_ignoredomain [2021/07/17 13:38:08.967292, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam_ignoredomain has a valid init [2021/07/17 13:38:08.967388, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC mechanism spnego [2021/07/17 13:38:08.967406, 5] ../../lib/dbwrap/dbwrap.c:148(dbwrap_lock_order_lock) dbwrap_lock_order_lock: check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967430, 5] ../../lib/dbwrap/dbwrap.c:180(dbwrap_lock_order_unlock) dbwrap_lock_order_unlock: release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967442, 4] ../../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2021/07/17 13:38:08.967451, 4] ../../source3/smbd/uid.c:562(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2021/07/17 13:38:08.967462, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2021/07/17 13:38:08.967472, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:08.967479, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:08.967550, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2021/07/17 13:38:08.967586, 3] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x62088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM ==> /var/log/samba/log.wb-PFW <== [2021/07/17 13:38:08.969578, 4] ../../source3/winbindd/winbindd_dual.c:1626(child_handler) child daemon request 14 [2021/07/17 13:38:08.969608, 3] ../../source3/winbindd/winbindd_pam.c:2683(winbindd_dual_pam_auth_crap) [10364]: pam auth crap domain: PFW user: srvadmsar [2021/07/17 13:38:08.969741, 5] ../../source3/rpc_client/cli_pipe.c:827(rpc_api_pipe_send) rpc_api_pipe: host sv1-dc01p.pfw.local [2021/07/17 13:38:08.969754, 5] ../../source3/rpc_client/cli_pipe.c:179(rpc_write_send) rpc_write_send: data_to_write: 696 [2021/07/17 13:38:08.970968, 5] ../../source3/rpc_client/cli_pipe.c:99(rpc_read_send) rpc_read_send: data_to_read: 632 [2021/07/17 13:38:08.971188, 5] ../../source3/winbindd/winbindd_pam.c:2640(winbind_dual_SamLogon) NTLM CRAP authentication for user [PFW]\[srvadmsar] returned NT_STATUS_OK [2021/07/17 13:38:08.971291, 3] ../../auth/auth_log.c:653(log_authentication_event_human_readable) Auth: [winbind,NTLM_AUTH, smbd, 10364] user [PFW]\[srvadmsar] at [Sat, 17 Jul 2021 13:38:08.971273 CEST] with [NTLMv2] status [NT_STATUS_OK] workstation [SMBTEST-ANDI] remote host [unix:] became [PFW]\[srvadmsar] [S-1-5-21-4080695503-475066264-1108356078-1126]. local host [unix:] {"timestamp": "2021-07-17T13:38:08.971345+0200", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4624, "logonId": "7944426e07973722", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "unix:", "remoteAddress": "unix:", "serviceDescription": "winbind", "authDescription": "NTLM_AUTH, smbd, 10364", "clientDomain": "PFW", "clientAccount": "srvadmsar", "workstation": "SMBTEST-ANDI", "becameAccount": "srvadmsar", "becameDomain": "PFW", "becameSid": "S-1-5-21-4080695503-475066264-1108356078-1126", "mappedAccount": null, "mappedDomain": null, "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1758}} [2021/07/17 13:38:08.971423, 4] ../../source3/winbindd/winbindd_dual.c:1634(child_handler) Finished processing child request 14 ==> /var/log/samba/log.winbindd <== [2021/07/17 13:38:08.969181, 3] ../../source3/winbindd/winbindd_misc.c:432(winbindd_interface_version) winbindd_interface_version: [smbd (10448)]: request interface version (version = 31) [2021/07/17 13:38:08.969319, 3] ../../source3/winbindd/winbindd_misc.c:470(winbindd_priv_pipe_dir) winbindd_priv_pipe_dir: [smbd (10448)]: request location of privileged pipe [2021/07/17 13:38:08.969346, 3] ../../source3/winbindd/winbindd_misc.c:483(winbindd_priv_pipe_dir) winbindd_priv_pipe_dir: [smbd (10448)]: response location of privileged pipe: (null) [2021/07/17 13:38:08.969496, 3] ../../source3/winbindd/winbindd_pam_auth_crap.c:113(winbindd_pam_auth_crap_send) [10448]: pam auth crap domain: [PFW] user: srvadmsar [2021/07/17 13:38:08.973296, 3] ../../source3/winbindd/winbindd_misc.c:407(winbindd_ping) winbindd_ping: [smbd (10448)]: ping

1 0

CentOS-announce Digest, Vol 196, Issue 3
by centos-announce-request＠centos.org 16 Jul '21

16 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2741 Important CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 15 Jul 2021 22:22:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2741 Important CentOS 7 firefox Security Update Message-ID: <20210715222246.GA25165(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2741 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2741 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d09bdd004c3fac87661119d619afb43d9ad9824ef8a2e58fa51c55f0211f12d9 firefox-78.12.0-1.el7.centos.i686.rpm 6a6db0a030199ad5a8e0edde0f8458ca5391f94ac4ccd7a93c3c186326026cc3 firefox-78.12.0-1.el7.centos.x86_64.rpm Source: fd28ed7ab0523d22a76adadf6f4da17f29f7bba08cc83e43af80bf3e0bd490b0 firefox-78.12.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 3 ***********************************************

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2021