Discuss

discuss@lists.centos.org

34758 discussions

chmodding SCP
by Turnbough, Bradley E. 22 Feb '12

22 Feb '12

I have two machines, and I am trying to copy files from one to the other via SCP. Since this machine is accessible from two of our networks, we're trying to restrict the use of SCP to a select few individuals to prevent unauthorized data transmission from network to network. What we did was we chmodded 700 /usr/bin/scp. The owner has remained root and the group has remianed root. >From a different machine, I'm trying to scp to that machine, but I'm receiving an "access denied". My ssh key is in the authorized users file in the root profile. Anyone have a logical explanation? This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.

4 3

[OT] Where did my Skype icon go?
by James B. Byrne 22 Feb '12

22 Feb '12

CentOS-5.7 Skype 2.1.0.81beta Formerly, when I opened Skype a green Skype icon would appear in the upper menu bar of the Gnome desktop. Now it does not. I must have moved or modified something on the Desktop to cause this to disappear although I cannot recall what that might have been. It certainly was not a conscious modification and I would like to get the icon back. The absence is not merely cosmetic. Without that icon once I close the Skype dialog window I know of no other way to activate a desktop dialog window with the running Skype instance. Running Skype again gives the warning that another instance is already running and then quits. A clue to what has happened might be when Skype is in this state incoming notices pop-up from the right hand side of the lower (switcher) menu bar immediately to the left of the work space display. But there is no way to get Skype to open. Anyone have any suggestions about how to get this back? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 4

Filing a bug for clamav
by Jobst Schmalenbach 21 Feb '12

21 Feb '12

Hi. IMHO there is a bug in the latest updater for clamav: * it places a freshclam script into /etc/cron.daily that uses a hardcoded datadir not defined in /etc/clamd.conf its never done that before in the last 5 years or so, and I have a script running from cron.d * its overwrites the permissions of existing directories (lib and log) to another new clamav user, although one already exist (making the system unstable) Where do I file a bug report? Jobst -- Sendmail administration is not black magic. There are legitimate technical reasons why it requires the sacrificing of a live chicken. | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

5 6

Please may you help me setup VPS
by Wuxi Ixuw 21 Feb '12

21 Feb '12

I am new to Linux so I do not have any special preferences. Yes I have a root access and the VPS is un managed. I am newbie to the Linux world. I will have a new website or maybe 3. I've found that un managed costs vary a lot, as I've found various ways for settings ... some using Xen, others using OpenVZ, and other using Virtuozzo and I found that it all vary regarding Ram allocations for each VPS. Also afraid to stuck with some over sell VPS as I had it before with shared hosting. For un managed hosting VPS will it be easy to secure the server from being hacked? or it is an impossible job for a newbie guy like me? Also for later on regarding updates or patching ... will it be good as well or not? Finally I've found most people using Ubuntu server LTS, so do you advise of using it or any other distribution? I've read a lot of reviews that most are advising for using CentOS or Debian, but I've found the majority are already using Ubuntu server. Thanks and too much appreciated your time reading and value your inputs. Note: After a lot of reading I've found that the steps should be as follow: (the funny thing that I've read and know what I should do but each time I am trying to run a command using PUTTY I get an error) - change root password to a secure one. - create another user with admin access with a strong password as well. - disable root remotely access. - use secure connection to the VPS by using PUTTY key instead of username and password login . - change the port to a high one with unusual figure like 26127 or any else - disable ftp and use another secure one. - install a fire wall, CSF firewall and Mod_security or anything else equal or more. - keep the whole thing up-to-date. - secure the whole VPS as much as possible. - finally use a trusted script on the website and his why I will use Drupal (mostly the core ones and nothing else without any modules). This is what I've got so far from reading many tutorials and still get a lot of errors when I follow them (howtoforge.com) is one of the famous websites I've visited. Sorry for being long ... But I am really hope if you here be able to help or guide me. - Late Edit - I've forget to mention that some steps I've forget to mention are: - using back ed control panel (like ISP config, VirtualMin) is facilitating the task but make VPS less secure, so using the command .

3 3

CentOS-announce Digest, Vol 84, Issue 11
by centos-announce-request＠centos.org 21 Feb '12

21 Feb '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0317 Important CentOS 5 libpng Update (Johnny Hughes) 2. CESA-2012:0317 Important CentOS 4 libpng Update (Johnny Hughes) 3. CESA-2012:0317 Important CentOS 4 libpng10 Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 20 Feb 2012 21:59:45 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0317 Important CentOS 5 libpng Update To: centos-announce(a)centos.org Message-ID: <20120220215945.GA23985(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0317 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0317.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 76ae2d7b82268ccd4e49204cd09de54da685e91e1067728803ec726d85a41a9c libpng-1.2.10-15.el5_7.i386.rpm 2d3d0cfe060b153d4fdd7dfe203df66a381785945dd36722f8782e598d333a84 libpng-devel-1.2.10-15.el5_7.i386.rpm x86_64: 76ae2d7b82268ccd4e49204cd09de54da685e91e1067728803ec726d85a41a9c libpng-1.2.10-15.el5_7.i386.rpm f594bd9ca602508e2e2daf87786bc4e224b89e771d260ae28610cdf585a47c2d libpng-1.2.10-15.el5_7.x86_64.rpm 2d3d0cfe060b153d4fdd7dfe203df66a381785945dd36722f8782e598d333a84 libpng-devel-1.2.10-15.el5_7.i386.rpm 8f64381432791a1258f989f23ca7adcdc25ea6a7c186ded11fe44c1b5ed812d7 libpng-devel-1.2.10-15.el5_7.x86_64.rpm Source: cdaab985fd96226aa22d91d80914ce7c5b4572dad79cc13393b9de66f6d9d308 libpng-1.2.10-15.el5_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 20 Feb 2012 22:02:02 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0317 Important CentOS 4 libpng Update To: centos-announce(a)centos.org Message-ID: <20120220220202.GA25439(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0317 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0317.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dbba12d39677b37235403a711b66ff5c862c878de5de8ad7a1acde9fb93d3855 libpng-1.2.7-9.el4.i386.rpm f7eb42498f83ca12bbd39738fc289a423ca6807870e074f4c1a5750ccb1a5db5 libpng-devel-1.2.7-9.el4.i386.rpm x86_64: dbba12d39677b37235403a711b66ff5c862c878de5de8ad7a1acde9fb93d3855 libpng-1.2.7-9.el4.i386.rpm 4069c065537579becb883e31ceb075e01b329a1a81d3534d05ef73a2f1084f3e libpng-1.2.7-9.el4.x86_64.rpm 921824d122ef1c0f67d0c5cea22a0cc791ef05c2ba3a77b95105a1bbb8bfd33b libpng-devel-1.2.7-9.el4.x86_64.rpm Source: b19ba4486868c38b242915e40122536d847a8b4808d415982f10f80e9a4af842 libpng-1.2.7-9.el4.src.rpm -- Tru Huynh CentOS Project { http://www.centos.org/ } irc: tru_tru, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 20 Feb 2012 22:02:55 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0317 Important CentOS 4 libpng10 Update To: centos-announce(a)centos.org Message-ID: <20120220220255.GA25564(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0317 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0317.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a28d02daa73fddb6688015b11a07bc5f07fb5db21e4a6e9f8e8e03c645b54142 libpng10-1.0.16-10.el4.i386.rpm b163dfc2ffaa11c6dbc038a892ea3be7d6488be9d8874f677dc89d4ca7d40c4f libpng10-devel-1.0.16-10.el4.i386.rpm x86_64: a28d02daa73fddb6688015b11a07bc5f07fb5db21e4a6e9f8e8e03c645b54142 libpng10-1.0.16-10.el4.i386.rpm 6dc6cd084a1f10253f4fb4bf4dd78f2e9a07b15970ebcc552c7cf3d985b2e93f libpng10-1.0.16-10.el4.x86_64.rpm 39ab450d2a4e98405305d05e3788b3c063589a7b88463f2ba0af4903e54945a7 libpng10-devel-1.0.16-10.el4.x86_64.rpm Source: aa3db10f09bc541e2e55b0ac604334094d507e45dd50cf74485d15838cee914c libpng10-1.0.16-10.el4.src.rpm -- Tru Huynh CentOS Project { http://www.centos.org/ } irc: tru_tru, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 84, Issue 11 ***********************************************

1 0

Any experience with eSATA and port multiplier...?
by John Doe 21 Feb '12

21 Feb '12

Hey, just bought an eSATA/USB dual drive docking station and my CentOS 5 can only see one drive at a time... Any one knows if there are specific parameters to set somewhere? Or do I need a more recent kernel (like upgrading to CentOS 6?) The docking is a Sharkoon Quickport Duo v2 + 2 drives + 1 eSATA cable... http://www.sharkoon.com/?q=en/content/sata-quickport-duo-v2 The eSATA controller is an HighPpoint PciE 2 ports combo eSATA/USB with (supposedly) port-multiplier support Apparently based on an Silicon image Sil 3132 Seems like the port multiplier part does not work correctly... kernel: ata7: SATA link up 1.5 Gbps (SStatus 113 SControl 10) kernel: ata7.15: Port Multiplier 1.1, 0x197b:0x2352 r0, 2 ports, feat 0x0/0x0 kernel: ata7.15: Asynchronous notification not supported, hotplug won't kernel: work on fan-out ports. Use warm-plug instead. kernel: ata7.00: hard resetting link The logs are full of "hard resetting link", "softreset failed" and other "failed to reset PMP, giving up" I did not try to reboot yet... Would be a pain to have to reboot every time I need to plug drives. :/ I am not the only one... http://linux.derkeiler.com/Mailing-Lists/SuSE/2011-10/msg00055.html He has a kernel 2.6.37.6-0.7 and it still fails so I am wondering if upgrading to CentOS 6.x would help at all... Thx, JD

3 3

Race Condition In PHP Session Handler
by Adam Tauno Williams 20 Feb '12

20 Feb '12

php-5.3.3-3.el6_2.6.x86_64 2.6.32-220.4.2.el6.x86_64 After some testing we moved our production PHP intranet site from an old server to a new CentOS 6.2 instance running the mentioned versions. At first it worked well and then user's started to experience a hung site. Upon some digging it appears that the PHP module is getting stuck in a race condition regarding the sessions file - [root@yannigan-orange fd]# strace -p 22607 Process 22607 attached - interrupt to quit flock(53, LOCK_EX^C <unfinished ...> where file handle 53 is ... lr-x------. 1 root root 64 Feb 17 15:24 52 -> /opt/informix/msg/en_us/0333/cli.iem lrwx------. 1 root root 64 Feb 17 15:24 53 -> /var/lib/php/session/sess_ulgsl9joplobb9o4fue3n2e1k0 l-wx------. 1 root root 64 Feb 17 15:24 6 -> pipe:[660246] .... The PHP session file. Originally I had a tmpfs mounted for the session files. I removed that and used the underlying filesystem. Same issue. I disabled APC. Same issue. Switching the the memcache session handler resolved the issue, although that may be less optimal. But this seems like a PHP bug. Tips, comments, pointers? Backtrace of a hung httpd - #0 0x00007fa175af9be7 in flock () from /lib64/libc.so.6 #1 0x00007fa16cb59dfc in ?? () from /etc/httpd/modules/libphp5.so #2 0x00007fa16cb5a047 in ?? () from /etc/httpd/modules/libphp5.so #3 0x00007fa16cb56e4c in php_session_start () from /etc/httpd/modules/libphp5.so #4 0x00007fa16cb57559 in ?? () from /etc/httpd/modules/libphp5.so #5 0x00007fa16cc9afe8 in ?? () from /etc/httpd/modules/libphp5.so #6 0x00007fa16cc72320 in execute () from /etc/httpd/modules/libphp5.so #7 0x00007fa16cc4ca5d in zend_execute_scripts () from /etc/httpd/modules/libphp5.so #8 0x00007fa16cbfacf8 in php_execute_script () from /etc/httpd/modules/libphp5.so #9 0x00007fa16ccd59a5 in ?? () from /etc/httpd/modules/libphp5.so #10 0x00007fa17751da60 in ap_run_handler () #11 0x00007fa17752131e in ap_invoke_handler () #12 0x00007fa17752c990 in ap_process_request () #13 0x00007fa177529858 in ?? () #14 0x00007fa177525568 in ap_run_process_connection () #15 0x00007fa177531767 in ?? () #16 0x00007fa177531a7a in ?? () #17 0x00007fa177531dab in ap_mpm_run () #18 0x00007fa177509900 in main () -- System & Network Administrator [ LPI & NCLA ] <http://www.whitemiceconsulting.com> OpenGroupware Developer <http://www.opengroupware.us> Adam Tauno Williams

1 1

centos security
by Al 19 Feb '12

19 Feb '12

Any suggestions on what to run on a centos box to verify that the server isn't compromised or being sniffed? Thanks!

4 4

OFF TOPIC. The best course of CentOS in USA
by Edson - PMSS 19 Feb '12

19 Feb '12

I would like to know which all of you point me as the best training course of CentOS in the world or in the USA. I am a Brazilian and I would like to have this information. I have a good background in GNU/Linux, CentOS and Debian like operating systems, network and general knowledge. I would like to know a deep course about all this subject. I would appreciate any kind of information in advance. Thanks all! -- Edson D. Amaral --------------- Listen to the voices inside of you, they will tell you what is right and what is wrong, they will bring you happiness and peace; if you don't listen to them they can create anxiety, discontentment, and unhappiness. Ouça as vozes dentro de você, elas vão te dizer o que é certo e o que é errado, elas vão lhe trazer felicidade e paz, se você não ouví-las, elas poderão criar ansiedade, insatisfação e infelicidade. Bert Wilson The Five Secrets you must discover before you die, pg. 155

2 1

Re: [CentOS] centos security
by Les Bell 19 Feb '12

19 Feb '12

Al <mailinglist(a)theflux.net> wrote: >> Any suggestions on what to run on a centos box to verify that the server isn't compromised or being sniffed? Thanks! << For "isn't compromised", you need a host integrity verification system like Tripwire or AIDE (which is in the base repo). Expect to have to tweak the config to cover the stuff you've got installed. You can detect sniffing by checking for promiscuous interfaces on the LAN - use proDETECT (http://sourceforge.net/projects/prodetect/) or a similar tool for this purpose. Alternatively, if you have the time and resources, you could run a full-blown network intrusion detection system like Snort (http://www.snort.org) Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss