Discuss

discuss@lists.centos.org

34753 discussions

Re: [CentOS] virtmanager and selinux -- solved
by Negative 12 Apr '11

12 Apr '11

On Tue, Apr 12, 2011 at 7:17 PM, Negative <negativebinomial(a)gmail.com>wrote: > I built a new VM under KVM today and I've been getting a slew of message > that selinux is blocking virtmanager from reading the new image. This > doesn't seem to be doing any harm, but I wanted to check whether I should > simply run chcon on the image (if I can). > > Virtmanager show up as usr_t, as do my other vm images, but the new one is > svirt_image_t. > > The selinux error says it denied a read access to virtmanager but that it > is not expected that the access is required. > > I tried running restorecon as root, as suggested by the selinux error, but > I'm getting a permission-denied error there. (It tries to set the context to > usr_t) > > Thanks in advance > > > My bad. I had to shut down the vm and quit virtmanager before I could run chcon. It's ok now.

2 1

virtmanager and selinux
by Negative 12 Apr '11

12 Apr '11

I built a new VM under KVM today and I've been getting a slew of message that selinux is blocking virtmanager from reading the new image. This doesn't seem to be doing any harm, but I wanted to check whether I should simply run chcon on the image (if I can). Virtmanager show up as usr_t, as do my other vm images, but the new one is svirt_image_t. The selinux error says it denied a read access to virtmanager but that it is not expected that the access is required. I tried running restorecon as root, as suggested by the selinux error, but I'm getting a permission-denied error there. (It tries to set the context to usr_t) Thanks in advance

1 0

5.5->5.6 upgrade hiccough
by Devin Reade 12 Apr '11

12 Apr '11

I spoke a bit too soon about the upgrade being flawless. It turns out that one subsystem started failing after the upgrade, although it is not an out-of-the-box one. I've included the description here in case someone runs into something similarly weird (especially with scripts calling MySQL?) and because although I have a work-around, I'm not sure (but can guess) as to the actual cause of the change. This subsystem is on a pacemaker/corosync cluster, which as one resource group is running a resource agent (RA) for a bacula-fd instance. (The bacula-fd RA takes care of backing up those DRBD-mounted filesystems that are part of the resource group.) The bacula-fd was failing because as a run-before command on the backup job, it was executing the mysqlblasy.pl script to back up some MySQL databases. After the upgrade, mysqlblasy.pl started failing when running from bacula-fd, even though it could be run directly as root. However, *none* of these components were upgraded during the 5.5->5.6 OS upgrade: mysql server & client mysqlblasy.pl bacula daemons/clients bacula RA pacemaker/corosync After suitable diagnosis, I was able to determine that with CentOS 5.5, the environment provided to the RA had $HOME set, but that with CentOS 5.6 $HOME was *not* set. In particular, since this RA runs as root, in 5.5 HOME was set to "/" (as opposed to "/root"). Since there was no change to pacemaker, I suspect that there was either a change in the way daemons are started up, or a change to the fork or set[re]uid model (or something similar). Ensuring that HOME was (re)set properly before invoking mysqlblasy.pl caused the backups to work again as expected. Devin

1 0

Got no login screen with the new 5.6 kernel
by Stanley A. Klein 12 Apr '11

12 Apr '11

I did the 5.6 update yesterday. When I started the machine today, I did not get a login screen -- it was just a blank screen with no cursor or anything. I shut down, restarted and when grub came up selected the previous kernel. The system came up as usual, presented a login screen, and is working OK. There is apparently something buggy related to the new kernel (2.6.18-238.5.1.el5). Stan Klein --

3 2

Re: [CentOS] GUI Software Raid Monitor Software
by jvalidolnx＠juanyjosefina.com 12 Apr '11

12 Apr '11

2 1

CentOS-announce Digest, Vol 74, Issue 3
by centos-announce-request＠centos.org 12 Apr '11

12 Apr '11

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2011:0422 Moderate CentOS 4 i386 postfix - security update (CENTOSPLUS Only) (Tru Huynh) 2. CESA-2011:0422 Moderate CentOS 4 x86_64 postfix - security update (CENTOSPLUS Only) (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 12 Apr 2011 12:20:05 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2011:0422 Moderate CentOS 4 i386 postfix - security update (CENTOSPLUS Only) To: centos-announce(a)centos.org Message-ID: <20110412102005.GC24978(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2011:0422 (CENTOSPLUS Only) postfix security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2011-0422.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: centosplus/i386/RPMS/postfix-2.2.10-1.4.el4.centos.mysql_pgsql.plus.i386.rpm centosplus/i386/RPMS/postfix-pflogsumm-2.2.10-1.4.el4.centos.mysql_pgsql.plus.i386.rpm source: centosplus/SRPMS/postfix-2.2.10-1.4.el4.centos.mysql_pgsql.plus.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update postfix Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Best configuration for /var/www/html/
by Todd Cary 12 Apr '11

12 Apr '11

For a long period of time, my Apache root directory has been /home/httpd. For security reasons, this is not so good as SELinux has informed me. Now all of the files have been copied to /var/www/etc with owner and group "root". The privileges are 754 (rwxr-xr--), however apache does not have access to them. Should the owner be apache? Group? Todd -- Ariste Software Petaluma, CA 94952 http://www.aristesoftware.com

4 5

ksign: module signed with unknown public key
by Lars Hecking 12 Apr '11

12 Apr '11

What's the correct way to deal with this? I've rebuilt a kernel with an additional patch for one particular module, but I'm trying to load the new module into a distribution kernel. I'm not planning to roll out the updated kernel package. ksign: module signed with unknown public key - signature keyid: 92548f4d5c9c37ab ver=3 I know I can remove module_sig as a workaround. --------------------------------------------------------------- This message and any attachments may contain Cypress (or its subsidiaries) confidential information. If it has been received in error, please advise the sender and immediately delete this message. ---------------------------------------------------------------

1 0

KVM resources?
by Jussi Hirvi 12 Apr '11

12 Apr '11

Later this week I will have to install a serious KVM setup, and I am looking for background material. I found a nice how-to: http://wiki.centos.org/HowTos/KVM ...but it is probably partly outdated by now. Then there is a fine virtualization manual: http://www.centos.org/docs/5/html/5.2/Virtualization/ ...but it seems to be only for xen. I plan to use either CentOS 5.6 or Scientific Linux 6.0 as the host system. Though I don't know yet, if v6.0 will bring any actual benefits over 5.6. My guests will all be CentOS 4 or 5. Disk I/O will probably be a potential bottleneck. I am interested in the "block device" strategy, and could use more info about it. - Jussi -- Jussi Hirvi * Green Spot Topeliuksenkatu 15 C * 00250 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hirvi(a)greenspot.fi * http://www.greenspot.fi

3 3

updates to package
by Bernard Fay 12 Apr '11

12 Apr '11

Hi, I'ld like to know where or how I can find changes in a package update. Also, is there a way to find out which package updates are security updates? thanks -- Bernard

5 6

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss