Discuss

discuss@lists.centos.org

8 participants
34745 discussions

Problem with Network devices on boot
by Günther J. Niederwimmer 19 Jun '18

19 Jun '18

hello, I have a question about network devices ?? on my systems Centos 7.5 I have a Problem with starting Network devices! I set up two servers with KVM on the first I have 6 KVM installed Systems on the second I have 5 KVM installed systems? When I have to reboot my system (Kernel update....) the most time one Network Device is missing on the KVM Clients (eth0) I have configured my system with I/O Shared Network like this xxx.xml <interface type='hostdev' managed='yes'> <mac address='XX:XX:XX:XX:XX:XX'/> <source> <address type='pci' domain='0x0000' bus='0x03' slot='0x13' function='0x1'/> </source> <address type='pci' domain='0x0000' bus='0x00' slot='0x0a' function='0x0'/> </interface> and a second one! <interface type='hostdev' managed='yes'> ......... ............ This Interfaces are always starting But I have also a Bridge on the systems (eth0) configure for internal Networking (DNS, LDAP.....) <interface type='bridge'> <mac address='XX:XX:XX:XX:XX:XX'/> <source bridge='br0'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> This interface is failing the most time on some KVM Installs!! I have always to check is the Interface starting or not?? AFter 2 or 3 reboot with virsh reboot xxxxx the system is starting most time with the third Interface ! Can any tell me why this Problem exist?? Thanks for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

1 0

CentOS Kernel Support
by Ken Young 18 Jun '18

18 Jun '18

Is anyone on the mailing list aware of anyone who supports older versions of CentOS kernels? Particularly, I am interested in getting security patches added to kernel-3.10.0-514.10.2.el7.src.rpm. Please let me know. Regards, Ken Y

9 16

Re: [CentOS] Passwords in plain text
by Richard 18 Jun '18

18 Jun '18

> Date: Monday, June 18, 2018 07:57:56 -0500 > From: Valeri Galtsev <galtsev(a)kicp.uchicago.edu> >> I agree with you .. unfortunately, gmail does not. They have >> enabled it for gmail users .. so if someone from yahoo xends a >> mail from a yahoo address, it gets rejected by gmail accounts. >> The list setting wrt dmarc doesn't matter .. it is totally gmail >> enabling it. >> >> What our settings do is NOT send the From (as the original >> sender), if the sender is on a domain where dmarc is enabled, so >> that gmail does not reject it. >> >> If it is rejected by gmail .. it causes (eventually) .. not he >> sender's, but the recipient's account on gmail to be disabled by >> the mailing list as non-existent. > > I'm surprised no one arrived at conclusion: don't use gmail then. > > Valeri > >> [OT] My (non-gmail) mail hosting provider also enforces the DMARC settings that others put in place, so this isn't (just) a gmail issue. Most people in the field find the p=reject setting that yahoo is using to be less than optimal, and come to the conclusion that the best course of action it to avoid sending mail (specifically to mailing lists) from such providers. All places like my provider and gmail are doing is enforcing the standard. That others have selected poorly considered settings is the fault of the site making those selections, not the site doing the enforcing of the standard. [the DMARC notifications are, in my view, a very serious privacy leak, so it should be avoided, but that's a whole separate off-topic discussion.] - Richard

1 0

Re: [CentOS] Passwords in plain text
by Richard 18 Jun '18

18 Jun '18

> Date: Friday, June 15, 2018 14:55:21 -0700 > From: Akemi Yagi <amyagi(a)gmail.com> > > On Fri, Jun 15, 2018 at 9:57 AM, Gianluca Cecchi > <gianluca.cecchi(a)gmail.com> wrote: >> >> Il Ven 15 Giu 2018, 18:45 Larry Martell <larry.martell(a)gmail.com> >> ha scritto: >> >>> On Fri, Jun 15, 2018 at 12:41 PM rj coleman >>> <rjcdevelop(a)gmail.com> wrote: >>> >>> > Am I the only one who just received this email from this group? >>> > Which came with my password in the email in plain text? > >>> > > Your membership in the mailing list CentOS has been disabled >>> > > due to excessive bounces The last bounce received from you >>> > > was dated 15-Jun-2018. You will not get any more messages >>> > > from this list until you re-enable your membership. You will >>> > > receive 3 more reminders like this before your membership in >>> > > the list is deleted. >>> > > >>> I got it as well. >>> >> Mee too > > I also received the "has been disabled" notification. It looks like > users with gmail addresses are affected. > > CentOS admins are looking into this issue (I believe). > > Akemi I believe this is a DMARC issue. Yahoo, among other places, has set their dmarc records to p=reject: dig +short txt _dmarc.yahoo.com "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc_y_rua@yahoo.com;" So, if your mail hosting provider enforces dmarc,(gmail does) and you get mail from a list that doesn't rewrite the headers, and people from places like yahoo post to the list, you'll likely get some form of warning about being being kicked off the mailing list every now and then. The frequency depends on how often people from p=reject places post, and what the settings are for bounce handling of the mailing list in question. I believe that the current version of mailman can be configured to do the necessary header rewrites. Some lists I'm on only do the rewrites for headers of posts coming from p=reject sites (much less annoying than having them all rewritten).

8 12

DMARC test , please ignore (eom)
by Fabian Arrotin 18 Jun '18

18 Jun '18

1 0

wildcard certificate
by Jerry Geis 16 Jun '18

16 Jun '18

Hi all - I am trying to figure out how to add a wild card certificate given to me for a CentOS installation. I have a script that sets up HTTPS so I am a little familiar with things - but they provided me two files: name_ee.crt name_i1.crt I'm not sure how to apply that to the /etc/httpd/conf.d/ssl.conf file? Anyone done that before ? My initial searches were not helpful. Thanks, Jerry

5 8

CentOS-announce Digest, Vol 160, Issue 4
by centos-announce-request＠centos.org 16 Jun '18

16 Jun '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:1852 Moderate CentOS 7 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 16 Jun 2018 10:49:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:1852 Moderate CentOS 7 kernel Security Update Message-ID: <20180616104953.GA65098(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:1852 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:1852 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ea66a974143f533fddeffe8f3f1cd32c86c4e3f253622959d0c10e6efb4ab3c3 kernel-3.10.0-862.3.3.el7.x86_64.rpm 64f2e56ed123e1a167d317e003e21c40d1dcfb48305ba3c6c78d07731dd16741 kernel-abi-whitelists-3.10.0-862.3.3.el7.noarch.rpm e3337bc41e6c09efbd66931c6247383f9cb6b771f1e22b91d54cd90372a50e15 kernel-debug-3.10.0-862.3.3.el7.x86_64.rpm 41d72ae15f786aebf0cd63bb30a70d876247fa22ea7d4577b847c8b83aef12b4 kernel-debug-devel-3.10.0-862.3.3.el7.x86_64.rpm 3f870fdf26b2e000a061d7dd31d7742ca36127e5f7db7b87556612e808e680ae kernel-devel-3.10.0-862.3.3.el7.x86_64.rpm d2ee86a99c5fae77d7984dd087502a636bd5115ed3b93e3166014a65466f07ed kernel-doc-3.10.0-862.3.3.el7.noarch.rpm be7972c92f9ef5bebc69912025e18090a7850c0d1f6186fdb28816c4d43f9ada kernel-headers-3.10.0-862.3.3.el7.x86_64.rpm fceece180472bab1d582834e2673711ad29406cf50fe42445ffebd07f1d0b677 kernel-tools-3.10.0-862.3.3.el7.x86_64.rpm 76f864788ce7c4debc1d9252e78051b6f4e0baeabb1fb582370dfcc878f1b9f6 kernel-tools-libs-3.10.0-862.3.3.el7.x86_64.rpm 329fc0513bebdccc20cf02d282ac006bee327bc0f57d0882b2c07ab4bbce6302 kernel-tools-libs-devel-3.10.0-862.3.3.el7.x86_64.rpm adb57998b2c5a06b88b6002c2bc9635173fd51aa6000ff4326e6a7a490cb8ea3 perf-3.10.0-862.3.3.el7.x86_64.rpm 47b576e251ed21a547132daa240adaa377b91859cc6f9545c5b4a2f74d8000aa python-perf-3.10.0-862.3.3.el7.x86_64.rpm Source: 0a17d9113e2ddbf3ca76d1e24591083acf5b898d42609f6db180263c7dbfd72d kernel-3.10.0-862.3.3.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 160, Issue 4 ***********************************************

1 0

About the membership issue
by Leon Fauster 16 Jun '18

16 Jun '18

Concerning the disabled membership (yesterday). Is there anything that I should do? Visiting the "re-enable" link shows only a plain site with meta information about the list but without any feedback like "membership enabled". Albeit some postings are coming in again now (with "normalized" sender address <centos(a)centos.org>). Seems the work to resolve this issue is in progress ... -- Thanks LF

3 5

Passwords in plain text
by rj coleman 16 Jun '18

16 Jun '18

Am I the only one who just received this email from this group? Which came with my password in the email in plain text? Begin forwarded message: > From: centos-request(a)centos.org > Date: June 15, 2018 at 12:31:04 PM EDT > To: rjcdevelop(a)gmail.com > Subject: confirm a8e9e592b9d81e13e569ffa9f6f4267c3f2a8fe8 > > Your membership in the mailing list CentOS has been disabled due to > excessive bounces The last bounce received from you was dated > 15-Jun-2018. You will not get any more messages from this list until > you re-enable your membership. You will receive 3 more reminders like > this before your membership in the list is deleted. > > To re-enable your membership, you can simply respond to this message > (leaving the Subject: line intact), or visit the confirmation page at > > https://lists.centos.org/mailman/confirm/centos/a8e9e592b9d81e13e569ffa9f6f… > > > You can also visit your membership page at > > https://lists.centos.org/mailman/options/centos/rjcdevelop%40gmail.com > > > On your membership page, you can change various delivery options such > as your email address and whether you get digests or not. As a > reminder, your membership password is > > Removed For Security > > If you have any questions or problems, you can contact the list owner > at > > centos-owner(a)centos.org

9 10

shellinabox via proxy(apache)
by lejeczek 15 Jun '18

15 Jun '18

hi guys, cannot get it to work - shellinabox - not being programmer nor selinux sorcerer. shellinabox via apache, when I ausearch it all I get is: #============= unconfined_service_t ============== #!!!! The file '/usr/bin/bash' is mislabeled on your system. #!!!! Fix with $ restorecon -R -v /usr/bin/bash allow unconfined_service_t unconfined_t:process transition; I have shellinabox in Apache's: <Location /cmd> AuthType Basic AuthName "some more" AuthBasicProvider PAM AuthPAMService rstudio Require valid-user #Require all granted ProxyPasshttp://localhost:4200/ </Location> using: LoadModule authnz_pam_module modules/mod_authnz_pam.so So all seems to work there between apache & shellinabox. Last bit when you login to shell you get denied. I also see: $ ps -FZp 2909167 --cols 999 LABEL UID PID PPID C SZ RSS PSR STIME TTY TIME CMD system_u:system_r:unconfined_service_t:s0 shellin+ 2909167 1 0 10785 2740 7 Jun11 ? 00:00:00 /usr/sbin/shellinaboxd -u shellinabox -g shellinabox --cert=/var/lib/shellinabox --port=4200 --localhost-only --disable-ssl So it seems that shellinabox runs unconfined and the centos' policy forbids transitions between unconfined domains. Would that be right? Many thanks, L.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss