Discuss

discuss@lists.centos.org

8 participants
34745 discussions

Intel Flaw
by Chris Olson 05 Jan '18

05 Jan '18

How does the latest Intel flaw relate to CentOS 6.x systems that run under VirtualBox hosted on Windows 7 computers? Given the virtual machine degree of separation from the hardware, can this issue actually be detected and exploited in the operating systems that run virtually? If there is a slow down associated with the fix, how much might it impact the virtual systems?

3 2

CentOS-announce Digest, Vol 155, Issue 1
by centos-announce-request＠centos.org 05 Jan '18

05 Jan '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:0007 Important CentOS 7 kernel Security Update (Karanbir Singh) 2. CESA-2018:0012 Important CentOS 7 microcode_ctl Security Update (Karanbir Singh) 3. CESA-2018:0014 Important CentOS 7 linux-firmware Security Update (Karanbir Singh) 4. [Infra] - planned outage : All services (Fabian Arrotin) 5. CESA-2018:0013 Important CentOS 6 microcode_ctl Security Update (Johnny Hughes) 6. CESA-2018:0008 Important CentOS 6 kernel Security Update (Johnny Hughes) 7. CESA-RHSA-2018:0024 Important CentOS 6 qemu-kvm Security Update (Johnny Hughes) 8. CESA-2018:0030 Important CentOS 6 libvirt Security Update (Johnny Hughes) 9. CESA-2018:0029 Important CentOS 7 libvirt Security Update (Johnny Hughes) 10. CESA-2018:0023 Important CentOS 7 qemu-kvm Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 Jan 2018 11:36:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] CESA-2018:0007 Important CentOS 7 kernel Security Update Message-ID: <d07d0b4b-cc89-329a-f517-08b3cd1bae7d(a)centos.org> Content-Type: text/plain; charset=utf-8 CentOS Errata and Security Advisory 2018:0007 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:0007 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 320ab3bd00bd1f051c69f65f2d4cd6ab64585f977d9cd7a52e64e8f8147894fc kernel-3.10.0-693.11.6.el7.x86_64.rpm 0eefdec5447d3ed2781f30d093e22f4654e8af201e1e8058a57876d1baf2ee64 kernel-abi-whitelists-3.10.0-693.11.6.el7.noarch.rpm 5137d0db8632342edfb355ce5bb0a4b4b80d5ffd4b9950bb8dcfcd78e4b8a9dc kernel-debug-3.10.0-693.11.6.el7.x86_64.rpm 882a6522bdafaa697173ff7adedd2cd6ceee5c4a6aa0cd1cb4cf042789420c78 kernel-debug-devel-3.10.0-693.11.6.el7.x86_64.rpm 9c0d7753c649d68cd25b212ee573cec37dc2211891444224e502128fcffdf301 kernel-devel-3.10.0-693.11.6.el7.x86_64.rpm d2005d6a85f2ddd627290dd4cd4d2084215ef45cd8b3f66077b68fe2b0cce61e kernel-doc-3.10.0-693.11.6.el7.noarch.rpm 34d8682b2df1e47c9675f913fbfb129420cce219beaf7985c607a69ccdb3e064 kernel-headers-3.10.0-693.11.6.el7.x86_64.rpm fd3eaf598546bcb502e5e7293d0301b48774c9358dd320b7e53bd042dfae7094 kernel-tools-3.10.0-693.11.6.el7.x86_64.rpm 3c53034adc4c942a02f1dd72f0adf688f558867caf086b5b239169262b75f570 kernel-tools-libs-3.10.0-693.11.6.el7.x86_64.rpm 91153ae59d0acf585201b9a5b453ed8e6504651bf114e3c21c725ce42c8675c5 kernel-tools-libs-devel-3.10.0-693.11.6.el7.x86_64.rpm 8ef1d6c1ef77af60bbb680fa58b1d15f7901c21220c7e5db05edbbbb56f7b17c perf-3.10.0-693.11.6.el7.x86_64.rpm b1f7bf92063bce0cec6286845686bc6ef96db126bdaa8987703b21a736a1a509 python-perf-3.10.0-693.11.6.el7.x86_64.rpm Source: b7756ceda51a35942e03d553f0ec6049ba2520c89e0d66e8e2cdae88f6db0d6a kernel-3.10.0-693.11.6.el7.src.rpm Note: 1) This is a widespread issue with potentially huge impact, we appreciate any help in spreading the word around so maximum number of users are able to find out, and patch their systems. 2) Upstream is curating information around this issue at https://access.redhat.com/security/vulnerabilities/speculativeexecution - information on that page would be helpful for most people on CentOS Linux as well. 3) Please reach out to us at #centos on irc.freenode.net for any feedback, comments, questions or concerns. -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc ------------------------------ Message: 2 Date: Thu, 4 Jan 2018 11:40:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] CESA-2018:0012 Important CentOS 7 microcode_ctl Security Update Message-ID: <ebbc916f-bc12-0a57-4228-cffde1956cdd(a)centos.org> Content-Type: text/plain; charset=utf-8 CentOS Errata and Security Advisory 2018:0012 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:0012 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ccb96b47da6ce420c39a38d09e57adcc7ab3696c721d081fee94298f19fc6cab microcode_ctl-2.1-22.2.el7.x86_64.rpm Source: 589fe27443e43fd6549f56e39968cf515d1cd2448dc922bf0cc980fc651f880d microcode_ctl-2.1-22.2.el7.src.rpm -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc ------------------------------ Message: 3 Date: Thu, 4 Jan 2018 11:47:37 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] CESA-2018:0014 Important CentOS 7 linux-firmware Security Update Message-ID: <d1551ccd-4d12-3bc1-b1d9-9d9bcac949ae(a)centos.org> Content-Type: text/plain; charset=utf-8 CentOS Errata and Security Advisory 2018:0014 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:0014 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: dad80246e21277864476614560cae38820cc147b9ceb44dd0d1776e3935b05df iwl1000-firmware-39.31.5.1-57.el7.noarch.rpm dbb0a9095b11d9af2b8db8f160e1004ead7f5b07add216df63c843e2ac470259 iwl100-firmware-39.31.5.1-57.el7.noarch.rpm 1ff7d3347a2759b15818d71817d5055643bcc4a9f7b091d186006948cf75a3f0 iwl105-firmware-18.168.6.1-57.el7.noarch.rpm e807e3cc6faa0be6df4675d9810db6292a534bc0c3f9c714dcc7c92fed0ba4fd iwl135-firmware-18.168.6.1-57.el7.noarch.rpm d24d6225079ec7d7870ca022226686c67d70f9d034af1167b36570e8506fdf02 iwl2000-firmware-18.168.6.1-57.el7.noarch.rpm 2eebc03a19e54f4b072f21886f02e43bdac41ff5e8290d9eb7c62e3ef1ed7352 iwl2030-firmware-18.168.6.1-57.el7.noarch.rpm d154f7ddb5ccca2772604f907d7a3c06e1b2f95b35665e81363226c98a9115c4 iwl3160-firmware-22.0.7.0-57.el7.noarch.rpm aaba72a90838c5dee3373004ee00530e3f43fbd0b9cd634223d02ea500c3cd6d iwl3945-firmware-15.32.2.9-57.el7.noarch.rpm f18caaca13e3ed06f43483870ecdc57ff6c8796bf3cb8375822519d0ced3b659 iwl4965-firmware-228.61.2.24-57.el7.noarch.rpm 257fe78f77c4e1c5c9bea3873421411c77020c12d907b1d7c511e7e96eaa3190 iwl5000-firmware-8.83.5.1_1-57.el7.noarch.rpm e9edf8b527e94302b0572ce1e3f0e91d62e9d11f74cf3ad1c0350c8e23684acc iwl5150-firmware-8.24.2.2-57.el7.noarch.rpm b63dc1829cca0afbb4a6e5681cebf54509cc4c507ab0bad6553856c4063616ed iwl6000-firmware-9.221.4.1-57.el7.noarch.rpm 8abb25db6c0dcedfa0c11f87028521f5098a88374dcb99376f485bda4596a567 iwl6000g2a-firmware-17.168.5.3-57.el7.noarch.rpm d35951cc21bfccae24e6611ad03901ac1fe0183614add09b2b04528a72d3ea4b iwl6000g2b-firmware-17.168.5.2-57.el7.noarch.rpm 8a2cd4dbabdbdcc36ed46a2529c07b9873716981610082db5b40ae134e12ee3d iwl6050-firmware-41.28.5.1-57.el7.noarch.rpm 357388ce0000543ce9714ebffbadc15ab1e3969c4f1256d6f1132f619c82afdc iwl7260-firmware-22.0.7.0-57.el7.noarch.rpm 75a235701d30e685ca87945e0dd583bda08e254f9078d50b3d466af4d5e3cfe6 iwl7265-firmware-22.0.7.0-57.el7.noarch.rpm 16164fc1c681f5a04a14879041e66855aa434c9c9c30d722a273519896b0f7b7 linux-firmware-20170606-57.gitc990aae.el7.noarch.rpm Source: ffa8541e30f72d79d88740d418943668d1da9535ebbee0df3c61ad4d7d576cdc linux-firmware-20170606-57.gitc990aae.el7.src.rpm -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc ------------------------------ Message: 4 Date: Thu, 4 Jan 2018 14:21:49 +0100 From: Fabian Arrotin <arrfab(a)centos.org> To: "The CentOS developers mailing list." <centos-devel(a)centos.org>, centos-announce(a)centos.org Subject: [CentOS-announce] [Infra] - planned outage : All services Message-ID: <eb940deb-7311-381d-c2f4-ede324e9ffe4(a)centos.org> Content-Type: text/plain; charset="utf-8" Due to important security updates that we need to apply within the whole CentOS infra, please be aware that some nodes/services will be unresponsive during that maintenance window. As it targets both CentOS 6 and CentOS 7, we'll probably apply those updates ASAP but we'll not notify for each impacted service, so this announce will cover all impacted services during the next hours/days. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

1 0

possible issue with nvidia and new patches?
by Zube 04 Jan '18

04 Jan '18

Twitter user stintel, in this thread: https://twitter.com/stintel/status/948499157282623488 mentions a possible problem with the new patches and the nvidia driver: "As if the @Intel bug isn't bad enough, #KPTI renders @nvidia driver incompatible due to GPL-only symbol 'cpu_tlbstate'. #epicfail" Also: https://twitter.com/tomasz_gwozdz/status/948590364679655429 https://twitter.com/BitsAndChipsEng/status/948578609761054721 Cheers, Zube

3 2

Issues with qt-creator from EPEL 7
by Toralf Lund 04 Jan '18

04 Jan '18

Hi, Is anyone here using the "EPEL" package for qt-creator on CentOS 7? I'm having a few issues with it, and I though I'd run them by the list before I try Qt Forums or whatever (since they could be specific to the above mentioned build.) Most notably, 1. If I click on an error message in the "Issues" list after compilation (to display source code related to the error), I sometimes get a "File not found" message *if the file in question is already open*. If I close the file and repeat, the same file opens just fine. 2. There is something slightly odd about the icons in the display. In particular, when I open the search panes, I sometimes get buttons with labels "Find Previous" and "Find Next", but at other times, those same buttons have arrow icons. Has anyone else seen something like this? - Toralf

1 0

Gtkcdlabel + cdlabelgen on CentOS 7 ?
by Nicolas Kovacs 03 Jan '18

03 Jan '18

Hi, I've been using the nifty little application Gtkcdlabel for making CD and DVD covers since 2005, if I remember correctly. Later versions are written in Python, and it's a graphical frontend to the cdlabelgen utility. The application doesn't look very well maintained, since the 1.15 release dates back to 2011. Nevertheless, I've been successfully running it on Slackware Linux until the latest 14.2 release. I'm currently trying to install it on CentOS 7, and I'm only having a partial success, with a showstopper. Here's what I could manage so far. The 'cdlabelgen' command line utility is available on EPEL, so I installed that. I downloaded Gtkcdlabel on the project site: http://gtkcdlabel.sourceforge.net/ The installation process takes you back 25 years, since it amounts to this: # tar xvjf gtkcdlabel-1.15.tar.bz2 -C / This installs the application in /usr/bin/gtkcdlabel.py along with a new desktop entry (and the ugliest icon on the planet). The application shows OK when running it, but PostScript file generation fails. I launched it from a terminal by invoking gtkcdlabel.py, filled out a few fields like Title and Subtitle and then clicked on Preview. Normally this is supposed to launch the PDF viewer (/usr/bin/evince in the default configuration). And it launches, except it gets stuck here, since nothing is generated. Under the hood, in my terminal, I get the following string of error messages: (libspectre) ghostscript reports: invalidfont -10 (libspectre) ghostscript reports: invalidfont -10 (libspectre) ghostscript reports: invalidfont -10 (libspectre) ghostscript reports: invalidfont -10 (libspectre) ghostscript reports: invalidfont -10 I checked, and ghostscript as well as ghostscript-fonts are installed. Which leaves me clueless. Any help would be greatly appreciated, since I've been using this application for years on a daily basis. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 8

Identifying Official CentOS AWS AMIs
by Paul Heinlein 02 Jan '18

02 Jan '18

I'm trying to automate identification of CentOS AWS images. It appears that official CentOS AMIs have an OwnerID value of 410186602215, but I'm not sure if that value is transient or specific to one or more AWS regions. Is there a maintainer lurking here that can confirm or deny? Here's the base query I'm testing: aws ec2 describe-images \ --owners 410186602215 \ --output text \ --query 'reverse(sort_by(Images, &CreationDate))[?starts_with(Description, `CentOS Linux 7`)].[ImageId, CreationDate, Description]' -- Paul Heinlein heinlein(a)madboa.com 45°38' N, 122°6' W

1 0

DHCP timeout and mysteriously dropping IP address
by Jason Edgecombe 02 Jan '18

02 Jan '18

Hi everyone, I'me having trouble with a CentOS 7 guest running on a Hyper-V host. For some reason, the CentOS guest randomly drops its IP address. Running "systemctl restart NetworkManager" on the console will restore IP connectivity without a reboot. I think that DHCP is timing out, but I'm not sure what to do about it. Is there a way to tell NetworkManager to keep trying after a timeout? Here are the versions of the kernel and NetworkManager: Kernel: 3.10.0-693.11.1.el7.x86_64 NetworkManager: 1.8.0-11.el7_4.x86_64 Here are some pertinent logs: Dec 23 03:30:26 myhost kernel: hv_utils: Using TimeSync version 3.0 Dec 23 03:30:27 myhost systemd: Time has been changed Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.3750] device (eth0): link connected Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.3762] device (eth0): DHCPv4 lease renewal requested Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.3889] dhcp4 (eth0): canceled DHCP transaction, DHCP client pid 7936 Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.3890] dhcp4 (eth0): state changed bound -> done Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.3899] dhcp4 (eth0): activation: beginning transaction (timeout in 45 seconds) Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.4487] dhcp4 (eth0): dhclient started with pid 33165 Dec 23 03:30:33 myhost dhclient[33165]: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x5cb111f1) Dec 23 03:30:33 myhost dhclient[33165]: DHCPACK from xxx.xxx.36.1 (xid=0x5cb111f1) Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5824] dhcp4 (eth0): address xxx.xxx.37.53 Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5825] dhcp4 (eth0): plen 23 (255.255.254.0) Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5826] dhcp4 (eth0): gateway xxx.xxx.36.1 Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5826] dhcp4 (eth0): lease time 7200 Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5826] dhcp4 (eth0): nameserver 'xxx.xxx.0.20' Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5826] dhcp4 (eth0): nameserver 'xxx.xxx.0.30' Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5826] dhcp4 (eth0): domain name 'example.com' Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5826] dhcp (eth0): domain search 'example.com.' Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5827] dhcp (eth0): domain search 'foo.example.com.' Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5827] dhcp (eth0): domain search 'dyn.example.com.' Dec 23 03:30:33 myhost NetworkManager[788]: <info> [1514017833.5827] dhcp4 (eth0): state changed unknown -> bound Dec 23 03:30:33 myhost dhclient[33165]: bound to xxx.xxx.37.53 -- renewal in 3368 seconds. Dec 23 03:30:33 myhost dbus-daemon: dbus[726]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' Dec 23 03:30:33 myhost dbus[726]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' Dec 23 03:30:33 myhost systemd: Starting Network Manager Script Dispatcher Service... Dec 23 03:30:33 myhost dbus[726]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' Dec 23 03:30:33 myhost dbus-daemon: dbus[726]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' Dec 23 03:30:33 myhost systemd: Started Network Manager Script Dispatcher Service. Dec 23 03:30:33 myhost nm-dispatcher: req:1 'dhcp4-change' [eth0]: new request (4 scripts) Dec 23 03:30:33 myhost nm-dispatcher: req:1 'dhcp4-change' [eth0]: start running ordered scripts... Dec 23 03:40:42 myhost kernel: hv_utils: Using TimeSync version 3.0 Dec 23 03:40:43 myhost systemd: Time has been changed Dec 23 03:40:49 myhost NetworkManager[788]: <info> [1514018449.4566] device (eth0): link connected Dec 23 03:40:49 myhost NetworkManager[788]: <info> [1514018449.4583] device (eth0): DHCPv4 lease renewal requested Dec 23 03:40:49 myhost NetworkManager[788]: <info> [1514018449.4693] dhcp4 (eth0): canceled DHCP transaction, DHCP client pid 33165 Dec 23 03:40:49 myhost NetworkManager[788]: <info> [1514018449.4694] dhcp4 (eth0): state changed bound -> done Dec 23 03:40:49 myhost NetworkManager[788]: <info> [1514018449.4703] dhcp4 (eth0): activation: beginning transaction (timeout in 45 seconds) Dec 23 03:40:49 myhost NetworkManager[788]: <info> [1514018449.4781] dhcp4 (eth0): dhclient started with pid 33440 Dec 23 03:40:49 myhost dhclient[33440]: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x2f112c1) Dec 23 03:40:52 myhost dhclient[33440]: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x2f112c1) Dec 23 03:40:57 myhost dhclient[33440]: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x2f112c1) Dec 23 03:41:02 myhost dhclient[33440]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 6 (xid=0xe5feb70) Dec 23 03:41:08 myhost dhclient[33440]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 10 (xid=0xe5feb70) Dec 23 03:41:18 myhost dhclient[33440]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 12 (xid=0xe5feb70) Dec 23 03:41:30 myhost dhclient[33440]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 16 (xid=0xe5feb70) Dec 23 03:41:34 myhost NetworkManager[788]: <warn> [1514018494.9605] dhcp4 (eth0): request timed out Dec 23 03:41:34 myhost NetworkManager[788]: <info> [1514018494.9612] dhcp4 (eth0): state changed unknown -> timeout Dec 23 03:41:34 myhost NetworkManager[788]: <info> [1514018494.9713] dhcp4 (eth0): canceled DHCP transaction, DHCP client pid 33440 Dec 23 03:41:34 myhost NetworkManager[788]: <info> [1514018494.9714] dhcp4 (eth0): state changed timeout -> done Thanks, Jason --------------------------------------------------------------------------- Jason Edgecombe | Linux Administrator UNC Charlotte | The William States Lee College of Engineering 9201 University City Blvd. | Charlotte, NC 28223-0001 Phone: 704-687-1943 jwedgeco(a)uncc.edu | http://engr.uncc.edu | Facebook --------------------------------------------------------------------------- If you are not the intended recipient of this transmission or a person responsible for delivering it to the intended recipient, any disclosure, copying, distribution, or other use of any of the information in this transmission is strictly prohibited. If you have received this transmission in error, please notify me immediately by reply e-mail or by telephone at 704-687-1943. Thank you.

1 0

Re: [CentOS] OpenVPN server and firewalld
by Gianluca Cecchi 30 Dec '17

30 Dec '17

On Fri, Dec 29, 2017 at 10:32 AM, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > How do I insert the iptables rule below using firewalld? > > I'm moving up from CentOS 6 to 7 on an office gateway and I'm trying to > get OpenVPN working to allow home workers to access PCs at the office. I've > got it all working but only by manually inserting an ACCEPT rule in the > FORWARD iptables chain: > > iptables -I FORWARD 3 -i tun+ -j ACCEPT > > This rule was extracted from my iptables firewall under CentOS6. The 3 > puts it after the accepts for established connections and loopback > connections, but before any firewalld sub-chains. With this I can connect > to an internal Windows 10 system with Remote Desktop. > > How can I inject this rule using firewalld, either as a direct rule or as > some more firewalld-approved kind of rule? > > Hello, in case your need is not covered by the "--add-service" and/or the "--add-port" you can still use a direct rule for it. I think it should be something like this to test: firewall-cmd --direct --add-rule ipv4 filter FORWARD 0 -i tun+ -j ACCEPT Manual page and some examples with man firewalld.direct The "iptables like" rule will be added into the pre-built chain named FORWARD_direct The 0 above means it is put at top of FORWARD_direct chain. In your example appears "3" and it is not clear what are lines 1 and 2. With iptables -L command you will see: # iptables -v -L FORWARD_direct Chain FORWARD_direct (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- tun+ any anywhere anywhere # With firewall-cmd you can see with # firewall-cmd --direct --get-all-rules ipv4 filter FORWARD 0 -i tun+ -j ACCEPT # If it works ok as expected, you can make it permanent with firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 0 -i tun+ -j ACCEPT firewall-cmd --reload HIH digging into, Gianluca

2 1

CentOS 7 + KDE : post-installation script
by Nicolas Kovacs 29 Dec '17

29 Dec '17

Hi, I just spent two rainy days writing and fine-tuning a post-installation script for CentOS 7 and KDE. https://github.com/kikinovak/centos-7-desktop-kde I've just tested it on three different machines here, and it works quite nicely. Feel free to give it a spin and make some suggestions. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 3

Centos 7 and btrfs
by Matt 28 Dec '17

28 Dec '17

I am setting up a new test server. Doing a fresh install from CD onto a couple 4TB drives. Would like to try btrfs in a RAID 1 format. Are there any how to's on how to do that?

4 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss