Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Centos 7: avc: denied { reload } for auid=0 uid=0 gid=0 cmdline="/usr/bin/systemctl reload named-chroot.service" ....
by Dario Lesca 17 Dec '17

17 Dec '17

How to resolve this SElinux problem? type=USER_AVC msg=audit(1513478641.700:1920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { reload } for auid=0 uid=0 gid=0 cmdline="/usr/bin/systemctl reload named-chroot.service" scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1513478641.702:1921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { reload } for auid=0 uid=0 gid=0 cmdline="/usr/bin/systemctl reload named-sdb.service" scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1513478641.703:1922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { reload } for auid=0 uid=0 gid=0 cmdline="/usr/bin/systemctl reload named-sdb-chroot.service" scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1513478641.704:1923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { reload } for auid=0 uid=0 gid=0 cmdline="/usr/bin/systemctl reload named-pkcs11.service" scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' Many thanks -- Dario Lesca (inviato dal mio Linux Fedora 27 Workstation)

1 0

GUI/X11 login and shells other than bash?
by Valeri Galtsev 16 Dec '17

16 Dec '17

Dear Experts, After one of updates that was released some time ago (a Month ago or maybe even earlier) I have noticed the following. On the machines with default runlevel 5 (sorry about old terminology, the new one is still confusing for me ;-) GUI/X11 login (display manager) lists only users whose default shell is bash. Or, at least users whose default shell is tcsh are not listed at all, and if they attempt to log in just by giving their UNIX username, their X11 session "crashes", meaning that after attempting to start, it just trows one back to GUI/X11 login screen. I really do not want to start this shell vs that shell flame war (especially that I myself prefer not tcsh but sh and/or bash for scripting...). But I respect my user's freedom of choosing default shell, so this is really big issue IMHO. I just wonder: does RedHat (CentOS's upstream vendor) dislike and is willing to eradicate all shells except for bash, or what I see is just my own pilot's error? Thanks in advance for all your answers. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 4

Traffic shaping on CentOS
by Kenneth Porter 16 Dec '17

16 Dec '17

I'm deploying a CentOS 7 box as a gateway and I'm trying to figure out how to set up traffic shaping. Historically I've used the Wondershaper script but apparently it's not deprecated in favor of superior queue management. I haven't yet found a packaged solution and I'm wondering what others do to configure this kind of thing. Apparently the new modules are available in many appliance router products (eg. OpenWrt and Streamboost). Perhaps someone here knows of an RPM that wraps this up for RH-based distros? <https://www.bufferbloat.net/projects/cerowrt/wiki/Smart_Queue_Management/> Here's an article arguing why Wondershaper was great in its day but is now bad for modern traffic flows. <https://www.bufferbloat.net/projects/bloat/wiki/Wondershaper_Must_Die/>

3 4

Question on CentoS 7.4 on nvidia
by Jerry Geis 15 Dec '17

15 Dec '17

I installed the elrepo kmod-nvidia and also the nvidia-detect and modules (see below). I had X working with the 3.10 from Centos - but video was freezing. SO I thought I would try the elrepo kernel. I installed that and X does not come up? How do I re-make the nvidia module for 4.14.5 kernel? I want to make sure the kmod kernel did it. I 'm thinking it did not. lspci | grep VGA says GT218 Or what do I look at now to see why X is not coming up? Thanks, Jerry uname -r 4.14.5-1.el7.elrepo.x86_64 grep EE /var/log/Xorg.0.log (WW) warning, (EE) error, (NI) not implemented, (??) unknown. [ 136.998] (EE) NVIDIA: Failed to initialize the NVIDIA kernel module. Please see the [ 136.998] (EE) NVIDIA: system's kernel log for additional error messages and [ 136.998] (EE) NVIDIA: consult the NVIDIA README for details. [ 136.998] (EE) No devices detected. [ 136.998] (EE) [ 136.998] (EE) no screens found(EE) [ 136.998] (EE) [ 136.998] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information. [ 136.998] (EE) [ 137.004] (EE) Server terminated with error (1). Closing log file. uname -a rpm -qa | grep kernel kernel-3.10.0-693.el7.x86_64 kernel-tools-3.10.0-693.5.2.el7.x86_64 abrt-addon-kerneloops-2.1.11-48.el7.centos.x86_64 kernel-headers-3.10.0-693.5.2.el7.x86_64 kernel-ml-devel-4.14.5-1.el7.elrepo.x86_64 kernel-devel-3.10.0-693.el7.x86_64 kernel-3.10.0-693.5.2.el7.x86_64 kernel-ml-4.14.5-1.el7.elrepo.x86_64 kernel-tools-libs-3.10.0-693.5.2.el7.x86_64 kernel-devel-3.10.0-693.5.2.el7.x86_64 [root@mediaport14 ~]# rpm -qa | grep kernel-ml kernel-ml-devel-4.14.5-1.el7.elrepo.x86_64 kernel-ml-4.14.5-1.el7.elrepo.x86_64 # rpm -qa | grep nvidia kmod-nvidia-340xx-340.102-4.el7_4.elrepo.x86_64 nvidia-detect-384.90-1.el7.elrepo.x86_64 yum-plugin-nvidia-1.0.2-1.el7.elrepo.noarch nvidia-x11-drv-340xx-340.102-1.el7.elrepo.x86_64

7 8

Accessing crashed disk
by martin.wagner＠mailbit.io 15 Dec '17

15 Dec '17

Hi I have a Centos server that crashed, it would no longer boot. I thought it was the disk with the OS that was the problem so I bought a new one and did a fresh install and now the computer is again up and running. But I'm having problems with accessing the old failed disk. I can see it with gnome-disk-utility and it says that the disk is OK but has 8 bad sectors. I can mount the boot partition from it and I can decrypt the main partition. But then I can see no way to mount the main partition. It is a LVM physical volume. Any advice?

6 6

Problems with dnscrypt's package from EPEL
by C. L. Martinez 14 Dec '17

14 Dec '17

Hi all, I have installed dnscrypt's rpm package from EPEL repo under a CentOS 7.4 and using unbound as a resolver. But, I see constant timeouts and responses are very slow ... Using same config in a Debian 9 virtual machine, all works ok. I think the problem is with dnscrypt's rpm package provided by EPEL. Anyone have seen similar problems? Thanks. -- Greetings, C. L. Martinez

2 6

Spamassassin vs. SELinux trouble
by Nicolas Kovacs 14 Dec '17

14 Dec '17

Hi, Spamassassin has been working nicely on my main server running CentOS 7 and Postfix. SELinux is activated (Enforcing). Since the most recent update (don't know if it's related to it though) I'm getting the following SELinux error. --8<----------------------------------------------------------------- SELinux is preventing /usr/bin/perl from 'read, write' accesses on the file /var/log/spamassassin/.spamassassin/bayes_toks. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that perl should be allowed read write access on the bayes_toks file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c '7370616D64206368696C64' --raw | audit2allow -M my-7370616D64206368696C64 # semodule -i my-7370616D64206368696C64.pp Additional Information: Source Context system_u:system_r:spamd_t:s0 Target Context system_u:object_r:var_log_t:s0 Target Objects /var/log/spamassassin/.spamassassin/bayes_toks [ file ] Source 7370616D64206368696C64 Source Path /usr/bin/perl Port <Unknown> Host <Unknown> Source RPM Packages perl-5.16.3-292.el7.x86_64 Target RPM Packages Policy RPM selinux-policy-3.13.1-166.el7_4.7.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing ... --8<----------------------------------------------------------------- Unfortunately the suggested solution does not work, e. g. the following command returns nothing: # ausearch -c '7370616D64206368696C64' --raw Now I'm clueless. Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

4 4

Broadcom BCM4352 on Centos 7
by Gary Stainburn 14 Dec '17

14 Dec '17

Hi Folks I'm trying to get my internal WiFi working and I'm following the instructions here: https://wiki.centos.org/HowTos/Laptops/Wireless/Broadcom My adaptor is: [gary@gary ~]$ lspci|grep Broad 08:00.0 Network controller: Broadcom Limited BCM4352 802.11ac Wireless Network Adapter (rev 03) [gary@gary ~]$ However, I've failed at step 2 as I cannot find any Linux / STA / WL drivers when I search the support page linked. Can anyone suggest how I can fix this, or suggest another web page I can follow? Cheers

3 7

Some problemas working with network namespaces
by C. L. Martinez 13 Dec '17

13 Dec '17

Hi all, I am trying to virtually connect two bridges on different network namespaces inside a CentOS KVM host. I have tried different configs, but this is the most closer than I can test: ip netns add pubnet ip netns exec pubnet ip link set dev lo up ip netns exec pubnet ifup pubif2 ip link add dev vethpubif1 type veth peer name vethpubif2 ovs-vsctl add-port pubif1 vethpubif1 ip link set vethpubif2 netns pubnet ip netns exec pubnet brctl addif pubif2 vethpubif2 ip link set dev vethpubif1 up ip netns exec pubnet ip link set dev vethpubif2 up Bridge in the root host network namespace is openvswitch based, and bridge inside pubnet's network namespace is brctl based. Using this config, vms attached to pubif1 openvswitch based can't ping to vms connected to vms in pubif2 bridge. What am i doing wrong? Thanks. -- Greetings, C. L. Martinez

1 0

Centos 6 Samba 4 specific question
by Kienker, Fred 13 Dec '17

13 Dec '17

I am setting up a Samba 4 installation on CentOS 6.9. I have installed the samba4, samba4-common, and samba4-libs with all of the dependencies using YUM which appear to be all of the samba4 packages which are available. In the /usr/bin directory I can find smbcontrol and smbstatus but the smbpasswd command is missing. Checking on a current CentOS 7 all three of these commands are found. Of course with this command missing it’s quite hard to set up standard Samba users in the .tdb file used in the Classic mode. Can someone enlighten me as to what I have done wrong? Best regards, Fred

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss