Discuss

discuss@lists.centos.org

11 participants
34747 discussions

package internet-browser?
by Kay Schenk 03 May '17

03 May '17

What can anyone tell me about package internet-browser? Through the gnome package app, there seems to be NO meta info???? -- ------------------------------------------ MzK "Since each of us is blessed with only one life, why not live it with a cat?" -- Robert Stearns

4 6

Firefox for CentOS
by Johnny Hughes 03 May '17

03 May '17

I am currently building the latest Firefox updates and I have noticed that they have upgraded the CentOS-7 Firefox from the ESR tree (45.8) to the mainline tree (Currently firefox-52.0). They have left EL5 and EL6 at the ESR level (45.8.0-2). EL7: https://rhn.redhat.com/errata/RHSA-2017-0461.html EL5 and EL6: https://rhn.redhat.com/errata/RHSA-2017-0459.html As stated above, I am currently building and testing these, so they are not yet released .. just preparing people for the changes. Thanks, Johnny Hughes

7 19

logrotate failed ... (CentOS 6.9)
by Walter H. 03 May '17

03 May '17

I get regularily such a mail <mail> Anacron job 'cron.daily' on .... /etc/cron.daily/logrotate: error: error running non-shared postrotate script for /var/log/clamd.clamsmtp/clamsmtpd.log of '/var/log/clamd.clamsmtp/clamsmtpd.log ' </mail> content of /etc/logrotate.d/clamsmtp /var/log/clamd.clamsmtp/clamsmtpd.log { monthly notifempty missingok postrotate pkill -SIGHUP -f clamd.clamsmtp >/dev/null 2>&1 || : endscript } when looking at ls: <ls -al /var/log/clamd.clamsmtp/> total 572 drwxr-xr-x. 2 clamsmtp mail 4096 May 1 03:15 . drwxr-xr-x. 6 root root 4096 May 1 03:15 .. -rw-r-----. 1 clamsmtp mail 953 May 1 08:43 clamsmtpd.log -rw-r-----. 1 clamsmtp mail 109806 Jan 1 10:28 clamsmtpd.log-20170101 -rw-r-----. 1 clamsmtp mail 114825 Feb 1 03:42 clamsmtpd.log-20170201 -rw-r-----. 1 clamsmtp mail 101356 Mar 1 03:50 clamsmtpd.log-20170301 -rw-r-----. 1 clamsmtp mail 112365 Apr 1 19:51 clamsmtpd.log-20170401 -rw-r-----. 1 clamsmtp mail 104204 May 1 03:15 clamsmtpd.log-20170501 </ls> this shows normal where does this error mail come from? Thanks Walter

2 3

OT: Firefox lockdown policies for CentOS7 desktops
by C. L. Martinez 02 May '17

02 May '17

Hi all, I am doing some tests with my CentOS7 desktop. I have configured a policy to lockdown Chrome/Chromium browsers and it works perfectly. And I am trying to the same for Firefox browsers but Firefox's docs are really "hard" to understand. I have the following stopper points: a/ what is the "real" system wide's config file: firefox.js, sysprefs.js or local-settings.js/mozilla.cfg ? b/ And what is the real directory: "/etc/firefox", "/usr/lib/firefox/defaults/pref" or which?? c/ Is it possible to download and install addons using system wide's policy? For example with Chrome/Chromium you can use "ExtensionInstallForcelist" option. d/ Where can I found all the options :)? Many thanks -- Greetings, C. L. Martinez

2 1

Samba active domain controller guide for Centos 7
by Robert Moskowitz 02 May '17

02 May '17

Is there a good guide for setting up a Samba active domain controller? I am currently running ClearOS, but it does more than what I want, even that I had to modify to suit my needs. Only a few systems. Currently still XP, but I will migrate to Win7 with this move. Of course I will be doing the install on a Cubietruck armv7. thanks for any pointers.

2 1

GCC Installation/Repositories
by Sajjad Hussain 02 May '17

02 May '17

Dear All, We need CentOS 5 for a software, and installed CentOS 5.4. But when we try to install Developments Tools like gcc it gives error that repositories are not found. Can you please help us in install gcc on CentOS 5.4? -bash-3.2$ cat /etc/redhat-release CentOS release 5.4 (Final) -bash-3.2$ uname -a Linux i80pc57 2.6.18-164.el5PAE #1 SMP Thu Sep 3 04:10:44 EDT 2009 i686 i686 i386 GNU/Linux Thanks and Best Regards -- Sajjad Hussain

2 1

selinux problem policies
by Günther J. Niederwimmer 01 May '17

01 May '17

Hello, My problem is to add selinux policies can any help to say what is wrong with my policies I write this! semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html(/.*)?/ typo3conf(/.*)?" I have more instances from typo3 I found this construct in the selinux policies "/var/www/html(/.*)?/uploads(/.*)?" but my is not working ? and I have only errors? neverallow check failed at /etc/selinux/targeted/tmp/modules/100/selinuxutil/ cil:244 (neverallow selinuxutil_typeattr_1 semanage_store_t (file (relabelto))) <root> allow at /etc/selinux/targeted/tmp/modules/100/selinuxutil/cil:675 (allow restorecond_t non_auth_file_type (file (getattr relabelfrom relabelto))) <root> allow at /etc/selinux/targeted/tmp/modules/100/systemd/cil:1108 (allow systemd_tmpfiles_t non_auth_file_type (file (getattr relabelfrom relabelto))) neverallow check failed at /etc/selinux/targeted/tmp/modules/100/base/cil: 13121 (neverallow base_typeattr_18 scsi_generic_device_t (blk_file (read))) <root> allow at /etc/selinux/targeted/tmp/modules/100/munin/cil:581 (allow disk_munin_plugin_t device_node (blk_file (ioctl read getattr lock open))) ......... or is a other way to include policies better ? -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer

3 5

SELinux policy to allow Dovecot to connect to Mysql
by Robert Moskowitz 30 Apr '17

30 Apr '17

I have been getting the following on my new mailserver: Apr 7 10:17:27 z9m9z dovecot: dict: Error: mysql(localhost): Connect failed to database (postfix): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) - waiting for 25 seconds before retry They go away when I setenforce 0. So I googled dovecot mysql selinux and the only worthwhile hit was: http://zszsit.blogspot.com/2012/12/dovecot-mysql-selinux-issue-on-centos6.h… that provides a /etc/selinux/dovecot2mysql.te Is there a simpler way like a setsbool option? With all the howtos on dovecot with mysql, it is interesting that none of them seem to have this problem. Maybe because they connect to mysql through TCP port 3306 which has ITS set of problems (like MariaDB defaults to not listening on TCP). thanks!

6 34

Apache + SSL: default configuration rated "C" by Qualys Labs
by Nicolas Kovacs 29 Apr '17

29 Apr '17

Hi, I'm currently experimenting with a public server running CentOS 7. I have half a dozen production servers all running Slackware Linux, and I intend to progressively migrate them to CentOS, for a host of reasons (support cycle, package availability, SELinux, etc.) But before doing that, I have to figure out a few things that work differently under CentOS. Apache and SSL behave quite differently under these two distributions. So far, Apache is running fine with HTTP and hosts a series of virtual hosts. I have installed Certbot and created a Let's Encrypt certificate for the server. I have a "dummy" website under /var/www/html/default/html. I installed mod_ssl and only edited the following directives in /etc/httpd/conf.d/ssl.conf. I kept the default options for everything else. --8<------------------------------------------------ ... DocumentRoot "/var/www/html/default/html" ServerName sd-41893.dedibox.fr:443 ... SSLCertificateFile /etc/letsencrypt/live/sd-41893.dedibox.fr/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/sd-41893.dedibox.fr/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/sd-41893.dedibox.fr/fullchain.pem --8<------------------------------------------------ After restarting Apache, the website shows up correctly. https://sd-41893.dedibox.fr/ But when I test it using Qualys SSL Labs Server Test, the results are a disappointment. https://www.ssllabs.com/ssltest/ The site is rated "C", with the following remarks: * This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. Grade capped to C." "This server accepts RC4 cipher, but only with older protocols. Grade capped to B." "The server does not support Forward Secrecy with the reference browsers." "This site works only in browsers with SNI support." I googled a bit, and to my surprise I only found articles about Apache and SSL on CentOS that seem - more or less - to use the default ssl.conf configuration. On a side note, my Slackware servers have a default usable /etc/httpd/extra/httpd-ssl.conf file that gets an "A" on Qualys Labs, and even an "A+" when you add a two-liner. Any suggestions on improving that? Cheers, Niki Kovacs -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

7 7

CentOS as Guest OS on Red Hat Virtualisation 4.x
by Ling Yew Kim 29 Apr '17

29 Apr '17

Hi all, I have a banking customer asking if CentOS is compatible on RHV4.0 as a guest VM. Based on Red Hat’s knowledge base (see link below), CentOS not supported guest OS. However, VMware say on their official document, CentOS is a compatible guest OS (see link below). So, in my customer's mind, CentOS cannot be used as a guest OS in RHV cause it is not compatible, which I find it hard to believe considering the relationship between CentOs and RHEL. RHV supported guest OS https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.0/ht… VMware compatible guest OS https://partnerweb.vmware.com/comp_guide2/pdf/VMware_GOS_Compatibility_Guid… So, my question is, technically, can CentOS run as a guest OS on RHV4? Is there anyone that has done extensive test with CentOS on RHV? Is there any documentation or links that can show CentOS will run fine on RHV4? Just need to show customer that indeed CentOS is technically compatible on RHV but just not supported by Red Hat. Many thanks. p/s: If you’re wondering why I’m not getting the customer to migrate CentOS to RHEL just so that it’s a supported configuration? well, for some reason he just wants to continue using CentOS, which I’m guessing could be caused by $$$ as they have heaps of CentOS in their environment. LING YEW KIM PLATFORMS SOLUTIONS ARCHITECT Red Hat Malaysia (ASEAN) <https://www.redhat.com/> lkim(a)redhat.com <mailto:lkim@redhat.com> M: +6012-343-8765 <tel:+6012-343-8765> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted> @redhatnews <https://twitter.com/redhatnews> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc>

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss