Discuss

discuss@lists.centos.org

2 participants
34758 discussions

OT apology
by Jon LaBadie 13 Apr '17

13 Apr '17

Sorry for those two Unix reminisces that made it to the list. I meant to send them to the poster. jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

1 0

Enterprise Linux Slack
by Andrew Holway 12 Apr '17

12 Apr '17

Hallo, Considering the relative decline of IRC (sorry folks) I have set up a Slack for Enterprise Linux. I've been using "pythondev.slack.com" and honestly, its a fantastic tool for community support with really nice features for computer centric discussion. https://enterpriselinux.slack.com/shared_invite/MTY4MTM5NjQ2NTc5LTE0OTE5OTk… My hope is that those running Rhel and Centos can have a common place to flame war about SystemD, what to do when FreeIPA replication breaks and how to give your network interfaces sensible names without having to use a pastebin. Thoughts? Experiances? Cheers, Andrew

8 17

Re CentOS and Intel graphics
by Mark (Netbook) 12 Apr '17

12 Apr '17

Hello, I have an Intel NUC7i3 with 620 graphics and an Intel NUC7i7 with 640 graphics. I have loaded CentOS 6.9 and the graphics is not fully working. I believe that I need a driver. Does CentOS support the Intel 620 and 640 graphics and if not, can someone please point me in the direction of the drivers, with install instructions. Regards, Mark Woolfson

2 4

Ignoring /run/user/X
by Cameron Smith 12 Apr '17

12 Apr '17

We are running into an issue relating to snmpd and the temporary partitions created in /run/user/ so any insight by someone with magical net-snmp skills would be much appreciated. Our monitoring app walks all our servers. We modify /etc/snmp/snmpd.conf on all our servers to just have one line: rocommunity ourcommnuityname monitor.ing.app.ip This has worked just fine for almost 10 years. Since the release of CentOS 7 we are getting alerts for partitions not being found during walks and these are the temporary partitions that are ephemeral while a user is logged in: /run/user/0 /run/user/65000 Seems if the partition is there when the monitor is set or is added while the monitor is active the monitor will keep looking for it and these are meant to go away. We thought "OK we can just ignore those" so we added a line to /etc/snmpd.conf : ignoredisk /run/user/* but that has not helped :( Does anybody have a recommendation on how we can stop those partitions from being seen on walks so we can stop being alerted about partitions for which we are not interested in monitoring their available space? Thanks, Cameron

3 4

Network Manager / CentOS 7 / local unbound
by Alice Wonder 12 Apr '17

12 Apr '17

Hello list - http://unix.stackexchange.com/questions/90035/how-to-set-dns-resolver-in-fe… That says it works for CentOS 5 and I *suspect* the methods there (3 listed) would work, but what is the best way with NetworkManager to set it up to use the localhost for DNS ? I'm paranoid about DNS spoofing and really prefer to have a local instance of DNSSEC enforcing unbound running on my CentOS 7 virtual machines (e.g. linode) Currently I just use a cron job that runs once a minute to over-write was it is /etc/resolv.conf so they don't use the DHCP assigned nameservers, but that does leave a short window every time the network is restarted. I'd like to know the proper way to set up Network Manager to just create nameserver 127.0.0.1 nameserver ::1 in /etc/resolv.conf Via google, it seems every distro approaches it differently and most instructions I have seen involve a GUI. I did not see how to do it in the CentOS documentation but it might be there and I just did not figure out how to search it for what I wanted. Those stackexchange methods look like they might work but they reference CentOS 5 and I know some NetworkManager stuff changed even just between 7.2 and 7.3 as I experienced incorrect IPv6 address after update as a result of those changes. Is there an "official" way to tell NetworkManager what I want in /etc/resolv.conf ? Or better yet, a way to just tell it to leave that file alone?

7 8

CentOS 6 and pxeboot
by m.roth＠5-cent.us 11 Apr '17

11 Apr '17

Hi, folks, We've been using pxeboot to pull up a menu, to build or rebuild machines for years. We have this new server, and it fails. Times out. What's happening is that it tries in this order .../pxelinux.cfg/b8945908-d6a6-41a9-611d-74a6ab80b83d .../pxelinux.cfg/01-88-99-aa-bb-cc-dd .../pxelinux.cfg/C0A8025B .../pxelinux.cfg/C0A8025 .../pxelinux.cfg/C0A802 .../pxelinux.cfg/C0A80 .../pxelinux.cfg/C0A8 .../pxelinux.cfg/C0A .../pxelinux.cfg/C0 .../pxelinux.cfg/C .../pxelinux.cfg/default The first are MAC addresses, etc. I want it to pull default. It takes *minutes* to time out each option, so after a dozen or 15 min, when it gets to defaul, tftp has timed it out. Now, our dhcpd config has this for pxeboot: group { allow booting; allow bootp; filename "gpxelinux.0"; option-209 = "pxelinux.cfg/default"; option subnet-mask 255.255.254.0; option routers <our router>; default-lease-time 172800; # 2 days. max-lease-time 432000; # 5 days. I added that option-209, but it didn't take. I've been looking at the docs, but if someone's can tell me off the top of their head what I need to do, I'd appreciate it. This has become a high priority today.... mark

6 7

jave-1.5.0 on centos 7...
by Ian Diddams 11 Apr '17

11 Apr '17

Curring a long story short... we had a centos 5 server running jboss 6 and jboss 4.2.3GA because of centois 5 EOL TPTB have decreed this server needs migratiung to a Centos 7 server But... the hboss 4.2.3GA jboss app uses java 1.5.0 (_22 FTWT). I can't *(unsurprisingly!) find java 1.5.0 under yum. anyone got it in an rpm or know where it can found? (At his stage it is merely a guess that it will run under centos 7 anyway!) cheers ian

2 1

Re: [CentOS] OT: systemd Poll
by James B. Byrne 11 Apr '17

11 Apr '17

On Sun, April 9, 2017 00:39, Anthony K wrote: > According to "Arthur Schopenhauer": > > "All truth passes through three stages. > First, it is ridiculed. > Second, it is violently opposed. > Third, it is accepted as being self-evident." > > I must admit that I skipped through the first and second stages - I > never found creating init scripts a joy and instead opted to write my > own scripts that I launched via inittab. As such, I welcomed the > simplicity systemd's service files without fuss. > > So, at which stage are you in w/ regards to adopting systemd? Are you > still ridiculing it, violently opposed to it, or have you mellowed to > it? > A. FreeBSD-11. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Fwd: Obsolete NSA exploit for Postfix 2.0 - 2.2
by Robert Moskowitz 10 Apr '17

10 Apr '17

This was just posted on the Postfix list. Centos 7 ships with: postfix-2.10.1-6.el7 Has this cert advisory been applied to the Centos build of Postfix? thank you -------- Forwarded Message -------- Subject: Obsolete NSA exploit for Postfix 2.0 - 2.2 Date: Sun, 9 Apr 2017 16:18:06 -0400 (EDT) From: Wietse Venema <wietse(a)porcupine.org> To: Postfix users <postfix-users(a)postfix.org> CC: Postfix announce <postfix-announce(a)postfix.org> A recent twitter post reveals the existence of an exploit for Postfix, in a collection of what appear to be NSA tools. https://twitter.com/JulianAssange/status/850870683831648256 This is an exploit for Postfix 2.0 - 2.2, for a bug that was fixed 11 years ago in Postfix 2.2.11 and later. There was a memory corruption bug in a Postfix workaround for a Sendmail bug (CERT advisory CA-2003-07, remote buffer overflow when message headers contain lots of comment text before an email address). Technical details: the Postfix strip_address() function, which removes large comments from a mail header, called the printable() function on a string that wasn't null-terminated. This caused the printable() function to scribble past the end of malloc()ed memory, corrupting the memory heap. Running the exploit against Postfix versions less than 11 years old results in odd-looking email messages in the super-user's mailbox, and warning messages in the maillog file (warning: stripping too many comments from address: <long character string>). Wietse

2 2

logwatch customization question
by Robert Moskowitz 09 Apr '17

09 Apr '17

Logwatch is installed, and I am assuming by how empty /etc/logwatch is that it is running from defaults, which I find in /usr/share/logwatch/default.conf/services I want to customize ONE service. dovecot. Do I copy /usr/share/logwatch/default.conf/services/dovecot.conf to /etc/logwatch/conf/services and edit it there, or do I have to copy ALL default.conf/services/* there and modify /etc/logwatch/conf/logwatch.conf to look there? The README is rather not helpful on this. How do I modify ONE service (and not just make the changes in default.conf that I have seen in a couple howtos. thanks

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss