Discuss

discuss@lists.centos.org

34753 discussions

IPv6 broken on Linode
by Alice Wonder 17 Feb '17

17 Feb '17

https://forum.linode.com/viewtopic.php?f=19&t=14570&p=72785 I can not figure out what I need to do. Apparently according to linode support, the VM is trying to grab an IPv6 address with some privacy stuff enabled by default causing it to not grab the IPv6 address that is assigned to me. Nothing I have tried seems to work, and it seems that Linode support are far more familiar with Ubuntu than CentOS. I know CentOS follows Red Hat so I'm not suggesting this is CentOS's fault, but stuff like this really is why I am a much bigger fan of KISS with simple key=value configuration files that don't seem to exist anymore with Linux networking in the Red Hat world. Making things more complex to benefit "Cloud" servers it the worst thing Red Hat ever did. Sorry for the tone, I'm quite frustrated and as an epileptic who doesn't drive, driving down to the SF Bay Area for RHCE classes that won't even be applicable in a few years when they change stuff again isn't really an option. Been using Red Hat since MKLinux DR3 (based on Red Hat 5.1) and been through the training courses before and everything changes. Anyone know what might be going on? And how to get dhclient to grab the "right" IPv6 address, the same one this VM grabbed no problem for well over a year?

6 16

CentOS-announce Digest, Vol 144, Issue 5
by centos-announce-request＠centos.org 16 Feb '17

16 Feb '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2017:0274 CentOS 5 kernel BugFix Update (Johnny Hughes) 2. CESA-2017:0276 Moderate CentOS 7 bind Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Feb 2017 13:14:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0274 CentOS 5 kernel BugFix Update Message-ID: <20170215131442.GA8449(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0274 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0274.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5eeff3ee579f570ec49233bf04caa335af2375ffacbc46dae45826e5f9b70748 kernel-2.6.18-418.el5.i686.rpm 9f674e2c212f4ed8b85452682f0d08814580eebb188cbc492e66932dde518338 kernel-debug-2.6.18-418.el5.i686.rpm bfa94e23b90d87f1241391d4354425000cb28fb71c516c6db43ad948d0f23400 kernel-debug-devel-2.6.18-418.el5.i686.rpm 181c671e7fb6fa4576b52c3a23c69222e8915fec78279ca7b0ca9b17e7fbf593 kernel-devel-2.6.18-418.el5.i686.rpm 03a9c5df55efc1a9fb0268e77b929fda5974661529bd12b3a76908ef9cbe1ca1 kernel-doc-2.6.18-418.el5.noarch.rpm b37bf6415c42abf09ecbb75c145090e175bc3494c41c0c32e91e637cbcd55e46 kernel-headers-2.6.18-418.el5.i386.rpm bd2c2051d500bf3a77d37eaf5bc3fd50945ea4729c0ce146052a8390bac2ba46 kernel-PAE-2.6.18-418.el5.i686.rpm f7d8ec73731cdbc7a45a408fcdec5a58ddb5ecacbc88c145ddd07a9bd7565eb2 kernel-PAE-devel-2.6.18-418.el5.i686.rpm 70969578c772dd985fd97721c208a2a4dc4ff7fa480fd95c7a233890730df58c kernel-xen-2.6.18-418.el5.i686.rpm 1479b4c750af9b2061997c76366ed7a45bfe6055174d4c880012f79d67e437a8 kernel-xen-devel-2.6.18-418.el5.i686.rpm x86_64: 583c518288691608947e8a769a31331bb1574065ccbe46ece4903ecdabf60aa6 kernel-2.6.18-418.el5.x86_64.rpm 466872dd2c61bb6dcffcbeb5839eb772c9f7272b552f7d8a8903cc95a6024f8a kernel-debug-2.6.18-418.el5.x86_64.rpm 353e4c5e338979dbb63fb415323e7d613c4b1be04626c6d39d27b03ac1a86a08 kernel-debug-devel-2.6.18-418.el5.x86_64.rpm cf2f965ca2219ad25a836261e28328d7c881204788f91ee2ff66389ac4ee9b2f kernel-devel-2.6.18-418.el5.x86_64.rpm 03a9c5df55efc1a9fb0268e77b929fda5974661529bd12b3a76908ef9cbe1ca1 kernel-doc-2.6.18-418.el5.noarch.rpm 358bbaf90801ad08686df5c6de9f4ce17338abea531a23a87a9c913319abc884 kernel-headers-2.6.18-418.el5.x86_64.rpm cc2836181bfd15f0d65406204d2323a3fd17a7ea6a43a8af889ef210256a7410 kernel-xen-2.6.18-418.el5.x86_64.rpm e35eeb4cd3d0ef2bfeec3e47735e2e7f1475f7597db9f8433531d1b8ea4e8478 kernel-xen-devel-2.6.18-418.el5.x86_64.rpm Source: 9785160c0ab76993df6bdc5ec04362df88ad98e8492d6bdd1107872c6e490a64 kernel-2.6.18-418.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 15 Feb 2017 14:49:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0276 Moderate CentOS 7 bind Security Update Message-ID: <20170215144931.GA63056(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0276 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0276.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 78da78be03829d07f7ddd5bf6fde8fb873ae21fda0ca931eb01e251351d0e0d4 bind-9.9.4-38.el7_3.2.x86_64.rpm 0a4048a4c3afc0656da2ea3d9f67467c3bb13aef795169a831e20be62973cb3b bind-chroot-9.9.4-38.el7_3.2.x86_64.rpm 3edf4863b3265a5ffb6f96e33e0b70cf00f63f632060de6946a98e1f5d6abd4f bind-devel-9.9.4-38.el7_3.2.i686.rpm db587a93bb81fc8471f85f852d6a5e1b68ccae8b1518dcd6aee0bb789ee39609 bind-devel-9.9.4-38.el7_3.2.x86_64.rpm 2f80f485510682611829cf0b00dbba5ed8858ea6862dc37278cc0df4dc965964 bind-libs-9.9.4-38.el7_3.2.i686.rpm 102cdd935e72edc2c3eb7f3997eb86b66bd88d0db7c3c67481d46be5e33d1032 bind-libs-9.9.4-38.el7_3.2.x86_64.rpm 93e1824c575495e0d95abbc23155f3039a0fd7af939583eefe8b027101d3c1ae bind-libs-lite-9.9.4-38.el7_3.2.i686.rpm fc482a8e502415088cec63af435d2b00d65176e0f02e78112ac0e110da5bbe7d bind-libs-lite-9.9.4-38.el7_3.2.x86_64.rpm 7dd2e52354a0b7bdeb26bcd4bebf4624838854e45a881b8cf9580a6d900aac62 bind-license-9.9.4-38.el7_3.2.noarch.rpm 28bddde638e4fd7aaaa64898a68e063c233600949c494762aa921210577817a7 bind-lite-devel-9.9.4-38.el7_3.2.i686.rpm 68a332bfa8510a68dfa69b86731587f3f6db9cb79f5c34ffd25f11a152779c05 bind-lite-devel-9.9.4-38.el7_3.2.x86_64.rpm a13703306d3e55cb528c20b4909b85a4d19347f62899d447c48fa3bee54a8887 bind-pkcs11-9.9.4-38.el7_3.2.x86_64.rpm 4d5a2adf1912a70d6e297fff2fdc682dc6713e3db3a1f5f06245c0a3f1afcd42 bind-pkcs11-devel-9.9.4-38.el7_3.2.i686.rpm afbb5eee280a6724d6e10389d6f11ba724667aed1b4b40cc34b834ab0e507827 bind-pkcs11-devel-9.9.4-38.el7_3.2.x86_64.rpm d6ecabde1ec8cba6ba35e2e8e83294123aa66783958858be2633448f42e20ca5 bind-pkcs11-libs-9.9.4-38.el7_3.2.i686.rpm 2df9618f5fff66583334bdff82397af1e745c7ab52b8c9d621d76a57a4842c96 bind-pkcs11-libs-9.9.4-38.el7_3.2.x86_64.rpm f2628830823d2e30d75a909f8ded4cd29de3e426b31055638a00a004a8406e06 bind-pkcs11-utils-9.9.4-38.el7_3.2.x86_64.rpm 14b3160ad029d2e17ef07078d7f5d83e4e9e153e759bb39fd0ef71986a6cb7a1 bind-sdb-9.9.4-38.el7_3.2.x86_64.rpm ddc9f4877c2e5a465f7075422210153b0aaf05c67e349598f7906d253462279b bind-sdb-chroot-9.9.4-38.el7_3.2.x86_64.rpm 36d4252c534f9af00a95892262eecae02aba51e6e1a70ccc6da1cf00d5da6985 bind-utils-9.9.4-38.el7_3.2.x86_64.rpm Source: cd2e4ab4b292f33e6ab2b04a63d95bd6b120d8b501194b803005fe8455b6b37b bind-9.9.4-38.el7_3.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 144, Issue 5 ***********************************************

1 0

Centos7 GeoIP support with BIND
by Robert Moskowitz 16 Feb '17

16 Feb '17

In my new Centos7 BIND DNS server, I am seeing messages in logwatch about GeoIP. Something new for me to learn about, and it seems, configure. Checking to see what packages are available I find: GeoIP.armv7hl 1.5.0-11.el7 @centos-base_rbf GeoIP-data.noarch 1.5.0-11.el7 base GeoIP-devel.armv7hl 1.5.0-11.el7 base GeoIP-update.noarch 1.5.0-11.el7 base and GeoIP.armv7hl is already installed in my image (even before I installed BIND, it seems to be part of a base server?). I am not finding any help for GeoIP on Centos, but for debian/ubuntu they are saying to install geoip-database. Is GeoIP-data the same thing? What about GeoIP-update? Basically, I probably should get started on this, or disable it in my DNS server. Can someone point me to Centos specific help or help me out? thanks

2 1

Serious attack vector on pkcheck ignored by Red Hat
by Leonard den Ottolander 15 Feb '17

15 Feb '17

Based on an article that was mentioned on this list https://googleprojectzero.blogspot.nl/2014/08/the-poisoned-nul-byte-2014-ed… I found two attacker controlled memory leaks in the option parsing of pkcheck.c. These memory leaks allow a local attacker the ability to "spray the heap", i.e. initialize large parts of the heap before launching his attack. The original attack uses a setuid binary, because the author "is giving himself a break". However, the fact that the binary in the example is setuid is orthogonal to the fact that heap spraying is a very serious attack vector. Bug reports are filed but closed WONTFIX. I think this is a mistake so I would hope people could weigh in on this. https://bugs.freedesktop.org/show_bug.cgi?id=99626 https://bugzilla.redhat.com/show_bug.cgi?id=1418278 https://bugzilla.redhat.com/show_bug.cgi?id=1418287 Thanks for your interest. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

7 33

mach64 driver, latest update in CentOS 6.8, symbol lookup error
by Styma, Robert (Nokia - US) 15 Feb '17

15 Feb '17

I am loading a server from the CentOS 6.7 ISO and then upgrading. After loading at release 6.7, the machine behaves normally. After running yum update, the X server will not start. Attempts to start it manually result in one of the following messages depending upon which OS is loaded. I initially loaded it as 64 bit and when that did not work I tried the 32 bit version of the OS. The graphics card is part of the motherboard so swapping it out is not an option. This is a server and there is no AGP slot. X: symbol lookup error: /usr/lib64/xorg/modules/drivers/mach64_drv.so: undefined symbol: xf86LinearVidMem X: symbol lookup error: /usr/lib/xorg/modules/drivers/mach64_drv.so: undefined symbol: xf86LinearVidMem I yum grouperased the X Window System and Desktop and then groupinstalled it with no luck. I then changed my repos to point to the original ISO, but there were too many dependencies broken to get the system to groupinstall the X Window System and desktop. I tried forcing in just the driver, but it fails with a message about the driver being at a different release than the X server. I am planning to reload the OS and use the Yum Exclude to keep the Xorg pieces. Unfortunately, that will probably break a lot of dependencies. I downloaded the source for the driver from Xorg, but need to find a lot more stuff to get it to compile, and even then, it is likely not to work. Does anyone have any more things to try? Yes I know the mach64 is an old video card, but that is what is there. Since CentOS just follows the upstream source, I am not sure where to file a bug. Not that that is likely to help. I am batting 0 for 5 over the last decade and a half getting anything fixed. Bob Styma

4 10

Kickstart - part ignore onpart ??
by Andreas Benzler 15 Feb '17

15 Feb '17

Hello Guys, after hours of uncessfull create example before i forward special parition tests. part ignoe --onpart But Installation hang out for parition the harddisk. jump to another console partitions are ok ? Which line/lines is/are missing? Andy #version=DEVEL # System authorization information auth --enableshadow --passalgo=sha512 # Use CDROM installation media cdrom # Use graphical install graphical # Run the Setup Agent on first boot firstboot --enable ignoredisk --only-use=sda # Keyboard layouts keyboard --vckeymap=de-nodeadkeys --xlayouts='de (nodeadkeys)' # System language lang de_DE.UTF-8 # Network information network --bootproto=dhcp --device=enp0s3 --ipv6=auto --no-activate network --hostname=localhost.localdomain # Root password rootpw --iscrypted $6$ZzmFRmN6XqC0.Mc4 $LVrBwcqgnv5kIU5mM8e424PDPD7P1dq342lIZrB9gVFzv6EzSRPTGfLyH/M4yf88iwUpOK/XidvqWiYVl8xcG1 # System services services --enabled="chronyd" # System timezone timezone Europe/Berlin --isUtc user --groups=wheel --name=andy --password=$6$gpkn155QMucNw0DC $TUuSuPCe5NEdFyoF/e.bKzrEHvE7W5gyYqNMCmKbkdLIyUnq1qAD5A/.ax/r6DU1MspPnrUzpuWw7rEzOD9hM. --iscrypted --gecos="Andreas Benzler" # System bootloader configuration bootloader --append=" crashkernel=auto" --location=mbr --boot-drive=sda # Disk partitioning information part /boot --onpart=/dev/sda1 part / --onpart=/dev/sda2 part swap --onpart=/dev/sda3 selinux --disabled %packages @^minimal @core chrony kexec-tools %end %pre # clear the MBR and partition table dd if=/dev/zero of=/dev/sda bs=512 count=1 parted -s /dev/sda mklabel msdos TOTAL=`parted -s /dev/sda unit mb print free | grep Free | awk '{print $3}' | cut -d "M" -f1` let SWAP_START=$TOTAL-820 let ROOT_END=$TOTAL-128-820 parted -s /dev/sda mkpart primary ext2 0 128 parted -s /dev/sda mkpart primary ext2 128 $ROOT_END parted -s /dev/sda mkpart primary linux-swap $SWAP_START $TOTAL mkfs.ext2 /dev/sda1 mkfs.ext2 /dev/sda2 mkswap /dev/sda3 %end %addon com_redhat_kdump --enable --reserve-mb='auto' %end %anaconda pwpolicy root --minlen=6 --minquality=50 --notstrict --nochanges --notempty pwpolicy user --minlen=6 --minquality=50 --notstrict --nochanges --notempty pwpolicy luks --minlen=6 --minquality=50 --notstrict --nochanges --notempty %end

2 3

Problems with latest Firefox update -- can't install new extensions
by Kay Schenk 15 Feb '17

15 Feb '17

Since the latest Firefox update to 45.7.0 on my CentOS 6.8 system, I can no longer install add-ons/extensions. Things LOOK like they're working but the extensions don't get stored in my normal area and they don't appear in my Add-Ons menu. Is anyone else having this issue? It has been a while since I added any new extensions so I can't say WHEN exactly this problem happened but .... :( -- ------------------------------------------------ MzK "Trust, but verify." -- Ronald Reagan

2 2

CentOS 7, systemd, NetworkMangler, oh, my
by m.roth＠5-cent.us 15 Feb '17

15 Feb '17

My manager tells me a system in the datacenter is down. I go down there, and plug in a monitor-on-a-stick and keyboard. It's up, but no network. I try systemctl restart NetworkManager several times, and ip a shows *no* change. Finally, I do an ifdown, followed by an ifup, and everything's wonderful. My manager thinks that the NM daemon thinks everything's fine, and there've been no changes, so it does nothing. He suggests that it might have to be stopped, then started, rather than restarted. This is completely unacceptable behavior, since it leave the system with no network connection. Pre-systemd, as we all know, restart *RESTARTED* the damn thing. Is there some Magic (#insert "pixie-dust-sparkles") incantation, either restarting NetworkManager, or using nm-cli, to force it to perform the expected actions? Btw, if this is supposed to be part of the "hide stuff, desktop Linux users don't need to know this stuff", this is a *much* worse result. mark (and yes, my manager's truly aggravated about this, also)

13 34

(re)build sssd-client.i686 for x86_64
by Stijn De Weirdt 15 Feb '17

15 Feb '17

hi all, i'm trying to rebuild the current sssd-client.i686 rpm that is part of the x86_64 repo, but i fail to do so. rebuilding the sssd.src.rpm on x86_64 does not produce this rpm. i can rebuild sssd.src.rpm with --target=i686, but that sssd-client rpm has conflicts and a whole bunch of i686 deps that the rpm from the centos repo doesn't have. tips/help welcome stijn

3 5

Re: [CentOS] Serious attack vector on pkcheck ignored by Red Hat
by m.roth＠5-cent.us 15 Feb '17

15 Feb '17

Johnny Hughes wrote: > On 02/15/2017 09:37 AM, Leonard den Ottolander wrote: >> On Thu, 2017-02-09 at 15:27 -0700, Warren Young wrote: >>> So you’ve now sprayed the heap on this system, but you can’t upload anything else to it because noexec, so…now what? What has our nefarious attacker gained? >> >> So the heap is set with data provided by the (local) attacker who could initialize it to his liking using either of the two memory leaks in the options parsing. >> >> The heap, that is entirely under the control of the attacker, now contains a call to a library with parameters such that it invokes a zero day kernel escalation privilege exploit. And now the exploit will run because pkcheck allowed the attacker to initialize its entire heap via the command line. <snip> I've skipped most of this thread, but went through this post, and excuse me if this sounds like a stupid question... but when the attacker runs their job, isn't it *THEIR* heap, one allocated for this PID, and not any other, such as the heap allocated for PID 1? mark

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss