Discuss

discuss@lists.centos.org

12 participants
34747 discussions

Chrony vd NTP
by Robert Moskowitz 06 Feb '17

06 Feb '17

I have read: http://thegeekdiary.com/centos-rhel-7-chrony-vs-ntp-differences-between-ntp… My server is up all the time and will serve time to internal systems (via DHCP options). Caveat is that my server is an armv7 (Cubieboard2) which does not have an RTC (no battery). So whenever the system boots, the time is ZERO (Dec 31, 1969 or some such). Chrony fixes this really fast; shortly after boot the time is good. Chrony CAN be configed as an internal time server. But chrony does not seem to step the clock for any adjustments needed. It is more important that this systems time be right all the time than to avoid clock steps. This brings me back to NTP, which normally takes hours to bring the time from ZERO to current, but keeps the time correct. So: Can Chrony check the time, say once a day? Or can NTP make a BIG time jump all at once (on system restart)? thanks

4 5

install of audacity kills audio
by ken 06 Feb '17

06 Feb '17

# uname -r 3.10.0-514.6.1.el7.x86_64 # cat /etc/centos-release CentOS Linux release 7.3.1611 (Core) Prior to the below the sound/audio on my system worked just fine. Then a yum of install of audacity with dependencies: ... Downloading packages: (1/6): vamp-plugin-sdk-2.5-4.el7.x86_64.rpm | 172 kB 00:03 (2/6): wxGTK-2.8.12-20.el7.x86_64.rpm | 2.9 MB 00:00 (3/6): audacity-2.1.1-1.el7.x86_64.rpm | 4.3 MB 00:08 (4/6): portaudio-19-16.el7.x86_64.rpm | 88 kB 00:09 (5/6): libid3tag-0.15.1b-17.el7.x86_64.rpm | 48 kB 00:09 (6/6): wxBase-2.8.12-20.el7.x86_64.rpm | 588 kB 00:10 ... Now nothing which is supposed to output is working; e.g., something as simple as "play file.wav" hangs at the start and outputs no sound at all. Two minutes prior to the install the exact same command worked. Same story with other apps using sound. I "erased" (rpm -e ...) all of the installed packages listed above. That didn''t fix the problem. My guess is that the install loaded one or more bogus kernel modules, it would be nice if lsmod showed WHEN the modules were loaded, but it doesn't. Is there some way to find this out? # lspci -vv -s 00:1f.3 00:1f.3 Audio device: Intel Corporation Sunrise Point-H HD Audio (rev 31) Subsystem: Hewlett-Packard Company Device 80ee Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+ Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx- Latency: 32, Cache Line Size: 64 bytes Interrupt: pin A routed to IRQ 130 Region 0: Memory at 96220000 (64-bit, non-prefetchable) [size=16K] Region 4: Memory at 96210000 (64-bit, non-prefetchable) [size=64K] Capabilities: [50] Power Management version 3 Flags: PMEClk- DSI- D1- D2- AuxCurrent=55mA PME(D0-,D1-,D2-,D3hot+,D3cold+) Status: D0 NoSoftRst+ PME-Enable- DSel=0 DScale=0 PME- Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Address: 00000000fee003d8 Data: 0000 Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel # rmmod snd_hda_intel rmmod: ERROR: Module snd_hda_intel is in use snd_hda_intel probably isn't the offending module anyway. I recall having this same problem five or ten years ago with an audacity install, but don't recall what I did to fix it. Anyone here closer to this issue? Thanks much.

1 0

Delaying services starting at boot
by Robert Moskowitz 06 Feb '17

06 Feb '17

Back to the challenge of a server with no RTC. Chrony advances the clock some 14B sec a bit after bootup. So sometimes services like httpd start with a bad time of Dec 31, 1969. Is there some way to delay services starting until Chrony has done its job to bring the clock up? I think it matters to some extent, as /var/log/http/error.log is filled this time with messages about http starting with that 1969 date. Other times, on boot, I don't see these messages, and thus guess that Chrony set the time before httpd started. thanks

1 0

CentOS 7.3.1611 scap-security-guide issue
by Michał Jankowski 06 Feb '17

06 Feb '17

Hello, I have noticed that pci-dss profile, ssg-centos7-xccdf.xml will always fail on test and remediation for disable_prelink rule. That seem to be caused by insufficient CentOS RPM customization of upstream code. Specifically this: https://github.com/OpenSCAP/scap-security-guide/blob/master/shared/oval/dis… <https://github.com/OpenSCAP/scap-security-guide/blob/master/shared/oval/dis…> That condition will always fail on CentOS because it misses: <extend_definition comment="Installed OS is CentOS7" definition_ref=" installed_OS_is_centos7" /> I was thinking about raising a bug on https://bugs.centos.org or committing a fix in https://git.centos.org/summary/rpms!scap-security-guide but I am unsure as to what action should I take. The other issue I'm facing is trying to workaround the disable_prelink rule by simply taking it out of tests. I have create a tailor file but it doesn't seem to be taken into consideration. The file: <?xml version="1.0" encoding="UTF-8"?> <cdf-11-tailoring:Tailoring xmlns:cdf-11-tailoring=" http://open-scap.org/page/Xccdf-1.1-tailoring" xmlns:xccdf=" http://checklists.nist.gov/xccdf/1.1" id="xccdf_scap-workbench_tailoring_default"> <cdf-11-tailoring:benchmark href="/private/tmp/ssg-centos7-xccdf.xml"/> <cdf-11-tailoring:version time="2017-01-31T14:41:00">1</cdf-11-tailoring:version> <xccdf:Profile id="pci-dss_disable_rule_prelink" extends="pci-dss"> <xccdf:title xmlns:xhtml="http://www.w3.org/1999/xhtml" xml:lang="en-US" override="true">PCI-DSS v3 Control Baseline for CentOS Linux 7 [CUSTOMIZED]</xccdf:title> <xccdf:description xmlns:xhtml="http://www.w3.org/1999/xhtml" xml:lang="en-US" override="true">This is a *draft* profile for PCI-DSS v3</xccdf:description> <xccdf:select idref="disable_prelink" selected="false"/> </xccdf:Profile> </cdf-11-tailoring:Tailoring> Then the oscap command I tried: oscap xccdf eval --remediate --tailoring-file tailor.xml --profile pci-dss --fetch-remote-resources /usr/share/xml/scap/ssg/content/ssg-centos7-xccdf.xml It is my debut on the list, thank you for your consideration :-)

2 2

CentOS 6, 8, mplayer, "vector smash protection is enabled"
by m.roth＠5-cent.us 06 Feb '17

06 Feb '17

This *just* started happening. Video works, but if I try to play streaming audio, I get nothing. In .xsession-errors, I see that message, along with others Object::connect: No such slot TaskManager::GroupManager::taskDestroyed(QObject*) ALSA lib pulse.c:243:(pulse_connect) PulseAudio: Unable to connect: Connection refused ###!!! [Parent][MessageChannel::Call] Error: (msgtype=0xAA0001,name=PPluginInstance::Msg___delete__) Channel error: cannot send/recv Based on a brief google, it *appears* as though vector smash protection is protecting me from playing music. Note that mplayer does play videos with no audio (i.e., from our surveillance cameras in our secure rooms). Can I turn it off, or is there something else blocking me? Let me note that flash-plugin works to play music... except, as I noted last week, it crashes every 15-20 minutes, so I was going to mplayer from the command line.... mark

1 0

Centos6.8 and Python33
by Patrick Begou 06 Feb '17

06 Feb '17

I've some trouble with installing numpy in python 3.3 on Centos 6.8 as installation request a different python version... [root@sge ~]$ yum install python33 python33-python-tools [root@sge ~]$ scl enable python33 bash ===== *this load Python 3.3.2* === [root@sge ~]$ easy_install pip [root@sge ~]$ pip install numpy Collecting numpy Using cached numpy-1.12.0.zip Complete output from command python setup.py egg_info: Traceback (most recent call last): File "<string>", line 1, in <module> File "/tmp/pip-build-wyb0pj/numpy/setup.py", line 34, in <module> raise RuntimeError("Python version 2.7 or >= 3.4 required.") *RuntimeError: Python version 2.7 or >= 3.4 required. [root@sge ~]$which python /opt/rh/python33/root/usr/bin/python [root@sge ~]$which pip /opt/rh/python33/root/usr/bin/pip *I'm not familar with python and I do not find on google how to work arround this.... Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

2 3

Buttons too big in Firefox for Linux
by Gary Stainburn 06 Feb '17

06 Feb '17

A while back, after doing a yum update, a new version of Firefox was installed and since then, the contents of my pages don't fit any more because the buttons are now much bigger. I've done some searching and to be honest I've drowned in the results. To make matters worse, most of the results are OLD, referring to IE version 6 and Firefox version 30. This problem is only very recent (months). The problem is only in Firefox for Linux. Firefox for Android and Windows look fine, as does Chrome on everything and I.E. Does anyone have any relevant / current suggestions on how to fix this? Firefox on Linux is my main development platform so having it look different to everything else is a real pain It doesn't seem to matter whether I use <input type=button> or <button type=button>

7 13

dicom viewer for Centos 7 and pacs servers
by Greg Ennis 05 Feb '17

05 Feb '17

Everyone, Have any of you had any luck getting aeskulap to work with Centos7. We have just migrated some desktops from Fedora 20 to Centos. but aeskulap is not in the centos 7 repos. aeskulap was a decent dicom viewer and was able to connect to our pacs server. If there are other viewers that any of you have used I would be interested in the dialog of what you have used and any difficulties related to the installation process and use. Thanks, Greg Ennis

1 0

Centos7 and logwatch
by Robert Moskowitz 05 Feb '17

05 Feb '17

Is logwatch a service that now needs to be enabled with systemctl? Or is it all handled by crony? This is my first C7 setup... thanks

1 1

Help with httpd userdir recovery
by Robert Moskowitz 05 Feb '17

05 Feb '17

I lost my harddrive on my little personal webserver that only serves some private files from my userdir. So I am trying to build this from notes on a new Centos7.3 installation (well really Centos7.3-arm, but supposedly same sources). Right now the server is running on a test subnet, not the production, but I have set up the hostname and my standard httpd edits. I have enabled userdir and setup my /home/rgm/public_html directory with 711 permissions. I can display the /home/rgm/public_html/index.html file that only has "Hello World' in it (to prevent anyone from walking my file tree from the root). But when I try to display the files in a subdir with ipaddr/~rgm/mydir I get You don't have permission to access /~rgm/mydir/ on this server. So obviously I have forgotten something that I did not put into my notes, or something has changed from Centos6. I have tried both: <Directory "/home/*/public_html"> AllowOverride FileInfo AuthConfig Limit Indexes Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec Require method GET POST OPTIONS </Directory> which is what the current /etc/httpd/conf.d/userdir.conf has, and what I have in my notes: <Directory /home/*/public_html> # AllowOverride FileInfo AuthConfig Limit # Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec <Limit GET POST OPTIONS> Order allow,deny Allow from all </Limit> <LimitExcept GET POST OPTIONS> Order deny,allow Deny from all </LimitExcept> </Directory> Neither seems to make a difference. thank you for your assistance.

9 37

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss