Discuss

discuss@lists.centos.org

12 participants
34747 discussions

Question about 7.3
by TE Dukes 31 Jan '17

31 Jan '17

I haven't done a fresh install in years. I've always gone the upgrade route. Seemed to have always worked for me. I moved to 7.3 since it supports the latest versions of some programs I want to use to implement as a backup server/RAID/NAS for 3 machines here at home and a remote laptop at work. So, the question is, is there something different in 7.3 than the previous 7 versions? The reason I ask is I was running a lesser version of 7, I think 7.1, as a VM on 6.8. I remember I chose not to install the most recent version at the time. Never had these issues. Not really issues but everything just worked without a lot of expertise involved. One thing I could never figure out is that on 6.8, I have the zoneminder repo installed and when I did a yum update on the 7.1 VM, it was also accessing the zmrepo which wasn't installed. Just thought it was odd. Anyway, I really appreciate the help and keep paying it forward!!

3 2

CentOS-announce Digest, Vol 143, Issue 12
by centos-announce-request＠centos.org 31 Jan '17

31 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS AltArch 7 (1611) on i386 Architecture (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 30 Jan 2017 07:24:20 -0600 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS AltArch 7 (1611) on i386 Architecture Message-ID: <7a4903a6-8535-0cb4-a2ed-19c66b61ee87(a)centos.org> Content-Type: text/plain; charset="utf-8" The CentOS AltArch SIG is a group of people working to build alternative architecture support derived from CentOS Linux's sources. You can find more details about the AltArch group at: https://wiki.centos.org/SpecialInterestGroup/AltArch Including details on how to get involved and ways to get help for architecture specific issues. This is the release announcement for the i386 (Intel 32-bit) Architecture based on the source code released for CentOS-7 (1611). It includes all packages that build on x86 32-bit processors. The release notes for the normal CentOS-7 apply: https://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 with the following notes that are specific to i386: https://wiki.centos.org/SpecialInterestGroup/AltArch/i386 If you already have a previous version of CentOS-7 i386 installed, just running 'yum update' will get you the latest packages installed. ISOs can be downloaded from: http://mirror.centos.org/altarch/7/isos/i386/ Here are the SHA256SUMS for the ISOs: CentOS-7-i386-DVD-1611.iso: 25eff443460d53155cb837983c947fb3d74f4c0a3077dc699c7d50e9fdb4c0f3 CentOS-7-i386-Everything-1611.iso 578a475248ecef427269357b7ff22b973a007f534988f39f365b8dded43fad72 CentOS-7-i386-LiveGNOME-1611.iso: 16a75041a77e4d98922d2f68c54abef35f50a1e8aa863f182ab84b443cb0fcd1 CentOS-7-i386-LiveKDE-1611.iso: f9651851adee59d646b509757186f038f2b453d285d92dce5b7b91c396d20d1a CentOS-7-i386-Minimal-1611.iso: bf0e17041aad294fbb3fa5c6fb100258ace4f62b94d5bf3356b40f9807a88805 CentOS-7-i386-NetInstall-1611.iso: 249c344d3e82f49be3195e06741276f409815b1d4785f1439fc47c342eb6dd7c =========================== The CentOS team will have a Dojo in Brussels, Belgium on Friday 3th February 2017: https://wiki.centos.org/Events/Dojo/Brussels2017 I will be at the Dojo to discuss the i386 distribution with those who are interested. I will also be at the CentOS Booth at FOSDEM 2017 ( https://fosdem.org/2017/ ) in Brussels, Belgium on February 4th and 5th, 2017. I will also attend the Config Management Camp EU ( http://cfgmgmtcamp.eu/ ) in Ghent, Belgium on the 6th of February, 2017. If you have any questions and will be at any of those locations, please look me up. Bug reports and feedback about specific packages should be filed at https://bugs.centos.org/ against the relevant package name, for project CentOS Linux 7, in the same manner as you would for x86_64. However, do mention the architecture as applicable. =========================== Johnny Hughes CentOS-7 i386 AltArch Maintainer Twitter: @JohnnyCentOS Freenode IRC: hughesjr

1 0

CentOS 6, flash-plugin crashing
by m.roth＠5-cent.us 31 Jan '17

31 Jan '17

Anyone else seeing this? I'm playing streaming media, and after about 10 or 15 min, flash-plugin crashes. I've had this happen today on streams from two separate radio stations. mark

2 1

tor and selinux
by Mark 30 Jan '17

30 Jan '17

I'm experimenting with tor hidden services and got it to work nicely on my Centos7, with tor from epel. That is, until I booted the machine. Then SELinux kicked in and in the logs there's [warn] Directory /var/lib/tor/hidden_service/ cannot be read: Permission denied The permissions are drwx------. 2 toranon toranon 4096 Jan 28 23:39 hidden_service And SELinux gives the following SELinux is preventing /usr/bin/tor from using the dac_override capability. ***** Plugin dac_override (91.4 confidence) suggests ********************** If you want to help identify if domain needs this access or you have a file with the wrong permissions on your system Then turn on full auditing to get path information about the offending file and generate the error again. Do Turn on full auditing # auditctl -w /etc/shadow -p w Try to recreate AVC. Then execute # ausearch -m avc -ts recent If you see PATH record check ownership/permissions on file, and fix it, otherwise report as a bugzilla. ***** Plugin catchall (9.59 confidence) suggests ************************** If you believe that tor should have the dac_override capability by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'tor' --raw | audit2allow -M my-tor # semodule -i my-tor.pp Additional Information: Source Context system_u:system_r:tor_t:s0 Target Context system_u:system_r:tor_t:s0 Target Objects Unknown [ capability ] Source tor Source Path /usr/bin/tor Port <Unknown> Host <Unknown> Source RPM Packages tor-0.2.8.12-1.el7.x86_64 Target RPM Packages Policy RPM selinux-policy-3.13.1-102.el7_3.13.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name host Platform Linux host 3.10.0-514.6.1.el7.x86_64 #1 SMP Wed Jan 18 13:06:36 UTC 2017 x86_64 x86_64 Alert Count 5 First Seen 2017-01-29 22:42:46 EST Last Seen 2017-01-29 22:42:51 EST Local ID 51ceb58e-19cf-4f8f-ab1e-fe48265aaf1d Raw Audit Messages type=AVC msg=audit(1485747771.709:106): avc: denied { dac_override } for pid=2253 comm="tor" capability=1 scontext=system_u:system_r:tor_t:s0 tcontext=system_u:system_r:tor_t:s0 tclass=capability type=AVC msg=audit(1485747771.709:106): avc: denied { dac_read_search } for pid=2253 comm="tor" capability=2 scontext=system_u:system_r:tor_t:s0 tcontext=system_u:system_r:tor_t:s0 tclass=capability type=SYSCALL msg=audit(1485747771.709:106): arch=x86_64 syscall=open success=no exit=EACCES a0=7fcd2c12fe90 a1=20000 a2=0 a3=1 items=0 ppid=1 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=tor exe=/usr/bin/tor subj=system_u:system_r:tor_t:s0 key=(null) Hash: tor,tor_t,tor_t,capability,dac_override As I don't know what dac_override is I don't know if it's a good idea to give it to tor and the confidence seems quite low. Cheers Mark

2 3

Strange ABRT error when I try to switch to su
by Sean Son 30 Jan '17

30 Jan '17

Hello all One of my VMs, running RHEL 7, has been giving me the following ABRT error when I try to login as su Ive seen this error the past three times that Ive logged in. I know that the VM is using Red Hat,but seeing that RHEL/CentOS are pretty much the same thing, I figured I should ask the CentOS mailing list for help. Here is the error: $ su Password: ABRT has detected 1 problem(s). For more info run: abrt-cli list --since 1485781 # abrt-cli list --since 1485781 id b35dcbc9f05781fab04cdd9aca28bbe86a93eace reason: php-fpm killed by SIGSEGV time: Wed 25 Jan 2017 07:44:07 PM EST cmdline: 'php-fpm: pool www' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' package: rh-php56-php-fpm-5.6.5-9.el7 uid: 48 (apache) count: 4 Directory: /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637 Run 'abrt-cli report /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637' for creating a case in Red Hat Customer Portal id 27190e6535600b6fc4bc97de457b302a10698b95 reason: WARNING: at lib/vsprintf.c:1734 vsnprintf+0x691/0x6a0() time: Mon 01 Aug 2016 09:14:44 AM EDT cmdline: BOOT_IMAGE=/vmlinuz-3.10.0-327.22.2.el7.x86_64 root=/dev/mapper/VolGroup00-LogVol00 ro rd.lvm.lv=VolGroup00/LogVol00 vconsole.keymap=us vconsole.font=latarcyrheb-sun16 crashkernel=auto audit=1 rhgb quiet biosdevname=0 net.ifnames=0 LANG=en_US.UTF-8 package: kernel uid: 0 (root) count: 1 Directory: /var/spool/abrt/oops-2016-08-01-09:14:44-8775-0 Reported: cannot be reported What is this error trying to say and how do I fix the issue? All help is greatly appreciated! Thank you Sean

1 0

Centos 7 as a Hyper-V guest and Integration Services
by Adrian Jenzer 30 Jan '17

30 Jan '17

Dear all I'm running a Centos 7.3 as a Hyper-V guest on Windows Server 2012R2. Actually everything works fine but I'm still wondering if I do everything right regarding Linux Integration Services. When I installed Centos 7 I didn't installed any LIS package or so as I understood it's built-in. How are you handling this? Is it recommended to install/update to the latest LIS from Microsoft provided as ISO or do I need to install the hyperv-daemons? Currently my system reports: [root@share ~]# lsmod | grep hv hv_utils 24418 2 hv_storvsc 18032 6 hv_netvsc 40261 0 hv_vmbus 397185 6 hyperv_keyboard,hv_netvsc,hid_hyperv,hv_utils,hyperv_fb,hv_storvsc and I think this time shifts on rebbots are related to missing LIS (?): [root@share ~]# last root pts/0 172.16.4.103 Mon Jan 30 12:14 still logged in (unknown :0 :0 Sun Jan 29 03:59 still logged in reboot system boot 3.10.0-514.6.1.e Fri Feb 3 15:55 - 12:14 (-4+-3:-41) root pts/0 172.16.4.128 Fri Jan 27 15:24 - 15:57 (00:33) root pts/0 172.16.4.128 Fri Jan 27 12:22 - 12:49 (00:27) root pts/0 172.16.4.128 Mon Jan 23 13:53 - 14:00 (00:07) (unknown :0 :0 Mon Jan 23 13:53 - 02:00 (5+12:06) reboot system boot 3.10.0-514.6.1.e Tue Jan 24 23:41 - 02:00 (4+02:18) root pts/0 172.16.4.128 Mon Jan 23 13:36 - down (00:15) administ pts/0 172.16.4.128 Mon Jan 23 12:44 - 13:00 (00:15) (unknown :0 :0 Sun Jan 22 03:56 - 13:52 (1+09:55) reboot system boot 3.10.0-514.2.2.e Fri Jan 27 17:31 - 13:52 (-4+-3:-38) root pts/1 172.16.4.117 Mon Jan 16 12:20 - 13:28 (01:07) Do you also get this Warnings in Hyper-V Event Viewer?: Device 'Microsoft Synthetic Display Controller' in 'SHARE' is loaded but has a different version from the server. Server version 3.3 Client version 3.2 (Virtual machine ID C2D0C208-BC00-4E73-8AF1-DA595FE6ECE7). The device will work, but this is an unsupported configuration. This means that technical support will not be provided until this problem is resolved. To fix this problem, upgrade the integration services. To upgrade, connect to the virtual machine and select Insert Integration Services Setup Disk from the Action menu. Thanks best Adrian

1 0

firewalld
by TE Dukes 30 Jan '17

30 Jan '17

Got 7.3 installed Wednesday, things went so so. Been working on getting roundcubemail setup and firewalld is kicking my butt. I can't figure out all these zones. I opened imap, imaps, pop3, pop3s, smtp, smtps in zones internal, trusted and public. I still get connection refused. I telnet localhost 143, I get connection refused. What zone is used for the local network and what zone is used for outside access? Two days and can't access mail. Is this a Redhat brain child? According to firewalld.org, only Redhat, CentOS and Fedora are using it. Not too happy

7 19

Notes on openssh configuration
by Leonard den Ottolander 29 Jan '17

29 Jan '17

Hello list, To my astonishment the openssh versions on both C6 and C7 will by default negotiate an MD5 HMAC. C6 client, C7 server: debug2: mac_setup: found hmac-md5 debug1: kex: server->client aes128-ctr hmac-md5 none debug2: mac_setup: found hmac-md5 debug1: kex: client->server aes128-ctr hmac-md5 none C7 client & server: debug2: mac_setup: setup hmac-md5-etm(a)openssh.com debug1: kex: server->client aes128-ctr hmac-md5-etm(a)openssh.com none debug2: mac_setup: setup hmac-md5-etm(a)openssh.com debug1: kex: client->server aes128-ctr hmac-md5-etm(a)openssh.com none I reported this issue upstream: https://bugzilla.redhat.com/show_bug.cgi?id=1417263 https://bugzilla.redhat.com/show_bug.cgi?id=1417264 You might want to add MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1-etm@openssh.com,hmac-sha1,hmac-ripemd160-etm@openssh.com,hmac-ripemd160@openssh.com,hmac-ripemd160,umac-128@openssh.com,umac-128-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-sha1-96,umac-64-etm@openssh.com,umac-64@openssh.com to your C7 ssh_config and sshd_config, or MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,umac-64@openssh.com,hmac-sha1-96 to your C6 ssh_config and sshd_config. You might also want to prune your cipher list to exclude RC4 = arcfour ciphers with the option "Ciphers". Compare http://www.theregister.co.uk/2013/09/06/nsa_cryptobreaking_bullrun_analysis/ Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

3 6

Preferred mail client
by TE Dukes 29 Jan '17

29 Jan '17

Hello, again, What is the preferred remote mail client for 7.3? I have used openwebmail in the past, was using usermin and roundcube most recently. Never cared about squirrelmail but that was years ago. I don't use my server as a workstation. It mostly just sits over there collecting dust on the keyboard. TIA

6 6

mail delivery in 7.3
by TE Dukes 28 Jan '17

28 Jan '17

Hello, Still don't have mail working. It seems to be stuck in /var/spool/postfix/incoming It's not getting to ~Maildir or whatever 7.3 uses. I am clueless. Probably need a little break. TIA

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss