Discuss

discuss@lists.centos.org

34753 discussions

CentOS 6, flash-plugin crashing
by m.roth＠5-cent.us 31 Jan '17

31 Jan '17

Anyone else seeing this? I'm playing streaming media, and after about 10 or 15 min, flash-plugin crashes. I've had this happen today on streams from two separate radio stations. mark

2 1

tor and selinux
by Mark 30 Jan '17

30 Jan '17

I'm experimenting with tor hidden services and got it to work nicely on my Centos7, with tor from epel. That is, until I booted the machine. Then SELinux kicked in and in the logs there's [warn] Directory /var/lib/tor/hidden_service/ cannot be read: Permission denied The permissions are drwx------. 2 toranon toranon 4096 Jan 28 23:39 hidden_service And SELinux gives the following SELinux is preventing /usr/bin/tor from using the dac_override capability. ***** Plugin dac_override (91.4 confidence) suggests ********************** If you want to help identify if domain needs this access or you have a file with the wrong permissions on your system Then turn on full auditing to get path information about the offending file and generate the error again. Do Turn on full auditing # auditctl -w /etc/shadow -p w Try to recreate AVC. Then execute # ausearch -m avc -ts recent If you see PATH record check ownership/permissions on file, and fix it, otherwise report as a bugzilla. ***** Plugin catchall (9.59 confidence) suggests ************************** If you believe that tor should have the dac_override capability by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'tor' --raw | audit2allow -M my-tor # semodule -i my-tor.pp Additional Information: Source Context system_u:system_r:tor_t:s0 Target Context system_u:system_r:tor_t:s0 Target Objects Unknown [ capability ] Source tor Source Path /usr/bin/tor Port <Unknown> Host <Unknown> Source RPM Packages tor-0.2.8.12-1.el7.x86_64 Target RPM Packages Policy RPM selinux-policy-3.13.1-102.el7_3.13.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name host Platform Linux host 3.10.0-514.6.1.el7.x86_64 #1 SMP Wed Jan 18 13:06:36 UTC 2017 x86_64 x86_64 Alert Count 5 First Seen 2017-01-29 22:42:46 EST Last Seen 2017-01-29 22:42:51 EST Local ID 51ceb58e-19cf-4f8f-ab1e-fe48265aaf1d Raw Audit Messages type=AVC msg=audit(1485747771.709:106): avc: denied { dac_override } for pid=2253 comm="tor" capability=1 scontext=system_u:system_r:tor_t:s0 tcontext=system_u:system_r:tor_t:s0 tclass=capability type=AVC msg=audit(1485747771.709:106): avc: denied { dac_read_search } for pid=2253 comm="tor" capability=2 scontext=system_u:system_r:tor_t:s0 tcontext=system_u:system_r:tor_t:s0 tclass=capability type=SYSCALL msg=audit(1485747771.709:106): arch=x86_64 syscall=open success=no exit=EACCES a0=7fcd2c12fe90 a1=20000 a2=0 a3=1 items=0 ppid=1 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=tor exe=/usr/bin/tor subj=system_u:system_r:tor_t:s0 key=(null) Hash: tor,tor_t,tor_t,capability,dac_override As I don't know what dac_override is I don't know if it's a good idea to give it to tor and the confidence seems quite low. Cheers Mark

2 3

Strange ABRT error when I try to switch to su
by Sean Son 30 Jan '17

30 Jan '17

Hello all One of my VMs, running RHEL 7, has been giving me the following ABRT error when I try to login as su Ive seen this error the past three times that Ive logged in. I know that the VM is using Red Hat,but seeing that RHEL/CentOS are pretty much the same thing, I figured I should ask the CentOS mailing list for help. Here is the error: $ su Password: ABRT has detected 1 problem(s). For more info run: abrt-cli list --since 1485781 # abrt-cli list --since 1485781 id b35dcbc9f05781fab04cdd9aca28bbe86a93eace reason: php-fpm killed by SIGSEGV time: Wed 25 Jan 2017 07:44:07 PM EST cmdline: 'php-fpm: pool www' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' package: rh-php56-php-fpm-5.6.5-9.el7 uid: 48 (apache) count: 4 Directory: /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637 Run 'abrt-cli report /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637' for creating a case in Red Hat Customer Portal id 27190e6535600b6fc4bc97de457b302a10698b95 reason: WARNING: at lib/vsprintf.c:1734 vsnprintf+0x691/0x6a0() time: Mon 01 Aug 2016 09:14:44 AM EDT cmdline: BOOT_IMAGE=/vmlinuz-3.10.0-327.22.2.el7.x86_64 root=/dev/mapper/VolGroup00-LogVol00 ro rd.lvm.lv=VolGroup00/LogVol00 vconsole.keymap=us vconsole.font=latarcyrheb-sun16 crashkernel=auto audit=1 rhgb quiet biosdevname=0 net.ifnames=0 LANG=en_US.UTF-8 package: kernel uid: 0 (root) count: 1 Directory: /var/spool/abrt/oops-2016-08-01-09:14:44-8775-0 Reported: cannot be reported What is this error trying to say and how do I fix the issue? All help is greatly appreciated! Thank you Sean

1 0

Centos 7 as a Hyper-V guest and Integration Services
by Adrian Jenzer 30 Jan '17

30 Jan '17

Dear all I'm running a Centos 7.3 as a Hyper-V guest on Windows Server 2012R2. Actually everything works fine but I'm still wondering if I do everything right regarding Linux Integration Services. When I installed Centos 7 I didn't installed any LIS package or so as I understood it's built-in. How are you handling this? Is it recommended to install/update to the latest LIS from Microsoft provided as ISO or do I need to install the hyperv-daemons? Currently my system reports: [root@share ~]# lsmod | grep hv hv_utils 24418 2 hv_storvsc 18032 6 hv_netvsc 40261 0 hv_vmbus 397185 6 hyperv_keyboard,hv_netvsc,hid_hyperv,hv_utils,hyperv_fb,hv_storvsc and I think this time shifts on rebbots are related to missing LIS (?): [root@share ~]# last root pts/0 172.16.4.103 Mon Jan 30 12:14 still logged in (unknown :0 :0 Sun Jan 29 03:59 still logged in reboot system boot 3.10.0-514.6.1.e Fri Feb 3 15:55 - 12:14 (-4+-3:-41) root pts/0 172.16.4.128 Fri Jan 27 15:24 - 15:57 (00:33) root pts/0 172.16.4.128 Fri Jan 27 12:22 - 12:49 (00:27) root pts/0 172.16.4.128 Mon Jan 23 13:53 - 14:00 (00:07) (unknown :0 :0 Mon Jan 23 13:53 - 02:00 (5+12:06) reboot system boot 3.10.0-514.6.1.e Tue Jan 24 23:41 - 02:00 (4+02:18) root pts/0 172.16.4.128 Mon Jan 23 13:36 - down (00:15) administ pts/0 172.16.4.128 Mon Jan 23 12:44 - 13:00 (00:15) (unknown :0 :0 Sun Jan 22 03:56 - 13:52 (1+09:55) reboot system boot 3.10.0-514.2.2.e Fri Jan 27 17:31 - 13:52 (-4+-3:-38) root pts/1 172.16.4.117 Mon Jan 16 12:20 - 13:28 (01:07) Do you also get this Warnings in Hyper-V Event Viewer?: Device 'Microsoft Synthetic Display Controller' in 'SHARE' is loaded but has a different version from the server. Server version 3.3 Client version 3.2 (Virtual machine ID C2D0C208-BC00-4E73-8AF1-DA595FE6ECE7). The device will work, but this is an unsupported configuration. This means that technical support will not be provided until this problem is resolved. To fix this problem, upgrade the integration services. To upgrade, connect to the virtual machine and select Insert Integration Services Setup Disk from the Action menu. Thanks best Adrian

1 0

firewalld
by TE Dukes 30 Jan '17

30 Jan '17

Got 7.3 installed Wednesday, things went so so. Been working on getting roundcubemail setup and firewalld is kicking my butt. I can't figure out all these zones. I opened imap, imaps, pop3, pop3s, smtp, smtps in zones internal, trusted and public. I still get connection refused. I telnet localhost 143, I get connection refused. What zone is used for the local network and what zone is used for outside access? Two days and can't access mail. Is this a Redhat brain child? According to firewalld.org, only Redhat, CentOS and Fedora are using it. Not too happy

7 19

Notes on openssh configuration
by Leonard den Ottolander 29 Jan '17

29 Jan '17

Hello list, To my astonishment the openssh versions on both C6 and C7 will by default negotiate an MD5 HMAC. C6 client, C7 server: debug2: mac_setup: found hmac-md5 debug1: kex: server->client aes128-ctr hmac-md5 none debug2: mac_setup: found hmac-md5 debug1: kex: client->server aes128-ctr hmac-md5 none C7 client & server: debug2: mac_setup: setup hmac-md5-etm(a)openssh.com debug1: kex: server->client aes128-ctr hmac-md5-etm(a)openssh.com none debug2: mac_setup: setup hmac-md5-etm(a)openssh.com debug1: kex: client->server aes128-ctr hmac-md5-etm(a)openssh.com none I reported this issue upstream: https://bugzilla.redhat.com/show_bug.cgi?id=1417263 https://bugzilla.redhat.com/show_bug.cgi?id=1417264 You might want to add MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1-etm@openssh.com,hmac-sha1,hmac-ripemd160-etm@openssh.com,hmac-ripemd160@openssh.com,hmac-ripemd160,umac-128@openssh.com,umac-128-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-sha1-96,umac-64-etm@openssh.com,umac-64@openssh.com to your C7 ssh_config and sshd_config, or MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,umac-64@openssh.com,hmac-sha1-96 to your C6 ssh_config and sshd_config. You might also want to prune your cipher list to exclude RC4 = arcfour ciphers with the option "Ciphers". Compare http://www.theregister.co.uk/2013/09/06/nsa_cryptobreaking_bullrun_analysis/ Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

3 6

Preferred mail client
by TE Dukes 29 Jan '17

29 Jan '17

Hello, again, What is the preferred remote mail client for 7.3? I have used openwebmail in the past, was using usermin and roundcube most recently. Never cared about squirrelmail but that was years ago. I don't use my server as a workstation. It mostly just sits over there collecting dust on the keyboard. TIA

6 6

mail delivery in 7.3
by TE Dukes 28 Jan '17

28 Jan '17

Hello, Still don't have mail working. It seems to be stuck in /var/spool/postfix/incoming It's not getting to ~Maildir or whatever 7.3 uses. I am clueless. Probably need a little break. TIA

1 0

large update - best practice
by Jon LaBadie 27 Jan '17

27 Jan '17

With a large update to be made, eg. the 900 package one I questioned yesterday, are there any suggestions to avoid possible complications? Two examples, I'd like to know of others too: I'm not running the most recently installed kernel, I assume I should reboot to that. I normally have a graphical environment running. Would it be better to: a) shutdown X and update from a straight CLI environment b) logout from the GUI and update from a vt CLI c) update from a GUI login as root or d) doesn't matter, do as normal -- from an ssh login, "sudo yum update"? Thanks, Jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

7 9

software raid 1 failure
by Jerry Geis 27 Jan '17

27 Jan '17

Hi All, I had a machine with software RAID-1 have a disk crash. I am attempting to get the data off the good disk. Using a USB to SATA device I plugged it into another machine. I tried many things to mount it, to mdadm add it but could not get it to cooperate. Another thought I had is can I use fdisk to change the "type" of the partition from "linux raid" to "linux" and then mount as normal? Does that work? Thanks, Jerry

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss