Discuss

discuss@lists.centos.org

12 participants
34747 discussions

Re: [CentOS] Ghostscript update?
by m.roth＠5-cent.us 12 Jan '17

12 Jan '17

Leonard's summary of the fix (and I note this is just for CentOS 6) is diff -up /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps.new.bad /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps --- /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps.new.bad 2017-01-04 11:20:37.000000000 +0100 +++ /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps 2015-07-24 00:00:19.000000000 +0200 @@ -2025,7 +2025,6 @@ readonly def /LockFilePermissions true >> setuserparams } - systemdict /getenv {pop //false} put if % setpagedevice has the side effect of clearing the page, but % we will just document that. Using setpagedevice keeps the device Which, if I understand what I'm reading, just has added the systemdict line. I added that, and tried to run evince, which did not crash, but did give me invalidaccess -7 invalidaccess -7 invalidaccess -7 Have I misunderstood the fix? mark

3 2

Centos 7 force reverse dns lookup for none registered addr
by Itschak Mugzach 12 Jan '17

12 Jan '17

I have an application running on a home network. the client is windows and the server is Centos 7. I can access the application from a browser, but when I try a HTTP POST from another Centos 7 box (CLI) I get 54 ECONNRESET Connection reset by peer RECV. after reviewing TCPDUMP i see that Centos drops the connection after trying to do a reverse DNS lookup. The problem is that I am not using DNS but direct IP addresses. How can I force Centos not to do a reverse DNS lookup? Best, ITschak

2 1

Allow execution of commands via ssh but not to login
by Bernard Fay 12 Jan '17

12 Jan '17

Hi, Is there a way to allow a user to execute commands via ssh, for example: "ssh user@server ls", but disallow the same user to login on this server with "ssh user@server" ? Thanks, Bernard

4 4

Re: [CentOS] Firefox Issue
by James B. Byrne 12 Jan '17

12 Jan '17

On Thu, January 5, 2017 17:23, Always Learning wrote: > > > Cyber attacks are gradually replacing armed conflicts. > Better fight with bits than blood. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

8 13

Trouble removing files in chrooted sftp
by Myyrä, Timo 12 Jan '17

12 Jan '17

Hi, I have trouble setting up chrooted SFTP for our user. I got the basic SFTP chroot working, user is chrooted to its home directory, I've added /home/userb/etc directory with dummy passwd, group and localtime files. The problem is that instead of only accessing its own files, I need the user to be able to remove another users files. I have web application which runs as different user, the sftp user is member of the web users group. I then setup bind mounts from web users data dir to chrooted users home directory. The chrooted user can't remove any files in the directory owned by another user. The directory permissions are 0775 so they should allow the access. If I don't use chroot I can remove the file just fine so it seems to be something on the chroot that limits the access. I tried to add simple directory, checked the permissions and tried to delete file and it failed as well so the bind mount should be the issue. Here's sample output: # cat etc/{passwd,group} webapp-user:x:5020:5020::/home/webapp-user:/sbin/nologin chroot-user:x:5029:10000::/home/chroot-user:/sbin/nologin root:x:0:0:not really root::: sftp-chroot:x:10000:chroot-user webapp-user:x:5020:chroot-user # ls -lR .: total 0 drwx--x--- 2 root sftp-chroot 61 Jan 5 07:34 etc drwxr-x--- 2 chroot-user sftp-chroot 6 Nov 20 2015 failed drwxr-x--- 2 chroot-user sftp-chroot 16 Jan 5 07:46 input drwxrwxr-x 2 webapp-user webapp-user 98 Jan 5 07:18 intranet ./etc: total 16 -rw-r--r-- 1 root root 55 Jan 5 07:34 group -rw-r----- 1 root root 1883 Jan 5 06:45 localtime -rw-r--r-- 1 root root 172 Jan 5 06:51 passwd -rw-r--r-- 1 root root 105 Jan 5 06:46 passwd~ ./failed: total 0 ./input: total 0 ./intranet: total 72 -rw-rw-r-- 1 chroot-user sftp-chroot 0 Jan 5 07:02 test1.txt -rw-rw-r-- 1 webapp-user webapp-user 0 Jan 5 07:02 test2.txt So why can't I remove the intranet/test* files inside sftp chroot even if the chroot-user is member of webapp-user group and the directory itself has group permissions? Br, Timo M

2 3

Re: [CentOS] Firefox Issue
by m.roth＠5-cent.us 12 Jan '17

12 Jan '17

Always Learning wrote: > On Fri, 2017-01-06 at 12:54 -0500, m.roth(a)5-cent.us wrote: >> James B. Byrne wrote: >> > On Thu, January 5, 2017 17:23, Always Learning wrote: >> >> >> >> Cyber attacks are gradually replacing armed conflicts. >> > >> > Better fight with bits than blood. >> >> Yes, but... attacks on the friggin' IoT could result in lots of blood. Or, less so, what do you mean all the rail lines have been knocked out of commission for a week, and we can't get food to the eastern half of the country? Or power? <snip> > Query: How did the Reds get into the Democrats computer systems ? Hope it wasn't a Redhat/Centos system but an 'open Windoze' set-up. In at least one of the several, it was a phishing attack. In another case, someone responded slowly to a query... and had a typo saying the *reverse* of what they meant to say. mark

2 1

Missing Dependency python-yubico
by Mark LaPierre 12 Jan '17

12 Jan '17

Hey all, I'm trying to install the fedora-packager group so that I can build Fedora source packages into RPMs that I can install. I'm getting this error: Error: Package: fedora-packager-0.6.0.1-1.el6.noarch (epel) Requires: python-yubico <SNIP> [root@peach ~]# yum install python-yubico <SNIP> No package python-yubico available. Do you suppose that maybe this is a typo where python-yubico was typed instead of python-yubikey? When I google for python-yubico Google suggests python-yubikey instead. But maybe not! RPM Search turns up python-yubico packages for Fedora 2[234] for x86_64, and CentOS 7.3 for x86_64 and finds no hits for python-yubikey. Maybe the fedora-packager group only works on CentOS 7? I'm so confused ;-) Does anyone have a suggestion for how I can solve this issue? Is there another way to build source packages into RPM packages that I can install? CentOS release 6.8 (Final) Linux peach.patch 2.6.32-642.11.1.el6.x86_64 #1 SMP Fri Nov 18 19:25:05 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

3 5

Microcode.service error when booting 7.3.1611
by Albert McCann 11 Jan '17

11 Jan '17

In 7.3.1611, running kernel "3.10.0-514.2.2.el7.centos.plus.x86_64 #1 SMP Wed Dec 7 19:10:15 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux" with microcode_ctl-2.1-16.1.el7_3.x86_64, I'm seeing the following error when booting: systemd[1]: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. systemd[1]: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. systemd[1]: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly:Unit is not loaded properly: Invalid argument. Googling that last line returns a single (useless to me) RedHat URL, which requires one to log in for details. https://access.redhat.com/solutions/2851331 Anyone else seeing this, or know what the secret fix is? Could it be the use of the double quotes in this line: ExecStart=/usr/bin/bash -c "grep -l GenuineIntel /proc/cpuinfo | xargs grep -l "model.*79" > /dev/null || echo 1 > /sys/devices/system/cpu/microcode/reload" Al -- "Pieces of Nine! Pieces of Nine!" Another parroty error.

2 2

HSM
by J Martin Rushton 11 Jan '17

11 Jan '17

Purely from interest, is there any current FOSS implementation of HSM? I note that XFS has dropped support for DMAPI, have other filesystems? Regards, Martin

3 7

Ghostscript update?
by Frank Cox 11 Jan '17

11 Jan '17

Has the issue with the last ghostscript update been resolved? I temporarily added ghostcript to the excludes line in my yum.conf to prevent problems and haven't seen any more mention of it here. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss