Discuss

discuss@lists.centos.org

34753 discussions

rpmbuild question
by m.roth＠5-cent.us 26 Oct '16

26 Oct '16

Hi, folks, Trying to build a package from a gzipped tarball of a python package. I'm trying to build it in /root/rpmbuild. Python has a way to build it, but it creates its own tree, with a clone of the rpmbuild tree under *that*. So, from the specfile, I'm trying to understand, after much googling, what I need to change the Source and BuildRoot to. My latest try for the latter is BuildRoot: %{_builddir}/BUILD/%{name}-%{version}-%{release} For Source0, I want to use the file in SOURCES. Anyone got a better example than what I've been googling? mark

3 2

SElinux suggestions needed: migrating backup service
by Leon Fauster 26 Oct '16

26 Oct '16

Hi folks, normally I have not so much to do with SElinux but I expected to get in touch sooner or later :-) I migrated a backup-system from El5 to EL6 and the rsync backup process is complaining about selinux attr's now. client <-> server (fetches via rsync -aHAX) client# sestatus SELinux status: disabled server# sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 24 Policy from config file: targeted for example, no label for this file on client side: client# ls -laZ /usr/share/zoneinfo/Africa/Bissau -rw-r--r-- root root /usr/share/zoneinfo/Africa/Bissau but on server side: rsync: rsync_xal_clear: lremovexattr("usr/share/zoneinfo/Africa/.Bissau.WaE4wj","security.selinux") failed: Permission denied (13) and server# ls -laZ /BACKUP/usr/share/zoneinfo/Africa/Bissau -rw-r--r--. root root unconfined_u:object_r:locale_t:s0 usr/share/zoneinfo/Africa/Bissau the local (server) destination is mounted like: server# cat /proc/mounts |grep BACKUP /dev/sdc1 /BACKUP ext3 rw,seclabel,nosuid,nodev,noatime,nodiratime,errors=continue,acl,barrier=1,data=ordered 0 0 this partition comes from the former system (EL5 productively used without labeling it and with SElinux disabled). I started to enable SElinux (permissive) on new systems and therefore disabling SElinux like it was done before on the former system is not an option. Any suggestions to avoid the default labeling "unconfined_u:object_r:locale_t:s0"? -- Thanks, LF

2 3

Anyone know anything about slurm on CentOS 7?
by m.roth＠5-cent.us 26 Oct '16

26 Oct '16

The recently-left programmer did *something*, and he didn't know what, and the guy who picked it up is working with me to find out why /var/log/messages is getting flooded with Oct 26 11:01:06 <servername> kernel: type=1105 audit(1477494066.569:642430): pid=108551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_krb5,pam_xauth acct="<user>" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' Oct 26 11:01:06 <servername> kernel: type=1106 audit(1477494066.620:642431): pid=108548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_krb5,pam_xauth acct="<user>" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' Oct 26 11:01:06 <servername> kernel: type=1104 audit(1477494066.620:642432): pid=108548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_rootok acct="<user>" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' Oct 26 11:01:11 <servername> su: (to <user>) root on none Oct 26 11:01:11 <servername> su: (to <user>) root on none Oct 26 11:01:11 <servername> systemd: Started Session c21839 of user <user>. Other folks can submit jobs to slurm, and we don't get anything like this. Feel free to contact me offlist.... mark Oct 26 11:01:11 <servername> systemd: Starting Session c21839 of user <user>.

4 4

Re: [CentOS] rpmbuild question
by James Hogarth 26 Oct '16

26 Oct '16

On 26 Oct 2016 6:17 pm, "Frank Cox" <theatre(a)melvilletheatre.com> wrote: > > On Wed, 26 Oct 2016 13:07:43 -0400 > m.roth(a)5-cent.us wrote: > > > I'm trying to build it in /root/rpmbuild. > > Don't do that. Install rpmdevtools so you build it under your home directory and avoid blowing up your system if there's an error. > First of all read up on how to properly build an RPM: https://www.hogarthuk.com/?q=node/11 Since this is python look up the Fedora python guidelines and follow those. Here's the spec for a recent python library I packaged: https://pkgs.fedoraproject.org/cgit/rpms/python-ntlm3.git/tree/python-ntlm3… If you don't need python3 you can strip that stuff out ... The Fedora python guidelines have a decent spec template you can crib, keep in mind the el6 caveats if you need to build for that with regards to macro definitions

1 0

CentOS-announce Digest, Vol 140, Issue 9
by centos-announce-request＠centos.org 26 Oct '16

26 Oct '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2098 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2016:2105 Important CentOS 6 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 25 Oct 2016 11:17:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2098 Important CentOS 7 kernel Security Update Message-ID: <20161025111710.GA35428(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2098 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2098.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: afb7e2a7c3a38185b99f092b70ec274888a5beb136a7e5077559cbd29b3f55d7 kernel-3.10.0-327.36.3.el7.x86_64.rpm 1b33324ee4de14c03dde2eefb91bdee83082dd4ced6c0b94f5ab3253690bce38 kernel-abi-whitelists-3.10.0-327.36.3.el7.noarch.rpm 000ccd89b45a28645202add878b5e37d9a482df68fd5cf12914611098724eea7 kernel-debug-3.10.0-327.36.3.el7.x86_64.rpm 430e59db8a03d01f25ff602e766b96b06157fb881db68ca0cb81f229ec2609d6 kernel-debug-devel-3.10.0-327.36.3.el7.x86_64.rpm 5522697d3b016509dd3744e714d61e5d177921d2a045588730c1cd41713ba2c1 kernel-devel-3.10.0-327.36.3.el7.x86_64.rpm b3fb9f23b5a2427d90e286350b1e7ded8ce6c3c2c5f7e191ee15bb8a70c981aa kernel-doc-3.10.0-327.36.3.el7.noarch.rpm ad0006f10828ff8890c5599982c57a5ed75a9fdc9aab90e0c8cba6422eb766ea kernel-headers-3.10.0-327.36.3.el7.x86_64.rpm 3639553b0daacf8b577a5576d732eadae1aeef30cf61ca15dd755e439b5a8578 kernel-tools-3.10.0-327.36.3.el7.x86_64.rpm b66a1c39f21081605dc3f19afc73236b5cb23a1de8d1bd1b14718165663de7ac kernel-tools-libs-3.10.0-327.36.3.el7.x86_64.rpm 97f1708f020dc0c19c9abead5cabdf813aa56ffdf6f8956811669019d74980d8 kernel-tools-libs-devel-3.10.0-327.36.3.el7.x86_64.rpm 6101abe377f9c3f96f9a0b32840ccde2d60835af96ffbb1c787841e0a98bb755 perf-3.10.0-327.36.3.el7.x86_64.rpm cd55f641ed83faeb33d35a7915c78f85f58a237612ffebdfd5f41e652472ce7b python-perf-3.10.0-327.36.3.el7.x86_64.rpm Source: fc7d9058db4d12308f80993c446175e0fd45e413ffafa7b9b2b0c38a432a4a3c kernel-3.10.0-327.36.3.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 26 Oct 2016 07:33:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2105 Important CentOS 6 kernel Security Update Message-ID: <20161026073313.GA49583(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2105 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2105.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: accab5355c8df90d69b9c0a510de38c8169f1ad3f68fb90a281a380bda814508 kernel-2.6.32-642.6.2.el6.i686.rpm 34f0fb180eb6366cfe4921bb2754cc5e1a71c653b4c8295f0d7c55b8fc2c5f22 kernel-abi-whitelists-2.6.32-642.6.2.el6.noarch.rpm f5ee02aae55cd82ffb76592f075ae17b867e45719664c0fbba58c2ddaaef42e5 kernel-debug-2.6.32-642.6.2.el6.i686.rpm bef23a94d5d10cbc9781973ccab1017608bc6fd4aaea4580e733291b4b1e5c0f kernel-debug-devel-2.6.32-642.6.2.el6.i686.rpm c174e85e65af3f6f3e58c91d5496ba442fce86a2069b67e888290ac4bb5ab979 kernel-devel-2.6.32-642.6.2.el6.i686.rpm a9b70c9690cd9cf1b3a5d8daf6405355d2fe036909702744a13c23aa6dadab24 kernel-doc-2.6.32-642.6.2.el6.noarch.rpm a718ceea93ff199e1be06ccbbaee1f9904185350d4c3dde7d5efddee95a8e17f kernel-firmware-2.6.32-642.6.2.el6.noarch.rpm a1390897ac937dfdc103e496723b3b46130d44b65f03661a9da7d923875d70ae kernel-headers-2.6.32-642.6.2.el6.i686.rpm 522934abb31cdcf2527d6be98e15c57f2d0449f3cb822d6f51fa8ab0ff802563 perf-2.6.32-642.6.2.el6.i686.rpm 8d26ca9e0f4274066d6f47a6444e53266398d1e2785c2ca7c30e782a930474a7 python-perf-2.6.32-642.6.2.el6.i686.rpm x86_64: e03a46c4ad13964946f4a0132514dd784718e64224318481449a9bac96c8a133 kernel-2.6.32-642.6.2.el6.x86_64.rpm 34f0fb180eb6366cfe4921bb2754cc5e1a71c653b4c8295f0d7c55b8fc2c5f22 kernel-abi-whitelists-2.6.32-642.6.2.el6.noarch.rpm 756b7fdf4e4c305ed0bcd5258b78333f2bd1dc0cc6183fcc7b49146237e50d6d kernel-debug-2.6.32-642.6.2.el6.x86_64.rpm bef23a94d5d10cbc9781973ccab1017608bc6fd4aaea4580e733291b4b1e5c0f kernel-debug-devel-2.6.32-642.6.2.el6.i686.rpm 06d0b2dbfe10f04f636faf37fd907111777ead7c406c386eeef4a7dc96a8896b kernel-debug-devel-2.6.32-642.6.2.el6.x86_64.rpm 0b8195fa45b0dff3af0a7bf6b77e0e320b4674aaf4b57cecc726457f02f208d7 kernel-devel-2.6.32-642.6.2.el6.x86_64.rpm a9b70c9690cd9cf1b3a5d8daf6405355d2fe036909702744a13c23aa6dadab24 kernel-doc-2.6.32-642.6.2.el6.noarch.rpm a718ceea93ff199e1be06ccbbaee1f9904185350d4c3dde7d5efddee95a8e17f kernel-firmware-2.6.32-642.6.2.el6.noarch.rpm f3f772ca476017a40222059108c2d2801ba6ea5ad3351cf03207fa2c99ce26f2 kernel-headers-2.6.32-642.6.2.el6.x86_64.rpm a817b22e777013c4757d8d27dbbc12478bca40b04ddfebc7129ea030870faa0d perf-2.6.32-642.6.2.el6.x86_64.rpm 49d01cc50bde501b650b9d50c4ae0da5a9a53c6e588531a0c4699c21f11ad643 python-perf-2.6.32-642.6.2.el6.x86_64.rpm Source: c53ef890315b8699634652e8520af16805ea4b9da607d336d22a7a971ecf486d kernel-2.6.32-642.6.2.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 140, Issue 9 ***********************************************

1 0

Ordering rich rules with firewalld
by Jeff White 26 Oct '16

26 Oct '16

Is there any way to order rich rules in firewalld? If I remove all rules and add them back in firewalld seems to put them in whatever order it feels like. Alternatively, how can I change the default policy of a firewalld zone? At the moment I don't see any way to have a zone accept traffic by default other than adding a rich rule allowing 0.0.0.0/0. -- Jeff White HPC Systems Engineer Information Technology Services - WSU

5 4

CVE-2016-5195
by aswathi.ok＠accenture.com 26 Oct '16

26 Oct '16

Hi Team, Could you please help us to know about the CVE-2016-5195 on CentOs. I have server running with CentOS Linux release 7.2.1511 (Core) , will this be effected? Thanks Aswathi ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com

3 2

"Shortcut" for creating a software RAID 60?
by Sorin Srbu 26 Oct '16

26 Oct '16

Hello all, Testing stuff virtually over here before taking it to the physical servers. I found a shortcut for creating a software RAID 10 ("--level=10"), device in CentOS 6. Looking at the below, I don't see anything about a shortcut for RAID 60. https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/htm l/Storage_Administration_Guide/s1-raid-levels.html Is RAID 60 an uncommon RAID-configuration, as compared to RAID 10, and this might be why it's missing? Not too cumbersome to first create two RAID 6-arrays, then add them to a RAID 0, but it does take some extra time. Besides, I haven't found any way to fail a member disk, as is possible to do when using RAID level 10. Am I missing something here? -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu, Sysadmin # Uppsala University # Dept of Medicinal Chemistry # Div of Org Pharm Chem # Box 574 # SE-75123 Uppsala # Sweden # # Phone: +46 (0)18-4714482 # Visit: BMC, Husargatan 3, D5:512b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # O< ASCII ribbon campaign - Against html E-mail # http://tinyurl.com/ascii-ribbon-campaign # # This message was not sent from an iProduct! # # Please consider the environment before printing this email. # Join the campaign at http://thinkBeforePrinting.org # # MotD follows: Pogo sticks make people jumpy.

3 7

Shutdown/Poweroff
by Chris Olson 25 Oct '16

25 Oct '16

Is there a good source of information about how Linux distributions and installers identify and interact with the hardware devices in a system? We are particularly interested in the shutdown process that leads to complete power-off. Thanks.

3 2

Problems with VPN Connection
by Macmor Mach 24 Oct '16

24 Oct '16

Good afternoon Best regard I'm having trouble with a CentOS server release 5.10, so that my users connect via VPN Intranet type, I could not find a solution, if I can collaborate appreciate them, attached logs when it worked and now. Log running: Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Re-using SSL/TLS context Mon Oct 10 13:50:02 2016 193.60.90.72:23683 LZO compression initialized Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Control Channel MTU parms [ L:1543 D:163 EF:66 EB:3 ET:3 EL:0 ] Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Data Channel MTU parms [ L:1543 D:1453 EF:43 EB:133 ET:3 EL:0 AF:3/1 ] Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Local Options hash (VER=V4): '31aebcbb' Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Expected Remote Options hash (VER=V4): '3ebe1e45' Mon Oct 10 13:50:03 2016 193.60.90.72:23683 CRL CHECK OK: /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 VERIFY OK: depth=1, /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 CRL CHECK OK: /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 VERIFY OK: depth=0, /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 TLS: Username/Password authentication succeeded for username 'usuario6' Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Encrypt: Cipher 'DES-EDE-CBC' initialized with 128 bit key Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Decrypt: Cipher 'DES-EDE-CBC' initialized with 128 bit key Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Control Channel: TLSv1, cipher TLSv3/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Mon Oct 10 13:50:03 2016 193.60.90.72:23683 [imawebs_common_cert] Peer Connection Initiated with 193.60.90.72:23683 Log no Operating: Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Re-using SSL/TLS context Mon Oct 24 10:46:31 2016 193.60.90.72:60903 LZO compression initialized Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Control Channel MTU parms [ L:1543 D:163 EF:63 EB:3 ET:3 EL:0 ] Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Data Channel MTU parms [ L:1543 D:1453 EF:43 EB:133 ET:3 EL:0 AF:3/1 ] Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Local Options hash (VER=V4): '31aebcbb' Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Expected Remote Options hash (VER=V4): '3ebe1e45' Mon Oct 24 10:46:32 2016 193.60.90.72:60903 CRL CHECK OK: /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:32 2016 193.60.90.72:60903 VERIFY OK: depth=1, /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:32 2016 193.60.90.72:60903 CRL CHECK OK: /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:32 2016 193.60.90.72:60903 VERIFY OK: depth=0, /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:34 2016 193.60.90.72:60903 WARNING: Failed running command (--auth-user-pass-verify): external program exited with error status: 1 Mon Oct 24 10:46:34 2016 193.60.90.72:60903 TLS Auth Error: Auth Username/Password verification failed for peer Mon Oct 24 10:46:34 2016 193.60.90.72:60903 Control Channel: TLSv1, cipher TLSv3/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Mon Oct 24 10:46:34 2016 193.60.90.72:60903 [imawebs_common_cert] Peer Connection Initiated with 193.60.90.72:60903 -- MAch

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss