Discuss

discuss@lists.centos.org

3 participants
34748 discussions

ImageMagick security alert
by Alice Wonder 07 May '16

07 May '16

https://imagetragick.com/ As CentOS is often used for web servers, I thought this should be posted here. Bug in ImageMagick allows remote exploit. AFAIK no patch exists yet but defense against the exploit is detailed at the link. CVE-2016–3714

4 4

Re: [CentOS] resize lvm
by Wes James 07 May '16

07 May '16

On May 06, 2016, at 12:37 PM, John R Pierce <pierce(a)hogranch.com> wrote: On 5/6/2016 11:28 AM, John R Pierce wrote: On 5/6/2016 11:19 AM, Wes James wrote: sudo resize2fs /dev/lvname/root I get: resize2fs: Bad magic number in super-block while trying to open /dev/lvname/root Couldn't find valid filesystem superblock. what file system type is this /dev/lvname/root ? oops, left out the rest... since you said C7, its quite likely its XFS not extXfs ... if thats the case, then use: xfs_growfs /dev/lvname/root Thanks for the tip. I looked at man xfs_growfs and found -d option and so I used this and it worked: sudo xfs_growfs / -d -- john r pierce, recycling bits in santa cruz _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos Thanks! -wes

1 0

resize lvm
by Wes James 07 May '16

07 May '16

I have a laptop that I put centos 7 on and I started out with a 30gig partition. I resized the other part of the disk to allow more space for centos. I then created an unformated partition in the available space, ran pvcreate /dev/sda4 vgextend lvname /dev/sda4 lvextend -L 184.46G /dev/lvname/root but when I run: sudo resize2fs /dev/lvname/root I get: resize2fs: Bad magic number in super-block while trying to open /dev/lvname/root Couldn't find valid filesystem superblock. How do I resize the volume? Thanks, -wes

4 4

[off-topic] Validating e-mail address with php
by Alice Wonder 06 May '16

06 May '16

After running into several web application that rejected any e-mail address on the new gTLDs because the apps were badly written to validate with a hard-coded list of valid TLDs, I wrote a e-mail validation function that I *think* does things properly. Free for anyone to use who wants to. https://deviant.email/emailaddytest.phps What it really does is use the PHP built-in filter_var but it compensates for known bugs in the filter_var e-mail address validation. It return boolean. I *think* it will properly validate any legal routable address and reject any that are not. But bugs may exist. By default when the host part of user@host is a domain name, it does a DNS query to validate the host resolves. That adds a little latency but I think is worth it. My own implementation will probably cache a positive result for up to 24 hours with APCu but that's not in the function linked. The dns lookup can be disabled. By default it will reject IP address as the host part, but that can be enabled. When enabled, it will reject private and reserved range. Well, reject what is hard-coded into PHP filter_var - I haven't tested that. International domain names will only validate if the php-intl functions are installed (to turn them into punycode) -=- For the username validation, that's where any bugs are most likely to exist. But I think I did it right. It's very unfortunate that the built-in php filter doesn't do it right. Anyway free for anyone, I'm tired of e-mail address filters that don't properly work with common user names on perfectly legal domains that just happen to be newly ICANN approved. You can see live testing by just removing the last s from the filename.

1 0

yum update (first in a long time) - /var/log/dovecot no longer used
by Gary Stainburn 06 May '16

06 May '16

Me again, Another change to my Centos 7.2 system since my 'yum update' yesterday is that /var/log/dovecot is no longer written to. If I do 'systemctl status dovecot' I can see log entries. How can I now do the equiv or 'tail -f <logfile>' Also, why has this changed, and where is it documented?

6 13

Re: [CentOS] yum update (first in a long time) - /var/log/dovecot no longer used
by James B. Byrne 06 May '16

06 May '16

On Fri, May 6, 2016 04:36, John Hodrien wrote: > On Fri, 6 May 2016, Gary Stainburn wrote: > >> What I didn't expect, and what really threw me was that this has >> been implemented via a simply 'yum update' of an existing system, >> not at a major release level. > > > Something like RHEL is stuck in a trap here. Either they never > change a default post-install (lots of rpmnew or deliberately > not introducing new behaviours), or they bring in defaults as > you update (to some extent doing things like rpmsave). Some > people would complain whichever option they chose. Or have packagers divide configuration files into system and local with local overriding system. Then restrict software updates such that they modify only system configs leaving locals alone. That way new things can be added with old things are left as they are. Some software already behaves like this. There is no evident technical reason why most of the rest could not as well. If an update is such that old things cannot be left alone then that is sufficient to require an rpmnew and a warning to the installer that manual intervention is required to complete the update. In fact, anything of that nature would benefit from requiring a special switch to install so that 'yum update' would not break a running system. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

FirewallD and FTP passive mode
by Marcin Trendota 06 May '16

06 May '16

Howdy I'm trying to run FTP server behind firewall. And i can't enable passive mode from the Internet. There are plenty howtos but there aren't many with my combination. For now i have configured port forwarding and ftp server itself. On the router: # firewall-cmd --list-all --zone=external external (active) interfaces: enp3s1 sources: services: openvpn ssh ports: 1194/tcp 2666/tcp 88/tcp masquerade: yes forward-ports: port=21:proto=tcp:toport=:toaddr=10.0.32.7 port=10090-10100:proto=tcp:toport=:toaddr=10.0.32.7 port=88:proto=tcp:toport=80:toaddr=10.0.32.23 icmp-blocks: rich rules: I also did: # modprobe ip_conntrack_ftp ports=10090,10100 excerpt form vsftpd.conf on the FTP server: pasv_enable=Yes pasv_min_port=10090 pasv_max_port=10100 pasv_addr_resolve=Yes >From LAN or through VPN it works. But on the public address i can only log in, cannot turn into passive mode: Connected to ftp1.domain.com (xxx.xxx.xxx.xxx). 220 (vsFTPd 2.2.2) Name (ftp1.domain.com:root): user 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 227 Entering Passive Mode (10,0,32,7,39,111). ftp: connect: Connection timed out Also this IP looks weird - shouldn't it be public IP? What am i doing wrong? TIA. -- Over And Out MoonWolf

4 3

yum update (first in a long time) - EXIM environment variable warning
by Gary Stainburn 06 May '16

06 May '16

Me again, Another problem I've found since doing my yum update is that EXIM is now showing the following error, on startup, and repeatedly in main.log [root@ollie2 ~]# exim -bt localpart(a)example.com 2016-05-06 09:27:04 WARNING: purging the environment. Suggested action: use keep_environment and add_environment. ............... Googling says that to fix this all I need to do is add keep_environment to exim.conf. What I'm struggling to find out is why it's suddenly needed and what the effects are

2 2

After restart, user's gnome autostart seems broken
by wwp 06 May '16

06 May '16

Hello there, CentOS6.7 64-bit up-to-date running on my laptop.. This night I had to restart (did it properly). Since then, my ~/.config/autostart/ contains some new broken .desktop files and /var/log/messages complains: gnome-session[7280]: WARNING: Could not parse desktop file /home/wwp/.config/autostart/gnome-keyring-daemon.desktop: Key file does not have key 'Name' gnome-session[7280]: WARNING: could not read /home/wwp/.config/autostart/gnome-keyring-daemon.desktop [snip] the log tells the same story about other desktop files: gnome-settings-daemon gnome-settings-daemon-helper gnome-power-manager gnome-screensaver gdu-notification-daemon at-spi-registryd user-dirs-update-gtk seahorse-daemon evolution-alarm-notify xfce4-settings-helper-autostart xfce4-notes-autostart IOW, stuff that sounds a bit critical from a GNOME desktop user PoV, explaining my concern. ALl the new broken .desktop files show the same date (Jul 3, 2014) and seem to be related to default services (/etc/xdg/autostart) that should normally NOT be there, as least from what I see on other similar systems running here. The services related to those files are NOT present anymore in my "Startup Applications Preferences", and I start wondering if the broken local desktop files are not shadowing system ones (that seem to run fine, according to `ps ax` and to my running GNOME desktop, showing no defect). I show you the contents of one of them, representative: ==== [Desktop Entry] X-XFCE-Autostart-Override=false Hidden=true ==== On another CentOS 6.7 box, I notice that those services (gnome keyring, at spi registry wrapper, etc.) are present in the "Startup Applications Preferences" but NOT in ~/.config/autostart/, so I assume that default system things are taken into account there. BTW, my user desktop settings are NOT to "automatically remember running applications when logging out". I have a complete backup of the system after last reboot (and a differential backup from one day ago), so I'm not risking anything apparently, but does anybody understand what happened? Is it safe to remove those broken desktop files are relogin my user? Regards, -- wwp

1 0

Copying CentOS to new drive
by Timothy Murphy 06 May '16

06 May '16

I recently asked about copying a running system to a new drive. As a postscript, I'm wondering if it would have been preferable to run the machine under a Live OS, and simply copy the root partition to the new drive? Eg while running under the LiveOS, # mkdir /mnt/old /mnt/new # mount /dev/sda7 /mnt/old # mount /dev/sdb6 /mnt/new # cp -avx /mnt/old /mnt/new or # rsync -ax --progress /mnt/old /mnt/new -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

6 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss