Discuss

discuss@lists.centos.org

2 participants
34758 discussions

bind chroot, bind mounts and selinux
by Tom Robinson 10 Sep '15

10 Sep '15

Hi All, I'm migrating a CentOS 6 bind instance (chrooted) to a CentOS 7 box and am curious of people's opinions on chrooting vs selinux as a way of securing bind. The bind-chroot on CentOS 7 also comes with a script (/usr/libexec/setup-named-chroot.sh) that sets up the much maligned systemd and, through bind mounts, creates and extra level of chroot hierarchy giving: /var/named/chroot/var/named/chroot/var/named which seems totally unnecessary. I'm sure that bind-chroot would be happy enough running without the bind mounts but would I be loosing anything in terms of security? Also, would I bother with chrooting at all if selinux can secure the environment for me? My own opinions aside what do others think and has anyone had experience with this? Kind regards, Tom -- Tom Robinson IT Manager/System Administrator MoTeC Pty Ltd 121 Merrindale Drive Croydon South 3136 Victoria Australia T: +61 3 9761 5050 F: +61 3 9761 5051 E: tom.robinson(a)motec.com.au

2 2

Re: [CentOS] CentOS 7 + Dell Latitude E6420 laptop = thermalshutdown
by deoren 10 Sep '15

10 Sep '15

> On 6/23/2015 7:22 AM, johan.vermeulen7 at telenet.be wrote: > > Hello All, > > > > installing these laptops went ok, but indeed, they shutdown on logon. > > When coming back up, I get a bios warning about temperature. > > On my first attempt on installing Nvidia driver, I wrecked the laptop. > > To be continued. > > > > greetings, Johan > > > Hi, > > Thanks for your feedback. I can't say I'm "happy" that someone else is > having the same problem, but I'm relieved that it's not just something > odd with the setup I am using. > > Any luck? I'm hoping to have a chance to look more into this myself in > the next few weeks once some other projects calm down. Ironically my > next step was going to be going after an updated video card driver. > > Hello Deoren, > > adding elrepo and installing kmod-nvidia seems to have solved the issue. > I hope this works for you as wel. > > greetings, Johan Thanks for the feedback. I'm a little late getting around to it, but I got a chance yesterday to look at this again and followed the steps to enable the ELRepo repository and installed the `kmod-nvidia` package. Once I did so, I was given a warning that there was a conflict with libglamoregl and to see the wiki page for more details. I looked on the site and found this page: http://elrepo.org/tiki/kmod-nvidia which covered not only that issue (basically run `yum remove xorg-x11-glamor`) but also emphasized that 'kmod-nvidia' might not work for some older chipsets and that the 'nvidia-detect' package should be installed and run to check for compatibility. I did so and got this output: kmod-nvidia Optimus hardware detected: An Intel display controller was detected Either disable the Intel display controller in the BIOS or use the bumblebee driver to suport Optimus hardware Now that the 'kmod-nvidia' driver was installed I rebooted the laptop to load it upon boot. Since I had rebooted, I checked my BIOS settings and sure enough I had the 'Enable Optimus' box selected. Figuring myself clever (ha), I disabled the option and attempted to boot the laptop. I got a blinking cursor against a black background and the password prompt to decrypt the disk and finish booting was never given. Since Ctrl+Alt+Del didn't appear to work, I held the power button and forced the laptop off. I then re-enabled the option and when the laptop next booted I got the password prompt to decrypt the disk and the laptop got to the point where Gnome should have loaded, but the system went no further. My notes are unclear at this point whether I was referring to the login window not displaying or whether it did and just logging into the desktop environment didn't work. I then installed the 'bumblebee' package and I was able to login without locking up the system. I then wiped the laptop, disabled the Optimus support in BIOS and did a clean installation making sure to use the same settings for the new installation as the old. The system booted up and I logged into KDE with no issues and the laptop remained powered on. Presumably the Optimus option was the issue all along. In summary: * If I have the Optimus option enabled I need to enable the ELRepo repository and install the kmod-nvidia (presumably) and bumblebee packages. * If I have the Optimus option disabled it appears that I don't need to do anything else other than install CentOS 7 normally and use it. Thanks again for your help with this.

1 0

yum list-sec CVE
by Raymond Durand 09 Sep '15

09 Sep '15

Hi, Is the command #yum list-sec cves still compatible with Centos7? Or are there alternatives to list all CVE applicable to a CentOS without the Satellite? Thanks

3 3

Working with PEM content
by Alice Wonder 09 Sep '15

09 Sep '15

Hi, If I need to script some management of text files with PEM content, are there already some tools that exist that do this safely? e.g. somecert.pem that might contain -----BEGIN CERTIFICATE----- blah blah -----END CERTIFICATE----- -----BEGIN DH PARAMETERS----- more blah -----END DH PARAMETERS----- What I would like is a utility that can read that file, remove the DH parameters, write new file, validate new file is valid PEM contents, and give exit status 0 on success. Could be done with standard scripting methods but I'm guessing a perl or python tool already exists that won't have me hitting myself when I make a stupid scripting mistake. Google and Bing lately though seem to be getting harder and harder for me to use to find that kind of stuff. Suggestions?

2 2

CUPS not generating a printcap file
by Vanhorn, Mike 09 Sep '15

09 Sep '15

According to all of the documentation I can find, an /etc/printcap file (or whatever filename is specified with the Printcap directive) is generated by cupsd ever time a printer is added or removed. On all of my CentOS 6.7 systems, this is NOT happening. I can restart cups and add or remove printers over and over and it still doesn't generate the printcap file. Is this a known issue, or is there some way that CentOS is blocking this from happening? --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.vanhorn(a)wright.edu http://www.cecs.wright.edu/~mvanhorn/

1 0

Saving session with terminal window open upon logout
by Gilbert Sebenste 09 Sep '15

09 Sep '15

Hello everyone, I tried Googling this, looking through admin notes...and I couldn't find this. And I know someone smart out here has the answer! When I log out of a user account, I want it to, when I log back in, have a terminal window pop up on my Gnome windows display, as I did before I logged out. How do I save a session before or as I log out? I am running Centos 6.7, 64-bit. Gilbert ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

1 1

BackupPC problem - wrong user
by Timothy Murphy 09 Sep '15

09 Sep '15

I recently moved BackupPC from CentOS-6 to CentOS-7. But when I browse to localhost/BackupPC I'm told Error: Wrong user: my userid is 48[apache], instead of 984(backuppc) As far as I can tell, the BackupPC settings are exactly the same as they were before the move. It seems htttpd is running the program as user apache rather than backuppc, as required. Is there a simple setting in /etc/httpd/ that will tell httpd to run as a different user? -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

3 3

Nginx with php-fpm is not work
by Martin Zhou 09 Sep '15

09 Sep '15

Hi, everybody, This is a new system environment. I was using YUM to install Nginx and php-fpm, every time I try to access the page, php-fpm will be crash. Php-fpm error log as below, please help me fix it. Thanks. PHP-fpm log: [09-Sep-2015 12:25:25] NOTICE: Terminating ... [09-Sep-2015 12:25:25] NOTICE: exiting, bye-bye! [09-Sep-2015 12:25:26] NOTICE: fpm is running, pid 20339 [09-Sep-2015 12:25:26] NOTICE: ready to handle connections [09-Sep-2015 12:27:07] WARNING: [pool www] child 20343 exited on signal 11 (SIGSEGV) after 101.435499 seconds from start [09-Sep-2015 12:27:07] NOTICE: [pool www] child 20348 started

1 0

CentOS-announce Digest, Vol 127, Issue 4
by centos-announce-request＠centos.org 09 Sep '15

09 Sep '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1741 Important CentOS 6 haproxy Security Update (Johnny Hughes) 2. CESA-2015:1742 Moderate CentOS 7 subversion Security Update (Johnny Hughes) 3. CESA-2015:1741 Important CentOS 7 haproxy Security Update (Johnny Hughes) 4. CEBA-2015:1743 CentOS 7 radvd FASTTRACK BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 8 Sep 2015 19:57:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1741 Important CentOS 6 haproxy Security Update Message-ID: <20150908195739.GA22255(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1741 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1741.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d4fc2abb0dfd295ca7c60bf84a21d21307764c65861003dd3802499585a42d93 haproxy-1.5.4-2.el6_7.1.i686.rpm x86_64: a5b21cea5b73ac1e468a5737fc034c6379c678baff3bd1f0cd175c2c1afef340 haproxy-1.5.4-2.el6_7.1.x86_64.rpm Source: a68d2f70f31ae1f411bcd557a17b03e4f000491d8bde3c642551b885844d655e haproxy-1.5.4-2.el6_7.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 8 Sep 2015 21:07:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1742 Moderate CentOS 7 subversion Security Update Message-ID: <20150908210749.GA28762(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1742 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1742.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 1ac68982e8d6c3c4f08338e829f9b84b172f98107065097924fb229125151516 mod_dav_svn-1.7.14-7.el7_1.1.x86_64.rpm 1319d6c52f045e1e43bcb45c6508d3791a17a255c9226cbc943906de3b34eab0 subversion-1.7.14-7.el7_1.1.i686.rpm 5761b0600d662fee4d1cc5c5507a5669648f1442d1f51751e54f773da8b9460f subversion-1.7.14-7.el7_1.1.x86_64.rpm b883397028c9b71a8854f7dbbe7c5aff09cdd82b03444281d4cd3cedcfefc322 subversion-devel-1.7.14-7.el7_1.1.i686.rpm e48a1950a59d980de126d690fa3f8e1be52f6f0735e7a4ef7e613229e126a9fb subversion-devel-1.7.14-7.el7_1.1.x86_64.rpm 965bcce500931a97b42cdc8ef89b5643ebfba5aff1d7aebeba4aef0a201a67d7 subversion-gnome-1.7.14-7.el7_1.1.i686.rpm 44517d753fe363f67c81e4ad38bc41fc7119ba0bb658a43ebfa126b5e6e8a702 subversion-gnome-1.7.14-7.el7_1.1.x86_64.rpm 304267248f354b87b4f04f41721a03ba1b9ad8930d1601109b828396f8ddeacc subversion-javahl-1.7.14-7.el7_1.1.i686.rpm 1d1ab0cae3f01ecf9f21c886fc0aa81d9ac0b909c4b8840afb379747a613bd38 subversion-javahl-1.7.14-7.el7_1.1.x86_64.rpm f7be0dc76695ba90e8c11b8f9bd62adf93e3c383f3329ff2dc318d4fea58e7c5 subversion-kde-1.7.14-7.el7_1.1.i686.rpm 5cd4c89e73bc8173e04748558a03fd95730f0863fbed3b007620bdf35f5d5741 subversion-kde-1.7.14-7.el7_1.1.x86_64.rpm 26731c80577860969dee68da1009dd0816d54c149d8a8298f8213526c328a100 subversion-libs-1.7.14-7.el7_1.1.i686.rpm eb70a5a6f846a83489ffb5b30d163a536382f5a8260f8d998467a1f37a126258 subversion-libs-1.7.14-7.el7_1.1.x86_64.rpm e0a58ae9d270a340db24c7a1982b9245b86f55924e5f6f532d3670e98799a5c6 subversion-perl-1.7.14-7.el7_1.1.i686.rpm da31f9b3e092e50ecff8ae1c71e465b6b1099b9e057844ddc0699e970fb95683 subversion-perl-1.7.14-7.el7_1.1.x86_64.rpm 5abb5f007da2bc855a86c79778116d45215555559cccbcee02ec2cec2edda9fe subversion-python-1.7.14-7.el7_1.1.x86_64.rpm b954725e526255571c98895f67018d6e45de5d60656ae4909a81b3a24fa48e60 subversion-ruby-1.7.14-7.el7_1.1.i686.rpm 99720bc6cff9a2499cb83927bec535a06401c1765234435b8a194f60a22c0e17 subversion-ruby-1.7.14-7.el7_1.1.x86_64.rpm 2c9f4a74ee2c97a5c0c23aeef34ac10281ff04a6ed8c69934058309e1cc08cc8 subversion-tools-1.7.14-7.el7_1.1.x86_64.rpm Source: 2a4bffe27a66fd5f06362c6c8f5544558ccd38d76cda59145a6e9033d252d452 subversion-1.7.14-7.el7_1.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 8 Sep 2015 21:08:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1741 Important CentOS 7 haproxy Security Update Message-ID: <20150908210802.GA28826(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1741 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1741.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f8d2433b85f82906c7daf609399e86ea61c8599fe291ea7f13e63a83b306b2fb haproxy-1.5.4-4.el7_1.1.x86_64.rpm Source: 0a41b75f4c2c601fd6e26e023ccb046a370a93ee25a74f2ef73f4e485ff3e9ec haproxy-1.5.4-4.el7_1.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 8 Sep 2015 21:08:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1743 CentOS 7 radvd FASTTRACK BugFix Update Message-ID: <20150908210811.GA28890(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1743 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1743.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2f483d1126f4dd5e6dda88c60e5e79b756a5fddbaafbaed343eea7f6712fc733 radvd-1.9.2-9.el7.x86_64.rpm Source: d972627fc03bed72ad243186bca0f41e06cff5a938497af3fa770757555e780a radvd-1.9.2-9.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 127, Issue 4 ***********************************************

1 0

Re: [CentOS] Saving session with terminal window open upon logout
by linush＠verizon.net 09 Sep '15

09 Sep '15

$ gnome-session-save Sent from my HTC ----- Reply message ----- From: "Gilbert Sebenste" <sebenste(a)weather.admin.niu.edu> To: <centos(a)centos.org> Subject: [CentOS] Saving session with terminal window open upon logout Date: Tue, Sep 8, 2015 5:01 PM Hello everyone, I tried Googling this, looking through admin notes...and I couldn't find this. And I know someone smart out here has the answer! When I log out of a user account, I want it to, when I log back in, have a terminal window pop up on my Gnome windows display, as I did before I logged out. How do I save a session before or as I log out? I am running Centos 6.7, 64-bit. Gilbert ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** ******************************************************************************* _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss