Discuss

discuss@lists.centos.org

34753 discussions

perl-Net-SCP on Centos 7
by Gary Stainburn 24 Aug '15

24 Aug '15

As part of building my new mail server, I'm installing the RPMS to match my old server. However, I can't find a perl-Net-SCP RPM for this version. Can someone point me to where I can get it, preferrably a repo that I can use that has it. I have found perl-Net-SCP-0.08-1.el6.rf.noarch.rpm. As a last resort I could localinstall that. Would it have any nasty side effects? Gary

2 3

[security] Thunderbird vulnerable to MITM
by Alice Wonder 24 Aug '15

24 Aug '15

Thunderbird has a MITM vulnerability with its otherwise rather groovy auto-configuration feature. The problem is that it makes requests via HTTP to retrieve the auto configuration information. This allows a black hat (e.g. the NSA) to modify the results sent to the client, and the client has no way to verify the results have not been tampered with. This could even allow the black hat to act as a proxy for quite some time and the client may never know. This vulnerability is not something that can just be patched without breaking most auto-configuration. I have what I think is a solution to the problem, but I think it needs further review - and it needs someone who actually has the right contacts in the software and hosting worlds to get it implemented. That's not me, I don't really like most people and the feeling tends to be mutual. Anti-social issues aside, I do think this needs to be fixed. https://librelamp.com/FooBird#security has what I think would be the easiest solution while keeping the ability to auto-configure stuff.

3 6

CentOS 7 - Limiting rescue kernel imeges
by Luigi Rosa 24 Aug '15

24 Aug '15

In order to keep only 3 kernel images on a CentOS 7 I edited /etc/yum.conf and I put installonly_limit=3 This parameter works for standard kernel images, but does not work for rescue images: $ ls -al /boot/vmlinuz* -rwxr-xr-x 1 root root 5027376 May 13 20:46 /boot/vmlinuz-0-rescue-2554e2ffad84452bb07401bed0a61089 -rwxr-xr-x 1 root root 3084288 Jun 27 06:42 /boot/vmlinuz-0-rescue-2be43759d5354c5a84125dea5b4a02ab -rwxr-xr-x 1 root root 5029136 Mar 18 05:18 /boot/vmlinuz-0-rescue-3871136569fb49cb934a276af5e09b32 -rwxr-xr-x 1 root root 5029008 Mar 31 19:54 /boot/vmlinuz-0-rescue-ca5579e88a014362836fa90f4aa34248 -rwxr-xr-x 1 root root 5029744 Aug 6 16:31 /boot/vmlinuz-0-rescue-e2ae4db2b909488088e78ac4064661d2 -rwxr-xr-x 1 root root 5029744 Aug 6 03:15 /boot/vmlinuz-3.10.0-229.11.1.el7.x86_64 -rwxr-xr-x 1 root root 5027376 May 13 12:15 /boot/vmlinuz-3.10.0-229.4.2.el7.x86_64 -rwxr-xr-x 1 root root 5029200 Jun 24 00:15 /boot/vmlinuz-3.10.0-229.7.2.el7.x86_64 Is there a way to keep rescue images within a certain limit? Thank you in advance -- Ciao, luigi / +--[Luigi Rosa]-- \ In every revolution, there's one man with a vision. --James Kirk, "Mirror, Mirror"

2 3

Host does not respond to nmap
by Mark LaPierre 24 Aug '15

24 Aug '15

Hey Y'all, I just set up a new old machine on my network. I did a net install of CentOS 6.7 on it replacing an outdated copy of Win XP. Of course I'm now in the throws of configuring the machine to be a useful member of society. [mlapier@peach ~]$ nmap -sn 192.168.15.0/24 Starting Nmap 5.51 ( http://nmap.org ) at 2015-08-23 20:12 EDT Nmap scan report for 192.168.15.1 Host is up (0.00043s latency). Nmap scan report for 192.168.15.100 Host is up (0.00014s latency). Nmap scan report for 192.168.15.101 Host is up (0.00065s latency). Nmap scan report for 192.168.15.104 Host is up (0.00017s latency). Nmap scan report for mushroom.patch (192.168.15.105) Host is up (0.00015s latency). Nmap done: 256 IP addresses (5 hosts up) scanned in 15.30 seconds [mlapier@peach ~]$ ping -c 1 192.168.15.107 PING 192.168.15.107 (192.168.15.107) 56(84) bytes of data. 64 bytes from 192.168.15.107: icmp_seq=1 ttl=64 time=0.175 ms --- 192.168.15.107 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.175/0.175/0.175/0.000 ms [mlapier@peach ~]$ I can ssh onto 192.168.15.107 too. I spent a good part of the day trying to connect the FAHControl on my machine to the Folding@Home client on 192.168.15.107 without success. Maybe the reason why 192.168.15.107 does not appear on the nmap output has something to do with my lack of success connecting the control to the client. Maybe not. I'm not having any problem connecting to the FAH client on 192.168.15.105 from my machine. I even copied the FAH configuration file from 192.168.15.105 to 192.168.15.107 and then restarted the client. Still no joy in Mudville. I figure I should quit while I'm behind. Anyone have any suggestions? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 2

Make USB bootable drive: Rufus
by Bill Maltby (C4B) 23 Aug '15

23 Aug '15

Had seen various folks ask about how to do this (I did mine long ago and far away to make my Windows machine dual-bootable to Win or CentOS) and while looking for some HD repair diagnostics, ran across this and thought it may be useful to some folks. http://rufus.akeo.ie/ I've not yet used it, but it looks easy. YMMV, of course, as may mine! :-) Bill

2 1

rpmbuild dwz error
by Andrew Neuschwander 22 Aug '15

22 Aug '15

CentOS, I'm not sure where to ask this, please let me know if there is a more appropriate place. On CentOS 7, I'm building a large C++ package with rpmbuild. Arachne (https://www.broadinstitute.org/crd/wiki/index.php/Arachne_Main_Page) During the debuginfo extraction stage, I get the following error: + /usr/lib/rpm/find-debuginfo.sh --strict-build-id -m --run-dwz --dwz-low-mem-die-limit 10000000 --dwz-max-die-limit 110000000 /home/andrew/rpmbuild/BUILD/arachne-46233 dwz: Multifile temporary files too large cpio: /builddir/build/BUILD/glibc-2.17-c758a686/math: Cannot stat: No such file or directory cpio: arachne-46233/src/Calculator.cc: Cannot stat: No such file or directory cpio: arachne-46233/src/Calculator.y: Cannot stat: No such file or directory 36150 blocks rpmbuild/dwz appear to be using /var/tmp for large temporary debug info files. This package generates over 30GB of debug data and I think it is filling up /var/tmp leading to the error. How can I tell rpmbuild to use an alternative temporary file location? Thanks, -Andrew

4 6

Grub legacy on Centos 7
by Sachin Gupta 21 Aug '15

21 Aug '15

Hello Everyone, We have centos6 server. And we are planning to upgrade it to Centos7.And GRUB 2 needs a new bios grub partition. Creating a new partition is too much risky. I am wondering if it is possible to replace Grub2 with Grub legacy on Centos7 machine? Thanks!! Sachin

5 5

fsck mdraid root partition
by Bowie Bailey 20 Aug '15

20 Aug '15

There are some errors on my root filesystem, so I need to fsck it. In order to do this while the filesystem is unmounted, I'm booting from the install disk. However, since the filesystem is on an mdraid device, I'm not sure of the right way to get it assembled so I can check it. If I do, mdadm --examine --scan, then I get this: ARRAY /dev/md/2 metadata=... (and others, but I'm only interested in md2 at this point) It shows as /dev/md/2, while it is called /dev/md2 if I boot into the OS. If I do this: mdadm --assemble --scan /dev/md/2 I assume it will assemble it. Is it going to cause and problems assembling it under a different name in order to run the fsck? Should I rather force it to have the same name like this: mdadm --assemble /dev/md2 /dev/sda1 /dev/sda2 if that will even work? Thanks, -- Bowie

2 1

Re: [CentOS] TLS for all CentOS websites but not for smtp?
by James B. Byrne 20 Aug '15

20 Aug '15

On Wed, August 19, 2015 12:24, Kai Bojens wrote: > On 19-08-15 08:30:27, Alice Wonder wrote: > >> e-mail by its very design is not secure, SMTP creates "Man In The >> Middle" at every server along the way. > > DANE exists and mail servers like postfix support this. My logfiles > show me that mail.centos.org delivers straight to me without any > servers along the way. > >> I'm not saying they shouldn't implement TLS on the list server, just >> not sure what the privacy or security benefit really would be. > > Encryption ensures that third parties simply cannot follow their > "collect all" strategy. However, this is a mailing list. And all messages sent through this mailing list are archived and published as web documents. It seems to me that insofar as Centos ML comsec is concerned STARTTLS would not add any measurable degree of security or privacy. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

"UMask=0002" ignored in httpd service file
by Dennis Jacobfeuerborn 20 Aug '15

20 Aug '15

Hi, I'm trying to get Apache httpd to create new files with the group writable bit set and thought adding the directive "UMask=0002" to the service section of the service file would be enough (after copying it to /etc/systemd/system). But after a systemctl daemon-reload followed by a service restart files are still created as "-rw-r--r--" instead of the expected "-rw-rw-r--". Does anyone have an idea what is missing here or how I can debug why the directive is apparently ignored? Regards, Dennis

1 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss