Discuss

discuss@lists.centos.org

34752 discussions

Re: [CentOS] CentOS 8
by Valeri Galtsev 09 Apr '21

09 Apr '21

On 4/9/21 10:47 AM, Binet, Valere (NIH/NIA/IRP) [C] wrote: > The NIST and CIS baselines don't allow su, we have to use sudo on government computers. > Could you enlighten me on the rationale behind that restriction? As, as you already noticed, my [ancient, maybe] reasoning makes me arrive at an opposite conclusion. (but mine is pure security consideration with full trust vested into sysadmin, see below...) On a second guess: it is just for a separation of privileges, and accounting of who did what which sudo brings to the table... Right? Thanks in advance. Valeri > Valère Binet > > On 4/9/21, 11:39 AM, "Valeri Galtsev" <galtsev(a)kicp.uchicago.edu> wrote: > > > > On 4/9/21 10:31 AM, Johnny Hughes wrote: > > On 4/9/21 5:18 AM, Steve Clark via CentOS wrote: > >> On 4/8/21 3:50 PM, Tony Schreiner wrote: > >> > >> On Thu, Apr 8, 2021 at 2:33 PM Nicolas Kovacs > >> <info(a)microlinux.fr><mailto:info@microlinux.fr> wrote: > >> > >> > >> > >> Le 08/04/2021 à 18:58, Steve Clark via CentOS a écrit : > >> > >> > >> How do I allow root log in on GDM. > >> > >> > >> > >> tl;dr: you don't. > >> > >> Log in as a non-root user, and when you do need root, either open up a > >> terminal > >> and use 'su -' or (even better) setup your user by making your user a > >> member of > >> the wheel group and then use sudo. > >> > >> Logging in to a GUI as root is *BAD* practice. > >> > >> Cheers, > >> > >> Niki > >> > >> > >> > >> > >> > >> That said - you can do it, by clicking on "Not listed?" and typing root > >> into the user field. > >> > >> Yes I have done that and it immediately comes back to the login screen, > >> I know I am typing the > >> correct passwd, because if I botch the passwd I get a message to that > >> effect. > >> > >> > >> > > > > I would not recommend ever using the GUI as the root user .. it creates > > keys and items that are very dangerous. (gnome key rings, etc) > > > > +1000 > > > You should be able to 'su -' , then use visudo to create a sudo account > > for your user. You can even NOPASSWD your user for using sudo (you may > > or may not want to do that .. if someone gains access to your local > > account, they could then sudo with no passwd). > > > > In the past I even avoided sudo. It yet one more SUID-ed binary on your > machine. Which may add to your potential [local, in general] > vulnerability footprint. su, - making yourself root is more than enough > for regular sysadmin. > > > But, i have never, ever logged in as root on a GUI account directly on a > > machine that I cared about or was keeping live .. just advise, do with > > it what you will. > > > > +1 > > To OP: Do as you wish, and deal with consequences. > > Valeri > > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > > -- > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 7

CentOS 8
by Steve Clark 09 Apr '21

09 Apr '21

Hello, How do I allow root log in on GDM. The only people that have access are admins - so I am not worried about someone screwing things up. Thanks, -- Stephen Clark Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

5 6

Re: [CentOS] Automatic clean /tmp folder
by Gestió Servidors 09 Apr '21

09 Apr '21

>>> With these files I supposed that a file with more than 10 days in /tmp >>> would be automatically deleted, but today I have found some files/folders >>> with more than 10 days. >>> >>> What I have done wrong? >> >> The test is on access time, not modification. Have they been read in the last 10 days? > >And note that a GUI file manager might attempt to read every file in a >directory in order to determine its type and display the correct icon. I have check my /tmp folder with "find ./ -atime +10d" and there are some folders that appears as "accessed" more than 10 days ago... so I don't understand why automatic deletion system has not deleted them. Thanks.

2 1

Re: [CentOS] Booting from an ISO file in a XFS /boot
by Gestió Servidors 08 Apr '21

08 Apr '21

> Just guessing - loading the grub module for xfs is missing? Also, I have test adding "insmod xfs" in the "menuentry" section of my "iPXE" boot option, but result is the same...

1 0

Booting from an ISO file in a XFS /boot partition
by Gestió Servidors 08 Apr '21

08 Apr '21

Hi, I want to boot with a customized iPXE iso boot file from my GRUB2 menu. My system is running CentOS-7, with /boot formated as XFS filesystem. After copying my iPXE.iso into /boot, I have created a custom GRUB2 file in /etc/grub.d/40_custom like this: menuentry "iPXE" { set isofile="/ipxe.iso" loopback loop (hd0,1)$isofile linux16 (loop)/ipxe.lkrn } After regenerating grub2.cfg with "grub2-mkconfig -o /etc/grub2.cfg , I have rebooted my system, I have chosen "iPXE" entry, but system doesn't boot. I receive this error: error: file '/ipxe.iso' not found. Starting /ipxe.iso... error: no server is specified. Press any key to continue... However, in another similar system that runs /boot in EXT4 filesystem, that ISO file boots perfectly with the same configuration, so it seems the problem is with XFS. Could you help me? Thanks.

2 1

Re: [CentOS] almalinux?
by Jack Aboutboul 08 Apr '21

08 Apr '21

Thanks Rich for the kind words and Johnny for the support as well. Rich is correct about the non-profit foundation that was setup to facilitate community ownership and involvement. No one party owns or controls AlmaLinux. We don’t view anyone as "the other team” either, and we are glad, and here, to work together with everyone. The way we see it is that we are all family now as well and people have different needs. We are sure CentOS Stream is going to be great for those whose needs it fills and you really can’t beat the engineering team behind it. Time has already proven their prowess and some of them are close personal friends. That being said, we are trying our absolute hardest to make sure that we are the best community and distribution for people whose needs fall on the other side of the road. We are here to work together to build an ecosystem that is greater than the sum of its parts. I’ve spent, at this point, the majority of my life in the the EL extended family (including Fedora) and I can confidently say it is the most powerful platform for innovation, certainly of my generation. It has helped either directly or indirectly spawn or support probably most of today’s most leading technological advancements, everything from the the way we develop and deploy software, huge advancements in space exploration, particle physics research, AI, biological breakthroughs, art, finance and everything in between. It’s taken a collaborative, global effort to make that materialize and we are here to keep that going. There is no horizon we cannot explore, no sea we cannot cross and no peak we cannot summit. Together. Thanks, Jack

1 0

Binutils-2.30-98.el8.aarch64 broken on raspberry Pi4
by Maurice Smulders 07 Apr '21

07 Apr '21

The recent update of binutils/binutils-devel on aarch64 totally breaks gcc. When running gcc over a simple program with main - executing it results in a SIGSEGV, as the _start prologue calls a NULL pointer. I haven't figured out yet how to build a new build using git.centos.org, but I noticed that there is a -99 variant out there... -90 worked fine. What's the quickest way to get this back to being operational? The instructions to build a new package look to be a bit scattered - and how can I build a working one if any update picks up a borked one... Maurice

2 2

almalinux?
by mark 07 Apr '21

07 Apr '21

Anyone looked into almalinux? I was sort of waiting for rocky, but I see from over the weekend on slashdot that almalinux stable is released. mark

15 18

Automatic clean /tmp folder
by Gestió Servidors 07 Apr '21

07 Apr '21

Hello, I have found some files/folders in /tmp that I thought they had to be deleted because of age. My /usr/lib/tmpfiles.d/tmp.conf is: # Clear tmp directories separately, to make them easier to override v /tmp 1777 root root 10d v /var/tmp 1777 root root 30d # Exclude namespace mountpoints created with PrivateTmp=yes x /tmp/systemd-private-%b-* X /tmp/systemd-private-%b-*/tmp x /var/tmp/systemd-private-%b-* X /var/tmp/systemd-private-%b-*/tmp And my /usr/lib/systemd/system/systemd-tmpfiles-clean.timer is: [Unit] Description=Daily Cleanup of Temporary Directories Documentation=man:tmpfiles.d(5) man:systemd-tmpfiles(8) [Timer] OnBootSec=15min OnUnitActiveSec=1d With these files I supposed that a file with more than 10 days in /tmp would be automatically deleted, but today I have found some files/folders with more than 10 days. What I have done wrong? Thanks.

3 2

Prevent Anaconda from switching root and swap partition
by Nicolas Kovacs 07 Apr '21

07 Apr '21

Hi, More often than not, when installing CentOS, I choose manual partitioning and then apply the KISS principle, with a very simple partitioning scheme that looks more or less like this: * /boot partition: 500 MB, ext2 * swap partition: equivalent to amount of RAM * root partition: available space, ext4 Now when I do this, Anaconda insists on switching my swap and root partitions, so instead of this: * /dev/sda1: boot partition * /dev/sda2: swap partition * /dev/sda3: root partition ... I get this: * /dev/sda1: boot partition * /dev/sda2: root partition * /dev/sda3: swap partition Up until now this hasn't bothered me much. But for my needs right now it does, because I need my root partition to be at the end of the disk, so it can be expanded later on. Anyone knows how I can prevent Anaconda from switching my root and swap partitions? What I'm doing right now is switching to a text console with Ctrl-Alt-F5, manually partition using fdisk, switch back to Anaconda and then rescan the disk, but it's quite a PITA. These are the moments where I miss the good old bone-headed Slackware installer. :o) Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

6 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss