Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Centos security update
by Venkateswara Rao Dokku 30 Apr '15

30 Apr '15

Hi, I was using CentOS 7 and when I ran some custom commercial security scan on my machine, I found about 122 vulnerabilities. Can you help me on how to get security upgrades on top of my existing CentOS? # cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) Thanks for the help. -- Thanks & Regards, Venkateswara Rao Dokku.

10 14

nfs (or tcp or scheduler) changes between centos 5 and 6?
by Matt Garman 30 Apr '15

30 Apr '15

We have a "compute cluster" of about 100 machines that do a read-only NFS mount to a big NAS filer (a NetApp FAS6280). The jobs running on these boxes are analysis/simulation jobs that constantly read data off the NAS. We recently upgraded all these machines from CentOS 5.7 to CentOS 6.5. We did a "piecemeal" upgrade, usually upgrading five or so machines at a time, every few days. We noticed improved performance on the CentOS 6 boxes. But as the number of CentOS 6 boxes increased, we actually saw performance on the CentOS 5 boxes decrease. By the time we had only a few CentOS 5 boxes left, they were performing so badly as to be effectively worthless. What we observed in parallel to this upgrade process was that the read latency on our NetApp device skyrocketed. This in turn caused all compute jobs to actually run slower, as it seemed to move the bottleneck from the client servers' OS to the NetApp. This is somewhat counter-intuitive: CentOS 6 performs faster, but actually results in net performance loss because it creates a bottleneck on our centralized storage. All indications are that CentOS 6 seems to be much more "aggressive" in how it does NFS reads. And likewise, CentOS 5 was very "polite", to the point that it basically got starved out by the introduction of the 6.5 boxes. What I'm looking for is a "deep dive" list of changes to the NFS implementation between CentOS 5 and CentOS 6. Or maybe this is due to a change in the TCP stack? Or maybe the scheduler? We've tried a lot of sysctl tcp tunings, various nfs mount options, anything that's obviously different between 5 and 6... But so far we've been unable to find the "smoking gun" that causes the obvious behavior change between the two OS versions. Just hoping that maybe someone else out there has seen something like this, or can point me to some detailed documentation that might clue me in on what to look for next. Thanks!

6 8

CENTOS not DoD approved
by bobby Orellano 29 Apr '15

29 Apr '15

nowhere does it say that centos is approved for use in DoD. it is not on the APL, only RedHat and SuSE

8 10

CentOS-announce Digest, Vol 122, Issue 13
by centos-announce-request＠centos.org 29 Apr '15

29 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:0913 CentOS 6 tzdata Enhancement Update (Johnny Hughes) 2. CESA-2015:0895 Important CentOS 7 389-ds-base Security Update (Johnny Hughes) 3. CEEA-2015:0913 CentOS 7 tzdata Enhancement Update (Johnny Hughes) 4. CEEA-2015:0913 CentOS 5 tzdata Enhancement Update (Johnny Hughes) 5. CEBA-2015:0915 CentOS 6 dracut BugFix Update (Johnny Hughes) 6. CEBA-2015:0916 CentOS 6 libvirt BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 28 Apr 2015 19:18:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0913 CentOS 6 tzdata Enhancement Update Message-ID: <20150428191848.GA43139(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0913 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 17d079889c081ec38565a95ed34c0d5063b643d97d79da7f421ee423d324f547 tzdata-2015d-1.el6.noarch.rpm 29c5ce7a9f8b50743ee0d1d665525a2110eb6d6cc9a6e86289614d1b6b34fa34 tzdata-java-2015d-1.el6.noarch.rpm x86_64: 17d079889c081ec38565a95ed34c0d5063b643d97d79da7f421ee423d324f547 tzdata-2015d-1.el6.noarch.rpm 29c5ce7a9f8b50743ee0d1d665525a2110eb6d6cc9a6e86289614d1b6b34fa34 tzdata-java-2015d-1.el6.noarch.rpm Source: 36b196f2a6dd2f589917ae18efc38dab3b36849075569f1d0406533add310161 tzdata-2015d-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 28 Apr 2015 21:49:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0895 Important CentOS 7 389-ds-base Security Update Message-ID: <20150428214918.GA59446(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0895 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0895.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0b695f877ea66c6ba7cb15d35f743d2cdb7d26b3c2ad7da7bf5ef716e7dd7a17 389-ds-base-1.3.3.1-16.el7_1.x86_64.rpm eaed7a4bf2c0822c4fee1690b818d9bb5184c3e417e6473a663d060c01c83a5d 389-ds-base-devel-1.3.3.1-16.el7_1.x86_64.rpm 5dd1ceb2c16799fd72ee1d9d79b934bdff6294dbe7e3dc605393701d6dd0ffa1 389-ds-base-libs-1.3.3.1-16.el7_1.x86_64.rpm Source: a5c1801f6621b7d79263c1df4d28afd00ff3ec2f6abc0f2faea373bcfcf70eb3 389-ds-base-1.3.3.1-16.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 28 Apr 2015 21:49:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0913 CentOS 7 tzdata Enhancement Update Message-ID: <20150428214949.GA59524(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0913 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9926c46800be11c474b10719b9935229019201c195e4debb0da4bfab5ff5ec8e tzdata-2015d-1.el7.noarch.rpm 95551f69c3f204b9a7c279698a69b93075f59d82866f7e929b11d8ab60a1fcff tzdata-java-2015d-1.el7.noarch.rpm Source: c733876d95f1e111fe2cb11a0628b09a10d82f539e299ef2358f11c8d868d3cf tzdata-2015d-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 28 Apr 2015 21:52:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0913 CentOS 5 tzdata Enhancement Update Message-ID: <20150428215240.GA4058(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0913 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8387fba89796124258e17bcea37cc9aa891f272170df2d4ed52b993d9e4eecce tzdata-2015d-1.el5.i386.rpm cab6bde88543bd51b4ba52e7a9fa77e4183cc5657ae7e36f1db3f1d205270af6 tzdata-java-2015d-1.el5.i386.rpm x86_64: 13531800faae15e1fe2b4421ebafe34ad9900d0de0dba928b27aa41b32c2e05e tzdata-2015d-1.el5.x86_64.rpm 849a0357c2d8ed582ad308776007df85bff2f9b08e407e60de0cc53a5487dadd tzdata-java-2015d-1.el5.x86_64.rpm Source: 71176448e8dce2b5fb872615cdc49be8854bba5c648b6a2156e500a2ec501f48 tzdata-2015d-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 29 Apr 2015 11:47:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0915 CentOS 6 dracut BugFix Update Message-ID: <20150429114725.GA8717(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0915 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0915.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 288c9836b2cc18268abe502c1625d2b3d4d9d4b2826f1e2afb90e3e33f2168f6 dracut-004-356.el6_6.2.noarch.rpm 00c537711c36db7a24f3a704ce3dbe3f65fa38fa00c1f2698a42366a26b8c858 dracut-caps-004-356.el6_6.2.noarch.rpm bec69edb8ca2317efa62ccfc2fefdfe550f438605235c042ec3f81aba0da357b dracut-fips-004-356.el6_6.2.noarch.rpm dce891fd2ccc0656dff7d69cee0b3df6108e995e1866f97d916e71178ce5496d dracut-fips-aesni-004-356.el6_6.2.noarch.rpm ebfb46c7e304562edcedda9c368c390b2ef3d3492d570bcec226edf8ae3c288c dracut-generic-004-356.el6_6.2.noarch.rpm d6bea1ede04348437bc3d47239d78cad4b54d85c8ca9bb85a30ff5dbf9deca8d dracut-kernel-004-356.el6_6.2.noarch.rpm 3fd1e82fd5d04df430d27faebfce01cb80e8eade61b06d280b85ceb6460dbc30 dracut-network-004-356.el6_6.2.noarch.rpm ba2890cd0cedd441dbebe64d64fb10aca775147427ccac70de3860a8ac4ee382 dracut-tools-004-356.el6_6.2.noarch.rpm x86_64: 288c9836b2cc18268abe502c1625d2b3d4d9d4b2826f1e2afb90e3e33f2168f6 dracut-004-356.el6_6.2.noarch.rpm 00c537711c36db7a24f3a704ce3dbe3f65fa38fa00c1f2698a42366a26b8c858 dracut-caps-004-356.el6_6.2.noarch.rpm bec69edb8ca2317efa62ccfc2fefdfe550f438605235c042ec3f81aba0da357b dracut-fips-004-356.el6_6.2.noarch.rpm dce891fd2ccc0656dff7d69cee0b3df6108e995e1866f97d916e71178ce5496d dracut-fips-aesni-004-356.el6_6.2.noarch.rpm ebfb46c7e304562edcedda9c368c390b2ef3d3492d570bcec226edf8ae3c288c dracut-generic-004-356.el6_6.2.noarch.rpm d6bea1ede04348437bc3d47239d78cad4b54d85c8ca9bb85a30ff5dbf9deca8d dracut-kernel-004-356.el6_6.2.noarch.rpm 3fd1e82fd5d04df430d27faebfce01cb80e8eade61b06d280b85ceb6460dbc30 dracut-network-004-356.el6_6.2.noarch.rpm ba2890cd0cedd441dbebe64d64fb10aca775147427ccac70de3860a8ac4ee382 dracut-tools-004-356.el6_6.2.noarch.rpm Source: c7fe36a990b1e1448a881c5d392e0e8fe993fb6ac4d4b852649c5bbb429370e1 dracut-004-356.el6_6.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 29 Apr 2015 11:48:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0916 CentOS 6 libvirt BugFix Update Message-ID: <20150429114811.GA9008(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0916 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0916.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 388b2c5aab2fe115bb55616fae56ea0e30976e2947d5799175cf90538bd731f5 libvirt-0.10.2-46.el6_6.6.i686.rpm 7df66b6c652132c40f62deae7bc3281413ed3e9a406069a8bd2b2453f5f1fa60 libvirt-client-0.10.2-46.el6_6.6.i686.rpm b3fd537f7dd8073c4dde318987588f83ffcfb7d4d6b0dec25d5faa8cfa885541 libvirt-devel-0.10.2-46.el6_6.6.i686.rpm 601007210bedcdf595469dbe56386018102a31e4fda93d6b33f69e1714aab4ef libvirt-python-0.10.2-46.el6_6.6.i686.rpm x86_64: 2435de68b2ebb108f38f130b5e97872a5182c37114ba7dcac95516ef891ea1d8 libvirt-0.10.2-46.el6_6.6.x86_64.rpm 7df66b6c652132c40f62deae7bc3281413ed3e9a406069a8bd2b2453f5f1fa60 libvirt-client-0.10.2-46.el6_6.6.i686.rpm c47cb1fa1db997e9b66321bc43b146f885f58aec780b511b8f8ff2b6d3b38d10 libvirt-client-0.10.2-46.el6_6.6.x86_64.rpm b3fd537f7dd8073c4dde318987588f83ffcfb7d4d6b0dec25d5faa8cfa885541 libvirt-devel-0.10.2-46.el6_6.6.i686.rpm b82cf3cc95e5d7edfecc76e9f116af5ccf29a1959d7363d518510f5d2037d36b libvirt-devel-0.10.2-46.el6_6.6.x86_64.rpm d60f53d4ec8de33b24c045cd16493fc03f29b26a1ed85746dac1e556ce5239d7 libvirt-lock-sanlock-0.10.2-46.el6_6.6.x86_64.rpm 99c66ce30b90f6931b02eb0b5dc0ea2d74b64d88e30cabd7086be93565d3eb5c libvirt-python-0.10.2-46.el6_6.6.x86_64.rpm Source: 4abe1b325388e5de13ec10304bcb48d508df10eec47ebdb35dc2d2abccaa9400 libvirt-0.10.2-46.el6_6.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 13 ************************************************

1 0

Emacs issue in CentOS 7
by Greg Lindahl 29 Apr '15

29 Apr '15

Sometimes when I save a file in emacs, it thinks that the buffer is still dirty. If I use C-x C-w to write the file, I get an overwrite warning but the buffer always goes clean. Perhaps this is related to the file atime? My /home is btrfs with relatime. I always thought emacs was smarter than that, for example I run emacs on files mounted noatime on CentOS 6 without any issues. A bit of searching the interwebs did not provide any clues. Anyone? -- greg

1 0

Find installed yum groups?
by Les Mikesell 28 Apr '15

28 Apr '15

Is there an 'after the fact' way to find what yum groups are installed, including ones that were added with 'yum groupinstall' instead of the initial anaconda install? -- Les Mikesell lesmikesell(a)gmail.com

4 8

Prevent network setup from changing the hostname
by Robert Nichols 28 Apr '15

28 Apr '15

How can I block network setup (via NetworkManager) from changing the machine's hostname whenever the network configuration changes? The problem: When my graphical login session starts, the xauth database gets an token that is labeled with the hostname at that time. If there is not yet a network connection, that will be "localhost.localdomain". When a network connection is then made (my wireless connection needs the key from my login), the hostname changes. That breaks X session sharing because there is no xauth token that matches the current hostname. If I get a root shell with "su -", commands launched from that shell cannot access the display. If I set up an ssh connection with "ssh -X", I get a complaint about missing xauth data. On systems with an "ONBOOT=yes" network connection, there is no problem since the hostname is set before the X session starts. It's just when the hostname changes during the X session that there is a problem. I am running CentOS 6, fully updated. It's taken me a long time to track down the root cause of this problem. Now I just need a solution, preferably something less ham-fisted than "xhost -". -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

4 9

Fwd: Cross Building Tcl using Mingw32-gcc (4.9.2)
by Robert Heller 28 Apr '15

28 Apr '15

I posted this to the comp.lang.tcl newsgroup, but it might relate to a possible bug in the Mingw32 cross-build environment under CentOS 6 (or EPEL). Forwarded Message: From: Robert Heller <heller(a)deepsoft.com> Subject: Cross Building Tcl using Mingw32-gcc (4.9.2) Newsgroups: comp.lang.tcl Message-ID: <Nc-dnd1wRNTsy6PInZ2dnUU7-b-dnZ2d(a)giganews.com> Date: Mon, 27 Apr 2015 10:32:01 -0500 I am trying to cross-build Tcl (8.5.8) and I have encounted two problems: One I easily hacked the sources (wrapped the offending lines with #ifdefs): ./../generic/tclPosixStr.c:347:5: error: duplicate case value case EPFNOSUPPORT: return "EPFNOSUPPORT"; ^ ./../generic/tclPosixStr.c:290:5: error: previously used here case ENOPROTOOPT: return "ENOPROTOOPT"; ^ ./../generic/tclPosixStr.c: In function 'Tcl_ErrnoMsg': ./../generic/tclPosixStr.c:795:5: error: duplicate case value case EPFNOSUPPORT: return "protocol family not supported"; ^ ./../generic/tclPosixStr.c:738:5: error: previously used here case ENOPROTOOPT: return "bad protocol option"; ^ The other I am not sure how to fix: i686-w64-mingw32-gcc -c -O2 -fomit-frame-pointer -Wall -I"../../generic" -DTCL_TOMMATH -DMP_PREC=4 -I"../../libtommath" -I".." -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DSTDC_HEADERS=1 -DHAVE_NO_SEH=1 -DHAVE_NO_LPFN_DECLS=1 -DHAVE_ALLOCA_GCC_INLINE=1 -DHAVE_CAST_TO_UNION=1 -DTCL_CFGVAL_ENCODING=\"cp1252\" -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DTCL_CFG_OPTIMIZED=1 -DTCL_CFG_DEBUG=1 -DBUILD_tcl "../tclWin32Dll.c" -o tclWin32Dll.o ./tclWin32Dll.c:65:3: error: conflicting types for 'EXCEPTION_REGISTRATION' } EXCEPTION_REGISTRATION; ^ In file included from /usr/i686-w64-mingw32/sys-root/mingw/include/minwindef.h:146:0, from /usr/i686-w64-mingw32/sys-root/mingw/include/windef.h:8, from /usr/i686-w64-mingw32/sys-root/mingw/include/windows.h:69, from ../tclWinPort.h:72, from ../../generic/tclPort.h:25, from ../../generic/tclInt.h:3946, from ../tclWinInt.h:17, from ../tclWin32Dll.c:16: /usr/i686-w64-mingw32/sys-root/mingw/include/winnt.h:3554:43: note: previous declaration of 'EXCEPTION_REGISTRATION' was here typedef EXCEPTION_REGISTRATION_RECORD EXCEPTION_REGISTRATION; ^ Is there a solution possible? This looks like internal inconsistency with the header files that are part of the build toolchain. -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

1 1

Real sh? Or other efficient shell for non-interactive scripts
by E.B. 28 Apr '15

28 Apr '15

I'm sure most people here know about Dash in Debian. Have there been discussions about providing a more efficient shell in Centos for use with heavily invoked non-interactive scripts? With sh being a link to bash in Centos I don't know if it would explode if the link was changed to something else, but at least the scripts we made on our own that run certain services could be changed and tested manually to another shell. Are there other people who have experience in this and can provide interesting guidance?

19 83

Thread moderation and warning: [ Real sh? Or other...]
by Jim Perrin 28 Apr '15

28 Apr '15

This thread has spiraled out of control and will be dealt with. I will again speak with people privately. Some are repeat offenders and may have their contributions to the mailing list moderated. Please keep to the topic posted by the original author, and keep the list technical in nature. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss