Discuss

discuss@lists.centos.org

2 participants
34758 discussions

SEmodule dependency hell.
by James B. Byrne 01 Apr '15

01 Apr '15

I want you all to see what I went through trying to simply reassign (unsuccessfully) the context of a well-known port. To the best of my ability to recall none of the packages mentioned below are even installed on the host in question. Why are these dependices preventing me from removing a disused SELinux policy. I have done exactly that, reassign port contexts, in the past without encountering this situation. So it has to be a recent development. I am not against SELinux. We use it extensively. But this is not security it is simply BS. It is stuff like this that causes people to say just turn selinux off altogether. semodule -r apache libsepol.print_missing_requirements: awstats's global requirements were not met: type/attribute httpd_log_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r awstats semodule -r apache libsepol.print_missing_requirements: bugzilla's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r bugzilla semodule -r apache libsepol.print_missing_requirements: cobbler's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r cobbler semodule -r apache libsepol.print_missing_requirements: collectd's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r collectd semodule -r apache libsepol.print_missing_requirements: git's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r git semodule -r apache libsepol.print_missing_requirements: gpg's global requirements were not met: type/attribute httpd_sys_content_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r gpg semodule -r apache libsepol.print_missing_requirements: mediawiki's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r mediawiki semodule -r apache libsepol.print_missing_requirements: munin's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r munin semodule -r apache libsepol.print_missing_requirements: nagios's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r nagios semodule -r apache libsepol.print_missing_requirements: w3c's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r apache libsepol.print_missing_requirements: webadm's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r webadm semodule -r apache libsepol.print_missing_requirements: webalizer's global requirements were not met: type/attribute httpd_sys_content_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r webalizer semodule -r apache libsepol.context_from_record: type httpd_openshift_script_exec_t is not defined libsepol.context_from_record: could not create context structure libsepol.context_from_string: could not create context structure libsepol.sepol_context_to_sid: could not convert unconfined_u:object_r:httpd_openshift_script_exec_t:s0 to sid invalid context unconfined_u:object_r:httpd_openshift_script_exec_t:s0 libsemanage.semanage_install_active: setfiles returned error code 1. semodule: Failed! semodule -R [root@xnet241 ~]# semanage port -d -t http_port_t -p tcp 80 /usr/sbin/semanage: Port tcp/80 is defined in policy, cannot be deleted -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

How to decrypt rootpassword form kickstart file
by Jegadeesh Kumar 01 Apr '15

01 Apr '15

Hi Team, I have the kick start file where my root password is store like # Root password rootpw --iscrypted $1$1SItJOAg$UM9n7lRFK1/OCs./rgQtQ/ # System authorization information auth --useshadow --passalgo=sha512 Is there any way to decry pt the password and get it as plain text. I know single user mode works but my case it in remote site. Thanks, Jegadeesh

10 11

Release 7 1503 includes samba-common.i686 (breaks multilib installs)
by Benjamin Ash 01 Apr '15

01 Apr '15

Hi, Unfortunately we are getting multilib issues with the latest release of CentOS 7. It seems that samba-common.i686 conflicts with samba-common.x86_64, and therefore Yum multilib support. Is this expected? Thanks, -ben Transaction check error: file /usr/bin/net conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/pdbedit conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/profiles conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/smbcontrol conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/testparm conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 -- Benjamin Ash | Technical Manager - Intelerad RHCE +1-514-931-6222 ext. 7311 | bash(a)intelerad.com Website <http://www.intelerad.com/> | Twitter<http://www.twitter.com/intelerad> | LinkedIn <http://www.linkedin.com/company/intelerad-medical-systems> | Blog <http://intelerad-insider.com/> -- This email or any attachments may contain confidential or legally privileged information intended for the sole use of the addressees. Any use, redistribution, disclosure, or reproduction of this information, except as intended, is prohibited. If you received this email in error, please notify the sender and remove all copies of the message, including any attachments.

2 2

Thanks for 7.1
by Nux! 01 Apr '15

01 Apr '15

Just wanted to say "Thanks!" to the CentOS team for their efforts to put out a 7.1 release. Upgraded several systems, so far smooth sailing. Good job! -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

6 6

tc seems to have no effect on the NIC's
by Boris Epstein 01 Apr '15

01 Apr '15

Hello all, We have installed this network testing environment: https://github.com/facebook/augmented-traffic-control which seems pretty nice overall. It allows you to artificially degrade your network performance by issuing tc commands to directly affect your networking. I have it set up on two CentOS 6 machines - one a Dell server, one a VirtualBox VM. The tc syntax seems OK, it seems to all make sense - only it seems to have no effect whatsoever on the actual network performance. Hence the question: is there a known issue with tc? Am I perhaps missing some kernel modules, or do I perhaps now have some kernel parameters set correctly? Any insight will be helpful. Thanks in advance, Cheers, Boris.

2 1

Unexplained size difference with CentOS 7 (1503) -01 install media
by Greg Bailey 01 Apr '15

01 Apr '15

In the process of updating my copy of the CentOS 7 (1503) -01 install media, I notice that it's ~70MB larger than the image that it's replacing: $ rsync mirrors.kernel.org::centos/7.1.1503/isos/x86_64/*DVD*.iso -rw-r--r-- 4310695936 2015/03/31 17:05:50 CentOS-7-x86_64-DVD-1503-01.iso -rw-r--r-- 4236247040 2015/03/28 12:15:26 CentOS-7-x86_64-DVD-1503.iso But when I compare sizes using "du" on the mounted ISO files, I can't see any discernible difference: Original CentOS 7 (1503) DVD: $ du -ks /centos7/* 1 /centos7/CentOS_BuildTag 6148 /centos7/EFI 1 /centos7/EULA 18 /centos7/GPL 79428 /centos7/images 73378 /centos7/isolinux 281423 /centos7/LiveOS 3752743 /centos7/Packages 12696 /centos7/repodata 2 /centos7/RPM-GPG-KEY-CentOS-7 2 /centos7/RPM-GPG-KEY-CentOS-Testing-7 3 /centos7/TRANS.TBL Revised CentOS 7 (1503) -01 DVD with centos-release fix: $ du -ks /centos7-01/* 1 /centos7-01/CentOS_BuildTag 6148 /centos7-01/EFI 1 /centos7-01/EULA 18 /centos7-01/GPL 79428 /centos7-01/images 73378 /centos7-01/isolinux 281423 /centos7-01/LiveOS 3752745 /centos7-01/Packages 12696 /centos7-01/repodata 2 /centos7-01/RPM-GPG-KEY-CentOS-7 2 /centos7-01/RPM-GPG-KEY-CentOS-Testing-7 3 /centos7-01/TRANS.TBL Seems like a large delta in ISO size for not much of a change in content. Any ideas? -Greg

1 0

SELinux on CentOS-6.6
by James B. Byrne 01 Apr '15

01 Apr '15

I wish to reuse ports 80 and 443 for a different service. When I try to assign the port context for that service I get this: /usr/sbin/semanage: Port tcp/80 already defined When I try to delete the assigned context then I get this: semanage port -d -t http_port_t -p tcp 80 /usr/sbin/semanage: Port tcp/80 is defined in policy, cannot be deleted httpd is not installed on this host. But looking at the port context assignments I see this nonetheless: semanage port -l | grep ^http_port_t http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000 How do I rid myself of these artefacts and make the context assignments that I wish? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

mirrors still catching up and -01.iso images?
by Stuart Barkley 01 Apr '15

01 Apr '15

I'm watching a couple of mirrors catch up with the 7.1 release and am noticing some churn on the .iso images. It appears that new -01.iso versions are coming downstream while some of the mirrors apparently were getting different .iso images. The -01.iso versions look to be significantly larger than the previous non-01.iso versions (the -Minimal .iso appears to have gone from 560M to 630M for -01.iso). I'm not downloading the larger .iso image so don't know the actual content, but the md5/sha files also changed and some of the mirrored -01.iso versions appear to have different sizes (actually from the timestamps it looks like the non-01.iso versions might have been renamed -01.iso before being replaced with newer content). What is the difference between the non-01.iso versions and the -01.iso versions? Is this what we can expect with the monthly rebuilds? For tracability reasons, I don't like seeing different .iso images at different times. We really need to see consistent content on the distribution mirrors. Some of this may still be churn and one mirror may have run out of disk space (or otherwise be waiting for manual intervention). Stuart -- I've never been lost; I was once bewildered for three days, but never lost! -- Daniel Boone

1 1

kernel Panic on desktop
by James B. Byrne 01 Apr '15

01 Apr '15

I arrived at work this morning to find that my desktop unit (CentOS-6.6 KVM) halted with a kernel panic. I am not conversant with any way to save the console display in this case and there was rather a lot of text. I jotted down a few notes and power-cycled the unit to restart. which it did and I am using now to compose this message. The few notes that I manually copied, subject to transcription errors, were: ? pci-configure - slot 0x365.0x420 . . . pic (ed. note: transcription error? maybe pci?) . . . pciehpd - Tainted: G D -------- 2.6.32-504.12.2.el6.x86_64 #1 panic+0x17/0x16f . . . kvm 2998 cpu0 disabled: perfctr wrmsr 0xc1 data 0xabcd 1. Is there any way to get the entire console display following a panic as a text file? 2. I take that this points to a hardware issue of some sort. Any suggestions as to where I look? The system has two NICs but one is disused and has no cable. Following a update last year I began receiving console messages complaining about this state but ignored them. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] opendkim-2.9.0
by James B. Byrne 01 Apr '15

01 Apr '15

On Tue, March 31, 2015 16:18, Frank Cox wrote: > On Tue, 31 Mar 2015 16:11:38 -0400 > James B. Byrne wrote: > >> Does anyone have any idea what has happened and why I might be >> getting that message? > > I don't use that but have you checked to see if you now have a > "rpmsave" file left after installing the update? If so, that's your > old configuration and you might need to re-write the new configuration > file to incorporate your previous customization. > Yes that was the problem. The OpenDKIM maintainers deprecated a configuration option (SenderHeaders) that we were using so the opendkim service would not restart. So there was nothing listening at port 8891. Removing the optin fixed the problem. I can find no discussion of why this option was removed and the OpenDKIM readme (http://www.opendkim.org/opendkim-README) still makes reference to it as the preferred way of handling mailing lists. Go figure. B.T.W. Redhat has apparently 'fixed' (I think) Mailman to deal with the Yahoo/AOL - DMARC problems. But only in RHEL5 (so far). As they have moved all discussion of the bug behind a paywall I can no longer follow developments and so cannot be sure. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss