Discuss

discuss@lists.centos.org

34753 discussions

CentOS Dojo at Brussels, Jan 30th 2015
by Karanbir Singh 21 Jan '15

21 Jan '15

hi, The next CentOS Dojo is taking place in Brussels, the day before FOSDEM. And we have a great session lined up : http://wiki.centos.org/Events/Dojo/Brussels2015 There are a final 10 tickets up for grabs now, so get in there quickly if you are planning on attending. Note that this Dojo changes from the typical Dojo formats in that this one is entirely driven by interactive and demo sessions, There are no speaker / audience like timeslots. The aim is to ensure everyone attending learns and gets hands on with the topic. Its going to be a great day, see you there! -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

1 0

SELinux-policy updates
by James B. Byrne 21 Jan '15

21 Jan '15

I saw this on one of the host when we applied the most recent policy update: Updating : selinux-policy-targeted-3.7.19-260.el6_6.2.noarch 2/6 semodule: link.c:840: alias_copy_callback: Assertion `base_type->primary == target_type->s.value' failed. What does this mean? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-6.6 Fail2Ban and Postfix Selinux AVCs
by James B. Byrne 21 Jan '15

21 Jan '15

I am seeing these in the log of one of our off-site NX hosts running CentOS-6.6. type=AVC msg=audit(1421683972.786:4372): avc: denied { create } for pid=22788 comm="iptables" scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:system_r:fail2ban_t:s0 tclass=rawip_socket Was caused by: Missing type enforcement (TE) allow rule. You can use audit2allow to generate a loadable module to allow this access. SELinux is preventing /sbin/iptables-multi-1.4.7 from search access on the directory . ***** Plugin catchall (100. confidence) suggests *************************** If you believe that iptables-multi-1.4.7 should be allowed search access on the directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep iptables /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp I presume that the following is somehow related to that host sending out mail, possible by fail2ban, since we run postfix on that host and the sendmail SMTP package is not installed. type=AVC msg=audit(1421683972.826:4376): avc: denied { read } for pid=22796 comm="sendmail" path="inotify" dev=inotifyfs ino=1 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:inotifyfs_t:s0 tclass=dir Was caused by: Missing type enforcement (TE) allow rule. You can use audit2allow to generate a loadable module to allow this access. SELinux is preventing /usr/sbin/sendmail.postfix from read access on the directory inotify. ***** Plugin leaks (86.2 confidence) suggests ****************************** If you want to ignore sendmail.postfix trying to read access the inotify directory, because you believe it should not need this access. Then you should report this as a bug. You can generate a local policy module to dontaudit this access. Do # grep /usr/sbin/sendmail.postfix /var/log/audit/audit.log | audit2allow -D -M mypol # semodule -i mypol.pp ***** Plugin catchall (14.7 confidence) suggests *************************** If you believe that sendmail.postfix should be allowed read access on the inotify directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep sendmail /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp We are nonetheless receiving fail2ban email notifications from that host. Therefore I am not sure what this avc is telling us. We use Fail2Ban on a number of other Inetenet facing hosts. We have not yet detected anything similar on those, although until this morning's descovery we never really looked for this situation specifically. To check and see if anything was off kilter in the contexts I ran restorcon -Rv on /sbin and on /usr and restarted Fail2Ban. When I reviewed the log file I found these in /var/log/messages. setroubleshoot: [avc.ERROR] Plugin Exception restorecon #012Traceback (most recent call last):#012 File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 191, in analyze_avc#012 report = plugin.analyze(avc)#012 File "/usr/share/setroubleshoot/plugins/restorecon.py", line 99, in analyze#012 if avc.tpath[0] != '/': return None#012IndexError: string index out of range Checking back I discovered that these first appeared in our log on January 4. Yum history indicates that there were updates on Jan 2 and Jan 8. The Jan 2 update was to Webmin alone. I doubt that had anything to do with this. I am not sure what to think at them moment. Is there something wrong with SETroubleShoot? I can work around these avcs with a local policy but in the event the issue is not our error this may have wider implications so I am posting the details here. I am also seeing avcs relating to bash accessing ldconfig. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

CentOS 6, CUPS and Canon printers problem
by Emmanuel Noobadmin 21 Jan '15

21 Jan '15

I was trying to get a new Canon laser printer LBP-7110CW to work with a CentOS 6 machine. It already has an older Canon multi-function laser MF-4720W which worked fine. Both printers are connected via wireless. The new printer works fine from a Windows machine. The web-based GUI can be accessed from the C6 machine without problem either. However, CUPS cannot "discover" the printer when adding a new printer although it could probe it successfully if I provide the IP address. Neither could the Canon provided cnnst application find the printer on its own. This appeared to be related to iptables since it would discover the printer if I disable iptables. I assume the discovery is done by SNMP so it is a little odd why iptables have to be disabled for the C6 machine to find the printer which is the "server" so to speak. Ignoring that, the new printer still cannot print after being added. A process c3pldrv gets stuck at 100% cpu utilization when a print job is sent. A new c3pldrv process will spawn for each print job and remain for hours if I don't manually kill it. Throughout this time, the printer can be accessed via its web management gui from the same machine and there is no problem printing to the older multi-function printer. So network connectivity doesn't appear to the problem. It also doesn't make a difference whether I set CUPS to use raw socket or lpd. The C6 system was updated to the latest files and the latest UFR-II drivers from Canon was downloaded and installed. Anybody has any experience or clue about what might be the problem?

2 2

CentOS-announce Digest, Vol 119, Issue 6
by centos-announce-request＠centos.org 21 Jan '15

21 Jan '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0064 CentOS 5 cups BugFix Update (Johnny Hughes) 2. CEBA-2015:0059 CentOS 6 selinux-policy BugFix Update (Johnny Hughes) 3. CESA-2015:0066 Moderate CentOS 6 openssl Security Update (Johnny Hughes) 4. CESA-2015:0066 Moderate CentOS 7 openssl Security Update (Johnny Hughes) 5. CEBA-2015:0060 CentOS 7 sblim-sfcb BugFix Update (Johnny Hughes) 6. CEBA-2015:0055 CentOS 7 subscription-manager BugFix Update (Johnny Hughes) 7. CESA-2015:0068 Important CentOS 5 java-1.7.0-openjdk Security Update (Johnny Hughes) 8. CESA-2015:0067 Critical CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) 9. CESA-2015:0069 Important CentOS 6 java-1.8.0-openjdk Security Update (Johnny Hughes) 10. CESA-2015:0067 Critical CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 20 Jan 2015 20:51:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0064 CentOS 5 cups BugFix Update Message-ID: <20150120205114.GA4406(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0064 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0064.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c80c9433e51f9c275fc3a6b91c45c357ffbfe05737be4b1020c893c93fbbe978 cups-1.3.7-32.el5_11.i386.rpm 124483ceae7dfa3ff906feb3c820ed3b2409b5fe8fa1e3dd572c7cda7c117590 cups-devel-1.3.7-32.el5_11.i386.rpm dd8463437fb118b4d3f97a7ccaf912589f4c10e7d8e58ca026775ddd158da417 cups-libs-1.3.7-32.el5_11.i386.rpm 1252dfae304b695761eca1d315da0e68decbbcd0a781b8f71a303ceb64c6aae9 cups-lpd-1.3.7-32.el5_11.i386.rpm x86_64: 0db0927678de2522ea8d4a093bcd4fb71c206eb9bf938f36f895c381cc2e291f cups-1.3.7-32.el5_11.x86_64.rpm 124483ceae7dfa3ff906feb3c820ed3b2409b5fe8fa1e3dd572c7cda7c117590 cups-devel-1.3.7-32.el5_11.i386.rpm 54ed32ef707ab0a92ee3c943eb5a3801beee8238c9e0a1611a26d2a96e6cc09c cups-devel-1.3.7-32.el5_11.x86_64.rpm dd8463437fb118b4d3f97a7ccaf912589f4c10e7d8e58ca026775ddd158da417 cups-libs-1.3.7-32.el5_11.i386.rpm 08e6bc09f6670850e566fea6c7e77ee5f3a74d4a0dfce2c81700b720aa45aa15 cups-libs-1.3.7-32.el5_11.x86_64.rpm fce05862ee2eec17c9d3cbb2e2bf4f65a7ac7dd1d54c53a9955d351d96981579 cups-lpd-1.3.7-32.el5_11.x86_64.rpm Source: 0afd43e4f5ea5709fa069a76c881d587b67b894f063ec791b67c84f2fe087ddf cups-1.3.7-32.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 20 Jan 2015 21:00:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0059 CentOS 6 selinux-policy BugFix Update Message-ID: <20150120210015.GA28553(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0059 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0059.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cb79dfabcda8be35ef537edb7fc9ec99a1484131d961d520e3e5f2a3c2abd51f selinux-policy-3.7.19-260.el6_6.2.noarch.rpm 921a73ad0063ab3555f80af904b0423be57d95730dd6bf5ef934d48e9f915282 selinux-policy-doc-3.7.19-260.el6_6.2.noarch.rpm 54c5786efda3da93e31556258a8cadde4bec938da1027fc24c3e4d822ef9af49 selinux-policy-minimum-3.7.19-260.el6_6.2.noarch.rpm d2b65353dc1db08d865fcf725a40a9b8457e659ec8fc6d93b1d053d567fa1831 selinux-policy-mls-3.7.19-260.el6_6.2.noarch.rpm c719c22596bb7e5272f7359aaa92a9798bb2cd31d9a47ee04b565375b0725ec7 selinux-policy-targeted-3.7.19-260.el6_6.2.noarch.rpm x86_64: cb79dfabcda8be35ef537edb7fc9ec99a1484131d961d520e3e5f2a3c2abd51f selinux-policy-3.7.19-260.el6_6.2.noarch.rpm 921a73ad0063ab3555f80af904b0423be57d95730dd6bf5ef934d48e9f915282 selinux-policy-doc-3.7.19-260.el6_6.2.noarch.rpm 54c5786efda3da93e31556258a8cadde4bec938da1027fc24c3e4d822ef9af49 selinux-policy-minimum-3.7.19-260.el6_6.2.noarch.rpm d2b65353dc1db08d865fcf725a40a9b8457e659ec8fc6d93b1d053d567fa1831 selinux-policy-mls-3.7.19-260.el6_6.2.noarch.rpm c719c22596bb7e5272f7359aaa92a9798bb2cd31d9a47ee04b565375b0725ec7 selinux-policy-targeted-3.7.19-260.el6_6.2.noarch.rpm Source: c8d7f4d405463cdca83c4ece3a840998adb16ea29bde91f2153c188dd03b248d selinux-policy-3.7.19-260.el6_6.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 20 Jan 2015 21:00:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0066 Moderate CentOS 6 openssl Security Update Message-ID: <20150120210039.GA28671(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0066 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0066.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0b92c578790913dffc24ce526b0465d216dd988451a5a9666a357a321969c276 openssl-1.0.1e-30.el6_6.5.i686.rpm 20132caa37d324fd551964ea57cc7e8b92f96695636bd43ba526a304b3c03050 openssl-devel-1.0.1e-30.el6_6.5.i686.rpm 4f8ca10e73d8e34e3a40f3d9c4ffc65ac4950cda286945379e12fb6477ded3aa openssl-perl-1.0.1e-30.el6_6.5.i686.rpm 6284c6df0f702aa0af230863d08889d3ba98a33dd80a584e0d9ad017a03911e6 openssl-static-1.0.1e-30.el6_6.5.i686.rpm x86_64: 0b92c578790913dffc24ce526b0465d216dd988451a5a9666a357a321969c276 openssl-1.0.1e-30.el6_6.5.i686.rpm 6c41a21d88d83691e9ff90fe1612a72f6f63bb8ebaaf8442c00c3cfdfd177e22 openssl-1.0.1e-30.el6_6.5.x86_64.rpm 20132caa37d324fd551964ea57cc7e8b92f96695636bd43ba526a304b3c03050 openssl-devel-1.0.1e-30.el6_6.5.i686.rpm 380236927e3a982f53571a887ae6beaa64d11e3c136bc1bdb395105b53bc5be5 openssl-devel-1.0.1e-30.el6_6.5.x86_64.rpm d5ac362e346090eb1d21230e705b5edf926ea84dd5c9f98f4922bb7f9ec1fffa openssl-perl-1.0.1e-30.el6_6.5.x86_64.rpm 53c1ac46c19c5592ca38cb5b63841988dbe5472a0463e030fec765fbcc6d2a6a openssl-static-1.0.1e-30.el6_6.5.x86_64.rpm Source: 61aaf1b8adff685f227ace33dec9b5ab68b4e614587d40b5dd11ba76117461ca openssl-1.0.1e-30.el6_6.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 20 Jan 2015 21:13:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0066 Moderate CentOS 7 openssl Security Update Message-ID: <20150120211320.GA38186(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0066 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0066.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 90ae8d39a7d2342fcd225c1f29623e858481e0d10b8f00550be14f681244d59f openssl-1.0.1e-34.el7_0.7.i686.rpm 3e1d713d05b41822d4c22fa2973711b531869e9f828645cf39b9b9b43f7b9f22 openssl-1.0.1e-34.el7_0.7.x86_64.rpm 5b041b8c76efcb798e1365535474608901aa5a99479effd7a59dfe12a77cc242 openssl-devel-1.0.1e-34.el7_0.7.i686.rpm 3a92c6e4601bc02cdd7ca5caef886ba9cfbc33946c419061edbca11957dd59a7 openssl-devel-1.0.1e-34.el7_0.7.x86_64.rpm 15ffc9d006339c93bade220756c6146887877c4e5365bd993b293e03f5963328 openssl-libs-1.0.1e-34.el7_0.7.i686.rpm 26d0980530f90c3ae4fc1da9eacd05a46e00c884f382cdb19db89f9e1af95b0b openssl-libs-1.0.1e-34.el7_0.7.x86_64.rpm 530630998dc49cc5303c4975dab4b8fd0874bb4669dcd310393c5c2faa1dc869 openssl-perl-1.0.1e-34.el7_0.7.i686.rpm 54e69cbfec586c962cbf1d96e12aec00fdf9b3570bd314c8f63cb6465cdb3a41 openssl-perl-1.0.1e-34.el7_0.7.x86_64.rpm 43db079d24be715a4f39fe84171434e4f2480df36726dc105a36f70a6b6928af openssl-static-1.0.1e-34.el7_0.7.i686.rpm b621a8f4a88c85d73d89840cc4b91f02c274ba5673da63965702d1b9ec21b2bf openssl-static-1.0.1e-34.el7_0.7.x86_64.rpm Source: 32a75488cc166cf657df4f485013d98431a1904058be4b74183b9c0501044f2e openssl-1.0.1e-34.el7_0.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 20 Jan 2015 21:13:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0060 CentOS 7 sblim-sfcb BugFix Update Message-ID: <20150120211332.GA38252(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0060 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0060.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0707ed38dedad39c53af31d3119a4387ca6e428c34c07669b60cbb547c158a45 sblim-sfcb-1.3.16-12.el7_0.i686.rpm 3d5ba044dd1bdb4599b3b9d1a54caad16c1a036143d637d4d68e3efd94cf48a3 sblim-sfcb-1.3.16-12.el7_0.x86_64.rpm Source: 8ac5bd7bbb1f007dac416625a98c4ef6a85b62dad6c9599cdef5577ba9b2b1c0 sblim-sfcb-1.3.16-12.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Tue, 20 Jan 2015 21:13:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0055 CentOS 7 subscription-manager BugFix Update Message-ID: <20150120211344.GA38347(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0055 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0055.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 8d04924ae03adb72b4812d671c28b088a97f2843ff9630e6814b89c73f359216 subscription-manager-1.10.14-13.el7.centos.i686.rpm 3d60d541e3d7ad3ca5ed45ed03b48995eb30fadb88323d58b964399c9cbcddee subscription-manager-1.10.14-13.el7.centos.x86_64.rpm 842a276bfdc3b3b6270fcf4bbe9da47c2c471abcc52d089ab5622c8a10f83016 subscription-manager-firstboot-1.10.14-13.el7.centos.i686.rpm 38294f3348ea730d37e0bbb14ae28a6761a9aca79edf5a382f35dbe261a411ce subscription-manager-firstboot-1.10.14-13.el7.centos.x86_64.rpm 9a212d0302f2268015adbf93f7ca03efc1c28667515660737dc0a2b9b287ac6a subscription-manager-gui-1.10.14-13.el7.centos.i686.rpm 1182675a1ac4096a47d8b48f49ced0348fd1b392bc89f53d508a2a57c272f77a subscription-manager-gui-1.10.14-13.el7.centos.x86_64.rpm 7a78bcbd2d63461af95e8eba7a9ef3ea9b97c87a818e65672cc7d7f44ed8fbf3 subscription-manager-migration-1.10.14-13.el7.centos.i686.rpm 1ba887e94e824864e4d0a6fa31d4ee1b224101d8a08100712418d98982163543 subscription-manager-migration-1.10.14-13.el7.centos.x86_64.rpm Source: a406d3c4ac5d1c9f0882b2d255e033edcd82e012321a1c626e93dabe70ac682a subscription-manager-1.10.14-13.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Wed, 21 Jan 2015 05:35:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0068 Important CentOS 5 java-1.7.0-openjdk Security Update Message-ID: <20150121053544.GA30009(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0068 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0068.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a31f3db0f6aab9b4b96e850c7a6e9ef9639ac1a8706065df84aec96d8c8d0cdf java-1.7.0-openjdk-1.7.0.75-2.5.4.0.el5_11.i386.rpm ceabce5cf12fba357e440c2024166bf92bf786f1da2e226cc3dc6f844408c7db java-1.7.0-openjdk-demo-1.7.0.75-2.5.4.0.el5_11.i386.rpm 44c9355fc6c7650a8af6fe5a59516ab023d51a87ee0c3b093aa287af9144e839 java-1.7.0-openjdk-devel-1.7.0.75-2.5.4.0.el5_11.i386.rpm 59c702896b90ac92e6386fe53be4416baf9d52773e77f16ca26ed36f83badc94 java-1.7.0-openjdk-javadoc-1.7.0.75-2.5.4.0.el5_11.i386.rpm 933db65e83297f8bee52d932111933fa7fae18770bf83f6e737224542b1e95ed java-1.7.0-openjdk-src-1.7.0.75-2.5.4.0.el5_11.i386.rpm x86_64: 6d8080f17c62739f3d576b7847e704ca59f8331045e2bd35a6b195747350a886 java-1.7.0-openjdk-1.7.0.75-2.5.4.0.el5_11.x86_64.rpm e017d0274b0f8fc7987c273c17c0650c577345b5de4193205e2dfc916d3ff0a4 java-1.7.0-openjdk-demo-1.7.0.75-2.5.4.0.el5_11.x86_64.rpm 4f12ea787baf0a4aaaec00f0f9e4cf958b9601952d62593dd3d50f9c68a536a5 java-1.7.0-openjdk-devel-1.7.0.75-2.5.4.0.el5_11.x86_64.rpm 3d635b02e3c88e4dbd17a20fa94df287febba99a70bbb5a8eaceda4c302d257b java-1.7.0-openjdk-javadoc-1.7.0.75-2.5.4.0.el5_11.x86_64.rpm cba5ba8e08b5de2259322c52e5a71aad85fadb7d337e3a6ba6292c87a4595d9f java-1.7.0-openjdk-src-1.7.0.75-2.5.4.0.el5_11.x86_64.rpm Source: 9ff9fcf3d2bda51deb43ea36e7fc143dd2926bd847e9800aa9ffc5106a98c9ef java-1.7.0-openjdk-1.7.0.75-2.5.4.0.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Wed, 21 Jan 2015 05:42:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0067 Critical CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20150121054252.GA961(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0067 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0067.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cf8eaa20df9bd2fe8f80c0d075546577e3a622639f5d43c59f064f8578e76965 java-1.7.0-openjdk-1.7.0.75-2.5.4.0.el6_6.i686.rpm a92bac48ef91f610f83a19b049488de07e4034c8114e640359d3c9163a6b3380 java-1.7.0-openjdk-demo-1.7.0.75-2.5.4.0.el6_6.i686.rpm 87b141ed5938fc554a11630c1fa5dbf9ccd22091e2d5ca88593d0f2161387d72 java-1.7.0-openjdk-devel-1.7.0.75-2.5.4.0.el6_6.i686.rpm 7e30f1197c1a8d578ea07f3d16002481b1f63b4965c335b26b60664cdaaa881f java-1.7.0-openjdk-javadoc-1.7.0.75-2.5.4.0.el6_6.noarch.rpm 081d955ba6579ba62f05394e694505f5856c7d09e65d06861607432436c1ff82 java-1.7.0-openjdk-src-1.7.0.75-2.5.4.0.el6_6.i686.rpm x86_64: 03f915cd494294146b8ef74b39a258e1adc13a7d2e0d7b9c61fae1ec9444c044 java-1.7.0-openjdk-1.7.0.75-2.5.4.0.el6_6.x86_64.rpm d9043e0fb1a73c6e8b02704a65f828729f4d58d8a5e9c5ac5ac8103c961fd6b5 java-1.7.0-openjdk-demo-1.7.0.75-2.5.4.0.el6_6.x86_64.rpm 6f524d34b4bdddeec38179edc5e8cbd5b2952855cb1d878225e212f268d34b9c java-1.7.0-openjdk-devel-1.7.0.75-2.5.4.0.el6_6.x86_64.rpm 7e30f1197c1a8d578ea07f3d16002481b1f63b4965c335b26b60664cdaaa881f java-1.7.0-openjdk-javadoc-1.7.0.75-2.5.4.0.el6_6.noarch.rpm d87f748b090a6227f314f14bdb3e06711445de4d6c622b4aac6c2a630f92b852 java-1.7.0-openjdk-src-1.7.0.75-2.5.4.0.el6_6.x86_64.rpm Source: 525f84ef5a9ffb30f30418d346da46a7c388fc93b6a7922d58c4fbc30095ed13 java-1.7.0-openjdk-1.7.0.75-2.5.4.0.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Wed, 21 Jan 2015 05:43:50 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0069 Important CentOS 6 java-1.8.0-openjdk Security Update Message-ID: <20150121054350.GA1262(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0069 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0069.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 56b004e29dd11de6d04db5ac11ffe3534ab1126b07d20581fcdcf5ef6a95abe9 java-1.8.0-openjdk-1.8.0.31-1.b13.el6_6.i686.rpm 13f960e50cf9a82c844f692476dbcbc015cc9d21421905f6a64bd7323fcd344b java-1.8.0-openjdk-demo-1.8.0.31-1.b13.el6_6.i686.rpm e6e4040af1a9f922f35f79ff624c82634c6e8705d4001533326c53796e6f492b java-1.8.0-openjdk-devel-1.8.0.31-1.b13.el6_6.i686.rpm 0ed7974a19bd4490bbe94685d2d134733f48dcb6f4136274542c98ac98faa76c java-1.8.0-openjdk-headless-1.8.0.31-1.b13.el6_6.i686.rpm 145968d2e8f56342cb09834437ed99021b697c4e0077e009b41d2123212949fe java-1.8.0-openjdk-javadoc-1.8.0.31-1.b13.el6_6.noarch.rpm b5888cdb7dce10840317691a5bcd693e0ac5077b01dc961baa3d4606eaedd34b java-1.8.0-openjdk-src-1.8.0.31-1.b13.el6_6.i686.rpm x86_64: 82eb9d9fb0d862bd1ba93387ad9547e77d8678ee4014a3944572daf416ffcb56 java-1.8.0-openjdk-1.8.0.31-1.b13.el6_6.x86_64.rpm 6e65ee007c2f759e4ecc0dd433ec8883793d2e0cfde05d2c3d1a3db8077cd3ae java-1.8.0-openjdk-demo-1.8.0.31-1.b13.el6_6.x86_64.rpm ebbb041b5c91702809a7380aacd006eb2fdec503d2de7bc93d160440e0cc35fa java-1.8.0-openjdk-devel-1.8.0.31-1.b13.el6_6.x86_64.rpm 37edcd82342076e198c07db024e5e514423471fd3c77a2bc7c17e791ccc45524 java-1.8.0-openjdk-headless-1.8.0.31-1.b13.el6_6.x86_64.rpm 145968d2e8f56342cb09834437ed99021b697c4e0077e009b41d2123212949fe java-1.8.0-openjdk-javadoc-1.8.0.31-1.b13.el6_6.noarch.rpm c8e2e17e76d48c82410cbe0dbaca4627a80d3fce9f883923f7f1aefda308113b java-1.8.0-openjdk-src-1.8.0.31-1.b13.el6_6.x86_64.rpm Source: ee16df4c9df266fc47a5024ccbc93b07ea7fb78d4a3a59c9f72ee54e4034d8c3 java-1.8.0-openjdk-1.8.0.31-1.b13.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Wed, 21 Jan 2015 07:12:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0067 Critical CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20150121071216.GA20899(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0067 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0067.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 07dd8d83088ca16e50b7b588cdfcc2b818347385581f26829eb4302e037045dd java-1.7.0-openjdk-1.7.0.75-2.5.4.2.el7_0.x86_64.rpm be71bbff840faed621bae1246be3553c6119aeae9c3d66dbd1df0909f9d3aa3f java-1.7.0-openjdk-accessibility-1.7.0.75-2.5.4.2.el7_0.x86_64.rpm 980d1b9c1150b2d4ee1170fdb1b8446d3ac3b26a931c6a1cdc7679fea454db4e java-1.7.0-openjdk-demo-1.7.0.75-2.5.4.2.el7_0.x86_64.rpm 734982d0d1c631cd6463009d39956240cb744ab9da1e10ee3a9672782d6fa5a6 java-1.7.0-openjdk-devel-1.7.0.75-2.5.4.2.el7_0.x86_64.rpm 4513b70adcd367a8ba0541834c2407133e2c83159e54366aca7354d595a6c801 java-1.7.0-openjdk-headless-1.7.0.75-2.5.4.2.el7_0.x86_64.rpm 95ccbe3e0c9128042724bead079ec667b64469e989d9405681a3ba8dcb2b575d java-1.7.0-openjdk-javadoc-1.7.0.75-2.5.4.2.el7_0.noarch.rpm 78edf2de19914d18148159aa213565aabedd0609face4c533bfdb14a5e8657ce java-1.7.0-openjdk-src-1.7.0.75-2.5.4.2.el7_0.x86_64.rpm Source: 30e0061f31a4c3d43ccc7e6c509d160c68d81f702aa95685da4a4202efa607ef java-1.7.0-openjdk-1.7.0.75-2.5.4.2.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 119, Issue 6 ***********************************************

1 0

Where to configure proxy NDP in startup scripts?
by Franz Schwartau 21 Jan '15

21 Jan '15

Hi! For my network setup I need the following commands: sysctl -w net.ipv6.conf.all.proxy_ndp=1 ip -6 neigh add proxy 1234:5678:9abc:def0::2 dev eth2 The first command goes to /etc/sysctl.conf to enable it after a reboot. But where do I put the "ip -6 neigh add proxy"? Best regards Franz

1 0

Kickstarting several *different* setups
by Ashley M. Kirchner 21 Jan '15

21 Jan '15

I'm currently using kickstart for installing new servers and have run into the following scenario: all the machines will have the same basic setup of packages, however they will each be configured for a specific task. For example, some will be mail-serving machines and won't need things like a web or mySQL server installed. Others will be web servers and do need those packages. So my question is, is there some way do determine via kickstart, what to install on that machine based on some criteria, possibly the IP that's being assigned to it, or MAC address, or something ... Right now I have one single kickstart setup that all the machines are going to use, then I manually install the additional packages one by one, on each machine. It would be helpful if I can somehow tell kickstart to do that. Suggestions?

6 9

tg3 network link unstable
by Leon Fauster 19 Jan '15

19 Jan '15

Full updated EL6: Does someone have the same behaviour, unstable eth interface (tg3/no dhcp)? Jan 19 18:01:46 ane kernel: tg3 0000:04:00.0: eth0: Link is up at 1000 Mbps, full duplex Jan 19 18:01:46 ane kernel: tg3 0000:04:00.0: eth0: Flow control is on for TX and on for RX Jan 19 18:01:46 ane kernel: tg3 0000:04:00.0: eth0: EEE is enabled Jan 19 18:01:46 ane NetworkManager[1735]: <info> (eth0): carrier now ON (device state 8) Jan 19 18:02:17 ane kernel: tg3 0000:04:00.0: eth0: Link is down Jan 19 18:02:17 ane NetworkManager[1735]: <info> (eth0): carrier now OFF (device state 8, deferring action for 4 seconds) Jan 19 18:02:20 ane kernel: tg3 0000:04:00.0: eth0: Link is up at 1000 Mbps, full duplex Jan 19 18:02:20 ane kernel: tg3 0000:04:00.0: eth0: Flow control is on for TX and on for RX Jan 19 18:02:20 ane kernel: tg3 0000:04:00.0: eth0: EEE is enabled Jan 19 18:02:20 ane NetworkManager[1735]: <info> (eth0): carrier now ON (device state 8) Jan 19 18:02:23 ane kernel: tg3 0000:04:00.0: eth0: Link is down Jan 19 18:02:23 ane NetworkManager[1735]: <info> (eth0): carrier now OFF (device state 8, deferring action for 4 seconds) Jan 19 18:02:26 ane kernel: tg3 0000:04:00.0: eth0: Link is up at 1000 Mbps, full duplex Jan 19 18:02:26 ane kernel: tg3 0000:04:00.0: eth0: Flow control is on for TX and on for RX Jan 19 18:02:26 ane kernel: tg3 0000:04:00.0: eth0: EEE is enabled Jan 19 18:02:26 ane NetworkManager[1735]: <info> (eth0): carrier now ON (device state 8) Jan 19 18:02:50 ane kernel: tg3 0000:04:00.0: eth0: Link is down Jan 19 18:02:50 ane NetworkManager[1735]: <info> (eth0): carrier now OFF (device state 8, deferring action for 4 seconds) Jan 19 18:02:53 ane kernel: tg3 0000:04:00.0: eth0: Link is up at 1000 Mbps, full duplex Jan 19 18:02:53 ane kernel: tg3 0000:04:00.0: eth0: Flow control is on for TX and on for RX Jan 19 18:02:53 ane kernel: tg3 0000:04:00.0: eth0: EEE is enabled Jan 19 18:02:53 ane NetworkManager[1735]: <info> (eth0): carrier now ON (device state 8) Jan 19 18:03:11 ane kernel: tg3 0000:04:00.0: eth0: Link is down Jan 19 18:03:11 ane NetworkManager[1735]: <info> (eth0): carrier now OFF (device state 8, deferring action for 4 seconds) Jan 19 18:03:14 ane kernel: tg3 0000:04:00.0: eth0: Link is up at 1000 Mbps, full duplex Jan 19 18:03:14 ane kernel: tg3 0000:04:00.0: eth0: Flow control is on for TX and on for RX Jan 19 18:03:14 ane kernel: tg3 0000:04:00.0: eth0: EEE is enabled Jan 19 18:03:14 ane NetworkManager[1735]: <info> (eth0): carrier now ON (device state 8)

2 1

Documentation link on new Firefox CentOS 7 splash screen
by Mark LaPierre 19 Jan '15

19 Jan '15

Hey All, I just installed the newest version of Firefox that was pushed to production today. When I started Firefox the CentOS 7 Is Here splash screen was displayed. Out of curiosity I clicked on the [Documentation] tab at the top of the screen and got this: http://www.centos.org/docs/ Does anyone else see a problem here? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

11 21

shutdown -h doesn't
by Devin Reade 17 Jan '15

17 Jan '15

I've got a fresh CentOS 7 test machine, fully patched. The command: shutdown -h now surprisingly does not halt the machine. Instead it reboots it. WTF? I found the following Debian discussion which seems to be the same issue: <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766338> However, removing kexec-tools in this case did not solve the problem. Nor does "systemctl poweroff" work. Does anyone else see this? No, nothing is filed in bugzilla yet. Devin

4 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss