Discuss

discuss@lists.centos.org

34753 discussions

Start a nNew thread

CentOS-announce Digest, Vol 116, Issue 8
by centos-announce-request＠centos.org 15 Oct '14

15 Oct '14

1 0

[OT]] CentOS 7 docs, tutorials, etc...
by James B. Byrne 15 Oct '14

15 Oct '14

I apologize in advance for the subject and length of this reply. I debated just letting things pass without comment. But, security has many levels. And the first level is recognition of the threat. Whether we recognize it or not. Whether we agree of disagree with the politics that lie beneath this situation or not; Whether we consider this a non-technical issue or not; By virtue of our employment we are all involuntarily caught up in a global conflict between the agents of extremely powerful states versus the talents, minds and beliefs of principled individuals. For better or for worse the chosen battleground is the software we use and the hardware we run it upon. It is my belief that we as a community are not well served by individuals that decry every attempt to highlight the fundamentally terrible positions our governments have placed us in. On Fri, October 10, 2014 13:33, William Woods wrote: > So claim made, nothing to back it up. Got it. > > all I need to say isBASH , OpenSSL.. > > I am sure there are more. > > But really, if you are going to claim something, at least be willing to back > up what you claim is that asking to much ? > Of course, plausible deniably is the standard MO when a government does something that even their own subject populace would take exception to. That said one must give thought to the reality behind the following well documented controversy that goes back to 1999: https://en.wikipedia.org/wiki/NSAKEY But more recently we have: http://www.theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-us… and this: http://techcrunch.com/2014/05/13/nsa-docs-detail-efforts-to-collect-data-fr… This sort of publicity is sort of bad for business, which is really, really starting to bite the U.S. tech giants. So we now have these 'stand-up and be counted' responses like the following: http://www.cnn.com/2013/12/05/tech/web/microsoft-nsa-snooping/ http://www.wired.com/2013/12/microsoft-nsa/ Which are about as trustworthy as . . . well, I cannot think of anything off-hand that I would consider as untrustworthy as the public statements of a corporation gagged by a secret court and suffering economically from the public revelations of that fact. After, what we have in the U.S. (and the rest of the AABCNZ / 5-eyes network for that matter) at the moment is a totally out-of-control, irresponsible, and self-righteously belligerent security apparatus that is milking billions of dollars annually out of their populaces. Its leaders and employees have suborned the courts, committed perjury, and repeatedly and egregiously violated the very constitution (where such exist, the UK being a notable exception) that as public officials they are sworn to uphold. This consortium has accumulated a vast collection of private data on every present, past, and probably future elected official in the U.S.A.; and quite likely of the rest of the world as well. I am not sure that such capability in the hands of people shown to put institutional interests above the law bodes well for public oversight. Of course, maybe suggesting a tinfoil hat for everyone who ponders the implications of all in public this will make all of that unpleasant stuff just go away. When one cannot or will not address the central issue then attack the credibility of the opponent. Call for evidence and then dismiss it out of hand when confronted with it. Old news, shall we say. Never mind that dismissive response begs the question that these thing have happened and continue to happen. Personally, I am beginning to wonder just who employs "William Woods" <woods.w(a)gmail.com>. A nice nondescript name with no signature block from an anonymous email address. Maybe he is a tinfoil salesman? Anyone who attended the C3 Congress in Berlin this past December was exposed to an awful lot information and revelations from some highly respected privacy advocates. They were also made aware of the fact the various agencies actively monitor and participate in a range of online forums, including technical mailing lists and MMOGs. Given CentOS's importance to the information infrastructure of todays business and scientific communities (about twice as many servers run CentOS than RHEL http://constantmayhem.com/ty-stuff/linuxsurvey/2013.html) it would not be surprising to me to discover one or more of said individuals skulking about. And, one has to admit, casting doubt upon and disparaging lines of enquiry into things contrary to their employer's interest might be among their assigned jobs. Not that Mr. Woods is one of these mind you. He could very well be just be a mailing list troll of the everyday garden variety. Or, perhaps, he is a RedHat employee that takes any implied criticism of his employer a little too personally. Whatever the case may be it is interesting that: 1. W. Woods first posted to the mailing list (under that name) this past July. 2. He has an utter fascination with things to do with SystemD and its detractors. Indeed that was the subject of his first post. 3. He has never asked, answered or added to a question of a technical nature in such a fashion as to provide a proposed solution or elaborate on a constructive approach to a problem. 4. The vast majority of his postings can, with the most charitable interpretation, be considered as snide deprecation of people who express opinions that he evidently feels compelled to comment on. Usually having to do with security. And without actually contributing anything in the way of useful information. I am just saying, sometimes paranoia is induced by other people's behaviour, not by any internal mental defect. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Systemd Adding Its Own Console To Linux Systems
by Steve Clark 14 Oct '14

14 Oct '14

Anybody see this article on /. -- Stephen Clark

21 92

URGENT! Shellshock fix DOES NOT fix the bug on CentOS 5.4
by Jessica Blank 14 Oct '14

14 Oct '14

Good afternoon! After applying the latest bash RPM listed at http://lists.centos.org/pipermail/centos-announce/2014-September/020594.html : The fixed RPM (bash-3.2-33.el5_10.4.x86_64.rpm) DOES work just fine on CentOS 5.10. However, it DOES NOT work on CentOS 5.4. That is, bash runs fine, but IS STILL VULNERABLE TO SHELLSHOCK! Scary screenie at: http://i.imgur.com/yR7sBjV.png It looks like the released RPM somehow behaves DIFFERENTLY on 5.4 as opposed to 5.10. This has been validated by one of my coworkers; it's apparently not just me. Best, Jessica

19 36

Subject: Re: centos7 livecd yum problem (solved)
by Don Vogt 14 Oct '14

14 Oct '14

Message: 4 Date: Mon, 13 Oct 2014 12:14:52 -0600 From: Frank Cox <theatre(a)melvilletheatre.com> <To: centos(a)centos.org <Subject: Re: [CentOS] centos7 livecd yum problem <Message-ID: <n Mon, 13 Oct 2014 10:35:47 -0700 <Don Vogt wrote: >> I started to install centos7 using a livecd image. After booting the cd I >> tried a "yum install mc" which failed. I then tried "yum update" and got the > >following output. >Are you sure that your newly installed machine is actually online? >What does "ping google.com" get you? Thanks. That is the problem. I never got to the install. I was running from the liveCD. I have booted from quite a few liveCD's and this is the first (that I remember- always a caveat nowadays) that didn't handle the network setup of my ethernet. The problem is probably unique to my setup. I have a built in ethernet on the motherboard which failed about a year after I put the board in about 6 years ago. I put in an old nic I had laying around and have been happy ever since. I tried looking at /var/log/messages to see what NetworkManager had to say, but don't understand it. I know how to get the network going now and will be able to do that after I install and should be OK. So, thanks again.

1 0

centos 6.5 input lag
by Matt Garman 14 Oct '14

14 Oct '14

I have a CentOS 6.5 x86_64 system that's been running problem-free for quite a while. Recently, it's locked-up hard several times. It's a headless server, but I do have IP KVM. However, when it's locked up, all I can see are a few lines of kernel stack trace. No hints to the problem in the system logs. I even enabled remote logging of syslog, hoping to catch the errors that way. No luck. I ran memtest86+ for about 36 errors, no problems. I've tried to strip away just about all running services. It's just a home file server. I haven't had a crash in a while, but I also haven't had it running very long. But even while it's up, I have severe input lag in the shell. I'll type a few characters, and two to 10 or so seconds pass before anything echoes to the screen. I've checked top, practically zero CPU load. It's not swapping - 16 GB of RAM, 0 swap used. Most memory heavy process is java (for CrashPlan backups). iostat shows 0% disk utilization. Anyone seen anything like this? Where else can I check to try to determine the source of this lag (which I suspect might be related to the recent crashes)? Thanks, Matt

3 6

答复: turn bootable USB into bootable iso image
by 沈焕标 14 Oct '14

14 Oct '14

ctrl-d to settings，than you can see the CDROM, choose to use the ISO image file. Sent from my Windows Phone ________________________________ 发件人: Steve Clark<mailto:sclark@netwolves.com> 发送时间: ‎2014/‎10/‎10 21:42 收件人: CentOS mailing list<mailto:centos@centos.org> 主题: [CentOS] turn bootable USB into bootable iso image Hello List I have a Bootable USB stick that we use to Boot our servers and then install CentOS, PostgreSQL and our SW thru a Kickstart script. It works like a charm but now we are thinking of going Virtual and prepping Virtual CentOS servers under VMware ESXi. However, to have the same "Boot and Install" functionality I see no other solution than Booting a VMware machine from an ISO. So, what I would like to do is to take the Bootable USB and make it into an ISO. Any ideas? Thanks, -- Stephen Clark _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

4 3

machine check exception
by Shital Sakhare 14 Oct '14

14 Oct '14

Hello, Today, I got the below error server Console, Cpu 1:machine check exception Tcs c7f3d370acf17a ADDR 112d6c00040288 MISC c453176c00040200 This is not a softeware problem Run through mcelog ascii to decode and contact your hW vendor Kernel panic not syncing :machine check Can anybody please provide the meaning of this. How can I pull the logs from server ? Still not able to understand the exact cause of it. Please help. Thanks and Regards, Shital

3 4

CentOS-announce Digest, Vol 116, Issue 7
by centos-announce-request＠centos.org 14 Oct '14

14 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1255 Moderate CentOS 5 krb5 Security Update (Johnny Hughes) 2. CEBA-2014:1395 CentOS 6 ksh BugFix Update (Johnny Hughes) 3. CEEA-2014:1393 CentOS 6 be2iscsi Enhancement Update (Johnny Hughes) 4. CESA-2014:1397 Important CentOS 7 rsyslog Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Oct 2014 21:45:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1255 Moderate CentOS 5 krb5 Security Update Message-ID: <20141010214506.GA15074(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1255 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1255.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bdedf72c20131241fe22c3377a2687514bc15a1b0c8cfa0b2437d5c95ddca9f7 krb5-devel-1.6.1-80.el5_11.i386.rpm 9fffda97beadefb7c10e1db2aaf1d78e6d868a1b8fc72b2b0d985deb4b1eb0f3 krb5-libs-1.6.1-80.el5_11.i386.rpm 33edfc1b5fec4efceffc6d31eb5b049c9f325ea2e2ec5899bf72bdae8b528e32 krb5-server-1.6.1-80.el5_11.i386.rpm 92d20a98d3f3f7688b960edc2fbaec43991761dbebbd7e7a2c52ba79ba2f8a49 krb5-server-ldap-1.6.1-80.el5_11.i386.rpm b43c346face17ce142faf5be78ec3af611a9a946321720e24ef5e6b8b6d40683 krb5-workstation-1.6.1-80.el5_11.i386.rpm x86_64: bdedf72c20131241fe22c3377a2687514bc15a1b0c8cfa0b2437d5c95ddca9f7 krb5-devel-1.6.1-80.el5_11.i386.rpm 8299528ca4f6fb42a2d0eb2cf0e40d31c090af54344bc61c731bd123d0ff58d2 krb5-devel-1.6.1-80.el5_11.x86_64.rpm 9fffda97beadefb7c10e1db2aaf1d78e6d868a1b8fc72b2b0d985deb4b1eb0f3 krb5-libs-1.6.1-80.el5_11.i386.rpm fc2d06194339c7a5e1f860a4054ac4e1c18ea224464357c76a5265c5bf3af1e4 krb5-libs-1.6.1-80.el5_11.x86_64.rpm e89f87c8ad03fcdf36373d4f7bb1162abc7c551b9ed1de95721042ac2dc6dc39 krb5-server-1.6.1-80.el5_11.x86_64.rpm a868a052676af36fde1b3523696977459d012cfabe1cd5458b3b49fc7de668bd krb5-server-ldap-1.6.1-80.el5_11.x86_64.rpm 7126bc94f693ccdda6da0242d67ce2850492187155a921c3fe9892e40136f017 krb5-workstation-1.6.1-80.el5_11.x86_64.rpm Source: 1804a362842e1d343d6ec9805831cd475eee88236087d5078c2b8f85477a5f8b krb5-1.6.1-80.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 13 Oct 2014 13:15:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1395 CentOS 6 ksh BugFix Update Message-ID: <20141013131514.GA52198(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1395 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1395.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1387ed663fe471b6b1b4c7ace450886b76d8513ca399fa407f91125cf5b6c765 ksh-20120801-10.el6_5.12.i686.rpm x86_64: 1376e7817bab4dd5b14a4bd2ec56e973d05fbc6367350ceb110a5e39163a7be9 ksh-20120801-10.el6_5.12.x86_64.rpm Source: 7c1fe6ed97a97af63f4810947c747fd9ec6017ba9dcd7104b6d0c9fe007833fc ksh-20120801-10.el6_5.12.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 13 Oct 2014 13:15:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2014:1393 CentOS 6 be2iscsi Enhancement Update Message-ID: <20141013131527.GA52284(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2014:1393 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1393.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d0d7eaa262746e1760fd3d533b9fa82684ef87bb344b38422946f6b1b81c69c1 kmod-be2iscsi-10.2.273.0r-1.el6_5.i686.rpm x86_64: c066e98a14fc3db9b8237d19d3ffef9a62bcb8e063d6f996b166040f2a047bd2 kmod-be2iscsi-10.2.273.0r-1.el6_5.x86_64.rpm Source: 6d708190df4651c157dd173748290b83bb624071c37e0602540e04a72696d085 be2iscsi-10.2.273.0r-1.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 13 Oct 2014 19:45:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1397 Important CentOS 7 rsyslog Security Update Message-ID: <20141013194527.GA15291(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1397 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1397.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 948575ad1feeb02cbe239668584e1b84268e3bec81215d02d5d06cea0b8f533c rsyslog-7.4.7-7.el7_0.x86_64.rpm c7e99647faec3af85a3d174a7aeac248a1d8d2c80410b6676049fe221188265a rsyslog-crypto-7.4.7-7.el7_0.x86_64.rpm 66be2ec9a2b8d0fa79960c38866ef7562ac59cde6717853eac0e140e320ffba0 rsyslog-doc-7.4.7-7.el7_0.x86_64.rpm 9a74dfc032f6946fa9bca1a8c7af4188c2a937ce04831ace8bb12bf84bd9e32c rsyslog-elasticsearch-7.4.7-7.el7_0.x86_64.rpm 805fb5b2aebd9a88028e496d49695918b8f4b5dc6d07b23babb4619b1c09a8b0 rsyslog-gnutls-7.4.7-7.el7_0.x86_64.rpm ef6c468d97fd791b0313a0755f8403355c5437b89aacf2a23c3e8e71d64883e8 rsyslog-gssapi-7.4.7-7.el7_0.x86_64.rpm 3ea324bf1b7274030b08eaf298345e31f462879ee2379756a32f13f505a59c97 rsyslog-libdbi-7.4.7-7.el7_0.x86_64.rpm 45ddb5e5d772077101b12edaea5282a6d17bdfb2b2bfd62c2f404fcf0782cdcd rsyslog-mmaudit-7.4.7-7.el7_0.x86_64.rpm 207a69be5ab3237c5fe6eba4811b6cadf6d7cd3a91af02cac1f2153c66257c9c rsyslog-mmjsonparse-7.4.7-7.el7_0.x86_64.rpm dfcff07a291887e0666402cf33a76399270dcb8f9ea1fbbf752951425207ff20 rsyslog-mmnormalize-7.4.7-7.el7_0.x86_64.rpm eedb2881ec82be8560681310fc6a7d67b6bbd6556bf45bf3a58b53b38c681f77 rsyslog-mmsnmptrapd-7.4.7-7.el7_0.x86_64.rpm 6fabf1ceff6963dfc1fd0f9f379c25e33ca913776270e9cd067414ca92470738 rsyslog-mysql-7.4.7-7.el7_0.x86_64.rpm d1e5dceec4084daa457a39cd2e60526ae5be249b695344a21be7ed8dea0add65 rsyslog-pgsql-7.4.7-7.el7_0.x86_64.rpm 5732b9cd681a759410d93815d77c42f039bb087907be8164055a7d5680039966 rsyslog-relp-7.4.7-7.el7_0.x86_64.rpm 57411118ac2fa283b397c3be55d7f21a222292656f14d656271ceaeaee494d28 rsyslog-snmp-7.4.7-7.el7_0.x86_64.rpm 771e03bb4a37817aa4e417f47a689b0712c115b4263d7df1079dee3376080028 rsyslog-udpspoof-7.4.7-7.el7_0.x86_64.rpm Source: 250ed2cfdecd54d606fe2a8c9139c7e0f634bf4a6d3fc2f32b1a198191fe5573 rsyslog-7.4.7-7.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 7 ***********************************************

1 0

Re: [CentOS] Recommended way of handling iptables firewall in CentOS?
by Niki Kovacs 13 Oct '14

13 Oct '14

Le 13/10/2014 11:11, Reindl Harald a écrit : > just write a bash script which resets and configures iptables with the > "iptables" command and at the end of the script call "/sbin/service > iptables save" which writes the current rules to /etc/sysconfig/iptables > and so at boot the rules get loaded atomically Thanks very much! I followed your advice, and here's a first version of a firewall script for a LAN server: https://github.com/kikinovak/centos/blob/master/6.x/firewall/firewall-lan.sh Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss