Discuss

discuss@lists.centos.org

34758 discussions

patching bash 2.05b for Shellshock
by Boris Epstein 08 Oct '14

08 Oct '14

Hello all, Amongst a number of modern CentOS machines we have this one RHEL 3 machine (don't ask me why:) and on it we have bash 2.05b. I was trying to compile a version of bash for it that would be Shellshock-proofed. To do that, I downloaded a copy of the code from the GNU along with all the 13 patches, applied the patches, compiled the code and installed the executable. All vulnerabilities appear to be fixed with the exception of CVE-2014-7187. Does anybody know why this may be? Thanks. Boris.

1 0

centos 7, docker, NFS and uid = -2
by Mauricio Tavares 08 Oct '14

08 Oct '14

I created a centos 7 docker container in which I want to mount a NFS share in. Said share is owned by user virtual with uid 1200. So I do some exporting (docker container is in 172.17.0.0/16): spindizzy> cat /etc/exports /export 10.0.0.0/24(ro,fsid=0,no_subtree_check,sync) 172.17.0.0/16(ro,fsid=0,no_subtree_check,sync) [...] /export/mail 172.17.0.0/16(rw,root_squash,no_subtree_check,sync) spindizzy> and then some mounting: bash-4.2# id virtual uid=1200(virtual) gid=1200(virtual) groups=1200(virtual) bash-4.2# nfsstat -m bash-4.2# mount.nfs4 -v -o proto=tcp fileserver.in.kushana.com:mail /var/spool/vmail mount.nfs4: timeout set for Wed Oct 8 03:11:43 2014 mount.nfs4: trying text-based options 'proto=tcp,addr=10.0.0.18,clientaddr=172.17.0.29' bash-4.2# nfsstat -m /var/spool/vmail from fileserver.in.kushana.com://mail Flags: rw,relatime,vers=4.0,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,clientaddr=172.17.0.29,local_lock=none,addr=10.0.0.18 bash-4.2# ls -l /var/spool/ total 12 drwxr-xr-x 2 root root 4096 Jun 10 01:11 lpd drwxrwxr-x 2 root mail 4096 Oct 8 02:15 mail drwxr-xr-x 2 4294967294 4294967294 4096 Oct 3 17:34 vmail bash-4.2# And am getting the famous share being mounted as nobody issue. In the client (docker container), I went in /etc/idmapd.conf and set the Domain to be the domain where the NFS server is at (in.kushana.com) Now, how do I restart idmapd? It is a systemd service (/usr/lib/systemd/system/rpcidmapd.service, which uses /etc/sysconfig/nfs).

1 0

VNCServer Startup Config
by Igal ＠ getRailo.org 08 Oct '14

08 Oct '14

hi all, I've inherited a server with CentOS 6.4 the VNC Server starts up with the OS and its screen resolution is set to 800x600. I found that I can set the resolution by specifying the -geometry switch, but I can't find where the call to start the vncserver is set in order to change it. I know that it's not in /etc/xinetd.d (the only file there is rsync) here are the contents of ~/.vnc/xstartup #!/bin/sh [ -r /etc/sysconfig/i18n ] && . /etc/sysconfig/i18n export LANG export SYSFONT vncconfig -iconic & unset SESSION_MANAGER unset DBUS_SESSION_BUS_ADDRESS OS=`uname -s` if [ $OS = 'Linux' ]; then case "$WINDOWMANAGER" in *gnome*) if [ -e /etc/SuSE-release ]; then PATH=$PATH:/opt/gnome/bin export PATH fi ;; esac fi if [ -x /etc/X11/xinit/xinitrc ]; then exec /etc/X11/xinit/xinitrc fi if [ -f /etc/X11/xinit/xinitrc ]; then exec sh /etc/X11/xinit/xinitrc fi [ -r $HOME/.Xresources ] && xrdb $HOME/.Xresources xsetroot -solid grey xterm -geometry 80x24+10+10 -ls -title "$VNCDESKTOP Desktop" & twm & any thoughts? TIA -- Igal Sapir Railo Core Developer http://getRailo.org/

3 5

CentOS-announce Digest, Vol 116, Issue 5
by centos-announce-request＠centos.org 08 Oct '14

08 Oct '14

1 0

umount problem
by Fred Smith 08 Oct '14

08 Oct '14

I've got a usb HD mounted, and it has been mounted since the weekend, and has been kept busy during that period. now I"m done with it an want to umount it, but neither umount nor the on-screen icon (when right-clicked) will let me do it: it is /dev/sdd1, mounted as /media/seagateusb. when root tries to umount it we get this: # umount /media/seagateusb umount: /media/seagateusb: device is busy. (In some cases useful info about processes that use the device is found by lsof(8) or fuser(1)) lsof | grep sdd1 gives this: $ lsof | grep sdd1 jbd2/sdd1 26358 root cwd DIR 253,1 4096 2 / jbd2/sdd1 26358 root rtd DIR 253,1 4096 2 / jbd2/sdd1 26358 root txt unknown /proc/26358/exe lsof | grep /media/seagateusb yields no output. I know, I could reboot, but I'd just as soon not. Anybody know what that jbd2/sdd1 stuff is that lsof shows me, or how to umount it other than a reboot? thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- Show me your ways, O LORD, teach me your paths; Guide me in your truth and teach me, for you are God my Savior, And my hope is in you all day long. -------------------------- Psalm 25:4-5 (NIV) --------------------------------

3 10

Re: [CentOS] Problem with WRT54GL router
by m.roth＠5-cent.us 07 Oct '14

07 Oct '14

Timothy Murphy wrote: > Chris wrote: > >>> How did you reboot the router, as a matter of interest. >>> Is there any of doing this from an ethernet-connected computer? > >> Well, I think it wasn't the genuine firmware, but dd-wrt. There's a cronjob menu in the webinterface and you can also edit them by telnet. > > Thanks for your response. > But have you actually done this? > If so, could you be a bit more explicit, please? > > I was just looking at my dd-wrt router's web-page, > and I see that Remote Access is disabled > in Administration=>Management. > Probably that is why I don't seem able to access it with telnet; and even if I could do, I'm not sure I would know > how to edit a file with telnet ... ??? You don't edit files with vi? > > When I have a little time, I must read up on dd-wrt's documentation. Also, enable ssh, verify that it works, then disable telnet. And, if you're not worried about connecting from random locations, but only from inside your internal network, you can block outside remote access. dd-wrt's "documentation"? It's as accurate as any other documentation that's been desultorily, in someone's spare time, updated over the last 10 years, and old and obsolete info not deleted.... mark "take your cmts re emacs to alt.religion.editors"

2 1

OT - httpd/conf.d include questions - allowing only some addresses
by Robert Moskowitz 07 Oct '14

07 Oct '14

My web searching is not finding out the answers to this, so I turn to you all here. I am trying to NOT modify my httpd/conf/httpd.conf file, and only make changes via includes. I have done that with a 00-init.conf where I set things like servername and serveradmin. Now I want to move my allow and denies to a 01-allow.conf include. I tried: <Directory "/var/www/html"> Order allow,deny deny from all </Directory> as that seems to be what is in the default conf, but I see in the error_log: [Tue Oct 07 08:51:58 2014] [error] [client 208.83.67.156] Directory index forbidden by Options directive: /var/www/html/ And maybe this is not the right restriction, because when I make this change directly in the default httpd.conf, I still can get to the default web page. Now on to the 'allow' statement. All syntax examples I have seen for it follow: allow from 1.1.1.0/24 1.1.2.0/24 2400:cb00:2048:1::/64 and soforth. That is each range separated by a space. But potentially I have 18 ranges to specify, and at least named makes it easy with each range on its own line ending with a ';'. For now I am only putting 2 ranges in, but how does one set up a longer list of allowed ranges? thanks

5 9

Re: [CentOS] [CentOS-announce] CESA-2014:1326 Moderate CentOS 6 php Security Update
by Leon Fauster 07 Oct '14

07 Oct '14

Am 30.09.2014 um 12:27 schrieb Johnny Hughes <johnny(a)centos.org>: > CentOS Errata and Security Advisory 2014:1326 Moderate > > Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1326.html > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) Just curious - are the SCL advisories also communicated via this channel? (linked to https://rhn.redhat.com/errata/rhel-6-rhscl-1-errata.html) Just wondering that upstream did not provide an update for php54 ... -- LF

2 2

CentOS-announce Digest, Vol 116, Issue 4
by centos-announce-request＠centos.org 07 Oct '14

07 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:1356 CentOS 7 dhcp BugFix Update (Johnny Hughes) 2. CESA-2014:1359 Important CentOS 7 polkit-qt Security Update (Johnny Hughes) 3. CEBA-2014:1361 CentOS 7 ethtool BugFix Update (Johnny Hughes) 4. CEBA-2014:1360 CentOS 7 systemtap BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Oct 2014 16:36:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1356 CentOS 7 dhcp BugFix Update Message-ID: <20141006163659.GA40289(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1356 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1356.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3e4301b534eb11741fb80f5887918e06b0821db1f66e37fe3e957a9d5e9bf761 dhclient-4.2.5-27.el7.centos.2.x86_64.rpm 51fb0535e6774e7039ef4df7f7e75eb207d1e43e99f0eed0c8d93b8bec81ae06 dhcp-4.2.5-27.el7.centos.2.x86_64.rpm b6a505aede47fce36b74eac93f6872006a62740fc0b2cdc446479033e7cbad8d dhcp-common-4.2.5-27.el7.centos.2.x86_64.rpm 4c05a088cbf3b4863c3dc19e2cae76ed21cff85a13555d226a9fd0c6d7f9c238 dhcp-devel-4.2.5-27.el7.centos.2.i686.rpm e0237ed75f9677081fdf7c0d34790c2326b9fcd6f2a6833a4e648b28891856b0 dhcp-devel-4.2.5-27.el7.centos.2.x86_64.rpm 9558d6ddf3b9089f47b8a1c3d199c5b8dd9cdef0335004e40e9c4c6ebbce91c7 dhcp-libs-4.2.5-27.el7.centos.2.i686.rpm ef59a01c7a91817de77a0f4aa9087bcafb1061a3df8027c741b2930c41347c6c dhcp-libs-4.2.5-27.el7.centos.2.x86_64.rpm Source: 59564ace4f214466eea874f05efcd80b10db1a9c2497d4135783826d7ece57a0 dhcp-4.2.5-27.el7.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 6 Oct 2014 18:04:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1359 Important CentOS 7 polkit-qt Security Update Message-ID: <20141006180424.GA47506(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1359 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1359.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 469ec506f78304c51f385b054029bc165b4027ca1721f73667ee9151cb89b2a6 polkit-qt-0.103.0-10.el7_0.i686.rpm c3403ffee586868bc003f85982553a1bc2860caab13339f53454e63e063dea09 polkit-qt-0.103.0-10.el7_0.x86_64.rpm 266e739f8d9d4811ceb304258dc103d759f8d0d3f5518589d14e0aa32bbd8255 polkit-qt-devel-0.103.0-10.el7_0.i686.rpm 5a6972e28e0df36c6a9088179f9cee3d036ba93987d06ab0643e1d4487304ae4 polkit-qt-devel-0.103.0-10.el7_0.x86_64.rpm 5ed37c9af4c75e28771e5fdb0b4e12ccbaaefc95ecbd87decb70a91a5c13f61e polkit-qt-doc-0.103.0-10.el7_0.noarch.rpm Source: 5ba465a8aeb2c20476d58143742fbfc7510647780340a19d4ecdd77a601ef288 polkit-qt-0.103.0-10.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 6 Oct 2014 18:51:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1361 CentOS 7 ethtool BugFix Update Message-ID: <20141006185153.GA54276(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1361 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1361.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f7206ad3f099f7f3a889e60181de07f22f5a887c58915addb96286b358879dad ethtool-3.8-4.el7_0.x86_64.rpm Source: 249bf779e0cc6dd9ccbbb33b41d781b3437e23dac7d8f2b2e7018fdc803d652f ethtool-3.8-4.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 6 Oct 2014 18:52:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1360 CentOS 7 systemtap BugFix Update Message-ID: <20141006185207.GA54391(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1360 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1360.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 752157afa4eaf26f375d0770eae0e64459a5ee65099ffd6637dd8f7a0fe0f314 systemtap-2.4-16.el7_0.x86_64.rpm 32ce393a347a22f77ab9f4104b3563d28b14410024fade48f8bad3cf742d3cbb systemtap-client-2.4-16.el7_0.x86_64.rpm 94bb463a14126080683814c00190fa58d3b97923d2c395e7b2bd17058f8d01ae systemtap-devel-2.4-16.el7_0.x86_64.rpm 64a63341f56beb92b2ff6955ad83b7b1e2d4cb13cc2f50fb5d41f09c1330390b systemtap-initscript-2.4-16.el7_0.x86_64.rpm f02d27d862fd7ccfd96f2072ca040bb2b53c9c6a2100877b62fbc464b430cca9 systemtap-runtime-2.4-16.el7_0.x86_64.rpm 692dc87534413f72404a1ada020c9bdc5871fc6f16a0c3a1b9c73be6ed307b9e systemtap-runtime-java-2.4-16.el7_0.x86_64.rpm 3974c52c4a7afdf927671bc6c2b48f68e1516ab9ceb736d476613adfa9416b9f systemtap-runtime-virtguest-2.4-16.el7_0.x86_64.rpm d265dd81b67777a388167491163eda8b8221b0db43209f9d2d8c308648a9594d systemtap-runtime-virthost-2.4-16.el7_0.x86_64.rpm 385003dcd54c036979dd21582972b7505b6cb96b1bf6dd04f8b96eb76bf59492 systemtap-sdt-devel-2.4-16.el7_0.i686.rpm 44e0cc71c7c51cdae03cc62266aa9c0d3416d8fc5dc8597672e19b0b6284f336 systemtap-sdt-devel-2.4-16.el7_0.x86_64.rpm 846266d46bc5905daa68acbcfc35371a1c57574592abcd37ad74ac59de17b23d systemtap-server-2.4-16.el7_0.x86_64.rpm 80b78c7c075ca8ed1624704fc418a2e316eb03283a6b3300aed3df160917b1ec systemtap-testsuite-2.4-16.el7_0.x86_64.rpm Source: 50dda4d433a7a80f4e1f49788a7fc221937aba4029b2f62d52e1c19d8ca8cbb5 systemtap-2.4-16.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 4 ***********************************************

1 0

OH NO, Something has gone wrong!
by Fred Smith 07 Oct '14

07 Oct '14

Hi all! I'm setting up C7-64 as a VM using VirtualBox, on a Windows host. as soon as I install the vbox Guest Extensions and reboot, when I log in next time I get a white screen with a frowny face that says "Oh No, Something has gone wrong!" and then "A problem has occurred, and the system can't recover, please log out and try again." Sounds like a VirtualBox problem to me, but was wondering if anyone here had seen it and maybe knows what's going on. Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "Not everyone who says to me, 'Lord, Lord,' will enter the kingdom of heaven, but only he who does the will of my Father who is in heaven." ------------------------------ Matthew 7:21 (niv) -----------------------------

2 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss