Discuss

discuss@lists.centos.org

34758 discussions

SELinux issue?
by Chuck Campbell 16 Jun '14

16 Jun '14

I've recently built a new mail server with centos6.5, and decided to bite the bullet and leave SELinux running. I've stumbled through making things work and am mostly there. I've got my own spam and ham corpus as mbox files in /home/user/Mail/learned. These files came from my backup of the centos 5 server this machine is replacing. The folder is owned by the user (the following is run as root): ls -laF learned drw-------. 6 user group 4096 Jun 10 03:35 ./ drw-------. 6 user group 35864Jun 10 03:35 ../ drw-------. 6 user group 4096 Jun 10 03:35 2004/ -rw-------. 6 user group 155296 Jun 10 03:35 2014_10_Jun_learned_spam -rw-------. 6 user group 996584 Jun 10 03:35 2014_10_Jun_learned_ham also as root: ls -laZlearned drw-------. 6 user group unconfined_u:object_r:mail_spool_t:s0. drw-------. 6 user group unconfined_u:object_r:mail_spool_t:s0.. drw-------. 6 user group unconfined_u:object_r:mail_spool_t:s02004 -rw-------. 6 user group system_u:object_r:mail_spool_t:s02014_10_Jun_learned_spam -rw-------. 6 user group system_u:object_r:mail_spool_t:s02014_10_Jun_learned_ham When I do the same as the user, I get this: ls -laF learned ls: cannot access learned/2004: Permission denied ls: cannot access 2014_10_Jun_learned_spam: Permission denied ls: cannot access 2014_10_Jun_learned_ham: Permission denied total 0 d???????? ? ? ? ? ? ./ d???????? ? ? ? ? ? ../ d???????? ? ? ? ? ? 2004/ -???????? ? ? ? ? ? 2014_10_Jun_learned_spam -???????? ? ? ? ? ? 2014_10_Jun_learned_ham and this: ls -laFZ learned ls: cannot access learned/2004: Permission denied ls: cannot access 2014_10_Jun_learned_spam: Permission denied ls: cannot access 2014_10_Jun_learned_ham: Permission denied total 0 d???????? ? ? ./ d???????? ? ? ../ d???????? ? ? 2004/ -???????? ? ? 2014_10_Jun_learned_spam -???????? ? ? 2014_10_Jun_learned_ham The user's process to feed the spam and ham to spamassassin fails when trying to write to the directories, even though the files are owned by user:group What, precisely is wrong here? I don't get any AVC entries in /var/log/audit/audit.log, so I'm at a loss as to what to try next. Should this directory not be target mail_spool_t? Any guesses? -chuck -- ACCEL Services, Inc.| Specialists in Gravity, Magnetics | (713)993-0671 ph. | and Integrated Interpretation | (713)993-0608 fax 448 W. 19th St. #325| Since 1992 | (713)306-5794 cell Houston, TX, 77008 | Chuck Campbell | campbell(a)accelinc.com | President & Senior Geoscientist | "Integration means more than having all the maps at the same scale!"

3 3

Odd issue: power_saving
by m.roth＠5-cent.us 16 Jun '14

16 Jun '14

On a running system, I was just logging in, and it took for-bloody-ever. I run top, and ok, a load of 5 still shouldn't do that; we have folks that do put real loads on these systems. But top shows me power_saving frequently coming to the top, with a 94% - 100% CPU usage, and there's two threads of power_saving. Add to this that I don't *ever* remember seeing such a kernel thread. So, can I kill either or both threads? Googling some, I see someone suggesting: acpi_pad.disable=1 already added in grub.conf ;-) (after having `modprobe -r acpi_pad`, which solves directly the load issue) Good idea or not? mark

1 0

Re: [CentOS] issue_discards in lvm.conf
by James B. Byrne 16 Jun '14

16 Jun '14

On Thu Jun 12 17:21:43 UTC 2014, John R Pierce pierce at hogranch.com wrote: > On 6/12/2014 10:12 AM, m.roth at 5-cent.us wrote: >> We use two methods: for the drives that are totally dead, or*sigh* the >> SCSI drives, they get deGaussed. For SATA that's still running, we use >> DBAN.*Great* software. From what I've read, one pass would probably be >> good enough, given how data's written these days. With my name certifying >> it, I do paranoid, and tell DBAN the full 7-pass, DoD 5220.22-M. I >> *really* don't think anyone's getting anything off that. > > if the drive has remapped tracks, there's stale data on there you can't > erase with DBAN. > >> We don't have any SSDs, so I can't speak to that. Bet you could deGauss >> them, easily enough. Or maybe stick 'em on a burner on a stove to get over >> the Curie point....* > > degaussing would do nothing to flash memory, its semiconductor, > not magnetic. An EMP gun on the other hand. . . -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

dumb developer explodes yum
by Tim Dunphy 15 Jun '14

15 Jun '14

hey guys, One of our developers DESTROYED both yum and rpm on one of the development machines with an rm command. And guess who's lucky enough to get to fix this mess? *raises hand* So I hope y'all don't mind me turning to you once again for some advice. You've been wonderful in the past. Pavlov's dogs as they say. At any rate, I've managed to fix rpm (yay) by copying it over from another machine of similar architecture and os. I'm not sure if the fix is perfect, but I can indeed install rpm's again with that command. Yum however is proving to be more of a challenge. And I am in the midst of some dependencies currently. I found this guide on the net which seemed reasonable and that I could adapt to my needs. http://deadlockprocess.wordpress.com/2010/07/18/how-to-reinstall-rpm-and-yu… However installing this rpm : rpm-libs-4.4.2-37.el5.i386.rpm Asks for a bunch of libraries. This is what I see when I try: [root@uszmpaplp005lc i386]# rpm -Uvh rpm-libs-4.4.2-37.el5.i386.rpm warning: rpm-libs-4.4.2-37.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID e8562897 error: Failed dependencies: libelf.so.1 is needed by rpm-libs-4.4.2-37.el5.i386 libelf.so.1(ELFUTILS_1.0) is needed by rpm-libs-4.4.2-37.el5.i386 libelf.so.1(ELFUTILS_1.1.1) is needed by rpm-libs-4.4.2-37.el5.i386 libsqlite3.so.0 is needed by rpm-libs-4.4.2-37.el5.i386 rpm = 4.4.2-37.el5 is needed by rpm-libs-4.4.2-37.el5.i386 And this is my rpm verison: [root@uszmpaplp005lc i386]# rpm --version RPM version 4.4.2.3 I took care of some of them by installing (before showing you the above command output) by installing : beecrypt-4.1.2-10.1.1.i386.rpm But now I am trying with elfutils-libelf-0.125-3.el5.i386.rpm and I am getting this confusing message: [root@uszmpaplp005lc i386]# rpm -Uvh elfutils-libelf-0.125-3.el5.i386.rpm warning: elfutils-libelf-0.125-3.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID e8562897 error: Failed dependencies: elfutils > 0.125-3.el5 conflicts with elfutils-libelf-0.125-3.el5.i386 elfutils-libs > 0.125-3.el5 conflicts with elfutils-libelf-0.125-3.el5.i386 And when I check what elf libraries I currently have this is what I find; [root@uszmpaplp005lc i386]# rpm -qa | grep elf elfutils-libelf-0.137-3.el5 elfutils-0.137-3.el5 elfutils-libs-0.137-3.el5 Just wondering what I can do to unstick myself at this point. Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

6 8

Information Week: RHEL 7 released today
by m.roth＠5-cent.us 15 Jun '14

15 Jun '14

Excerpt: Red Hat released the 7.0 version of Red Hat Enterprise Linux today, with embedded support for Docker containers and support for direct use of Microsoft's Active Directory. The update uses XFS as its new file system. --- end excerpt --- <http://www.informationweek.com/cloud/infrastructure-as-a-service/red-hat-en…> We thought it was still weeks away.... mark

15 29

apr buildconf fails
by Tim Dunphy 15 Jun '14

15 Jun '14

Guys, I'm trying to install apr-util on centos 5.7. And it's failing with a python error: buildconf: generating 'make' outputs ... Traceback (most recent call last): File "build/gen-build.py", line 230, in <module> main() File "build/gen-build.py", line 56, in main h_deps[os.path.basename(fname)] = extract_deps(fname, legal_deps) File "build/gen-build.py", line 198, in extract_deps inc = _re_include.match(line).group(1) AttributeError: 'NoneType' object has no attribute 'group' buildconf: rebuilding rpm spec file [root@uszmpaplp005lc apr-util-1.5.1]# build/gen-build.py Traceback (most recent call last): File "build/gen-build.py", line 230, in <module> main() File "build/gen-build.py", line 56, in main h_deps[os.path.basename(fname)] = extract_deps(fname, legal_deps) File "build/gen-build.py", line 198, in extract_deps inc = _re_include.match(line).group(1) AttributeError: 'NoneType' object has no attribute 'group' [root@uszmpaplp005lc apr-util-1.5.1]# /root/apr-1.5.1/buildconf buildconf: checking installation... buildconf: python version 2.7 (ok) buildconf: autoconf version 2.59 (ok) buildconf: libtool version 1.5.22 (ok) buildconf: copying libtool helper files using /usr/bin/libtoolize buildconf: Using libtool.m4 at /usr/share/aclocal/libtool.m4. buildconf: creating include/arch/unix/apr_private.h.in ... buildconf: creating configure ... buildconf: generating 'make' outputs ... Traceback (most recent call last): File "build/gen-build.py", line 230, in <module> main() File "build/gen-build.py", line 56, in main h_deps[os.path.basename(fname)] = extract_deps(fname, legal_deps) File "build/gen-build.py", line 198, in extract_deps inc = _re_include.match(line).group(1) AttributeError: 'NoneType' object has no attribute 'group' buildconf: rebuilding rpm spec file I was wondering if anyone had any advice they could give on how to get past this error. Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

2 3

Hardware watchdog timer, no IPMI, no /dev/watchdog
by Digimer 15 Jun '14

15 Jun '14

Hi all, I've got a Portwell NANO-6060 board I am testing out for potential use in a project of ours. One of the nice features of this board, beyond nice NICs, is that it has a hardware watchdog timer. The problem is that I don't get a /dev/watchdog device file. I know the hardware works, because when I enable it in BIOS, the box will reboot after the timer expires. However, without the /dev/watchdog device, I don't have a way to kick it. In dmesg, I see: NMI watchdog enabled, takes one hw-pmu counter. So it *looks* like it's there. Also, I installed the 'watchdog' package (but not the IPMI package) and the watchdog service is running. Any tips? Thanks! -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education?

1 0

Mailman 2.1.16 RPMs?
by Robert Heller 14 Jun '14

14 Jun '14

Before I go through the hassle of building it myself I want to know if someone else has built RPMS for Mailman 2.1.16. I *need* to update the version of Mailman on my CentOS 5 server to Mailman 2.1.16 in order to be able to use the from_is_list option to deal with DMARC issues with Yahoo, Aol, and Hotmail. -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

3 2

procmail and dovecot
by Chuck Campbell 14 Jun '14

14 Jun '14

Does anyone know how to get procmail and dovecot to play happily together with mboxes? I'm on Centos 6.5, fully patched. I'm getting tons of lock timeouts which is killing performance. I tried using dovecot's lda from procmail, which prompted many adjustments to selinux, which I managed, but it still gives permission problems, and I haven't succeeded in getting it to deliver mail. Any guesses at all would be useful. thanks, -chuck -- ACCEL Services, Inc.| Specialists in Gravity, Magnetics | (713)993-0671 ph. | and Integrated Interpretation | (713)993-0608 fax 448 W. 19th St. #325| Since 1992 | (713)306-5794 cell Houston, TX, 77008 | Chuck Campbell | campbell(a)accelinc.com | President & Senior Geoscientist | "Integration means more than having all the maps at the same scale!"

9 11

Re: [CentOS] [Gluster-users] performance due to network?
by Eliezer Croitoru 13 Jun '14

13 Jun '14

Just wondering if you had the chance of testing the network speed with iperf from host to host yet? This is like the first thing to do while doing a full debug upside-down. No matter what disks you have but note that each and one of them has a maximum IOps limit which sometimes you can hit in a way. as already suggested by others in the past you can use a binary search dividing the issue one part at a time network.. disk.. controller.. driver.. software(since the software is proven to work). Eliezer On 06/12/2014 11:40 PM, Aronesty, Erik wrote: > I suspect I'm having performance issues because of network speeds. > > /Supposedly/ I have 10gbit connections on all my NAS devices, however, > it seems to me that the fastest I can write is 1Gbit. When I'm copying > very large files, etc, I see 'D' as the cp waits to I/O, but when I go > the gluster servers, I don't see glusterfsd waiting (D) to write to the > bricks themselves. I have 4 nodes, each with 10Gbit connection, each > has 2 Areca RAID controllers with 12 disk raid5, and the 2 controllers > stripped into 1 large volume. Pretty sure there's plenty of i/o left > on the bricks themselves. > > Is it possible that "one big file" isn't the right test… should I try 20 > big files, and see how saturated my network can get? > > Erik Aronesty > Senior Bioinformatics Architect > > *EA | Quintiles > **/Genomic Services/**//* > > 4820 Emperor Boulevard > > Durham, NC 27703 USA > > > Office: + 919.287.4011 > erik.aronesty(a)quintiles.com <mailto:kmichailo@expressionanalysis.com> > > www.quintiles.com <http://www.quintiles.com/> > www.expressionanalysis.com <http://www.expressionanalysis.com/> > cid:image001.jpg@01CDEF4B.84C3E9F0 > <https://www.twitter.com/simulx>cid:image002.jpg@01CDEF4B.84C3E9F0 > <http://www.facebook.com/aronesty>cid:image003.jpg@01CDEF4B.84C3E9F0 > <http://www.linkedin.com/in/earonesty> > > > > _______________________________________________ > Gluster-users mailing list > Gluster-users(a)gluster.org > http://supercolony.gluster.org/mailman/listinfo/gluster-users >

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss