Discuss

discuss@lists.centos.org

34758 discussions

Can we trust RedHAt encryption tools?
by James B. Byrne 14 Jan '14

14 Jan '14

Recently I have been deeply troubled by evidence revealing the degree to which U.S. based corporations (well actually all resident in any of the so-called 5-eyes countries) appear to have rolled over and assumed the position with respect to NSA inspired pressure to cripple public key encryption and facilitate intrusions into their software products. This has engendered in me a significant degree of doubt surrounding the integrity of RHEL; and therefore of CentOS since it claims to be a bug for bug, and therefore an exploit for exploit, copy of RHEL. Reinforcing my doubt is the tale surrounding the long outstanding bug report respecting OpenSSL (https://bugzilla.redhat.com/show_bug.cgi?id=319901) opened in October of 2007. This probelm was only recently addressed and then only after a good deal of pointed public questioning by numerous security commentators. RedHat's reference to 'patent' issues surrounding this 'bug' are unsubstantiated by any documented evidence. The only response justifying Redhat's lack of movement is some hand-waving about corporate legal opinion. Despite suggestive language by some RH employees (https://bugzilla.redhat.com/show_bug.cgi?id=612265#c3) the exact nature of the patent legal problem was never specifically laid out for public comment. Equally troubling to me is the complete lack of any information on what patent issue was finally resolved and how it was resolved so that the related bugs could be fixed. As patents (with very,very few exceptions) are by their very nature not secret one wonders if the so-called legal problem was of a fundamentally different nature, no less real but somewhat less savoury from a PR standpoint. In consequence, after a good deal of agonizing over what was within my means to do, I have spent the weekend rebuilding Apache httpd from Apache sources to obtain TLSv1.2. While I still do not have a working copy (yet) I did learn a great deal of how RH back-porting patch policy appears to work. But in the process of researching how to get this package built I ran across a number of discussions respecting OpenSSL, which is the fundamental layer upon which pki rests, and RedHat (http://www.linuxadvocates.com/2013/09/is-openssls-cryptography-broken.html) None of them were very comforting. Where this discourse is leading is to is the question of whether or not CentOS should provide OpenSSL built from clean sources as an extra or plus package and perhaps httpd, sshd and ssh-client and related pki based/reliant packages as well. Similarly, should CentOS.org provide tested spec files that will provide individual system admins a simple method of building these packages from source? I think that CentOS.org probably should provide this but I am afraid that I cannot make a strong public case. Suffice that my belief is informed from personal previous experience with federal agencies investigative techniques and the all too frequent willingness of commercial interests to take the road of least resistance when pressured. Particularly where the spectres of expensive litigation and targeted regulatory enforcement looms in the background. I believe that the issue is of pressing interest to the entire community and I would like to read what others have to say on the matter. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

14 39

apache - upload files bigger than 2Go
by MOKRANI Rachid 14 Jan '14

14 Jan '14

Hi, I need to upload files larger than 4.4Gb (iso DVD) on CentOS (5.5 x64) http server (httpd-2.2.3-43.el5.centos) On the apache server set in my /etc/php.ini upload_max_filesize = 4900M post_max_size = 5000M In my httpd.conf I set : LimitRequestBody 0 I'm using firefox and/or chrome client for upload a file with 4.2gb size on the server. But it doesn't work. Everything work fine and I can upload my file if it's not greater than 2gb. I see that there are a technical apache limitation. http://httpd.apache.org/docs/current/mod/core.html#limitrequestbody how to get around this limitation for upload a DVD iso (4.2Gb)? Regards. __________________________ Avant d'imprimer, pensez à l'environnement ! Please consider the environment before printing ! Ce message et toutes ses pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. IFP Energies nouvelles décline toute responsabilité au titre de ce message. This message and any attachments are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP Energies nouvelles should not be liable for this message. __________________________

4 3

Laptop recommendation
by Todor Petkov 14 Jan '14

14 Jan '14

Hello, I am looking for a laptop with the following specs: Built-in GSM module Trusted platform module Support for these modules, as for the network (Ethernet + WiFi) for RHEL/Centos6. I tested Lenovo W540, and the WiFi is not detected. lspci shows: 03:00.0 Network controller: Realtek Semiconductor Co., Ltd. Device 818b I came across http://askubuntu.com/questions/376732/thinkpad-t440p-wireless-network-contr…, so it turns out, this WiFi card is not supported (yet). So, if anyone can recommend a working solution, please contact me, either here or off the list. Thanks in advance,

4 3

Need help with kernel, modules and headers
by Patrick Begou 14 Jan '14

14 Jan '14

I need some help about kernels, modules and so on. I've installed CentOS6.5 (fresh install) on a DELL E7440 laptop. After all the updates I get the latest kernel: kernel-2.6.32-431. But with this config I've a problem: If I close the screen on the keyboard, the laptop hibernate. When I open it the system restart (I connect use ssh to reach the laptop) but the screen remains black (Intel HD Graphics 4400). I've installed a more recent kernel from elrepo-kernel (kernel-lt-3.10.26-1.el6.elrepo.x86_64) and it solves the black screen problem. But now I have several errors about => kdump, Starting kdump: ÉCHOUÉ => vboxdrv Starting VirtualBox kernel modules ÉCHOUÉ (modprobe vboxdrv failed. Please use 'dmesg' to find out why) => dkms (requested for VirtualBox) Démarrage de dkms : Error! Your kernel headers for kernel 3.10.26-1.el6.elrepo.x86_64 cannot be found at /lib/modules/3.10.26-1.el6.elrepo.x86_64/build or /lib/modules/3.10.26-1.el6.elrepo.x86_64/source. but kernel-lt-headers cannot be installed (conflicting with the installed kernel-headers requested by many packages). So what could you suggest me to solve this situation ? -> kernel-2.6.32-431 all is working but if the laptop hibernate it hangs -> kernel 3.10.26-1 video works fine but I get conflicts for some applications Thanks for your advices Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

2 2

CentOS-announce Digest, Vol 107, Issue 7
by centos-announce-request＠centos.org 14 Jan '14

14 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0021 CentOS 5 lvm2-cluster Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 13 Jan 2014 16:58:44 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0021 CentOS 5 lvm2-cluster Update To: centos-announce(a)centos.org Message-ID: <20140113165844.GA22310(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0021 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0021.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dee70585b7e7455e1a62452b83bffa5e4ef2629193d1a2cf6e1a7cfd15dd8a4a lvm2-cluster-2.02.88-9.el5_10.2.i386.rpm x86_64: 3f044ba3d83f23dc4f0ef9f7f727d258324f0bbcce842faffdeaf097932f004d lvm2-cluster-2.02.88-9.el5_10.2.x86_64.rpm Source: d86eb6d628949f3383e95ba5c303af22243cb771d030cd86f547865f18e07202 lvm2-cluster-2.02.88-9.el5_10.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 7 ***********************************************

1 0

- manipulation token error
by Paolo De Michele 14 Jan '14

14 Jan '14

hi all, I can't change root password because in my VPS the ssh console gives me: $ ssh -p xxxx2 username@ipaddress username@ipaddress's password: Last login: Thu Jan 9 11:46:58 2014 from dynamic-adsl-xxx.xxx.xx.it WARNING: Your password has expired. You must change your password now and login again! Changing password for username. (current) UNIX password: passwd: Authentication token manipulation error passwd: password unchanged Connection to xxxxxx closed. how I fix this problem? thanks in advance regards

2 4

Email not getting delivered (and a fix)
by Frank Cox 13 Jan '14

13 Jan '14

I just discovered that, ever since I updated this computer to kernel-2.6.32-431.3.1, it hasn't been forwarding outbound email. I found this repeated in /var/log/maillog: "warning: relayhost configuration problem" This computer is set up to relay outbound email via postfix to another computer on my network by name, whose name and IP address is specified in the /etc/hosts file. A bit of reading told me that I have to add this line to /etc/postfix/main.cf: smtp_host_lookup = dns,native Without that line, postfix won't check /etc/hosts to look up an IP address. Oddly, this setup has been working for several months WITHOUT that line in main.cf and it just stopped working when the latest kernel was installed. According to the documentation http://www.postfix.org/postconf.5.html#smtp_host_lookup it appears that it should not have been working before, eithre. Something changed in the new kernel to make it stop working. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

LogScape as a Splunk alternative?
by Rafał Radecki 13 Jan '14

13 Jan '14

Hi All. I searched for a Splunk alternative and found LogScape. Have anyone worked with it? There is no documentation available only some very brief installation instructions and there is almost no information in google about successful deployments in linux environments. From my current perspective it is a quite small and not widely used product, am I right? Also videos about search capabilities show that in comparison with Splunk it gives rather limited search functionality. Overall what do you think about LogScape? Best regards, Rafal.

4 3

Configure wireless USB ethernet
by Ashley M. Kirchner 13 Jan '14

13 Jan '14

I have a system that does *not* have a graphical desktop installed, nor do I ever plan to. I have its wired ethernet working just peachy. Now I want to configure a USB wireless ethernet and scratching my head. Particularly since I don't use NetworkManager, everything is manually configured. That said, if I enable NM, I see this in /var/log/messages: NetworkManager[26900]: <info> rfkill0: found WiFi radio killswitch (at /sys/devices/pci0000:00/0000:00:1d.7/usb1/1-2/1-2:1.0/ieee80211/phy0/rfkill0) (driver rt2800usb) NetworkManager[26900]: <info> WiFi hardware radio set enabled NetworkManager[26900]: <info> WiFi enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> WWAN enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> WiMAX enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> Networking is enabled by state file NetworkManager[26900]: <info> (wlan0): driver supports SSID scans (scan_capa 0x01). NetworkManager[26900]: <info> (wlan0): new 802.11 WiFi device (driver: 'rt2800usb' ifindex: 4) NetworkManager[26900]: <info> (wlan0): exported as /org/freedesktop/NetworkManager/Devices/1 NetworkManager[26900]: <info> (wlan0): now managed NetworkManager[26900]: <info> (wlan0): device state change: 1 -> 2 (reason 2) NetworkManager[26900]: <info> (wlan0): bringing up device. NetworkManager[26900]: <info> (wlan0): preparing device. NetworkManager[26900]: <info> (wlan0): deactivating device (reason: 2). kernel: ADDRCONF(NETDEV_UP): wlan0: link is not ready NetworkManager[26900]: <info> (wlan0): supplicant interface state: starting -> ready NetworkManager[26900]: <info> (wlan0): device state change: 2 -> 3 (reason 42) Looking at 'lsmod | grep rt' I see: rt2800usb 18780 0 rt2800lib 71865 1 rt2800usb crc_ccitt 1717 1 rt2800lib rt2x00usb 12696 1 rt2800usb rt2x00lib 48438 3 rt2800usb,rt2800lib,rt2x00usb mac80211 552581 3 rt2800lib,rt2x00usb,rt2x00lib cfg80211 619515 2 rt2x00lib,mac80211 And lastly ifconfig shows the interface present: lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:1401 errors:0 dropped:0 overruns:0 frame:0 TX packets:1401 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:177957 (173.7 KiB) TX bytes:177957 (173.7 KiB) wlan0 Link encap:Ethernet HWaddr 00:87:35:1C:07:BF UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Great ... now how do I configure this sucker? When I turn NM off, that interface disappears. I'm assuming I can create an 'ifcfg-wlan0' configuration but what do I need to put in there so it knows to connect to my home wireless (with password) and all of that fun and exciting stuff, and continue to do that over a reboot.

5 9

6.5, minor annoyances
by m.roth＠5-cent.us 13 Jan '14

13 Jan '14

I rebuilt my system a couple/three weeks ago, and it's running 6.5, and there's a couple of minor annoyances: first, all my xterms, when I login in from the console, always are in ~/Documents, rather than ~. The other is that, running KDE, I can't find where to turn *off* the stupid login/logout theme music.* Oh, and I get this enTHUsiastic menu, rather than the traditional one. Someone know where I need to go to change this crap? I've already gone through KDE's setting, and system, and no joy. Nor did grep -L Documents /etc/*/* find anything.... mark * Is it just me, or does the logout music sound like the beginning of the original Trek Classic tv show theme?

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss