- Discuss - lists.centos.org

Re: [CentOS] Resizing est4 filesystem while mounted
by Jeff Boyce 23 Jun '12

23 Jun '12

Replying to the daily digest, with my response at the bottom. >Message: 13 >Date: Fri, 15 Jun 2012 12:22:08 -0700 >From: Ray Van Dolson <rayvd(a)bludgeon.org> >Subject: Re: [CentOS] Resizing est4 filesystem while mounted >To: centos(a)centos.org >Message-ID: <20120615192207.GA23689(a)bludgeon.org> >Content-Type: text/plain; charset=us-ascii > >On Fri, Jun 15, 2012 at 12:10:09PM -0700, Jeff Boyce wrote: >> Greetings - >> >> I had a logical volume that was running out of space on a virtual >> machine. >> I successfully expanded the LV using lvextend, and lvdisplay shows that >> it >> has been expanded. Then I went to expand the filesystem to fill the new >> space (# resize2fs -p /dev/vde1) and I get the results that the >> filesystem >> is already xx blocks long, nothing to do. If I do a # df -h, I can see >> that >> the filesystem has not been extended. I could kick the users off the VM, >> reboot the VM using a GParted live CD and extend the filesystem that way, >> but I thought that it was possible to do this live and mounted? The RH >> docs >> say this is possible; the man page for resize2fs also says it is possible >> with ext4. What am I missing here? This is a Centos 6.2 VM with an ext4 >> filesystem. The logical volumes are setup on the host system which is >> also >> a Centos 6.2 system. > >Try resize4fs (assuming your FS is ext4). > >Ray Well, I have never seen a reference to resize4fs before (and yes my FS is ext4). It is not on my Centos 6.2 system, and doing a little searching through repositories for that specifically, or e4fsprogs, and I can't find it anywhere to even try it. Any google reference seems to point back to resize2fs. I ended up booting a live SystemRescueCD and using GParted via the GUI. My notes indicate that is what I had done previously also. I am still stumped, everything that I have read indicates that resize2fs can do a live resizing on ext4 file systems. Can anybody confirm or deny this? Is the reason I can't do this because it is on an LVM logical volume? Thanks. Jeff Boyce Meridian Environmental

5 4

reinventing the wheel? page checker
by Bob Hoffman 23 Jun '12

23 Jun '12

Not sure if there is an app like this yet. I want to keep tabs on my web applications and thought of using a 'page checker'/ I was thinking either running a sum on the directory or each file...but thinking a simple date check would be fine. The idea is web application, except the uploads area for photos, never has changes to its files except when I change it. However, if it gets injected or hacked, I would want to know right away. So thinking of running a script every minute looking for files where the date changed since 'x' date or something like that. Anything out there like that? thanks

10 14

converting .doc to html
by m.roth＠5-cent.us 22 Jun '12

22 Jun '12

Anyone got a preferred program or package for this? I'd like a *good* one, and Word or OO.o's save as html in no way qualifies as other than amateur crap. So far, with a little googling, I've found the wv package. wvHtml works, but I don't like the output - it insists on <div>, and on &rhquo instead of plain, simple ". mark "what, ask for an opinion in this shy, diffident group?"

5 8

basic auth fails
by Tim Dunphy 22 Jun '12

22 Jun '12

Hello, I've setup apache basic auth on by web server to protect my nagios site. It's been working just fine, but suddenly it stopped accepting passwords even tho they are being typed in correctly. I was wondering if I could get some advice on how to troubleshoot this? I'm on a centos 5.4 machine Linux 2.6.21.7-2.fc8xen #1 SMP Fri Feb 15 12:34:28 EST 2008 x86_64 x86_64 x86_64 GNU/Linux Server version: Apache/2.2.21 (Unix) Server built: Nov 14 2011 18:03:07 I don't see any indication in the logs as to why this may be happening, but it's possible I might not be looking for the right things. Thanks Tim gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

5 4

SATA errors in log
by Steve Brooks 22 Jun '12

22 Jun '12

Hi, I have a SATA PCIe 6Gbps 4 port controller card made by Startech. The kernel (Linux viz1 2.6.32-220.4.1.el6.x86_64) sees it as Marvell Technology Group Ltd. 88SE9123 I use it to provide extra SATA ports to a raid system. The HD's are all "WD2003FYYS" and so run at 3Gbps on the 6Gbps controller. However I am seeing lots of instances of errors like this ----------------------------------------- Jun 22 03:13:23 viz1 kernel: ata13.00: exception Emask 0x10 SAct 0x4 SErr 0x400000 action 0x6 frozen Jun 22 03:13:23 viz1 kernel: ata13.00: irq_stat 0x08000000, interface fatal error Jun 22 03:13:23 viz1 kernel: ata13: SError: { Handshk } Jun 22 03:13:23 viz1 kernel: ata13.00: failed command: WRITE FPDMA QUEUED Jun 22 03:13:23 viz1 kernel: ata13.00: cmd 61/e8:10:98:05:1b/01:00:66:00:00/40 tag 2 ncq 249856 out Jun 22 03:13:23 viz1 kernel: ata13.00: status: { DRDY } Jun 22 03:13:23 viz1 kernel: ata13: hard resetting link Jun 22 03:13:24 viz1 kernel: ata13: SATA link up 3.0 Gbps (SStatus 123 SControl 330) Jun 22 03:13:24 viz1 kernel: ata13.00: configured for UDMA/133 Jun 22 03:13:24 viz1 kernel: ata13: EH complete --------------------------------------- Vendor ID : 1b4b Device ID : 9123 I tried to see what drivers were currently being used but the command below gave nothing grep -i 1b4b /lib/modules/*/modules.alias | grep -i 9123 I have changed the card and cables but still get the same errors. I am wondering if the el6 kernel is using the correct drivers I checked "elrepo" against the "Vendor:Device ID pairing" and it also came up blank. Any ideas would be much appreciated. Regards, Steve

2 9

CentOS-announce Digest, Vol 88, Issue 13
by centos-announce-request＠centos.org 22 Jun '12

22 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:1029 CentOS 5 file FASTTRACK Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 22 Jun 2012 11:08:41 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1029 CentOS 5 file FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120622110841.GA27390(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1029 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-1029.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8a98e586acca5ff300dac78f6f2cd2548001ff3f2f946e7c26613864f950102a file-4.17-28.i386.rpm x86_64: 50b33ade3d9a0209e2a7225ed959fd8ce9d6173ab279bca9a6738797d1acd26f file-4.17-28.x86_64.rpm Source: 690888b77be34b978a454a3c03705b4bbd7c2ac5bdf4cef13221f6c1c3837074 file-4.17-28.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 13 ***********************************************

1 0

Cannot See Login Screen Anymore !!
by Shiv. Nath 22 Jun '12

22 Jun '12

Hi CentOS community Friends, It is CentOS 6.2 x86_64 machine, i have upgraded few packages using "yum -y update", after the reboot machine does not show login screen, i have allowed enough time to show the screen that are about 2 hours. booting process does complete, it just hangs when it is about to show the screen. i tried to check by doing ssh for warring/error logs. nothing serious was there. but when i did the ssh to the server then i saw the following error. Prior to the upgrade machine was just okay.. ) MacBook-Pro:~ prabhpal$ ssh -l mike 41.211.25.233 mailer(a)41.211.25.233's password: -bash: /dev/null: Permission denied -bash: /dev/null: Permission denied -bash: /dev/null: Permission denied -bash: /dev/null: Permission denied -bash: /dev/null: Permission denied -bash: /dev/null: Permission denied Thanks / Nath

1 0

'yum update' rollback or .. ?
by przemolicc＠poczta.fm 22 Jun '12

22 Jun '12

Hello, we have several physical servers (CentOS 5.*) with rather critical applications where (because of stability) we don't do regularly 'yum update'. In virtualized environemnts (under Vmware) we do a snapshot, then 'yum update', reboot and if something is wrong we rollback the snapshot. On physical servers we cannot do that. I have read about rollback option of rpm but not sure if this is reliable solution. What is your best practise regarding "rollbacking" 'yum update' on physical servers ? Regards Przemyslaw Bak (przemol)

3 3

Re: [CentOS] SATA errors in log
by Steve Brooks 22 Jun '12

22 Jun '12

On Fri, 22 Jun 2012, Reindl Harald wrote: > > > Am 22.06.2012 13:58, schrieb Steve Brooks: >> I have a SATA PCIe 6Gbps 4 port controller card made by Startech. The >> kernel (Linux viz1 2.6.32-220.4.1.el6.x86_64) sees it as >> >> Marvell Technology Group Ltd. 88SE9123 >> >> I use it to provide extra SATA ports to a raid system. >> The HD's are all "WD2003FYYS" and so run at 3Gbps on the 6Gbps controller. >> However I am seeing lots of instances of errors like this >> >> ----------------------------------------- >> >> Jun 22 03:13:23 viz1 kernel: ata13.00: exception Emask 0x10 SAct 0x4 SErr >> 0x400000 action 0x6 frozen >> Jun 22 03:13:23 viz1 kernel: ata13.00: irq_stat 0x08000000, interface >> fatal error >> Jun 22 03:13:23 viz1 kernel: ata13: SError: { Handshk } >> Jun 22 03:13:23 viz1 kernel: ata13.00: failed command: WRITE FPDMA QUEUED >> Jun 22 03:13:23 viz1 kernel: ata13.00: cmd >> 61/e8:10:98:05:1b/01:00:66:00:00/40 tag 2 ncq 249856 out >> Jun 22 03:13:23 viz1 kernel: ata13.00: status: { DRDY } >> Jun 22 03:13:23 viz1 kernel: ata13: hard resetting link >> Jun 22 03:13:24 viz1 kernel: ata13: SATA link up 3.0 Gbps (SStatus 123 >> SControl 330) >> Jun 22 03:13:24 viz1 kernel: ata13.00: configured for UDMA/133 >> Jun 22 03:13:24 viz1 kernel: ata13: EH complete >> >> --------------------------------------- >> >> Vendor ID : 1b4b >> Device ID : 9123 >> >> I tried to see what drivers were currently being used but the command >> below gave nothing > > > why do you care for drivers? > > this looks like dying hard-drives are always looking in syslog Hi Reindl, I should have mentioned I swapped out the hard-drive and same errors on new drive. I checked the SMART attributes of the drive and nothing untoward, also executed the smartctl -long .... test wich came back error free. Steve -- Dr Stephen Brooks http://www-solar.mcs.st-and.ac.uk/ Solar MHD Theory Group Tel :: 01334 463735 Fax :: 01334 463748 E-mail :: steveb(a)mcs.st-andrews.ac.uk --------------------------------------- Mathematical Institute North Haugh University of St. Andrews St Andrews, Fife KY16 9SS SCOTLAND ---------------------------------------

1 0

official linux raid mailing list?
by Alan McKay 21 Jun '12

21 Jun '12

Hey folks, Google seems to bring up a few things and I was wondering if there might be an official mailing list for linux RAID? thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

4 4

Re: [CentOS] Failing Network card
by Chuck Munro 21 Jun '12

21 Jun '12

> Date: Wed, 20 Jun 2012 10:54:33 -0700 > From: John R Pierce<pierce(a)hogranch.com> > Subject: Re: [CentOS] Failing Network card > To:centos@centos.org > Message-ID:<4FE20E59.20907(a)hogranch.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > On 06/20/12 8:44 AM, Gregory P. Ennis wrote: >> > 01:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. >> > RTL8111/8168B PCI Express Gigabit Ethernet controller (rev ff) > > pure unmitigated junk. > > -- john r pierce N 37, W 122 santa cruz ca mid-left coast I agree with John's comment. Realtek chips are junk with unpredictable reliability, especially under heavy load. I have had several problems with various versions of the 81xx chips. When I tossed the cards in the garbage and switched to Intel-based NICs, all the problems went away. Every time I build systems with Realtek network chips on the motherboard, I disable them in the BIOS and add Intel NICs instead. YMMV, but please consider ditching Realtek altogether. Chuck

1 0

Hanging issue with sudo command
by Kaplan, Andrew H. 21 Jun '12

21 Jun '12

Hello -- We are running Centos 5.2 64-bit on a system that functions as a mail server, and also runs a virtual server via the Virtualbox application. A user account was given sudo access via the sudoers file several years ago, and that account has worked well with various administrative jobs on the server. Recently it was observed the user account took longer to complete its login from a terminal window and console. It is also now having problems when running the sudo command. Essentially when the user runs the command, the latter hangs, and the administrator is forced to log in as root, and kill the hung progress. What would cause this issue to occur, and how can it be corrected? Thanks. The information in this e-mail is intended only for the person to whom it is addressed. If you believe this e-mail was sent to you in error and the e-mail contains patient information, please contact the Partners Compliance HelpLine at http://www.partners.org/complianceline . If the e-mail was sent to you in error but does not contain patient information, please contact the sender and properly dispose of the e-mail.

4 5

pastebin service with office LAN and not exposed to the Internet
by Kaushal Shriyan 21 Jun '12

21 Jun '12

Hi, i would like to set a pastebin server within my organization in LAN is there a step by step guide to configure and install on CentOS 5.8? Regards Kaushal

2 1

how is this possible?
by Bob Hoffman 21 Jun '12

21 Jun '12

I got a spam today (from a yahoo server, surprise!) with nothing but a single link. http:// 2927755261/ I separated the http so it would not be a link in your email... suggest not going to it without proper measures. it takes you to a record search site. When I look up this number block here, http://www.ip-adress.com/ip_tracer/2927755261 it comes up with a different ip address... The ip address has no correlation to the numbers I searched for though. How is it possible to have a url that does not conform to the internet standards? Even ip addresses need 'periods' between each group of numbers.... and everything seems to require a period somewhere or the browser will get angry. At first I thought it was some kind of browser hack, but then the iptrace pulls up an ip. so how is this possible?

3 3

Bug in Latest Adobe Flash Plugin
by Keith Roberts 20 Jun '12

20 Jun '12

I'm running Centos 5.7 32 bit with Firefox 10.0.5 ESR Not sure if this has been mentioned on the list yet, but the latest version of Adobe flash-plugin 11.2.202 has a bug which causes it to hang and not play SWF files. I've been pulling my hair out trying to identify why I could not get any SWF videos to play. I finally found the answer here: https://bbs.archlinux.org/viewtopic.php?pid=1080414 I have downgraded the flash-plugin now to version 10.3.183 from rpmforge repo. It works fine now :) I've also added exclude=flash-plugin to the end of /etc/yum.conf file, to make sure this does not get upgraded again. Kind Regards, Keith Roberts ----------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------

4 7

Failing Network card
by Gregory P. Ennis 20 Jun '12

20 Jun '12

Everyone, Most of the time I am over my head in trying to troubleshoot problems. However, after reading manuals, man pages, and getting advice from this list I have been able to work my way through difficulties, and at the end, I usually have a better understanding of what 'is going on'. I can only hope this method will work on this problem too. I have been chasing a problem with a pci-e TrendNet(TEG-ECTX) gigabit card. After adding the card to a machine with a new Centos 6.2 install and naming it 'eth4' it works well for 6 to 12 hours and then fails. The failure is characterized by dropping its connection speed from 1000 to 100 while not allowing any data to flow in or out. When this happens a shutdown and reboot does not solve the problem, but shutting down and then removing the power does solve the problem. I wrote a perl script that uses the eth4 interface by pinging another machine every 60 seconds to try to figure out the relationship of the message log entries with the time of failure, and I think there is a corelation of the failure of eth4 to function with the below entry. Unfortunately, I am way over my head on this one. If any of you can help I would surely appreciate your thoughts. Some additional information that may be useful. The TrendNet card is the second TrendNet card I have used. The first card had the same symptoms, and I deduced the card was bad, and purchased another one. The symptoms are the same with the second card. Before I purchase a third card from a different manufacturer I thought I would post this to see what some of you think. This is the first pci-e card I have used; are there problems with the pci-e interfaces as opposed to pci? Do you think the motherboard could be the problem, and moving eth4 to a different slot on the motherboard would be worthwhile. Any ideas ??? Greg Ennis P.S. Here is the appropriate log entry in the /var/log/message file. Jun 20 03:08:38 Mail kernel: ------------[ cut here ]------------ Jun 20 03:08:38 Mail kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) Jun 20 03:08:38 Mail kernel: Hardware name: p7-1220 Jun 20 03:08:38 Mail kernel: NETDEV WATCHDOG: eth4 (r8169): transmit queue 0 timed out Jun 20 03:08:38 Mail kernel: Modules linked in: ipt_REDIRECT ipt_LOG xt_limit ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat xt_CHECKSUM iptable_mangle bridge autofs4 sunrpc bnx2fc cnic uio fcoe libfcoe libfc 8021q scsi_transport_fc garp stp llc scsi_tgt cpufreq_ondemand powernow_k8 freq_table mperf ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 iptable_filter ip_tables ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables ipv6 vhost_net macvtap macvlan tun kvm uinput sg btusb bluetooth rfkill microcode snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd soundcore snd_page_alloc i2c_piix4 r8169 mii ext4 mbcache jbd2 sr_mod cdrom sd_mod crc_t10dif usb_storage sdhci_pci sdhci mmc_core ahci radeon ttm drm_kms_helper drm i2c_algo_bit i2c_core dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan] Jun 20 03:08:38 Mail kernel: Pid: 0, comm: swapper Not tainted 2.6.32-220.23.1.el6.centos.plus.x86_64 #1 Jun 20 03:08:38 Mail kernel: Call Trace: Jun 20 03:08:38 Mail kernel: <IRQ> [<ffffffff81069c97>] ? warn_slowpath_common+0x87/0xc0 Jun 20 03:08:38 Mail kernel: [<ffffffff81069d86>] ? warn_slowpath_fmt +0x46/0x50 Jun 20 03:08:38 Mail kernel: [<ffffffff81069d86>] ? warn_slowpath_fmt +0x46/0x50 Jun 20 03:08:38 Mail kernel: [<ffffffff81451c0d>] ? dev_watchdog +0x26d/0x280 Jun 20 03:08:38 Mail kernel: [<ffffffff814519a0>] ? dev_watchdog +0x0/0x280 Jun 20 03:08:38 Mail kernel: [<ffffffff810efbf3>] ? trace_nowake_buffer_unlock_commit+0x43/0x60 Jun 20 03:08:38 Mail kernel: [<ffffffff814519a0>] ? dev_watchdog +0x0/0x280 Jun 20 03:08:38 Mail kernel: [<ffffffff8107cab7>] ? run_timer_softirq +0x197/0x340 Jun 20 03:08:38 Mail kernel: [<ffffffff81072291>] ? __do_softirq +0xc1/0x1d0 Jun 20 03:08:38 Mail kernel: [<ffffffff810958b0>] ? hrtimer_interrupt +0x140/0x250 Jun 20 03:08:38 Mail kernel: [<ffffffff8100c24c>] ? call_softirq +0x1c/0x30 Jun 20 03:08:38 Mail kernel: [<ffffffff8100de85>] ? do_softirq+0x65/0xa0 Jun 20 03:08:38 Mail kernel: [<ffffffff81072075>] ? irq_exit+0x85/0x90 Jun 20 03:08:38 Mail kernel: [<ffffffff814fc550>] ? smp_apic_timer_interrupt+0x70/0x9b Jun 20 03:08:38 Mail kernel: [<ffffffff8100bc13>] ? apic_timer_interrupt +0x13/0x20 Jun 20 03:08:38 Mail kernel: <EOI> [<ffffffff812f5f9c>] ? acpi_idle_enter_simple+0x114/0x14b Jun 20 03:08:38 Mail kernel: [<ffffffff812f5f98>] ? acpi_idle_enter_simple+0x110/0x14b Jun 20 03:08:38 Mail kernel: [<ffffffff814014a7>] ? cpuidle_idle_call +0xa7/0x140 Jun 20 03:08:38 Mail kernel: [<ffffffff81009e06>] ? cpu_idle+0xb6/0x110 Jun 20 03:08:38 Mail kernel: [<ffffffff814ed686>] ? start_secondary +0x202/0x245 Jun 20 03:08:38 Mail kernel: ---[ end trace 24f15998c117ac8f ]--- Jun 20 03:08:38 Mail kernel: r8169 0000:01:00.0: eth4: link up Jun 20 03:08:39 Mail abrtd: Directory 'oops-2012-06-20-03:08:39-2420-0' creation detected Jun 20 03:08:39 Mail abrt-dump-oops: Reported 1 kernel oopses to Abrt Jun 20 03:08:39 Mail abrtd: Can't open file '/var/spool/abrt/oops-2012-06-20-03:08:39-2420-0/uid': No such file or directory

7 21

CentOS-5.8 - Problem booting remote host
by James B. Byrne 20 Jun '12

20 Jun '12

Kernel 2.6.18-308.8.2.el5 I recently experienced an odd problem with a host at our warm-site location. The facility we use suffered an hvac failure during elevated ambient temperatures (30C+) on Monday past and the equipment room reportedly cooked for some hours. It was sufficient that our equipment shutdown. In all probability this was due to an over-temp condition since the systems are all powered from a UPS but possibly there was an extended power out instead. Whatever the cause one of our hosts did not restart subsequent to this shutdown. Which condition required my presence on site. When it was powered up today in situ the host's console would display the CentOS splash screen with the message [press any key to enter menu] and then the message "Booting in ....4 seconds" However, the countdown timer never changed from the initial value and the restart never took place. When I entered the console menu and selected the most recent kernel available the system booted normally. It had to do a lot of disk remediation on the first go through but all that completed without untoward difficulty. Subsequent shutdowns displayed the same behaviour. The splash screen displayed, the boot timer message showed, and then nothing changed thereafter unless and until I entered the boot menu. Selecting the default kernel in the boot menu allowed the restart to continue, this time without any unusual reports. I repeated this process several times more just to confirm that this was not a transient effect. Each time operator intervention from the console was required to restart the system but once this was done no further problems were noted. I repeated the process and rebooted using each of the older kernels present. As far as I could determine there was nothing wrong with any of the boot images once past the auto-select segment of the boot process. I then went into /boot/grub.conf and changed the default boot from index 0 to index 1 so as to use the previous kernel. Following this configuration change thereafter the system restarted normally without operator intervention. The problem kernel was installed from Updates on June 13 and was running from that date as shown in the log entries below. This was a remote restart and evidently it completed without any problem. Jun 13 10:15:59 inet04 shutdown[19274]: shutting down for system reboot . . . Jun 13 10:16:25 inet04 exiting on signal 15 Jun 13 10:18:35 inet04 syslogd 1.4.1: restart. Jun 13 10:18:35 inet04 kernel: klogd 1.4.1, log source = /proc/kmsg started. Jun 13 10:18:35 inet04 kernel: Linux version 2.6.18-308.8.2.el5 (mockbuild@build er10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-52)) #1 SMP Tue Jun 12 09:57:26 EDT 2012 The current syslog shows repeated restarts commencing at 18:12 on Jun 17 and ending at 19:08, after which the system no longer records any activity whatsoever until I restarted it manually earlier today. These two syslogd entries are adjacent in /var/log/messages Jun 18 19:08:48 inet04 kernel: PROBE_BLACKIST: IN=eth0 OUT= MAC=00:1c:c4:a1:66:1e:00:18:73:e8:35:a1:08:00 SRC=126.67.126.141 DST=209.47.176.105 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=56792 DF PROTO=TCP SPT=2153 DPT=445 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 20 12:11:31 inet04 ntpd[2480]: time reset +147721.498633 s Have any of you ever experienced anything like this? Does anyone have any idea what might have caused the corruption of the restart mechanism or where the problem might be? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Swap Partition in CentOS 5.8
by Kaushal Shriyan 20 Jun '12

20 Jun '12

Hi, Any recommendation to set SWAP Partition in CentOS 5.8 on 32GB Physical Memory Box and also how does swap partition is being used and any utility to know when was swap partition being used. Regards, Kaushal

6 5

CentOS-announce Digest, Vol 88, Issue 12
by centos-announce-request＠centos.org 20 Jun '12

20 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:1016 CentOS 5 e2fsprogs Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 20 Jun 2012 11:25:09 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1016 CentOS 5 e2fsprogs Update To: centos-announce(a)centos.org Message-ID: <20120620112509.GA30189(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1016 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1016.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9c15c4d62e72295c6ab4535879cf96cc0f6e27d634da1ddb71ebe67ecda429f9 e2fsprogs-1.39-34.el5_8.1.i386.rpm 672eb3efec3fc7b17d8a62c79e20040ffbe842d4aa722bb45c08fb87ed75d0d5 e2fsprogs-devel-1.39-34.el5_8.1.i386.rpm 6ba4bfb5bf2a363a23d7362520256224cff69f12dcbbe4c462d3d6886e0bdf15 e2fsprogs-libs-1.39-34.el5_8.1.i386.rpm 530384374a5f0d080cc021e9efe7a2950ab115da353ff7c9105cd94c92557b76 uuidd-1.39-34.el5_8.1.i386.rpm x86_64: 3101c862faeb6949ab554deb5111ee4c3739daa6b5b188971f4bdbb3a99c73f1 e2fsprogs-1.39-34.el5_8.1.x86_64.rpm 672eb3efec3fc7b17d8a62c79e20040ffbe842d4aa722bb45c08fb87ed75d0d5 e2fsprogs-devel-1.39-34.el5_8.1.i386.rpm dabd937633eaaa2fe0774f8ab24e10d3a49073015f26342f3f9cf784a8b82185 e2fsprogs-devel-1.39-34.el5_8.1.x86_64.rpm 6ba4bfb5bf2a363a23d7362520256224cff69f12dcbbe4c462d3d6886e0bdf15 e2fsprogs-libs-1.39-34.el5_8.1.i386.rpm f18641fe31e827c7a8c16c93a5605f6f9f1f2e3e086dfe759d932dedc0f4b713 e2fsprogs-libs-1.39-34.el5_8.1.x86_64.rpm 1992be1ba00e41ce4e8431c4de4800e1e264999c5254a3c777f9ffa5d18a838f uuidd-1.39-34.el5_8.1.x86_64.rpm Source: fbde83f866070d22a711fd5b94bb14b8ca44d2e4e9bbb9ead4563fca57ff9505 e2fsprogs-1.39-34.el5_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 12 ***********************************************

1 0

Memory recognition in 6.2
by Hugh E Cruickshank 20 Jun '12

20 Jun '12

Hi All: I have an HP DL380G5 server which I am loading CentOS 6.2 on and it does not appear to recognize all of the RAM installed on the server. The BIOS is reporting 26GB however top is reporting: Mem: 15720140k total, 418988k used, 15301152k free, 30256k buffers Swap: 17956856k total, 0k used, 17956856k free, 135536k cached and free is reporting: total used free shared buffers cached Mem: 15720140 418848 15301292 0 30256 135536 -/+ buffers/cache: 253056 15467084 Swap: 17956856 0 17956856 I have tried adding the mem= parameter to the /boot/grub/grub.conf file as in: title CentOS (2.6.32-220.17.1.el6.i686) root (hd0,0) kernel /vmlinuz-2.6.32-220.17.1.el6.i686 ro [SNIP] initrd /initramfs-2.6.32-220.17.1.el6.i686.img mem=26624M but this has not appeared to work. Any suggestions would be gratefully appreciated. TIA Regards, Hugh -- Hugh E Cruickshank, Forward Software, www.forward-software.com

6 14

Deleting Files
by Matt 20 Jun '12

20 Jun '12

I want to safely delete all files in a certain directory that are exactly 32 characters long. This is on CentOS 5.x. How would I do that?

5 5

RHEL6.3 is on rhn
by Rainer Traut 20 Jun '12

20 Jun '12

Just fyi, since yesterday evening RHEL 6.3 is available on rhn, but I see no announcement yet. [root@rhel6-test ~]# uname -a Linux rhel6-test 2.6.32-279.el6.x86_64 #1 SMP Wed Jun 13 18:24:36 EDT 2012 x86_64 x86_64 x86_64 GNU/Linux [root@rhel6-test ~]# cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.3 (Santiago) Rainer

1 0

PMA attacks
by m.roth＠5-cent.us 20 Jun '12

20 Jun '12

It appears to be a low-level attack, not so frequent as to be banned permanently, just a number of times a day. I did google on this, and I gather it's looking for phpmyadmin. We've been getting one from one specific network in Russia for weeks Here are more information about 91.201.64.24: [Querying whois.ripe.net] [whois.ripe.net] <snip> % Information related to '91.201.64.0 - 91.201.67.255' inetnum: 91.201.64.0 - 91.201.67.255 netname: Donekoserv descr: DonEkoService Ltd country: RU <snip> But now I'm seeing the same from Azerbaijan, and France, and elsewhere. Two questions: first, are other folks seeing this? and second, I can't imagine malware this stupid, to keep hitting the same sites over and over when it's not found, rather than bad password or user, so I'm wondering if this could be a targetting vector for an upcoming serious attack using another vector. Opinions? mark

4 3

My ROOT PASSWORD Is GETTING RESET After EVERY REBOOT
by chiong lawrence 19 Jun '12

19 Jun '12

Hello there, I'm using CentOS v6.2 x86_64bit. I'm confuse and can't figured-it-out after I run my KVM virtual machine the root password is getting RESET after every reboot of my VM. Any help is very much appreciated. Thank you. ** *Please consider the environment before printing this email.*

1 0

Re: [CentOS] Resizing est4 filesystem while mounted
by Jeff Boyce 19 Jun '12

19 Jun '12

Replying to the daily digest, with my response at the bottom. > Message: 18 > Date: Mon, 18 Jun 2012 22:28:31 +0200 > From: Dennis Jacobfeuerborn <dennisml(a)conversis.de> > Subject: Re: [CentOS] Resizing est4 filesystem while mounted > To: centos(a)centos.org > Message-ID: <4FDF8F6F.8030300(a)conversis.de> > Content-Type: text/plain; charset=ISO-8859-1 > > On 06/18/2012 10:09 PM, Jeff Boyce wrote: >> Replying to the daily digest, with my response at the bottom. >> >> >> >>> Message: 13 >>> Date: Fri, 15 Jun 2012 12:22:08 -0700 >>> From: Ray Van Dolson <rayvd(a)bludgeon.org> >>> Subject: Re: [CentOS] Resizing est4 filesystem while mounted >>> To: centos(a)centos.org >>> Message-ID: <20120615192207.GA23689(a)bludgeon.org> >>> Content-Type: text/plain; charset=us-ascii >>> >>> On Fri, Jun 15, 2012 at 12:10:09PM -0700, Jeff Boyce wrote: >>>> Greetings - >>>> >>>> I had a logical volume that was running out of space on a virtual >>>> machine. >>>> I successfully expanded the LV using lvextend, and lvdisplay shows that >>>> it >>>> has been expanded. Then I went to expand the filesystem to fill the new >>>> space (# resize2fs -p /dev/vde1) and I get the results that the >>>> filesystem >>>> is already xx blocks long, nothing to do. If I do a # df -h, I can see >>>> that >>>> the filesystem has not been extended. I could kick the users off the >>>> VM, >>>> reboot the VM using a GParted live CD and extend the filesystem that >>>> way, >>>> but I thought that it was possible to do this live and mounted? The RH >>>> docs >>>> say this is possible; the man page for resize2fs also says it is >>>> possible >>>> with ext4. What am I missing here? This is a Centos 6.2 VM with an ext4 >>>> filesystem. The logical volumes are setup on the host system which is >>>> also >>>> a Centos 6.2 system. >>> >>> Try resize4fs (assuming your FS is ext4). >>> >>> Ray >> >> Well, I have never seen a reference to resize4fs before (and yes my FS is >> ext4). It is not on my Centos 6.2 system, and doing a little searching >> through repositories for that specifically, or e4fsprogs, and I can't >> find >> it anywhere to even try it. Any google reference seems to point back to >> resize2fs. I ended up booting a live SystemRescueCD and using GParted >> via >> the GUI. My notes indicate that is what I had done previously also. I >> am >> still stumped, everything that I have read indicates that resize2fs can >> do a >> live resizing on ext4 file systems. Can anybody confirm or deny this? >> Is >> the reason I can't do this because it is on an LVM logical volume? >> Thanks. > > Please post some details about your storage topology. Without this > information its not really possible to be sure what is going on. > resizefs cannot work as long as the underlying layers don't see any change > in size and you didn't seem to look for that. > > Regards, > Dennis I provided some of that information in my original post, but if you can help explain why I couldn't seem to resize the file system while mounted here is more information. Host system is Centos 6.2 on a Dell PE T610 with hardware raid on a PERC H700. Raid 5 is setup across three disks with a fourth hot spare. I have created a volume group within the raid 5 encompassing most of my drive space. Within the VG I have created numerous logical volumes that are assigned to specific systems. Volume Group: vg_mei Logical Volumes: lv_earthroot lv_earthswap lv_earthvar lv_sequoiaroot lv_sequoiaswap lv_sequoiavar lv_sequoiahome lv_sequoiaecosystem Earth is my host system and Sequoia is one of the guest systems. lv_sequoiaecosystem is the space dedicated to our Samba server and is the LV that I was expanding to make more space available to the rest of the staff. I had successfully extended lv_sequoiaecosystem using the following command from root on earth (lvextend -L+50G /dev/vg_mei/lv_sequoiaecosystem). Issuing the command (lvdisplay /dev/vg_mei/lv_sequoiaecosystem) following this showed that the LV was successfully extended from 100 to 150 GB. I then logged onto sequoia as root and issued a df -h to determine which device needed the file system to be resized (/dev/vde1). The output below is current, after I resized the filesystem using GParted. [root@sequoia ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/vda2 4.5G 2.5G 1.8G 59% / tmpfs 1004M 112K 1004M 1% /dev/shm /dev/vda1 485M 55M 406M 12% /boot /dev/vde1 148G 85G 56G 61% /ecosystem /dev/vdd1 20G 1.3G 18G 7% /home /dev/vdc1 2.0G 266M 1.7G 14% /var Then from root on sequoia I issued the command (resize2fs -p /dev/vde1) and got back the result that the filesystem is already 26214144 blocks long, nothing to do. That is when I posted my first question about not being able to resize a live mounted filesystem. Is that enough information for your question, or is there something that I am not providing? Thanks. Jeff

1 0

CentOS-announce Digest, Vol 88, Issue 11
by centos-announce-request＠centos.org 19 Jun '12

19 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0744 Moderate CentOS 6 python Update (Johnny Hughes) 2. CESA-2012:0743 Important CentOS 6 kernel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 18 Jun 2012 16:35:36 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0744 Moderate CentOS 6 python Update To: centos-announce(a)centos.org Message-ID: <20120618163536.GA1946(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0744 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0744.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 68b40bb24637e5151d56ff980b14ede5db07951b6325d9a54ead3498527e65fd python-2.6.6-29.el6_2.2.i686.rpm 8bcda8f75bde9eae4b89b264a28be6596a5a0bbe74caa150c745e0c517f59533 python-devel-2.6.6-29.el6_2.2.i686.rpm a97bcae9e9764c21665fd4b43f3ef67897b8aa336c997078b5b079df1a3f458b python-libs-2.6.6-29.el6_2.2.i686.rpm 0d659305707e6e7eabbdbf14b06367a4c2220c7c8446469d02851d1d9291a25d python-test-2.6.6-29.el6_2.2.i686.rpm d45f3d643582177adf242981bf66c89a8bcdf048bd64cdfceed6248a5e07364a python-tools-2.6.6-29.el6_2.2.i686.rpm 5f5c9798bf941d3061a159484a1816b29cef3928404eda6da69ceb661d6439d3 tkinter-2.6.6-29.el6_2.2.i686.rpm x86_64: 68b40bb24637e5151d56ff980b14ede5db07951b6325d9a54ead3498527e65fd python-2.6.6-29.el6_2.2.i686.rpm 9d5f64d06c7cc75c166f635bd8d0a842d999d5a1f46ba51eb57c2b4ce3ac09f1 python-2.6.6-29.el6_2.2.x86_64.rpm 8bcda8f75bde9eae4b89b264a28be6596a5a0bbe74caa150c745e0c517f59533 python-devel-2.6.6-29.el6_2.2.i686.rpm cd2eeb31d0c9795045d7fb38abe545193393af71257d98e382ca2a3c5d314e51 python-devel-2.6.6-29.el6_2.2.x86_64.rpm a97bcae9e9764c21665fd4b43f3ef67897b8aa336c997078b5b079df1a3f458b python-libs-2.6.6-29.el6_2.2.i686.rpm 901dd463ec89fb78dfc7f67e23f3d045422fd2d5a83d4d2bfa0ec4ea4aa4f929 python-libs-2.6.6-29.el6_2.2.x86_64.rpm de7ddc6b116cd5b88aabb4d6b00d2f41bc0f95aa247c6e21790f59e78c58464b python-test-2.6.6-29.el6_2.2.x86_64.rpm 00a7b81b38b804b71667f45570c54c5910c4d53c08aeb8072d21d4a381c5f4ac python-tools-2.6.6-29.el6_2.2.x86_64.rpm 98339b5d758e08f8e9b6753c403da3879250b2d474197727cb417263f902efdf tkinter-2.6.6-29.el6_2.2.x86_64.rpm Source: e6e6fdbb082ebe1240c55739e9ba357a86fd37a59b757fa51faf174e18526c96 python-2.6.6-29.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 19 Jun 2012 10:27:24 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0743 Important CentOS 6 kernel Update To: centos-announce(a)centos.org Message-ID: <20120619102724.GA20582(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0743 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0743.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ea56dcbea54d7249587d63c247dd5cda34b911112a3cef1b281c82441400ef71 kernel-2.6.32-220.23.1.el6.i686.rpm e47fb9d96ad61173552f60a5e10bd6a81a30f1a3b35327bf8dbabfed7616e5e2 kernel-debug-2.6.32-220.23.1.el6.i686.rpm c94d9f48253cdf655c88366fd7d2341e4d3247c77f266a5a14abf372a4cefc03 kernel-debug-devel-2.6.32-220.23.1.el6.i686.rpm 0e269b17567c91f68f9b8926de52c331515f71efb2575a42f297a561ec9a1943 kernel-devel-2.6.32-220.23.1.el6.i686.rpm c1a415fcb071c2eb3f0337d55063590a3d45a2185a253b3ab8092569e24970cb kernel-doc-2.6.32-220.23.1.el6.noarch.rpm ae35c0d77e4968b882a4f419ca00c87171ae23f909f0ddefb61316e3c33b6676 kernel-firmware-2.6.32-220.23.1.el6.noarch.rpm 5c98cd2662d7a7350ce19c95f5666c0bd8db7a7a1f85a4aac5eec89cdd6d3b50 kernel-headers-2.6.32-220.23.1.el6.i686.rpm 766ad9e000c8e6d65a09352bb98956eaa0e92808de2e0621df05f6f6136fcfd8 perf-2.6.32-220.23.1.el6.i686.rpm adb363026b40404f4a6e445b6d247787a51f4c270e9a477a5704bbb1b9bdacfd python-perf-2.6.32-220.23.1.el6.i686.rpm x86_64: 2d950cad03e58fbe41b18ea9f676e9f8035c50e1110e35d7ade84357d531b0b0 kernel-2.6.32-220.23.1.el6.x86_64.rpm cbdc58c22ea03c12a2a06c56d448d3fabeb88cb0e807b801b8f7366e7dc5753d kernel-debug-2.6.32-220.23.1.el6.x86_64.rpm 8d4a7488b3cf9797c4f0a2770a2b6545eebbd8db2f3675e8d72c47f2566792df kernel-debug-devel-2.6.32-220.23.1.el6.x86_64.rpm e1a91610aef2da26f16df08e67e7103c939e85b44b4161cc0ca19560059deb62 kernel-devel-2.6.32-220.23.1.el6.x86_64.rpm 5a612f281c420a93923e2c5d97af77dccf854838abe8e7b4e6e720a8e6416074 kernel-doc-2.6.32-220.23.1.el6.noarch.rpm 48310089aca9909efad1c362da7903e5df11b1d4483d2b6dc582c7c6f4094947 kernel-firmware-2.6.32-220.23.1.el6.noarch.rpm 9f57462f7fecf0b5e6f2e7fcb5280bd36b147e50193ed471ea174c4d173cea91 kernel-headers-2.6.32-220.23.1.el6.x86_64.rpm 56fc104e5deeece73a857a9b45c11a39e55142db0dfe3b35fc04f42380e6f33b perf-2.6.32-220.23.1.el6.x86_64.rpm 35d3b8d75b5e913692f1db7c6b255232bb906feb5b737251eeb8f1f36713b8fd python-perf-2.6.32-220.23.1.el6.x86_64.rpm Source: ead5c509c3877ce23787bf2cafb47c31cf9c1dfb39976a372d5f36f1953a710c kernel-2.6.32-220.23.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 11 ***********************************************

1 0

Configure Kickstart
by jiten jha 19 Jun '12

19 Jun '12

Dear Friend , I want you help to configure kickstart on my centos5.4 server . I search on google and found so many way to configure it even on centos web site also. But It is not working and i am know so I can not understand it. So please send me link that i can understand and configure it. -- Regards Jitendra Jha

3 2

we want to delete all files in a folder except the files with the most recent date
by maverh＠telenet.be 19 Jun '12

19 Jun '12

Hi, We want to delete all files in a folder except the files with the most recent date example ls -l jun 3 10:45 file1 jun 3 12:20 file2 jun 2 10:20 file3 jun 2 05:00 file4 jun 1 12:00 file5 jun 1 10:00 file6 jun2 en jun1 must be deleted regards,

3 2

What would cause dbus-daemon to fork() bomb?
by Robert Heller 19 Jun '12

19 Jun '12

For some reason, my system (64-bit, CentOS 5.8) has started to have a strange problem: dbus-daemon fork() bombing, typically overnight. The machine has been fine for months and months. What could cause this? This is my home desktop (it is also a server on my lan: dhcp, ldap, dns, web, etc.). -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

1 0

vlc?
by m.roth＠5-cent.us 19 Jun '12

19 Jun '12

Hey, folks, a co-worker raves that vlc is the bestestplaysthemostformats media player there is, including being able to resize videos. I see it's only over on repoforge for CentOS, but trying to install it at home (I'm running 5.8, 32-bit), it wants about 30 or more dependencies, and one or two of them, of course, have conflicts. Has anyone installed it in a 5.x environment? If so, what did you do? mark

4 5

replace string with sed but not the first one
by maverh＠telenet.be 19 Jun '12

19 Jun '12

Hi, We have a the following file [ip-map] # Unchanged IP addresses: # Please review default IP addresses mapping below: 192.168.1.10 shared -> 192.168.123.6 shared [namexx] 192.168.1.10 naam 192.168.1.10 We want to replace 192.168.1.10 to a other string but i don't want to change te first one.

2 2

Rhythmbox Replacement
by Mark LaPierre 19 Jun '12

19 Jun '12

Hey Y'all, What application replaces the functionality of Rhythmbox for Cent OS 6.2? In particular I am interested in handling podcast feeds. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

5 6

Firefox 10.0.5 will not run Java plugin
by James B. Byrne 18 Jun '12

18 Jun '12

How do I get Firefox 10.0.5 to run Java-1.7.0 on Cent)S-5.8? Firefox appears to have had Java deliberately disabled by Mozilla. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Best way to duplicate a live Centos 5 server?
by Cal Sawyer 18 Jun '12

18 Jun '12

From: Les Mikesell <lesmikesell(a)gmail.com> Subject: Re: [CentOS] Best way to duplicate a live Centos 5 server? To: CentOS mailing list <centos(a)centos.org> On Fri, Jun 8, 2012 at 12:04 PM, Scott Silva <ssilva(a)sgvwater.com> wrote: >> Am I missing something glaringly obvious here, or is the only way I'm >> going be able to migrate is to shutdown the C5 server for a few hours >> while duping the old drives? Would greatly appreciate any pointers how >> best to do this. > You could always rsync the old server to the new one... a few runs will get > 99% of the files, and a quick run after the shutdown can get the rest... Have > a tar file ready of the needed config changes ready and untar it and start up > the new system... An interesting variation on this is to use 'ReaR' to back up and restore the machine, essentially cloning it but give the copy a different IP address as you bring it up. Then when the clone is close to ready to take over, shut down your apps for the time it takes a final rsync to fix up the differences (in the data areas only - avoid /etc/, (etc.), then switch the IP. ReaR is in active development now and is very usable. It is a set of shell scripts designed to run live backups that are capable of restoring to bare metal. It makes a new boot iso with tools from the running system to reconstruct the filesystem (including lvm/raid, etc.) and restore on top of that. Several backup methods are supported but tar to an nfs location is probably the easiest to set up. With a small amount of extra work you can tweak the filesystem layout, etc. if you don't want an exact clone. With hardware differences you might need to tweak modules and build a new initrd, too. ReaR is packaged in EPEL as rear. ReaR has suddenly become very interesting to me, probably explaining why it utterly fails to work properly (for me).I'm using 1.13 to pull a USB-based recovery image, but there's an error in the backup/NETFS/default/50_make_backup.sh script that doesn't mount the USB device after the mkrecovery step, so subsequent tar fails on write to the non-existent mountpoint. I fixed that, but on recovery it fails to mount the necessary directories on the restore drive as well, so "rear recover" quickly bombs out. Is anyone having any success actually using ReaR on CentOS 6.x? - csawyer

2 1

Nagios 3.4.1 on CentOS 5.8
by Kaushal Shriyan 18 Jun '12

18 Jun '12

Hi I am trying to build nagios rpm from nagios.spec file on CentOS 5.8. I am getting into issues. nagios.spec http://fpaste.org/crOs/ rpmbuild -ba nagios.spec Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.36485 + umask 022 + cd /usr/src/redhat/BUILD + cd /usr/src/redhat/BUILD + rm -rf nagios-3.4.1 + /bin/gzip -dc /usr/src/redhat/SOURCES/nagios-3.4.1.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd nagios-3.4.1 /var/tmp/rpm-tmp.36485: line 31: cd: nagios-3.4.1: No such file or directory error: Bad exit status from /var/tmp/rpm-tmp.36485 (%prep) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.36485 (%prep) http://fpaste.org/IYHQ/ which mentions about /var/tmp/rpm-tmp.36485 Any clue? Regards Kaushal

3 6

CentOS-announce Digest, Vol 88, Issue 10
by centos-announce-request＠centos.org 18 Jun '12

18 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0745 Moderate CentOS 5 python Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 18 Jun 2012 13:11:45 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0745 Moderate CentOS 5 python Update To: centos-announce(a)centos.org Message-ID: <20120618131145.GA23757(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0745 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0745.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8732b6917bb703e83bcedba44db574bb5c08b6fdc6078b3cc85a2a2c8764ab1e python-2.4.3-46.el5_8.2.i386.rpm 686cf6c90f524d21a9ab6726d92a665728be79e405b0436d68c4ee1e7adfbb8e python-devel-2.4.3-46.el5_8.2.i386.rpm 5ac75df1c01468be5adb94dd75c1bc72ee899a2cf4f93a33b42bf90370bc9aca python-libs-2.4.3-46.el5_8.2.i386.rpm 64ab9d7cd165684ee8bace4ad12b3f2b44cc008760d8fdfb3a504f2335e8a18a python-tools-2.4.3-46.el5_8.2.i386.rpm c36a78764e6624defd97452951b957ec8c85177e340baa52ea74dcca15912987 tkinter-2.4.3-46.el5_8.2.i386.rpm x86_64: 75a516ec99cfb3bfbeb2ed6289b91aca405aee98225d68b7f4087445d1b734d5 python-2.4.3-46.el5_8.2.x86_64.rpm 686cf6c90f524d21a9ab6726d92a665728be79e405b0436d68c4ee1e7adfbb8e python-devel-2.4.3-46.el5_8.2.i386.rpm 4566def644dc427f74e946a767e11d2bed86cc9150a2b38a7234ab11eb599e29 python-devel-2.4.3-46.el5_8.2.x86_64.rpm a99ed59ad78084a5bbe6fbaf811a428618529df9cd391bfb5420b66a6d4b9752 python-libs-2.4.3-46.el5_8.2.x86_64.rpm 532ebf0691f63c3f835ed394928790b8aa2af6ad1227ae248a87736cf38ea443 python-tools-2.4.3-46.el5_8.2.x86_64.rpm 282c9c7a70c4bd1f9b9da1becc280784839852c464814fcd8c91e0606b23bab0 tkinter-2.4.3-46.el5_8.2.x86_64.rpm Source: c0a95526d16a245d9b0537d7ff7b09225c1709d892885ff3489b58dad4661280 python-2.4.3-46.el5_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 10 ***********************************************

1 0

Update on spam, postfix, fail2ban, centos 6
by Bob Hoffman 18 Jun '12

18 Jun '12

I have been using centos 6 in a virtualized system for a few months now. Took a while to batten down the hatches with postfix, rbls, and to use fail2ban correctly. The mailserver for my website(s) are located on the http server as well..an 'all in one' server. DNS servers are separated. My two sites, and their emails addresses (1 for each) have been around for 10 and 15 years respectively. One site was a business site, one was news and politics...both were very busy at one point, thus 'on the radar' of hackers and spammers. I decided to see what I could do with my system to prevent hacks and spams in regards to email and brute force attacks on all systems except for my web apps (which are down right now and in development). Fail2ban is really good at the brute force, assuming it is just one ip and not all attempts are at once. Thus it works on script kiddies but I do not think it would work well on a dedicated hack attempt by a serious individual or group. But I am using fail2ban to auto ban ips regarding spam. As far as spam, very little gets through now. A few a day. Between blacklists, my own blacklist of commercial spammers, stringent settings of postfix the actual spam that gets through is small. But it still gets through. I was using fail2ban on attempts that numbered 3 or more that ended in 5xx replies from my server. I would block for 10 minutes. I found I was blocking about 800 ips a day on one server, half that on the other. I did notice that there were a ton of attempts that were under 3. Lots of 2's and a ton of 1's. So a couple weeks ago (not sure when I started) I decided to try blocking any 5xx reply by IP. This is a private server and just my own mail comes to it, so I am not worried too much about false positives or other effects. ------------------------------------------------ So what happened? The ips jumped up considerably, to 1,500 to 1,700 a day banned on one server, about 1000 on the other. What is interesting in those numbers is they are constant. Every week day I can count on about 1500 banned ips on one, 1000 on the other, give or take. What really changed was the mail servers sending mail that got through the restrictions, but were sending to non existent addresses. A majority (like 80%) were from yahoo. This was a sudden change. It was not like this before. Yahoo spammed like crazy. And they got the mailserver ip banned. 10 to 20 emails a day from yahoo mail servers, going to non existent emails. Where before it would be one or two. The yahoo mails got bigger every day until they started waning (probably due to ip banning). The mail that actually got through all of this was 50% free mail (yahoo, msn/live, some aol, etc) Yahoo being the biggest. Another thing I noticed. When I started adding domains to my 'blacklist of commercial senders', legitimate or not, I started to get yahoo mails with references inside the mails to many of the illegitimate sites that were coming from the UCE's I had blocked. It is quite interesting to watch this process. More interesting that no matter how strict or lax I make the system there will be the same number of attempted mails sent to my server. (give or take a few hundred). If I unban all the ips, which I did once, there was a one day bump up, then it leveled off to the same amount of individual attemtps (not counting the same attempt being tried again). I have 35,000 ips blocked right now and nothing changed...except yahoo spam. Spamassassin I use, but only for level 10 or more spam...it is deleted. I found all of these over the last few months to be the kind with attachments, probably viruses. ------------------------------------------------------------------------- What Have I learned? I have learned a large number of attempts are from ISP's and not websites. I have learned that ISP's will not do anything at all, ever, about this. (someone trying to send 1 million mails a day might be suspicious, but they ignore it) I have learned a large majority of 'hosts' are technically challenged small business owners who have no sys admin knowledge. Those hosts spew spam bots I have learned the chinese have really taken a liking to play with my server, possibly for training purposes. My server is a hit in beijing and some other province I cannot spell. ---------------------------------------------------------- What can be done? Not much. If the isp's do nothing, and the technology is not available to datacenters and hosts, there is not much I can do at all. Complaining to an isp or host would take 24 hours a day of messages, 99% which would be ignored. There is a consideration for the scumbags that call themselves legitimate mailers, like vocus.com. They are in the US, as I am. I am considering going to small claims for some of these spam attempts. I cannot use the can-spam act, since they are technically not in violation. However, I could use the logs and attempts, copies of emails and phone calls telling them to stop, and sue them for a small dedicated denial of service attack, use of my bandwidth, harassment of my server and business. Would I win? Probably. Would I ever get money from them? Most likely not.

5 13

Cannot set alias IP address
by Nikolaos Milas 18 Jun '12

18 Jun '12

Hi, I have an eth0 interface (it's a CentOS 6 guest VM on a KVM host) which is configured as follows (see below) with a primary public IP address of xxx.xxx.xxx.130 (which works fine). I cannot set an alias IP address. I want eth0 to also use another IP address (xxx.xxx.xxx.131, so I create /etc/sysconfig/network-scripts/ifcfg-eth0:1. Then: # service network restart Shutting down interface eth0: Device state: 3 (disconnected) [ OK ] Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Active connection state: activated Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/2 [ OK ] # ping xxx.xxx.xxx.130 PING xxx.xxx.xxx.130 (xxx.xxx.xxx.130) 56(84) bytes of data. 64 bytes from xxx.xxx.xxx.130: icmp_seq=1 ttl=64 time=0.078 ms 64 bytes from xxx.xxx.xxx.130: icmp_seq=2 ttl=64 time=0.044 ms ^C --- xxx.xxx.xxx.130 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1767ms rtt min/avg/max/mdev = 0.044/0.061/0.078/0.017 ms # ping xxx.xxx.xxx.131 PING xxx.xxx.xxx.131 (xxx.xxx.xxx.131) 56(84) bytes of data. From xxx.xxx.xxx.130 icmp_seq=2 Destination Host Unreachable If I try: # ifup eth0:1 Active connection state: activating Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/3 state: activated Connection activated then I totally lose network connectivity. What am I doing wrong? Please advise! -------------------------------------------------------------- eth0 -------------------------------------------------------------- DEVICE="eth0" NM_CONTROLLED="yes" ONBOOT="yes" HWADDR="DE:DB:EE:CD:8E:03" TYPE=Ethernet BOOTPROTO=static GATEWAY=xxx.xxx.xxx.129 NETWORK=xxx.xxx.xxx.128 IPADDR=xxx.xxx.xxx.130 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 IPV6INIT=yes IPV6_AUTOCONF=no IPV6ADDR=2001:xxxx:xxxx:xxxx::130 IPV6_DEFAULTGW=2001:xxxx:xxxx:14::1 DNS1=xxx.xxx.xxx.211 DNS2=xxx.xxx.xxx.210 DNS3=2001:xxxx:xxxx:xxxx::210 IPV4_FAILURE_FATAL=no IPV6_FAILURE_FATAL=no DOMAIN="example.com example.com" -------------------------------------------------------------- I've tried: -------------------------------------------------------------- eth0:1 -------------------------------------------------------------- DEVICE="eth0:1" ONPARENT="yes" BOOTPROTO=none IPADDR=xxx.xxx.xxx.131 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 -------------------------------------------------------------- and: -------------------------------------------------------------- eth0:1 -------------------------------------------------------------- DEVICE="eth0:1" NM_CONTROLLED="yes" ONBOOT="yes" HWADDR="DE:DB:EE:CD:8E:03" TYPE=Ethernet BOOTPROTO=static ONPARENT="yes" GATEWAY=xxx.xxx.xxx.129 NETWORK=xxx.xxx.xxx.128 IPADDR=xxx.xxx.xxx.131 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 IPV6INIT=yes IPV6_AUTOCONF=no IPV6ADDR=2001:xxxx:xxxx:xxxx::131 IPV6_DEFAULTGW=2001:xxxx:xxxx:xxxx::1 DNS1=xxxx.xxxx.xxxx.211 DNS2=xxxx.xxxx.xxxx.210 DNS3=2001:xxxx:xxxx:xxxx::210 IPV4_FAILURE_FATAL=no IPV6_FAILURE_FATAL=no DOMAIN="example.com example.com" -------------------------------------------------------------- Thanks, Nick

2 6

Configure KVM
by jiten jha 18 Jun '12

18 Jun '12

Dear Friends, How to configure KVM in centos 5.6. Can you send me documentation with all configuration and process. -- Regards Jitendra Jha

4 4

10gb :: ixgbe :: ssl problems?
by Adrian Sevcenco 18 Jun '12

18 Jun '12

Hi! Did anyone encountered some ssl transaction problems with latest version of ixgbe? i had some very strange problem with nodes with private ip (the server with 10 gb interface was masquerading the nodes behind a switch with 10gb and 1 gb interfaces) i used the latest drivers and the ssl conection could be made .. as soon as i used the 2.6.18-308.8.1.el5 driver (3.4.8-k) the problem vanished... What am i missing? how can a network driver have effect on ssl transactions? Thank you for any info ..i feel like in twilight zone :( Adrian

1 0

centos 6.2 mirror no yum grouplist
by Natxo Asenjo 18 Jun '12

18 Jun '12

hi, I have created a 6.2 local repository in our lan and it works fine for packages. However, when trying to use the yum groups, I get this: # yum grouplist Loaded plugins: fastestmirror, security Setting up Group Process Loading mirror speeds from cached hostfile Error: No group data available for configured repositories I have tried downloading one comps.xml file (I have tried both with http://mirror.centos.org/centos/6.2/os/i386/repodata/e9226c33fcd943a60c7a63… with http://mirror.centos.org/centos/6.2/os/i386/repodata/cffddde71947e5fe5a7ce5…) and rebuilding the repo with createrepo -g /path/to/xml /path/to/rpms, but after cleaning the yum cache and remaking the cache on the client I still have the same error. I am obviously doing something wrong, but I do not see what. Any hints greatly appreciated The repos are created with mrepo, in case this is important. Any hints greatly appreciated. -- Groeten, natxo

1 0

[HW/OT] Recommend vendor to recover data from LTO4 tapes
by Arun Khan 18 Jun '12

18 Jun '12

Posting here in the hope that some one may have encountered problems with recovery from backups on LTO4 media and found a solution. Back ups on FujiFilm LTO4 media (800/1600). Archives created using tar -cf /dev/nst0. The tapes were fine when the archives were created (tested by extracting random sample files from them) but something went wrong in storage (no physical damage). Now a few LTO4 tapes are giving I/O errors when I try to extract data from them. Tried dd_rescue and that too fails giving I/O errors. I am wondering if there are any service providers, to extract the data out of the magnetic tapes in a fashion similar to "dead" hard disks. Please share info if you know of any such provider. Thanks, -- Arun Khan

3 2

unfsd scalability issues
by Boris Epstein 17 Jun '12

17 Jun '12

Hello there, I believe that unfsd ( http://unfs3.sourceforge.net/ ) now does have multi-threaded capability and as such should be fairly well scalable. I am using it on CentOS 6.2 and it seems to become all but unusable when more then 3-4 users connect to it. Is that normal? What sort of experience have other people had? Is there a way to parametrically tune it, by the way? Thanks. Boris.

8 18

Resizing est4 filesystem while mounted
by Jeff Boyce 17 Jun '12

17 Jun '12

Greetings - I had a logical volume that was running out of space on a virtual machine. I successfully expanded the LV using lvextend, and lvdisplay shows that it has been expanded. Then I went to expand the filesystem to fill the new space (# resize2fs -p /dev/vde1) and I get the results that the filesystem is already xx blocks long, nothing to do. If I do a # df -h, I can see that the filesystem has not been extended. I could kick the users off the VM, reboot the VM using a GParted live CD and extend the filesystem that way, but I thought that it was possible to do this live and mounted? The RH docs say this is possible; the man page for resize2fs also says it is possible with ext4. What am I missing here? This is a Centos 6.2 VM with an ext4 filesystem. The logical volumes are setup on the host system which is also a Centos 6.2 system. Jeff Boyce Meridian Environmental

5 5

Sendmail SMTP Brute-Force Attack
by Gustavo Lacoste 16 Jun '12

16 Jun '12

Dear CentOS Community Is totally clear there's no support sendmail platform today, but I need to stop SMTP brute-force attack on sendmail. My server is attacked today, my maillog look like : 4624(a)myserver.com>, proto=ESMTP, daemon=MTA, relay=myserver.com [127.0.0.1] Jun 14 19:07:01 at6412 sendmail[24627]: q5EN71jC024627: from=<>, size=3958, class=0, nrcpts=1, msgid=<201206142307.q5EN710u024623(a)myserver.com>, proto=ESMTP, daemon=MTA, relay=myserver.com [127.0.0.1] Jun 14 19:07:23 at6412 sendmail[24868]: q5EN7M6D024868: from=< qmarket(a)qmarket.cl>, size=2193, class=0, nrcpts=2, msgid=< 20120614231448.1E99A13EE5F(a)smtp02qmarket.qmarket.cl>, proto=ESMTP, daemon=MTA, relay=[200.1.174.121] Jun 14 19:07:24 at6412 sendmail[24961]: q5EN7OT4024961: from=< nobody(a)2012.123icq.cl>, size=4716, class=0, nrcpts=1, msgid=< E1SfJ8H-0005kv-JE(a)2012.123icq.cl>, proto=ESMTP, daemon=MTA, relay= pc1.globalmac.cl [200.29.231.61] (may be forged) Jun 14 19:07:33 at6412 sendmail[25013]: q5EN7SqK025013: from=< a.pfsvtij(a)yahoo.com>, size=760, class=0, nrcpts=1, msgid=< 1531549-634033-36(a)owfzdl.net>, proto=SMTP, daemon=MTA, relay= h095159149119.ys.dsl.sakhalin.ru [95.159.149.119] Jun 14 19:07:37 at6412 sendmail[25065]: q5EN7bCj025065: from=< en.viaimport(a)gmail.com>, size=4531, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=186-105-73-29.baf.movistar.cl [186.105.73.29] I need help for STOP this spamers right now. Thanks in advance to anyone who can guide me With Kind Regards, Gustavo A. Lacoste Z. Curacautín - Chile Skype: knxroot Msn & Gtalk: knx.root [at] gmail.com Home page: http://www.lacosox.org - - *Por favor, evite enviarme documentos adjuntos en formato Word o PowerPoint. Lea http://www.gnu.org/philosophy/no-word-attachments.es.html*

9 16

Centos 6 / Kickstart Using degraded mdadm RAID1
by Emmanuel Noobadmin 16 Jun '12

16 Jun '12

I'm trying to install a bunch of C6 involving initially degraded mdadm RAID 1 Anaconda refuses to let me create a RAID 1 array with only one member. Based on some reading, it seems that I should be able to use kickstart with the PRE scripts to do this. However, after trying for a couple of hours, it doesn't seem that anaconda will allow it, it just boots the created arrays. At best I end up with a list of softraid partitions instead. Am I trying the impossible or has anybody done this before and can point to a resource how on this can be done?

2 5

Strange su behavior after installing latest CentOS updates
by Alfred von Campe 16 Jun '12

16 Jun '12

I did a "yum update" on my CentOS 6 systems yesterday for the first time in about a month and now have some automated processes failing because the PATH is not set up correctly when using "su". The problem is very easy to see by comparing the output of the following two commands: # su - <user> -c "env | grep PATH" # su <user> -c "env | grep PATH" Before yesterday's update, and on any CentOS 6.2 systems without the latest (in the last month) updates and all CentOS 5.8 systems, PATH contained anything that was set in /etc/profile.d, but it appears that it does not run anything in that directory after yesterday's update. As I mentioned before, this is breaking a lot of automated process that relied on the PATH being set correctly when doing a "su - <user> -c ...". Is this a known issue? Is anyone else affected by it? In case it matters, I'll include the list of all the packages that were installed yesterday at the end of this message. Thanks, Alfred Installed: kernel.i686 0:2.6.32-220.17.1.el6 kernel-devel.i686 0:2.6.32-220.17.1.el6 Updated: ImageMagick.i686 0:6.5.4.7-6.el6_2 apr.i686 0:1.3.9-5.el6_2 autocorr-en.noarch 1:3.2.1-19.6.el6_2.7 bash.i686 0:4.1.2-9.el6_2 bind-libs.i686 32:9.7.3-8.P3.el6_2.3 bind-utils.i686 32:9.7.3-8.P3.el6_2.3 epel-release.noarch 0:6-7 expat.i686 0:2.0.1-11.el6_2 firefox.i686 0:10.0.5-1.el6.centos flash-plugin.i686 0:11.2.202.236-0.1.el6.rf gnome-power-manager.i686 0:2.28.3-6.el6_2 google-chrome-stable.i386 0:19.0.1084.56-140965 java-1.6.0-openjdk.i686 1:1.6.0.0-1.48.1.11.3.el6_2 java-1.6.0-openjdk-devel.i686 1:1.6.0.0-1.48.1.11.3.el6_2 java-1.6.0-openjdk-javadoc.i686 1:1.6.0.0-1.48.1.11.3.el6_2 kernel-firmware.noarch 0:2.6.32-220.17.1.el6 kernel-headers.i686 0:2.6.32-220.17.1.el6 libatasmart.i686 0:0.17-4.el6_2 libsmbclient.i686 0:3.5.10-116.el6_2 net-tools.i686 0:1.60-110.el6_2 nfs-utils.i686 1:1.2.3-15.el6_2.1 openoffice.org-brand.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-calc.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-calc-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-draw.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-draw-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-graphicfilter.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-impress.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-impress-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-langpack-en.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-math.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-math-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-opensymbol-fonts.noarch 1:3.2.1-19.6.el6_2.7 openoffice.org-pdfimport.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-presenter-screen.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-ure.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-writer.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-writer-core.i686 1:3.2.1-19.6.el6_2.7 openoffice.org-xsltfilter.i686 1:3.2.1-19.6.el6_2.7 openssl.i686 0:1.0.0-20.el6_2.5 openssl-devel.i686 0:1.0.0-20.el6_2.5 postgresql-libs.i686 0:8.4.11-1.el6_2 samba.i686 0:3.5.10-116.el6_2 samba-client.i686 0:3.5.10-116.el6_2 samba-common.i686 0:3.5.10-116.el6_2 samba-winbind-clients.i686 0:3.5.10-116.el6_2 socat.i686 0:1.7.2.1-1.el6.rf sos.noarch 0:2.2-17.el6_2.3 sudo.i686 0:1.7.4p5-9.el6_2 tcsh.i686 0:6.17-19.el6_2 tzdata.noarch 0:2012c-1.el6 tzdata-java.noarch 0:2012c-1.el6 xulrunner.i686 0:10.0.5-1.el6.centos

3 4

Puppet + Passenger SELinux issues
by Trey Dockendorf 15 Jun '12

15 Jun '12

I recently setup my Puppetmaster server to run through Passenger via Apache instead of on the default webrick web server. SELinux made that not work and I've found some documentation on making rules to allow it however mine won't load. This is the policy I found via this website, http://sandcat.nl/~stijn/2012/01/20/selinux-passenger-and-puppet-oh-my/comm… . module puppet_passenger 1.7; require { type bin_t; type devpts_t; type httpd_t; type passenger_t; type port_t; type proc_net_t; class process { getattr siginh setexec sigchld noatsecure transition rlimitinh }; class unix_stream_socket { getattr accept read write }; class capability { sys_resource sys_ptrace }; class file { entrypoint open create relabelfrom relabelto getattr setattr read write append ioctl lock rename link unlink }; class lnk_file { getattr read }; class udp_socket name_bind; class dir { getattr setattr add_name remove_name search open read write ioctl lock }; } #============= httpd_t ============== allow httpd_t port_t:udp_socket name_bind; allow httpd_t proc_net_t:file { read getattr open }; allow httpd_t bin_t:file entrypoint; allow httpd_t passenger_t:process sigchld; allow httpd_t passenger_t:unix_stream_socket { getattr accept read write }; optional_policy(` puppet_manage_lib(httpd_t) puppet_search_log(httpd_t) puppet_search_pid(httpd_t) allow httpd_t puppet_var_lib_t:file { relabelfrom relabelto }; ') #============= passenger_t ============== allow passenger_t devpts_t:dir search; allow passenger_t httpd_t:process { siginh rlimitinh transition noatsecure }; allow passenger_t self:capability { sys_resource sys_ptrace }; allow passenger_t self:process setexec; ps_process_pattern(passenger_t, httpd_t) domain_read_all_domains_state(passenger_t) Using the SELinux Make file works but when I try to add the new policy via "semodule -i puppet_passenger.pp" I get the following # semodule -i puppet_passenger.pp libsepol.print_missing_requirements: puppet_passenger's global requirements were not met: type/attribute passenger_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! The blog I got the policy from mentioned disabling the rubygem_passenger policy, is that where passenger_t is defined? I've looked at the source of selinux-policy and see the required type of passenger_t is working so unsure why it doesn't work in my policy. The policy from audit2allow generates this when using "grep -e 'httpd\|passenger'" but it seems like too much allowance module passenger 1.0; require { type unconfined_t; type semanage_t; type init_t; type system_cronjob_t; type mysqld_t; type syslogd_t; type apmd_t; type initrc_t; type postfix_local_t; type puppet_etc_t; type setfiles_t; type rpm_t; type unlabeled_t; type var_run_t; type kernel_t; type puppet_var_run_t; type puppet_var_lib_t; type auditd_t; type httpd_t; type rpm_var_lib_t; type postfix_cleanup_t; type postfix_master_t; type inetd_t; type udev_t; type mysqld_safe_t; type postfix_pickup_t; type sshd_t; type crond_t; type getty_t; type postfix_qmgr_t; type ntpd_t; class sock_file { write unlink open }; class capability { sys_resource sys_ptrace }; class process setexec; class dir { write getattr read create search add_name }; class file { execute read create execute_no_trans write open append }; } #============= httpd_t ============== allow httpd_t apmd_t:dir { getattr search }; allow httpd_t apmd_t:file { read open }; allow httpd_t auditd_t:dir { getattr search }; allow httpd_t auditd_t:file { read open }; allow httpd_t crond_t:dir { getattr search }; allow httpd_t crond_t:file { read open }; allow httpd_t getty_t:dir { getattr search }; allow httpd_t getty_t:file { read open }; allow httpd_t inetd_t:dir { getattr search }; allow httpd_t inetd_t:file { read open }; allow httpd_t init_t:dir { getattr search }; allow httpd_t init_t:file { read open }; allow httpd_t initrc_t:dir { getattr search }; allow httpd_t initrc_t:file { read open }; allow httpd_t kernel_t:dir { getattr search }; allow httpd_t kernel_t:file { read open }; allow httpd_t mysqld_safe_t:dir { getattr search }; allow httpd_t mysqld_safe_t:file { read open }; allow httpd_t mysqld_t:dir { getattr search }; allow httpd_t mysqld_t:file { read open }; allow httpd_t ntpd_t:dir { getattr search }; allow httpd_t ntpd_t:file { read open }; allow httpd_t postfix_cleanup_t:dir { getattr search }; allow httpd_t postfix_cleanup_t:file { read open }; allow httpd_t postfix_local_t:dir { getattr search }; allow httpd_t postfix_local_t:file { read open }; allow httpd_t postfix_master_t:dir { getattr search }; allow httpd_t postfix_master_t:file { read open }; allow httpd_t postfix_pickup_t:dir { getattr search }; allow httpd_t postfix_pickup_t:file { read open }; allow httpd_t postfix_qmgr_t:dir { getattr search }; allow httpd_t postfix_qmgr_t:file { read open }; allow httpd_t puppet_etc_t:file { execute execute_no_trans }; #!!!! The source type 'httpd_t' can write to a 'dir' of the following types: # squirrelmail_spool_t, dirsrv_config_t, httpd_tmp_t, httpd_cache_t, httpd_tmpfs_t, dirsrvadmin_tmp_t, httpd_squirrelmail_t, dirsrv_var_log_t, zarafa_var_lib_t, dirsrv_var_run_t, httpd_var_run_t, dirsrvadmin_config_t, httpd_dirsrvadmin_rw_content_t, httpd_prewikka_rw_content_t, httpd_w3c_validator_rw_content_t, httpd_awstats_rw_content_t, httpd_user_rw_content_t, httpdcontent, httpd_cobbler_rw_content_t, httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t, httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t, httpd_nutups_cgi_rw_content_t, httpd_mediawiki_rw_content_t, httpd_apcupsd_cgi_rw_content_t, httpd_squid_rw_content_t, httpd_smokeping_cgi_rw_content_t allow httpd_t puppet_var_lib_t:dir { read write create add_name }; allow httpd_t puppet_var_lib_t:file { write create append }; allow httpd_t puppet_var_run_t:dir { search getattr }; allow httpd_t rpm_t:dir { getattr search }; allow httpd_t rpm_t:file { read open }; allow httpd_t rpm_var_lib_t:dir { search getattr }; allow httpd_t rpm_var_lib_t:file open; #!!!! This avc can be allowed using the boolean 'httpd_setrlimit' allow httpd_t self:capability sys_resource; allow httpd_t self:capability sys_ptrace; allow httpd_t self:process setexec; allow httpd_t semanage_t:dir { getattr search }; allow httpd_t semanage_t:file { read open }; allow httpd_t setfiles_t:dir { getattr search }; allow httpd_t setfiles_t:file { read open }; allow httpd_t sshd_t:dir { getattr search }; allow httpd_t sshd_t:file { read open }; allow httpd_t syslogd_t:dir { getattr search }; allow httpd_t syslogd_t:file { read open }; allow httpd_t system_cronjob_t:dir { getattr search }; allow httpd_t system_cronjob_t:file { read open }; allow httpd_t udev_t:dir { getattr search }; allow httpd_t udev_t:file { read open }; allow httpd_t unconfined_t:dir { getattr search }; allow httpd_t unconfined_t:file { read open }; allow httpd_t unlabeled_t:file { read execute open execute_no_trans }; #!!!! The source type 'httpd_t' can write to a 'file' of the following types: # squirrelmail_spool_t, httpd_lock_t, dirsrv_config_t, httpd_tmp_t, httpd_cache_t, httpd_tmpfs_t, dirsrvadmin_tmp_t, httpd_squirrelmail_t, dirsrv_var_log_t, zarafa_var_lib_t, dirsrv_var_run_t, httpd_var_lib_t, httpd_var_run_t, dirsrvadmin_config_t, httpd_dirsrvadmin_rw_content_t, httpd_prewikka_rw_content_t, root_t, httpd_w3c_validator_rw_content_t, httpd_awstats_rw_content_t, httpd_user_rw_content_t, httpdcontent, httpd_cobbler_rw_content_t, httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t, httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t, httpd_nutups_cgi_rw_content_t, httpd_mediawiki_rw_content_t, httpd_apcupsd_cgi_rw_content_t, httpd_squid_rw_content_t, httpd_smokeping_cgi_rw_content_t allow httpd_t var_run_t:file { write open }; #!!!! The source type 'httpd_t' can write to a 'sock_file' of the following types: # httpd_tmp_t, httpd_tmpfs_t, dirsrv_var_run_t, httpd_var_run_t allow httpd_t var_run_t:sock_file { write unlink open }; Here's my version of selinux-policy selinux-policy.noarch 3.7.19-126.el6_2.10 selinux-policy-targeted.noarch 3.7.19-126.el6_2.10 Any advice or pointers of how to get puppetmasterd to run through passenger WITH SELinux would be great. Thanks - Trey

2 1

Should we run Amavisd on our final delivery hosts?
by James B. Byrne 15 Jun '12

15 Jun '12

We use Cyrus-imapd together with Postix to effect final delivery of email messages to our clients. The final delivery server is isolated from the internet via a firewall and only pre-authorized host addresses can connect. All user pickup and delivery email traffic is handled through separate Internet accessible hosts that may establish these connections. The Internet facing hosts have Postfix and Amavisd running configured with ClamAV and Spamassassin. Is there anything to be gained by having Amavisd, ClamAV and Spamassassin running on the IMAP delivery box in addition to the public hosts? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] Centos 6 - Networking: Some Queries -- GURUS HELP PL
by Sanjay Arora 15 Jun '12

15 Jun '12

With NM_Controlled=No in the ifcfg file, NM applet shows "Not Managed", so the ifcfg file is being read. What is the extent of interaction of NetworkManager with ifcfg files is unknown....very little information on the net. Seems Network Manager is still mostly unplublished compared to other utilities. Any pointers to literature on this or macro architecture of NM would be appreciated, as Google is not throwing up the right results. On a separate note however, I'd still like to know how to use a bridge to route packets between two networks.....say network card having address...192.168.1.3 and a kvm based virtual network say 172.31.1.0/24needing to use this device for Internet access (through router 192.168.1.1) using a bridge? How to do it? With regards. Sanjay.

6 24

OT - Is there a package to monitor network traffic
by Steve Campbell 15 Jun '12

15 Jun '12

We have a situation here that is a real mystery. Our MRTG on our outgoing router and a firewall server that protects our web servers is showing a spike every six hours. I can't find the server behind the firewall that is generating such an extreme amount of packets, even though I've looked through the crontabs of nearly all servers, performed "ps" variations, and other types of investigation. Is there any type of package I can install that will monitor traffic and report abnormal, over-threshold packets similar to what wireshark might do in a manner that would allow me to determine where these packets might be going or from where they originate? Thanks for any help. steve campbell

12 17

CentOS 4x Download
by Shiv. Nath 14 Jun '12

14 Jun '12

Dear Community Friends, i badly require CentOS 4x, because one of our application only work with that version, and current server has failed. The image which is available in CentOS following sites. CD is not boot able, cannot install. http://vault.centos.org/4.9/ http://vault.centos.org/ can anyone help to guide me how can o get CD or DVD image CentOS 4x. Thanks / Regards

2 2

CentOS-announce Digest, Vol 88, Issue 9
by centos-announce-request＠centos.org 14 Jun '12

14 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0731 Moderate CentOS 5 expat Update (Johnny Hughes) 2. CESA-2012:0730 Important CentOS 5 java-1.6.0-openjdk Update (Johnny Hughes) 3. CESA-2012:0729 Critical CentOS 6 java-1.6.0-openjdk Update (Johnny Hughes) 4. CESA-2012:0731 Moderate CentOS 6 expat Update (Johnny Hughes) 5. CEBA-2012:0738 CentOS 5 gawk FASTTRACK Update (Johnny Hughes) 6. CEBA-2012:0737 CentOS 6 corosync Update (Johnny Hughes) 7. CEEA-2012:0739 CentOS 6 mlx4_ib Update (Johnny Hughes) 8. CEEA-2012:0739 CentOS 6 mlx4_en Update (Johnny Hughes) 9. CEBA-2012:0740 CentOS 6 apr Update (Johnny Hughes) 10. CEEA-2012:0739 CentOS 6 mlx4_core Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 13 Jun 2012 17:07:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0731 Moderate CentOS 5 expat Update To: centos-announce(a)centos.org Message-ID: <20120613170710.GA31156(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0731 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0731.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3cd68b239349db1f2a58ad30ef511148235cda9e7b692323d0b8606aa0f094e3 expat-1.95.8-11.el5_8.i386.rpm 1a19aae09d3fae92d7e31244abe1d12804206a3f0445a7d56c34e363d16e870a expat-devel-1.95.8-11.el5_8.i386.rpm x86_64: 3cd68b239349db1f2a58ad30ef511148235cda9e7b692323d0b8606aa0f094e3 expat-1.95.8-11.el5_8.i386.rpm 9e40d6c5cfd8288231e0a3c7a193a1601fb6a909df00a917d59cc02e596ea7dd expat-1.95.8-11.el5_8.x86_64.rpm 1a19aae09d3fae92d7e31244abe1d12804206a3f0445a7d56c34e363d16e870a expat-devel-1.95.8-11.el5_8.i386.rpm 25f29550c06e68dbdd2847421e2c1db4f8fa3a02dab12f6cdfc7b2b3ab72e2c8 expat-devel-1.95.8-11.el5_8.x86_64.rpm Source: f394a130aa92f025255ee20283d9dc9e93f73c8858bfb1a87736e211df8b65b6 expat-1.95.8-11.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 13 Jun 2012 17:29:00 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0730 Important CentOS 5 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20120613172900.GA31415(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0730 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0730.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f1f34d561b7a8792c87baa365b8c476dbc16149df94ea0a932e022d474097445 java-1.6.0-openjdk-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 0cea3bb758babe5704bdf9897f07f29a96eb97c4be5ce21c618fc8d33747b04a java-1.6.0-openjdk-demo-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 71ab34ae5c8c4d7e43a61fcfae9e10f50941cbeebc2e0fe23d82285817b21efb java-1.6.0-openjdk-devel-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 21f4b7cbe5175549528a3dac11c505f28b7a668e9dde5ccbf17cf345cf83575b java-1.6.0-openjdk-javadoc-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 280419ee63d45161e204fef85af031d278eb0909e9cc1bafc452b0705db7836e java-1.6.0-openjdk-src-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm x86_64: 1b0412bd15d348d4877e0fbd9cd50e82c3e6dce631bf308f6f8858de98f7b5f2 java-1.6.0-openjdk-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm b9dcd93b7fa94e31887896710a5fa359db59f4e9718560529595b54a68153434 java-1.6.0-openjdk-demo-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm 5f3e3f41f9e0f012d12d42fc238ca0c71bbebc2e50c090a104797ef9f216d723 java-1.6.0-openjdk-devel-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm 9a78d0538ab735128188ea3a6aa5664db2111d94c2e8162f1acd44875c4aaa29 java-1.6.0-openjdk-javadoc-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm f5b83eb56f378bcf7dfbb99231b715455b98c0dd6c259b4373b6c5822bece004 java-1.6.0-openjdk-src-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm Source: 49f7df8ca0562c4a706c0553ac41c4b625a2035d21ba7a730c154d3f79c95b43 java-1.6.0-openjdk-1.6.0.0-1.27.1.10.8.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 13 Jun 2012 18:29:41 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0729 Critical CentOS 6 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20120613182941.GA2032(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0729 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0729.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f6064d60ec45630845556ea2bfbf70ebbc5ea95717803eb8027128f9655bc5d3 java-1.6.0-openjdk-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm bdbcde99f4db7a8f3fb1718f34af8dbe54e6c253c3a7049a23afa1f95a920494 java-1.6.0-openjdk-demo-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm 6382c6a20130004aa6a3a34c39ffd61cd49ebddcb4670c8b110b5094943a76f8 java-1.6.0-openjdk-devel-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm 264fed7959f4939ddc6549e33f2e37af2c6e1a9692be0055f0fb3dec03c1cc4e java-1.6.0-openjdk-javadoc-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm b4d12776a4096262a4afb507186986695174aa496b0e9400aa57d500375e2eb6 java-1.6.0-openjdk-src-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm x86_64: 294692a655d216d9694d4689aa905751ee441fd12bdba84eb0201cb982d1364b java-1.6.0-openjdk-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm aa479002a611beb1f85db30896cc18eb93499c1ba80cd210bdb4a0f9bc2e61f5 java-1.6.0-openjdk-demo-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm 04417bda745a7af5bf82eb91ad2c522471a530822eb271ecbb6f04d29d2f8b54 java-1.6.0-openjdk-devel-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm 4023d85f98a659ffd44cafda01d52092db6a2c36624b758415d47182308c150a java-1.6.0-openjdk-javadoc-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm a73b6aeb73341c9319cbf6950b95a6a9eb3b5fd381ec0ed8949d092ea64d215f java-1.6.0-openjdk-src-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm Source: 55fecca6690cbd8855e3da09599f8de4cdb51ac812b457a5ca69a3f0ce2c0f15 java-1.6.0-openjdk-1.6.0.0-1.48.1.11.3.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 13 Jun 2012 18:29:54 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0731 Moderate CentOS 6 expat Update To: centos-announce(a)centos.org Message-ID: <20120613182954.GA2114(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0731 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0731.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: aefccd0285b312ec3cf053715b66c45e7883145255c993c7e2bd1848b420deb1 expat-2.0.1-11.el6_2.i686.rpm 17e426a5bdf8c89b247e4f45de8ce69fbf7c3be00c39b753e1047b447ed4a8e0 expat-devel-2.0.1-11.el6_2.i686.rpm x86_64: aefccd0285b312ec3cf053715b66c45e7883145255c993c7e2bd1848b420deb1 expat-2.0.1-11.el6_2.i686.rpm 28847d115e3c8dd72e6535b8148a61fb9e33f66a00de8bea82f449aca78d6970 expat-2.0.1-11.el6_2.x86_64.rpm 17e426a5bdf8c89b247e4f45de8ce69fbf7c3be00c39b753e1047b447ed4a8e0 expat-devel-2.0.1-11.el6_2.i686.rpm 1166744647cdcaf5732fe68362b1b9011cca481f74a8c0c7bd2d0353d049b00f expat-devel-2.0.1-11.el6_2.x86_64.rpm Source: e73a78c840f047c382984201f9be499041c411f82e26f02359183f5fe25fad6a expat-2.0.1-11.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 14 Jun 2012 12:03:16 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0738 CentOS 5 gawk FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120614120316.GA22484(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0738 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-0738.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1b9fd31792bc4cf959a942d8e1ef9fb03e8a8cfa913cc62e92e014929729e4b8 gawk-3.1.5-16.el5.i386.rpm x86_64: 8551946d42238c5c8df44d51b82218ae66ca8a9ce9f95d1a379c8b07d61d42fa gawk-3.1.5-16.el5.x86_64.rpm Source: c863aec9045f0a9e8a629eb3df290b902d1b6cfac69098a48c2fd03f22680815 gawk-3.1.5-16.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Thu, 14 Jun 2012 13:43:13 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0737 CentOS 6 corosync Update To: centos-announce(a)centos.org Message-ID: <20120614134313.GA26996(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0737 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0737.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3120b000ba613d70bc9bb9d03c7d710a80416a4426c6a232638c9c2fdc7221a2 corosync-1.4.1-4.el6_2.3.i686.rpm 2e890b0218462dd15c17d81ea176c1704d335f1252072db10c5313c33c8e2d9b corosynclib-1.4.1-4.el6_2.3.i686.rpm 7449f7bb3884d39d31f6603d6db3267aa91b271e65bb64aae4a0a0fce6632aec corosynclib-devel-1.4.1-4.el6_2.3.i686.rpm x86_64: f236368bfe3539deee104eab3ce3d22f768dbb32a2129381034157ac916a59e5 corosync-1.4.1-4.el6_2.3.x86_64.rpm 2e890b0218462dd15c17d81ea176c1704d335f1252072db10c5313c33c8e2d9b corosynclib-1.4.1-4.el6_2.3.i686.rpm 935cef83b9f28f16180fd972d8a58a5cdedf02938136ea1880d5e91a6164ce82 corosynclib-1.4.1-4.el6_2.3.x86_64.rpm 7449f7bb3884d39d31f6603d6db3267aa91b271e65bb64aae4a0a0fce6632aec corosynclib-devel-1.4.1-4.el6_2.3.i686.rpm b05cbe8c2c2d2e1bc686d031c1ab1df918817d6c6bb1f8ab2e4d0b148ed80c50 corosynclib-devel-1.4.1-4.el6_2.3.x86_64.rpm Source: f666c63498a2b0a47474255f5bebdac27f8b19d043aeb03ee3a0dceadda61be2 corosync-1.4.1-4.el6_2.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Thu, 14 Jun 2012 13:43:46 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0739 CentOS 6 mlx4_ib Update To: centos-announce(a)centos.org Message-ID: <20120614134346.GA27073(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0739 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0739.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c67537efae105b7c70f56fadaa3e34834502ab152af7a16aa3f44b383999d094 kmod-mlx4_ib-1.0.32.269-1.el6_2.i686.rpm x86_64: 1c64fd86aa78e8f610622ee0ead655d5c73d229e47b191403259ed2b40516c42 kmod-mlx4_ib-1.0.32.269-1.el6_2.x86_64.rpm Source: 777bdacc77b367a9bfb853a458cd01d968c802b41f8d4a7b79bafb135207559d mlx4_ib-1.0.32.269-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Thu, 14 Jun 2012 13:44:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0739 CentOS 6 mlx4_en Update To: centos-announce(a)centos.org Message-ID: <20120614134403.GA27144(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0739 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0739.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4535fe7fca08e503ad67afe4ba8371c3def9069118ac9528647cf264012f6f43 kmod-mlx4_en-2.0.32.269-1.el6_2.i686.rpm x86_64: ee92c416be5b0390a2ff481678d5d072f6038c9dfdf6e8fd1de14411cee7c0a7 kmod-mlx4_en-2.0.32.269-1.el6_2.x86_64.rpm Source: 59d88b1ff8d4c248ab04e36d40e4342f0c68756bfca1aa7ecd38140b4e1836d9 mlx4_en-2.0.32.269-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Thu, 14 Jun 2012 13:44:33 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0740 CentOS 6 apr Update To: centos-announce(a)centos.org Message-ID: <20120614134433.GA27226(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0740 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0740.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fb234149db1d4b3ef3b6e75bbaf11d848213e4a6e0656d50364d9da8bb860d28 apr-1.3.9-5.el6_2.i686.rpm 37b9e9870317f6ba8b36666752b0aa16e1eca6ea35738f5bb8369bd2b27b8ed5 apr-devel-1.3.9-5.el6_2.i686.rpm x86_64: fb234149db1d4b3ef3b6e75bbaf11d848213e4a6e0656d50364d9da8bb860d28 apr-1.3.9-5.el6_2.i686.rpm 6fa37b8f1ff2dabec810dd59e5b1de60660187755725d9de5f303fbfd8eb0366 apr-1.3.9-5.el6_2.x86_64.rpm 37b9e9870317f6ba8b36666752b0aa16e1eca6ea35738f5bb8369bd2b27b8ed5 apr-devel-1.3.9-5.el6_2.i686.rpm 9df664b194f72be491a3ad6e31b7b9009a3ccc0bd916cdcbfe6928750e55078a apr-devel-1.3.9-5.el6_2.x86_64.rpm Source: 9775f276bb8e6b80a33a5bdbfa2d1619a42e9499702c5507e22268358ff01c8d apr-1.3.9-5.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Thu, 14 Jun 2012 13:44:53 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0739 CentOS 6 mlx4_core Update To: centos-announce(a)centos.org Message-ID: <20120614134453.GA27297(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0739 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0739.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cd17436881234bf53282fef05c00d459d58b88d804b1de21843c55270463c925 kmod-mlx4_core-1.1.32.269-1.el6_2.i686.rpm x86_64: 8727bad5734d882c761c6e3a537c478dd012b1a512dde109814a08227c7692fc kmod-mlx4_core-1.1.32.269-1.el6_2.x86_64.rpm Source: 4c58d2912a6d1531973aca3fea9a63009f187c385d797ad7d2e21648318925e7 mlx4_core-1.1.32.269-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 9 **********************************************

1 0

Best way to duplicate a live Centos 5 server?
by Emmanuel Noobadmin 14 Jun '12

14 Jun '12

I've got a CentOS 5 server that I want to migrate over into a virtualized instance. The problem is I need to minimize downtime so was trying to figure out a way to "live" clone the original. Initially, I thought I could do this via exporting an iSCSI target from the virtual host, create a MD raid 1 array on the C5 server, wait for it to sync, then shutdown the physical server and switch to the virtual one. But after getting iSCSI working... I realize I could not create a md device on a mounted disk. Unfortunately this old C5 wasn't setup with md raid 1 originally so I can't just add a the iSCSI target as an additional member for a triplicate. So I remembered DRBD was supposed to be used for replication. But after getting things set up, running the drbd-admin create-md command gave me this scary warning it will destroy data on the disk. Apparently because drbd writes meta data to the drive. So that appears to be a no go too. Am I missing something glaringly obvious here, or is the only way I'm going be able to migrate is to shutdown the C5 server for a few hours while duping the old drives? Would greatly appreciate any pointers how best to do this.

5 7

CentOS 6.2 32 default kernel support pae?
by Arun Khan 14 Jun '12

14 Jun '12

A client is insisting to install CentOS 6.2 32 bit version [1] on a system with 4GB RAM. Lately, I have done 64 bit installations only; not sure if the 32 bit kernel supports pae for >= 4GB RAM. If anyone knows the answer please let me know (will save me time on an installation in my setup). [1] The Client's ERP vendor has validated the application on the 32 bit platform only thus the reason for 32 bit version. Thanks, -- Arun Khan

3 4

Two CentOS installations failed dual boot
by Amindeed 14 Jun '12

14 Jun '12

Hello everybody, I installed Centos 6.2 on a computer with an older version of it in order to dual boot both of them. I managed to install the new OS on a physically seperated hard drive, and configured grub to make the newly installed OS the default one. Now the older OS won't boot and this error message shows: *"error 13: invalid or unsupported executable format"*. I attached to the email the output of *"fdisk -l"* and a copy of the *"/etc/grub.conf"* configuration file. I have no experience dealing with boot/grub issues, so any help on this will be much appreciated. Regards.

1 0

kvm CLI :: meaning of "vlan=" and "name=" options in -net nic and -net tap
by Arun Khan 14 Jun '12

14 Jun '12

Did not get any response in the CentOS Virt list. Posting in the CentOS General list hoping that some one here can provide clarification. Thx, -- Arun Khan ---------- Forwarded message ---------- From: Arun Khan Date: Tue, Jun 12, 2012 at 8:54 PM Subject: Meaning of "vlan=" and "name=" in Linux KVM To: CentOS Virt <centos-virt(a)centos.org> Greetings KVM gurus, I am trying to understand a "use case" scenario for the "vlan=n" option and "name=name" for the "-net nic" and "-net tap" directives. I have done some search but I have not come up with anything that sheds any light on the above. <quote from kvm man> Network options: -net nic[,vlan=n][,macaddr=mac][,model=type] [,name=name][,addr=addr][,vectors=v] Create a new Network Interface Card and connect it to VLAN n (n = 0 is the default). The NIC is an e1000 by default on the PC target. Optionally, the MAC address can be changed to mac, the device address set to addr (PCI cards only), and a name can be assigned for use in monitor commands. Optionally, for PCI cards, you can specify the number v of MSI-X vectors that the card should have; this option currently only affects virtio cards; set v = 0 to disable MSI-X. If no -net option is specified, a single NIC is created. Qemu can emulate several different models of network card. Valid values for type are "virtio", "i82551", "i82557b", "i82559er", "ne2k_pci", "ne2k_isa", "pcnet", "rtl8139", "e1000", "smc91c111", "lance" and "mcf_fec". Not all devices are supported on all targets. -net tap[,vlan=n][,name=name][,fd=h][,ifname=name] [,script=file][,downscript=dfile] Connect the host TAP network interface name to VLAN n, use the network script file to configure it and the network script dfile to deconfigure it. If name is not provided, the OS automatically provides one. fd=h can be used to specify the handle of an already opened host TAP interface. The default network configure script is /etc/qemu-ifup and the default network deconfigure script is /etc/qemu-ifdown. Use script=no or downscript=no to disable script execution. </quote from kvm man> My objective is to create a small "virtual" network using bridges/tap interfaces on the Host OS and running the Guest OSs (the network segment separated by vlan=somenumber) My hypothesis is that with "vlan=X" and "name=somename" the VMs can be separated into different segments i.e. a set of tap interfaces on vlan=10 and another set of tap interfaces on vlan=20 connected to the same bridge br0. I have two VMs started with "kvm -net tap,vlan=10" and "kvm -net tap,vlan=20" respectively but with IP numbers in the same subnet 172.16.0.0/24; they are able to ping each other with different "vlan" numbers. I would appreciate any clarification on the "vlan=" and "name=" options. Sample script for my KVM VMs <script> #!/bin/bash kvm \ -vga std \ -m 1024 \ -cpu core2duo \ -smp 2,cores=2 \ -drive file=/home/kvmusr/KVM/vdisks/centos62.img,index=0 \ -net nic,vlan=1,model=e1000,macaddr=${nic_mac_addr0} \ -net tap,vlan=1,ifname=tap0,script=no,downscript=no \ </script> Thanks, -- Arun Khan

1 0

space problem
by m.roth＠5-cent.us 13 Jun '12

13 Jun '12

CentOS 6.2. I have a 2TB drive, one partition, which is used for online backups. It filled up the other day. I moved a couple of b/u directories off it, and deleted the originals, which should have given me 42G free. I also reduced the reserved blocks by 1/3rd. I've just finished an fsck, which it needed anyway, and in which there was a problem in an HTREE directory node. df *still* tells me that there are zero bytes free. Clues? mark

6 7

Update issue - tar package problem?
by Tom Brown 13 Jun '12

13 Jun '12

Hi Trying to apply all available updates to CentOS 5 and the following is observed # yum update Loaded plugins: downloadonly, fastestmirror, rhnplugin Loading mirror speeds from cached hostfile Setting up Update Process Resolving Dependencies --> Running transaction check <snip> --> Running transaction check ---> Package unixODBC-libs.i386 0:2.2.11-10.el5 set to be updated ---> Package unixODBC-libs.x86_64 0:2.2.11-10.el5 set to be updated --> Processing Dependency: /bin/tar for package: redhat-lsb --> Processing Dependency: /bin/tar for package: redhat-lsb --> Finished Dependency Resolution redhat-lsb-4.0-2.1.4.el5.x86_64 from installed has depsolving problems --> Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.x86_64 (installed) redhat-lsb-4.0-2.1.4.el5.i386 from installed has depsolving problems --> Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.i386 (installed) --> Running transaction check ---> Package kernel-xen.x86_64 0:2.6.18-194.32.1.el5 set to be erased ---> Package kernel-xen-devel.x86_64 0:2.6.18-194.32.1.el5 set to be erased --> Processing Dependency: /bin/tar for package: redhat-lsb --> Processing Dependency: /bin/tar for package: redhat-lsb --> Finished Dependency Resolution redhat-lsb-4.0-2.1.4.el5.x86_64 from installed has depsolving problems --> Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.x86_64 (installed) redhat-lsb-4.0-2.1.4.el5.i386 from installed has depsolving problems --> Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.i386 (installed) Error: Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.i386 (installed) Error: Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.x86_64 (installed) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest so trying to just update tar # yum update tar Loaded plugins: downloadonly, fastestmirror, rhnplugin Loading mirror speeds from cached hostfile Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package tar.x86_64 2:1.15.1-32.el5_8 set to be updated --> Processing Dependency: /bin/tar for package: redhat-lsb --> Processing Dependency: /bin/tar for package: redhat-lsb --> Finished Dependency Resolution redhat-lsb-4.0-2.1.4.el5.x86_64 from installed has depsolving problems --> Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.x86_64 (installed) redhat-lsb-4.0-2.1.4.el5.i386 from installed has depsolving problems --> Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.i386 (installed) Error: Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.i386 (installed) Error: Missing Dependency: /bin/tar is needed by package redhat-lsb-4.0-2.1.4.el5.x86_64 (installed) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest but interestingly if i yum locainstall the tar package and then yum update it all works fine - seems very odd and possibly a broken yum package as rpm works OK ? anyone seen this? thanks

4 14

set perms on ttyUSB
by Steve Clark 13 Jun '12

13 Jun '12

Hello, CentOS 6.2. I have spent all morning googling and trying different things to get the permissions on my ttyUSB0 port set correctly using udev. I am at my wits end. Why is this so convoluted!? I would really appreciate it if someone could tell me how to do this. The default permissions come up 660 root,dialout. I have tried adding myself to group dialout but still get permission denied when I run minicom. The only thing that works is sudo -i then chmod 666 /dev/ttyUSB0. Thanks in advance. -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

2 2

CentOS-announce Digest, Vol 88, Issue 8
by centos-announce-request＠centos.org 13 Jun '12

13 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0721 Important CentOS 5 kernel Update (Johnny Hughes) 2. CEBA-2012:0726 CentOS 5 rp-pppoe FASTTRACK Update (Johnny Hughes) 3. CEBA-2012:0728 CentOS 6 lldpad Update (Johnny Hughes) 4. CEBA-2012:0727 CentOS 6 libvirt Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 13 Jun 2012 00:11:19 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0721 Important CentOS 5 kernel Update To: centos-announce(a)centos.org Message-ID: <20120613001119.GA12540(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0721 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0721.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cbb4a31da293e11c165753949275e557ed989f83ed5bd9ff1bdd5da31d80c636 kernel-2.6.18-308.8.2.el5.i686.rpm ea33676e3b72e3d74bc67538abf4eb261f43236ff5624fe8f95d8743d7eae448 kernel-debug-2.6.18-308.8.2.el5.i686.rpm 88b655d8310f7dcb5db276de5755d67c7538798aa2fcdf13a44a8625471f0c1f kernel-debug-devel-2.6.18-308.8.2.el5.i686.rpm 4ea808bd8ca6a90bf6f8c9d0ba6a2cb9ff24cda84c0729ba6f1b11a2663d10f4 kernel-devel-2.6.18-308.8.2.el5.i686.rpm 409ea419465826ecc3e8f5ca226fc862cc4b058adb725c84e9c4c68390f8c8de kernel-doc-2.6.18-308.8.2.el5.noarch.rpm 9052b183ff52d80f67a7b52663f761cc9d6cfd1db480ba6ed5b38f15982a6e23 kernel-headers-2.6.18-308.8.2.el5.i386.rpm 0b04d3a84ce29460b545f03102422dfbfa5e0d6f5c320f0c86ad83be513b81f3 kernel-PAE-2.6.18-308.8.2.el5.i686.rpm ed3b3cb0f95ad5217c04d5e0cb53975ebd87b0bd0971b169f41ae3f4313578ea kernel-PAE-devel-2.6.18-308.8.2.el5.i686.rpm e2d5facb99b47f353e485bdac3dd270d1e4b2b1a13407d00161b5fb9d41566bc kernel-xen-2.6.18-308.8.2.el5.i686.rpm 14a82f4c262215b67d7c7c6d22c0fa32ba65ade61b80c728c166b43ddc00b26f kernel-xen-devel-2.6.18-308.8.2.el5.i686.rpm x86_64: d936dd354fd9fbb409ddf415ad7ea87d3b9870e419e58e7925a50d0cc3889713 kernel-2.6.18-308.8.2.el5.x86_64.rpm da112881ff2dd48d45349d0997ebc0cdfe53dcaa078c6f34055c488a61222452 kernel-debug-2.6.18-308.8.2.el5.x86_64.rpm 4e3d65f7dab2055f0fc732f4192a1d0e4e41abff7e75f1afc85c24cb24ebd0e4 kernel-debug-devel-2.6.18-308.8.2.el5.x86_64.rpm 1086c971fc75d89bfd0fcbda8e31cd807a922324e97697bc7adfe6928db068cd kernel-devel-2.6.18-308.8.2.el5.x86_64.rpm 409ea419465826ecc3e8f5ca226fc862cc4b058adb725c84e9c4c68390f8c8de kernel-doc-2.6.18-308.8.2.el5.noarch.rpm 408dd016c3f0d2efce0b27ea4b7a77505313d70bf9089528058f3e20576e4a89 kernel-headers-2.6.18-308.8.2.el5.x86_64.rpm a2073516d8ac0ebceae4668bd4036a3dad6ea743210794a3bed4678b1a07d6a2 kernel-xen-2.6.18-308.8.2.el5.x86_64.rpm a1b45d66a1bf5ede91d5ba6e09adfac4238db01cee71267c2dc5f55d27d78452 kernel-xen-devel-2.6.18-308.8.2.el5.x86_64.rpm Source: e0fb314918e345984377ba34aa77aaf1dc5420c1e203e721c16068c8af94b817 kernel-2.6.18-308.8.2.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 13 Jun 2012 10:32:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0726 CentOS 5 rp-pppoe FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120613103210.GA10978(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0726 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-0726.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 94e78d77c3dbd7ec9d26ba22e2f3bf4d7952721088cdc6a1999ec274f387cb20 rp-pppoe-3.5-33.el5.i386.rpm x86_64: 53330ac8981cae9f1c865748c15fbbf4b0ef4b5bc1dca67114b78e504bbc6230 rp-pppoe-3.5-33.el5.x86_64.rpm Source: 39e1deac26fe937f15b11b39314aea99e699c7baea92775ff38151ea4053d0e2 rp-pppoe-3.5-33.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 13 Jun 2012 11:41:40 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0728 CentOS 6 lldpad Update To: centos-announce(a)centos.org Message-ID: <20120613114140.GA14036(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0728 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0728.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 339e7605435efa7e396ea3847423c1f07ab97127eb9c6b9c78f3febbb8b90379 lldpad-0.9.43-13.el6_2.1.i686.rpm 990c0a640ef549a5591785924217a0e7d3fef29d32762536b4d6fd447c41c578 lldpad-devel-0.9.43-13.el6_2.1.i686.rpm x86_64: 644429083a3f7c83f4625a8c8d0a437ea832beb8be11c5a7314a596d27f5edbc lldpad-0.9.43-13.el6_2.1.x86_64.rpm 990c0a640ef549a5591785924217a0e7d3fef29d32762536b4d6fd447c41c578 lldpad-devel-0.9.43-13.el6_2.1.i686.rpm 38bc3140c4bb59d5af357ba32d607535a620c171e5c55b3be52418e5fcfcecb8 lldpad-devel-0.9.43-13.el6_2.1.x86_64.rpm Source: c3675b921957105d790e83ae472cc41e331dd25a2f8b3f82d7e7b7805645da74 lldpad-0.9.43-13.el6_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 13 Jun 2012 11:42:02 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0727 CentOS 6 libvirt Update To: centos-announce(a)centos.org Message-ID: <20120613114202.GA14134(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0727 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0727.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5b9fcf47f972fd4adf41cc291f89742548b5ff2c027c557c9d2f927b908ff596 libvirt-0.9.4-23.el6_2.9.i686.rpm 3eb3114dfe344be41d14358d40dd971186ecff2be997a51de71e3bf7a1b84693 libvirt-client-0.9.4-23.el6_2.9.i686.rpm b162137c4c94125ffdf9a65f9abf3aa8ac15df2fef50f14932e57ec63ac69521 libvirt-devel-0.9.4-23.el6_2.9.i686.rpm ddca258668682089f7bdbe778879d5d9241e5bbb5f6eced34d678a45be76326e libvirt-lock-sanlock-0.9.4-23.el6_2.9.i686.rpm 27ddf40fbad733d7005471a9cd22ac3e7d2a736dedc5c18f8326b5c124a7964a libvirt-python-0.9.4-23.el6_2.9.i686.rpm x86_64: 462ee31b8eed28eaf3e4c20656ee4337474b5401795dd3dbc20ab995d4bcf59b libvirt-0.9.4-23.el6_2.9.x86_64.rpm 3eb3114dfe344be41d14358d40dd971186ecff2be997a51de71e3bf7a1b84693 libvirt-client-0.9.4-23.el6_2.9.i686.rpm 1bf232b9c6c5edd5323cc253c88b63d0e4861385023c33712a7351ef8ad943d8 libvirt-client-0.9.4-23.el6_2.9.x86_64.rpm b162137c4c94125ffdf9a65f9abf3aa8ac15df2fef50f14932e57ec63ac69521 libvirt-devel-0.9.4-23.el6_2.9.i686.rpm d7e3d9e0dce6fc30b107566837d3bc3ffdc4bd440cb18c26278004583f705d8c libvirt-devel-0.9.4-23.el6_2.9.x86_64.rpm cdb8c39425c016ebadb926465edb68e42579400954eca7960fab1e336f94a342 libvirt-lock-sanlock-0.9.4-23.el6_2.9.x86_64.rpm 1e9ee98cc15cefa006dc93c5a30a635efa41dea1db10be6c443f7214266cf132 libvirt-python-0.9.4-23.el6_2.9.x86_64.rpm Source: fa243eebe97817109f2263a3f72cbc44468f7dd7457ba0f1e13881597289898e libvirt-0.9.4-23.el6_2.9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 8 **********************************************

1 0

yum install, and exit status
by Philippe Naudin 13 Jun '12

13 Jun '12

Hello, IIRC, the exit status of "yum install foo bar" was (long ago !) 0 only if foo *and* bar could be installed. Nowadays, it is 0 if foo *or* bar (or both) are correctly installed. Is there a way to get the old behavior ? Thanks, -- Philippe Naudin

1 0

Help with smartd
by Jerry Geis 13 Jun '12

13 Jun '12

I have a system that is logging: smartd /dev/sda currently unreadble (pending) sectors smartd /dev/sda offline uncorrectable sectors The box continues to run fine. Doing "smartctl -H /dev/sda" says: test result: PASSED I have ran the "smartctl -t offline /dev/sda", after the 300+ seconds I rebooted and waited about 30 minutes and again got the above error, and smartctl -H says PASSED. How do I tell smartctl to just not use the sectors its finding bad and move on? Thanks, Jerry

1 0

Re: [CentOS] php4 under Centos6
by Michael Kress 13 Jun '12

13 Jun '12

Am 12.06.2012 22:39, schrieb Reindl Harald: > Am 12.06.2012 22:19, schrieb Michael Kress: >> Hello, is there any way of getting php4 installed on Centos6? I'd like >> to install it in an apache/fastcgi environment. >> Has anybody got a link to a description/howto describing a clean install? >> I failed compiling the original php4 tar ball and failed relocating the >> php binary. > PHP4 IS DEAD SINCE A LONG TIME > > DO NOT USE PHP4 - THROW AWAY CRAP WHICH DOES NOT > WORK WITH PHP5 BECAUSE IT IS UNMAINTAINED AND > UNSECURE > oh yes, forgot the disclaimer with the above text. Regards Michael -- Michael Kress, kress(a)hal.saar.de http://www.michael-kress.de / http://kress.net P E N G U I N S A R E C O O L

2 1

Network Device control by Virtual host - Possibility & Security - Centos 6.2
by Sanjay Arora 13 Jun '12

13 Jun '12

Is it possible to pass the Network port to a virtual host and have a minimal Firewall, IDS/IPS install there and this virtual host to be the Gateway to the Network for the host as well as other virtual hosts? I am talking specifically Centos 6.2 & KVM/Xen. Also, what harware requirements need to be met. And most of all what security implications. Normally minimal software at the perimeter of the host should be a positive, but does virtualization impose any weaknesses? Rgds. Sanjay.

1 0

Help needed with Elographics touchscreen
by Tom Munro Glass 12 Jun '12

12 Jun '12

I'm trying to get an Elographics serial touchscreen working with CentOS 6.2 using the xorg-x11-drv-elographics driver. Touching the screen will wake it up if the screen has blanked, but it never moves the cursor on the screen. There is also a keyboard and mouse connected while I'm trying to get this going and they are loaded automatically and using the evdev driver. Here are the relevant parts of /etc/X11/xorg.conf: Section "ServerLayout" Identifier "X.org Configured" Screen 0 "Screen0" 0 0 Screen 1 "Screen1" RightOf "Screen0" Screen 2 "Screen2" RightOf "Screen1" InputDevice "Touchscreen0" "CorePointer" EndSection Section "InputDevice" Identifier "Touchscreen0" Driver "elographics" Option "Device" "/dev/ttyS4" Option "MinX" "0" Option "MaxX" "4000" Option "MinY" "0" Option "MaxY" "4000" Option "SendCoreEvents" "true" Option "ButtonNumber" "1" Option "ScreenNo" "0" Option "DebugLevel" "5" EndSection Here are some extracts from /var/log/Xorg.0.log that show the device appears to be detected correctly: (II) Using input driver 'elographics' for 'Touchscreen0' (II) Loading /usr/lib/xorg/modules/input/elographics_drv.so (**) Option "SendCoreEvents" "true" (**) Option "CorePointer" (**) Touchscreen0: always reports core events (**) Option "Device" "/dev/ttyS4" (**) Option "BaudRate" "9600" (**) Option "StopBits" "1" (**) Option "DataBits" "8" (**) Option "Parity" "None" (**) Option "FlowControl" "None" (**) Elographics X device name: TOUCHSCREEN (**) Option "ScreenNo" "0" (**) Elographics associated screen: 0 (**) Elographics untouch delay: 50 ms (**) Elographics report delay: 10 ms (**) Option "MaxX" "4000" (**) Elographics maximum x position: 4000 (**) Option "MinX" "0" (**) Elographics minimum x position: 0 (**) Option "MaxY" "4000" (**) Elographics maximum y position: 4000 (**) Option "MinY" "0" (**) Elographics minimum y position: 0 (**) Option "DebugLevel" "5" (**) Elographics debug level sets to 5 (**) Elographics device will work in Landscape mode (II) XINPUT: Adding extended input device "TOUCHSCREEN" (type: Elographics TouchScreen) Elographics touchscreen init... Done. (**) TOUCHSCREEN: (accel) keeping acceleration scheme 1 (**) TOUCHSCREEN: (accel) acceleration profile 0 (**) TOUCHSCREEN: (accel) acceleration factor: 2.000 (**) TOUCHSCREEN: (accel) acceleration threshold: 4 Elographics touchscreen on... Elographics touchscreen opening : /dev/ttyS4 (--) Elographics touchscreen is a Intellitouch, connected through a serial link. (--) The controller is a model E271-2200, firmware revision 2.1. (--) Additional features: (--) External A/D converter (--) Z axis active Touching the screen produces a lot of debug information including lines such as: TouchScreen: x(1861), y(605), Press TouchScreen: x(1859), y(608), Stream TouchScreen: x(1848), y(624), Release So it appears that the driver is communicating with the device OK, but why doesn't it control the cursor?

1 0

php4 under Centos6
by Michael Kress 12 Jun '12

12 Jun '12

Hello, is there any way of getting php4 installed on Centos6? I'd like to install it in an apache/fastcgi environment. Has anybody got a link to a description/howto describing a clean install? I failed compiling the original php4 tar ball and failed relocating the php binary. Thanks in advance Regards Michael

1 0

CentOS-announce Digest, Vol 88, Issue 7
by centos-announce-request＠centos.org 12 Jun '12

12 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. MirrorList.centos.org is now available on ipv6 (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 11 Jun 2012 20:12:00 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] MirrorList.centos.org is now available on ipv6 To: CentOS Announcements List <centos-announce(a)centos.org> Message-ID: <4FD64300.7010605(a)centos.org> Content-Type: text/plain; charset=ISO-8859-1 Hi Everyone, It gives me great pleasure to announce that mirrorlist.centos.org is now available on ipv6; in addition to the existing ipv4 functionality. This is a full featured service, using geoip on the server end to hand out local-to-user IPv6 mirrors. Every url handed out is verified at regular intervals and only the freshest ones used. Our IPv6 mirror network is presently just under 150 hosts spread over 32 different countries - with a large bias towards the USA and Western Europe. We would love to bring on more machines to get better coverage around the world. In the 30 minutes since we turned it on, we are serving just over 8 requests per second over ipv6. So while its not huge, its a significant number and one that we imagine will only grow. I would like to thank Anssi Johansson ( http://twitter.com/avij ), member of the CentOS QA team and resident IPv6 champion, for his efforts in pushing for this service. Then helping build it and test it. Note that we do not have DNS on ipv6, so we still rely on the user end hosts having an upstream dual stacke dns resolver enroute to ns*.centos.org - we will try and fix this in the near future. If you have any feedback, or run into issues, please come find us on irc at #centos-devel(a)irc.freenode.net or open an issue report at http://bugs.centos.org/ Enjoy the v6 goodness, -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 7 **********************************************

1 0

RHEV-H / RHEV-M on CentOS?
by Kanwar Ranbir Sandhu 12 Jun '12

12 Jun '12

Hi Dudes/Dudettes, Does anyone know if Red Hat's bare metal KVM solution, RHEV-H, and the management component, RHEV-M, are available for CentOS? All I know is RHEV-M was being ported to Java and it would be getting released soon. I suppose RHEV-H isn't 100% necessary. Just running a minimum CentOS install for your KVMs would give you essentially the same thing. If there was a similar bare metal install option like RHEV-H through CentOS, I could see going that route for my deployments eventually. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 3.3.7-1.fc17.x86_64 x86_64 GNU/Linux 08:23:10 up 7 days, 21:17, 13 users, load average: 0.56, 0.58, 0.77

2 1

Xine-lib package update returns error message
by E Westphal 12 Jun '12

12 Jun '12

When trying to update xine-lib, the following is returned, how did I break it? Please advise. Thanks in advance. Missing Dependency: libxine.so.1 is needed by package xine-0.99.6-1.el5.rf.i386 (installed) Ed Westphal

2 1

Error dovecot restart
by Muhammad A. Fatahna 12 Jun '12

12 Jun '12

Dear all, i have a problem when install dovecot on CentOS 5, below my configuration [root@mail home]# vim /etc/dovecot-sql.conf driver = mysql connect = host = localhost dbname=postfix user=mail password=password default_pass_scheme = PLAIN password_query = SELECT password FROM mailbox WHERE username = '%u' [root@mail home]# vim /etc/dovecot.conf log_path = /var/log/dovecot.log auth_username_format = %Lu passdb sql { args = /etc/dovecot-sql.conf } userdb static { args = uid=501 gid=501 home=/home/vmail/%d/%n } [root@mail home]# service dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: Error: Can't write to log directory /var/log: Permission denied Fatal: Invalid configuration in /etc/dovecot.conf [FAILED] i have try searching but i don't see step fix it, -- http://mafatahna.web.id

2 2

working dhcpd.conf with routes
by Boris Epstein 11 Jun '12

11 Jun '12

Hello listmates, I am running DHCPD for IPv4 on a Centos 5 machine. I am wondering if anyone has got a functional dhcpd.conf configuration serving static routes to Linux, Mac OS X and Windows clients. I tried a couple of variations of static-routes options - but have yet to create something that would work. Thanks. Boris.

4 5

centos 6.2 xfs + nfs space allocation
by Stephan van Hienen 11 Jun '12

11 Jun '12

Centos 6.2 system with xfs filesystem. I'm sharing this filesystem using nfs. When I create a 10 gigabyte test file from a nfs client system : dd if=/dev/zero of=10Gtest bs=1M count=10000 10000+0 records in 10000+0 records out 10485760000 bytes (10 GB) copied, 74.827 s, 140 MB/s Output from 'ls -al ; du' during this test : -rw-r--r-- 1 root root 429170688 Jun 8 10:13 10Gtest 654456 10Gtest -rw-r--r-- 1 root root 1756831744 Jun 8 10:13 10Gtest 2230720 10Gtest -rw-r--r-- 1 root root 2492145664 Jun 8 10:11 10Gtest 4348288 10Gtest -rw-r--r-- 1 root root 4686782464 Jun 8 10:11 10Gtest 8542592 10Gtest -rw-r--r-- 1 root root 10485760000 Jun 8 10:12 10Gtest 16943552 10Gtest The file is using almost double the size ? Even after a few days the file is showing the same disk usage. Only umounting and remounting the filesystem fixes the problem. When I do the same test on an ext4 filesystem no issues. (same server/client) Same issue on 2 centos 6.2 servers. I also tried to reproduce the issue on an rhel 5.8 system with xfs, but here the disk usage is ok. (I don't have a rhel6 systems with the xfs addon subscription) Stephan

5 9

CVE-2012-2122 ()
by Johnny Hughes 11 Jun '12

11 Jun '12

The CentOS team has been looking at the issue called out in these stories: http://threatpost.com/en_us/blogs/trivial-password-flaw-leaves-mysql-databa… http://arstechnica.com/information-technology/2012/06/security-flaw-in-mysq… http://www.net-security.org/secworld.php?id=13076 According to the upstream provider EL4, EL5 and EL6 are not impacted by the above issue: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2122 Thanks, Johnny Hughes

1 0

CentOS-announce Digest, Vol 88, Issue 6
by centos-announce-request＠centos.org 11 Jun '12

11 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0718 CentOS 5 doxygen FASTTRACK Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 11 Jun 2012 11:13:34 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0718 CentOS 5 doxygen FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120611111334.GA1996(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0718 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-0718.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 72c425f77c5c39f7acf6e022521cc85b76c394784e93f04188e0681251e6c592 doxygen-1.4.7-2.i386.rpm 97ea811c40a83bf5c7f30efe5394769206c61deb045b41477e0f0f3d96762a42 doxygen-doxywizard-1.4.7-2.i386.rpm x86_64: 24a17887e906d6bbbb8425a6870f8170e6d2355fbc94e143c24df886cb81ca61 doxygen-1.4.7-2.x86_64.rpm 4793a72c194fb9b3e8886d6f52e44f1b4428177740f06a8523f6ffc4c70894ad doxygen-doxywizard-1.4.7-2.x86_64.rpm Source: 4e8fd530bab7d5d119fdb81b9cb61303ee66bf5961220a7c4d6b86afbb7028c2 doxygen-1.4.7-2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 6 **********************************************

1 0

iptables: hitcount
by Helmut Drodofsky 11 Jun '12

11 Jun '12

Hello, up to CentOS 5.3 it was possible, to control new ip connections by "recent", "seconds" and "hitcount" -A INPUT -m state --state NEW -m recent --set -p tcp --dport 80 -A INPUT -m state --state NEW -m recent --update --seconds 60 --hitcount 1000 -p tcp --dport 80 -j LOG --log-prefix "FW DROP IP Flood: " -A INPUT -p tcp -m tcp --dport 80 -m state --state NEW -m recent --update --seconds 60 --hitcount 1000 -j DROP -A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT so that - short time high new connections rate for the web server where accepted, but not over a longer time. E.g. CentOS 5.8 or CentOS 6.2 accept only -A INPUT -m state --state NEW -m recent --set -p tcp --dport 80 -A INPUT -m state --state NEW -m recent --update --seconds 1 --hitcount 15 -p tcp --dport 80 -j LOG --log-prefix "FW DROP IP Flood: " -A INPUT -p tcp -m tcp --dport 80 -m state --state NEW -m recent --update --seconds 1 --hitcount 15 -j DROP -A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT So a complex web page with many small icons e.g. webmail pages initiate the log in line 2 and drop in line 3 . hitcount does not accept values of 25 or above: [root@server ~]# iptables -A INPUT -m state --state NEW -m recent --set -p tcp --dport 80 [root@server~]# iptables -A INPUT -m state --state NEW -m recent --update --seconds 1 --hitcount 25 -p tcp --dport 80 -j LOG --log-prefix "FW DROP IP Flood: " iptables: Unknown error 4294967295 what can i do to protect the web server? Is there any any configuration parameter to increase the values for hitcount? Best regards Helmut Drodofsky -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Dr.-Ing. Roswitha Hahn-Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Tel. 0711 781941 0 Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

2 1

system date using ntp client is drifting
by Kaushal Shriyan 11 Jun '12

11 Jun '12

Hi, I have a set of servers whose system time is drifting. I am running ntp client on CentOS 5.8. My config is here -> http://fpaste.org/s55U/ Anything i am missing? Regards, Kaushal

6 8

Re: [CentOS] Error dovecot restart
by Muhammad A. Fatahna 11 Jun '12

11 Jun '12

> man touch > man chmod > man chown file has ready, chmod use 755 and chown use vmail, this below : [root@mail ~]# ls -la /etc/dovecot* -rwxr-xr-x 1 vmail vmail 42989 Jun 11 17:08 /etc/dovecot.conf -rwxr-xr-x 1 vmail vmail 181 Jun 11 15:27 /etc/dovecot-sql.conf [root@mail ~]# [root@mail ~]# ls -la /var/log/dovecot.log -rwxr-xr-x 1 vmail vmail 1180 Jun 11 16:42 /var/log/dovecot.log [root@mail ~]# there is something wrong on my configuration -- http://mafatahna.web.id

2 1

Re: [CentOS] 75% - 80% Rebuild Complete
by Eugene Poole 10 Jun '12

10 Jun '12

OK, I'm about 90% sure that I've corrected the boot loader situation with RAID-1 and the second hard drive. I haven't tested the correction, but here's what I did: Examined the grub.conf file and noticed that hd0 uses (hd0,1), so what followed was grub grub> device (hd1) /dev/sdc grub> root (hd1,1) grub> setup (hd1) <after receiving the successful message> grub> quit I didn't rebuild the boot loader on /dev/sda because it is working (if it ain't broke don't fix it). My situation is that I'm using 4 - 1 TB hard drives and I used the following pattern: /dev/sda | /dev/sdc = First Raid -1 volume /dev/sdb | /dev/sdd = Second Raid-1 volume Thanks all for the suggestions and thoughts! Gene

8 8

Kickstart progress report?
by Lars Hecking 09 Jun '12

09 Jun '12

When I'm kickstarting a CentOS5 machine, there's a progress report that shows how many packages have been installed so far, how many left, how much time it has taken, how much longer to go, and estimate for the total install time. Under CentOS6, I only get a report about packages (completed: N of M). Is there any way to add the time information back on CentOS6? This is a text install, btw.

2 1

Need to get latest version of freetds for centos 6.2
by Kaplan, Andrew H. 09 Jun '12

09 Jun '12

Hello -- What repository, or other website, can I access in order to get the latest version of freetds? The version that comes with centos 6.2 is the 0.64 release, and it has a bug in it that is preventing me from running another application. The information in this e-mail is intended only for the person to whom it is addressed. If you believe this e-mail was sent to you in error and the e-mail contains patient information, please contact the Partners Compliance HelpLine at http://www.partners.org/complianceline . If the e-mail was sent to you in error but does not contain patient information, please contact the sender and properly dispose of the e-mail.

5 9

resource efficient log scanning tools
by Nataraj 08 Jun '12

08 Jun '12

I'm looking for a logfile scanner that can search for regular expressions in logfiles and send immediate email notifications. I'd like to try to find something that doesn't use huge amounts of memory. I'm currently running fail2ban and used it to do some of this scanning, but I'm finding that it can suck up memory and CPU resources when there is a lot of logging going on. I am aware of swatch, but most people say that it is pretty resource intensive as well. I came across logsurfer in google search and was wondering if anyone has experience with it or what other good alternatives might exist. While fancy features are nice, I'm willing to forgo them for lower resource consumption. Thanks, Nataraj

2 2

yum problem with glibc
by Timothy Murphy 08 Jun '12

08 Jun '12

Is anyone getting a yum update problem with glibc and glibc-common? I'm getting the error message ------------------------------- Error: Protected multilib versions: glibc-2.12-1.47.el6_2.12.x86_64 != glibc-2.12-1.47.el6_2.9.i686 ** Found 3 pre-existing rpmdb problem(s), 'yum check' output follows: bash-4.1.2-9.el6_2.x86_64 is a duplicate with bash-4.1.2-8.el6.centos.x86_64 glibc-common-2.12-1.47.el6_2.12.x86_64 is a duplicate with glibc- common-2.12-1.47.el6_2.9.x86_64 glibc-common-2.12-1.47.el6_2.12.x86_64 has missing requires of glibc = ('0', '2.12', '1.47.el6_2.12') ------------------------------- I've tried "rpm --rebuilddb" but that did not seem to help. Any suggestions or advice gratefully received. -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin

6 16

printer problem
by m.roth＠5-cent.us 08 Jun '12

08 Jun '12

Anyone dealt with an Epson Stylus Photo 2200? Disconnected from my machine, it won't even print a self-test page.... mark

3 5

CentOS 6.2: suspending vim with ctrl-z and resuming with fg - stopped working
by Alexander Farber 08 Jun '12

08 Jun '12

Hello, pardon my chaotic question, but does anybody have an idea, why can't I suspend vim-enhanced-7.2.411-1.6.el6.x86_64 with a CTRL-Z, then execute few commands at my bash prompt and then get back to the vim session again with "fg"? It has stopped working at my CentOS 6.2 machine (I haven't noticed exactly when) but works fine with CentOS 5.x. I'm using PuTTY to login to both. The error message I get is: afarber@www:~> fg sudo vim test.pl ~ [1]+ Stopped sudo vim test.pl (and nothing comes up) Thank you Alex

3 2

CentOS-announce Digest, Vol 88, Issue 5
by centos-announce-request＠centos.org 08 Jun '12

08 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0717 Important CentOS 5 bind97 Update (Johnny Hughes) 2. CESA-2012:0716 Important CentOS 5 bind Update (Johnny Hughes) 3. CESA-2012:0716 Important CentOS 6 bind Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 7 Jun 2012 17:22:36 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0717 Important CentOS 5 bind97 Update To: centos-announce(a)centos.org Message-ID: <20120607172236.GA14991(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0717 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0717.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2b9b6c83fc41075777d1571201e7a1c88eb44a3a137b19b10d5891c731e18d3d bind97-9.7.0-10.P2.el5_8.1.i386.rpm 9cd7c8ef84dd48ecbfa497c7cc9a5b18852f4c06d246bf5937db6bd53271db4d bind97-chroot-9.7.0-10.P2.el5_8.1.i386.rpm c231140964ec0ab35407d6eeb2887c2b0096460bec68d2ce15772acdc7d66932 bind97-devel-9.7.0-10.P2.el5_8.1.i386.rpm a7447f529de7315ead9a05983d355be900d83870f143fbdcb712ec0a0e30813e bind97-libs-9.7.0-10.P2.el5_8.1.i386.rpm f2a40630eda6b048fdad3cc3a4358456eb37ab613ece602014b04c0a891c8ac8 bind97-utils-9.7.0-10.P2.el5_8.1.i386.rpm x86_64: 1d1a3f2e1006da35bcce3a8ddfe2b2e0ef4358b935602610091859d4623a8450 bind97-9.7.0-10.P2.el5_8.1.x86_64.rpm 6438ee28377db46dd744c013d909aacee1a7bd58677aa88d430ec42371505ff2 bind97-chroot-9.7.0-10.P2.el5_8.1.x86_64.rpm c231140964ec0ab35407d6eeb2887c2b0096460bec68d2ce15772acdc7d66932 bind97-devel-9.7.0-10.P2.el5_8.1.i386.rpm bcab3bed2e2be8cf33554db1d8d6a7090af0bb6e6092f56e6bfb758ff17451ef bind97-devel-9.7.0-10.P2.el5_8.1.x86_64.rpm a7447f529de7315ead9a05983d355be900d83870f143fbdcb712ec0a0e30813e bind97-libs-9.7.0-10.P2.el5_8.1.i386.rpm 2cf8f66d57a2bafd3ce19445e915347a3b5965c0141e676ec99eca4c2c3007fe bind97-libs-9.7.0-10.P2.el5_8.1.x86_64.rpm 521102f0597bfc5cf47b2d0ece9ce5478ad387f773392cbc3a7870840df65624 bind97-utils-9.7.0-10.P2.el5_8.1.x86_64.rpm Source: ac9d2233f649da230376ddb9a0cd226f35dbfa2f9a411c7d000c7dbbe859dfca bind97-9.7.0-10.P2.el5_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 7 Jun 2012 17:23:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0716 Important CentOS 5 bind Update To: centos-announce(a)centos.org Message-ID: <20120607172350.GA15176(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0716 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0716.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e77741388e628e6f5d5ef07c11e999b58d51f3554594d2551da58a57d5d189e8 bind-9.3.6-20.P1.el5_8.1.i386.rpm 9544267342a5aabb7714607bc7979e55bcb61cc561f4136b725b5c56adcb2614 bind-chroot-9.3.6-20.P1.el5_8.1.i386.rpm 72c8171cab0a3d0c18d1981eb8403469a9ef999945265321bfc1d662098fcb65 bind-devel-9.3.6-20.P1.el5_8.1.i386.rpm 0fa7194e0eee3fe17a0bd9d5d9e4beb16a9bbb1b244454773729a90810cb381d bind-libbind-devel-9.3.6-20.P1.el5_8.1.i386.rpm 5e33cf76249fdef29735f2f37890136c9d9cb525d28230e73a0f6f4b21cce958 bind-libs-9.3.6-20.P1.el5_8.1.i386.rpm 6b8ee07523c01ee8fc9813390fe118982ef4c89de94c50e192995404b1de9081 bind-sdb-9.3.6-20.P1.el5_8.1.i386.rpm 7875d70c531bb1c28b5a374a0b3609a9fa38043c919206cd2fe6343bfadf61be bind-utils-9.3.6-20.P1.el5_8.1.i386.rpm 1e9ff807dea89f7718a655df290e5f3e25b2fd40e351593ff5a46c4ac6bea870 caching-nameserver-9.3.6-20.P1.el5_8.1.i386.rpm x86_64: 8280005de8fd86901d2e779f3991c80854a26e69359f35f94eb55dc84fee39b2 bind-9.3.6-20.P1.el5_8.1.x86_64.rpm 9509c40f89c9f4e08df2ce205eb433078f880b21167da36770cabbb941f54724 bind-chroot-9.3.6-20.P1.el5_8.1.x86_64.rpm 72c8171cab0a3d0c18d1981eb8403469a9ef999945265321bfc1d662098fcb65 bind-devel-9.3.6-20.P1.el5_8.1.i386.rpm ce6fe0b2bcd7332a66ed2a84ce810562eaa454a0cd4d6fcaf6492aab992d3244 bind-devel-9.3.6-20.P1.el5_8.1.x86_64.rpm 0fa7194e0eee3fe17a0bd9d5d9e4beb16a9bbb1b244454773729a90810cb381d bind-libbind-devel-9.3.6-20.P1.el5_8.1.i386.rpm 4cd6e54330bcafef627f62ea30efbca7e10cf668e096b4f4c62f242cb1abf18c bind-libbind-devel-9.3.6-20.P1.el5_8.1.x86_64.rpm 5e33cf76249fdef29735f2f37890136c9d9cb525d28230e73a0f6f4b21cce958 bind-libs-9.3.6-20.P1.el5_8.1.i386.rpm 4a5ac3dae1ac63722f2a65686be8ac966a30de69ef74d76c2696297b95b040ac bind-libs-9.3.6-20.P1.el5_8.1.x86_64.rpm a07f61dc78e390c8cc709c1ac56cdd797657ffc9916d3e98d3b287c53b55fc6f bind-sdb-9.3.6-20.P1.el5_8.1.x86_64.rpm 8b22daca4e19d687432094fe9caf81b8d8203b362289f81cb8c59d3b49a0c8f2 bind-utils-9.3.6-20.P1.el5_8.1.x86_64.rpm 965cdee27c7a5b4aa3623ebef96dfb09db035b8e99063ff2c38ebabb69f4901d caching-nameserver-9.3.6-20.P1.el5_8.1.x86_64.rpm Source: 02788f487ba600dbb39ac972a6383ebf4136678ff8896fc77b46e01af7aeac69 bind-9.3.6-20.P1.el5_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 7 Jun 2012 19:31:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0716 Important CentOS 6 bind Update To: centos-announce(a)centos.org Message-ID: <20120607193120.GA22654(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0716 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0716.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 081b3e564fa77e8042355bf02848a1384b8321391e19d11d1348a8c3b220a72d bind-9.7.3-8.P3.el6_2.3.i686.rpm bac48abad13d32c664a68e8730558e65a2ed280d732fc6db37109efa502a7a0f bind-chroot-9.7.3-8.P3.el6_2.3.i686.rpm 2d2debcbb81feac2ca95aed1dd8d0d138ac1ec65cc752b4a3c020f17e6601938 bind-devel-9.7.3-8.P3.el6_2.3.i686.rpm b450fbefc48d5c6fe9e624fb54f5df46b03e02a9eb69da2cc019e6d00e160600 bind-libs-9.7.3-8.P3.el6_2.3.i686.rpm 48917fd1680a3ce07a2e5760f1d2eee9335301c1c86884b5a65dccc052bf53c8 bind-sdb-9.7.3-8.P3.el6_2.3.i686.rpm 342be62081582d5538ef6c7f74d5a7239be2eb293e6780e79872be28cdd1ce05 bind-utils-9.7.3-8.P3.el6_2.3.i686.rpm x86_64: 7e36254c2830868c4555ad564a25b562f48548ecf9b952beefa4354bb05c02f3 bind-9.7.3-8.P3.el6_2.3.x86_64.rpm c6a565e300c2359090febca013f6240435d28976acf8e33685f7a15cca255100 bind-chroot-9.7.3-8.P3.el6_2.3.x86_64.rpm 2d2debcbb81feac2ca95aed1dd8d0d138ac1ec65cc752b4a3c020f17e6601938 bind-devel-9.7.3-8.P3.el6_2.3.i686.rpm 1cb45a52030eff6da500e0716c0d0e1860b40b2d5a8b1f5fc5f252ed92bbf101 bind-devel-9.7.3-8.P3.el6_2.3.x86_64.rpm b450fbefc48d5c6fe9e624fb54f5df46b03e02a9eb69da2cc019e6d00e160600 bind-libs-9.7.3-8.P3.el6_2.3.i686.rpm 1d394744ea456c996cbbb4e8edf5742b67bccc36e376d2ae10df2277412f0faa bind-libs-9.7.3-8.P3.el6_2.3.x86_64.rpm 4513cb91c85a818b1a1719ef4141559102a1eeea29c8294c615ef3196cded645 bind-sdb-9.7.3-8.P3.el6_2.3.x86_64.rpm 3d4739b13cf9b6993e52ffed100be8086571940369f3203ca2c88cd52caf2c2f bind-utils-9.7.3-8.P3.el6_2.3.x86_64.rpm Source: 387212f6401f4d14939be846fdae6d898cc80f65a74044ebf893265a08228b31 bind-9.7.3-8.P3.el6_2.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 5 **********************************************

1 0

ipoe vs pppoe...
by John Doe 08 Jun '12

08 Jun '12

Hi, we are currently using pppd to connect to the net through pppoe. Some providers seem to propose ipoe instead of pppoe and I cannot find any clue on how/where/if_possible to set up such connection in CentOS. Anybody has any experience with ipoe...? Thx, JD

2 2

Bug 820677 - (CVE-2012-2337) CVE-2012-2337 sudo: Multiple netmask values used in Host / Host_List configuration cause any host to be allowed access
by Fajar Priyanto 08 Jun '12

08 Jun '12

Hi all, I just want to confirm, there is no patch release yet for this sudo, is it? https://bugzilla.redhat.com/show_bug.cgi?id=820677 Thank you. -- Fajar.

2 1

Re: [CentOS] Postfix not reading main.cf
by Adrian P. van Bloois 08 Jun '12

08 Jun '12

Neil wrote: > Hello: > > I just did a fresh install of CentOS 6.2 on a virtual server. > > I am trying to configure Postfix but it does not seem to be > reading configuration directives from /etc/postfix/main.cf > > Here is what I did to test it: > vi /etc/postfix/main.cf and set this directive: > myorigin = hello.world.com > postfix reload > postconf -d | grep myorigin > > I get this output: > append_at_myorigin = yes > myorigin = $myhostname > > Any ideas why it is not picking up the configuration? > > Thanks, > Neil > What you should do is run postconf without paramaters to a file and inspect that. In my case e.g. myorigin is set to $mydomain, but mydomain is set to the correct value. Good lcuk Adrian -- Adri P. van Bloois Antonlaan 104 email: adrian(a)pa0rda.nl 3701 VG Zeist voice: +31-(0)-30-6912741 The Netherlands fax: NONE 52 05'15.77"N 5 4'44.56"E QTH-locater JO 22 OC The whole point of cooking is to get as much flavour out of the ingredients as possible. -- Delia Smith -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

(?) Dual-monitor wallpapers on CEntOS 6
by Jay Leafey 08 Jun '12

08 Jun '12

I've recently set up two workstations running CentOS 6, one with an nVidia card and the elrepo drivers and one with an ATI Radeon card with the elrepo fglrx drivers. Both work well, but one aspect of the systems works different from CEntOS 5 on those systems: I cannot get a wallpaper image to span the two monitors. I have tried both with and without xinerama and there is no difference in this regard. The specified wallpaper is displayed on both monitors. Has anybody else run across this or a solution? I freely admit, this is a trivial issue. It's strictly an aesthetic matter and I'm curious as to why it doesn't work the same. Just wonderin' -- Jay Leafey - jay.leafey(a)mindless.com Memphis, TN

2 3

some security measures I would like to share
by Bob Hoffman 07 Jun '12

07 Jun '12

I apologize for the html, but it is a copy from a web post I did. I wanted to share this with list members and hope it helps others. I tried not to be redundant and add things I have not seen posted before. Always interested in constructive thoughts, better ideas, etc. ** *Security thoughts for server admins/webmasters* ------------------------------------------------------------------------ I would like to add some security measures I like to use. These are not listed on security sites and I feel it is time someone posted this stuff. This concerns programs/items used by webmasters/server admins on a very irregular basis. (not very often). This list assumes you have an IPMI card with its own eth port or an onboard IPMI interface, both having video access. Or accessing the shell of a virtual host to access virtual servers located on it. (if no IPMI) Quote: *PHPMYADMIN* - This is a wonderful tool for use by web programmers. Most security with this program lists just two protections. a)Use htaccess to password protect, force SSL b)Alias the folder from /phpmyadmin to something like /examp This is where security measures, aside from keeping updated, seem to end. This is bad. There is more you can do to protect that access to your database. PhpMyAdmin is a program you will use at times, but 99% of the time you will never touch it at all. So why would you leave it open to hackers all the time? Simply disable the 'alias' in httpd to prevent it from being accessed. For example in CentOS 6 the file /etc/httpd/conf.d/phpmyadmin.conf contains this directory information. (or something like it.) I have added 'Deny from ALL and commented out 'Allow from ALL' and restarted httpd. (the allowoverride is allowing htaccess protection for the folder). You could comment out everything except the allowoverride and deny from all... Quote: <Directory /usr/share/phpMyAdmin/> *Order Deny,Allow* Deny from All Allow from 127.0.0.1 Allow from ::1 *#Allow from All* allowoverride All </Directory> Once httpd is restarted no one can access the phpmyadmin folder if it is not in the html folder. (in centos 6 the program is usually located in /usr/share/phpmyadmin). This prevents the hacking of your phpmyadmin program. If you think about it, outside of a small fix or initial programming you will almost never use the program. So why do you leave it open to everyone 24 hours a day? Quote: *IPMI* IPMI is great but if you are a webmaster you are probably leaving this open to the internet. If you are local to the datacenter, or the datacenter is really cool, you can remove the eth cable from the ipmi port. And ask them to plug it in when there is an issue. This only works if you have a separate ipmi card with its own eth port. (and helps if you tag the cable and port for the center) I think most of us seldom, if ever, use our IPMI during the course of a year once the system is set up. This prevents root access, IPMI card getting hacked, and still allows emergency access with a quick visit or a phone call *IPMI, Virtual Host, Virtual Machines* Quote: *Your Virtual Host server* I seldom ever need to go into my virtual host. It is set up correctly and I get my logwatches every day. I have no ports open up on it. If I never use it, why would I leave a shell port open 24 hours a day? If I have an IPMI card I can log in and open that port. Then I can do what I need to do. Safest, if IPMI is available (with video) is to comment out/disable the ssh port. On a virtual host you most likely use a physical bridge. This means nothing is touching the host. Great Security tip. Quote: *Virtual Machines- DNS* Are your DNS servers virtual machines on a server (or on a dedicated with an IPMI card in it)? I bet you never access shell except to make that very rare dns change. And if you use rndc you never use shell. If you have IPMI with video disable ssh port. Enable it via IPMI on those very rare instances you need to access it. Logwatch can still send out. Only port 53 should be open 24 hours a day (and if rndc that port too...and 5353 if you are doing that.) There is no reason to leave this system open to the net at all. Enable shell when you need it and then disable when done. You do not need to open port 25 (or any port) to send emails out of the system. So why do you leave port 22 (or other shell port) on 24 hours a day if you never ever use it? Quote: *MYSQL servers* Again, if on a virtual host or even its own dedicated disable port 22 (ssh port) and only enable via IPMI on those rare times you need to use it. Quote: *Your website/webserver* The same issue remains. Outside of the times you are using shell OR FTP...these ports should be disabled. Enable using IPMI. This simple act prevents a lot of hack attempts, log filling, and gives massive peace of mind. Yes, you use shell and ftp....but not that much. Think about it. You might use ftp and shell a lot, but you are leaving those ports open 24 hours a day, 7 days a week. I guarantee outside of massive program days you use less than 5% of that time on those ports. So why open your server to being hacked? Close the ports. Quote: *Your open source or commercial web application* .htaccess protect any folder that does not need to be accessed by a user via http. Most files are grabbed by a index file and are still able to be used even with htaccess protection. Try it. Definitely do this with your administrative folders. There is no reason not to do this. But how many times do you really access that admin folder? I would say put a fake htacces protection file in all the folders you can. Fake meaning the user required does not exist and there is no password for it. Then it will not be passed. The admin folder can also be done this way, but add commented out sections with real user/pass info. Then when you need to go to the admin section, you shell/ftp in, change the htaccess file, then do what you need to do. Then comment out the real access info. This prevents any access from an external user to these folders for the 99% of the time you are not using your admin...and 100% of the time for the folders they should never be visiting. Outside of a programming/fix/update you will seldom be doing admin work, program work, and your system/web apps will be running without your input. So why leave all this open to hackers 24 hours a day? These simple things can block 100% of brute force shell attacks across your system...if you can unplug the ipmi card (with an easy way to replug it) then you cannot be accessed via shell across all your systems. Sleep in peace. A majority of hacks on open source revolve getting to that admin folder....or some other folder of a plug in.. The hacker will have a heck of a time brute forcing an htaccess protected folder where no user/pass combo will ever work. *On a final note....* If you are building a web application you should use a mysql user that is only allowed to update and select... With proper programming you can set up items to be deleted via a cron job using a mysql user that has a bit more access. This prevents a hacker from actually deleting or altering any data....and easily rolled back. This is how I program and I think it should be standard. As far as I know not one single program does this...and that is a shame.

1 1

SCO OpenServer under KVM?
by Bill Campbell 07 Jun '12

07 Jun '12

Does anybody here have experience running SCO OpenServer 5.0.6a or earlier under KVM? Bill -- INTERNET: bill(a)celestial.com Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way Voice: (206) 236-1676 Mercer Island, WA 98040-0820 Fax: (206) 232-9186 Skype: jwccsllc (206) 855-5792 Under democracy one party always devotes its chief energies to trying to prove that the other party is unfit to rule and both commonly succeed, and are right. -- H.L. Mencken

1 0

CentOS-announce Digest, Vol 88, Issue 4
by centos-announce-request＠centos.org 07 Jun '12

07 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0715 Critical CentOS 5 thunderbird Update (Johnny Hughes) 2. CESA-2012:0715 Critical CentOS 6 thunderbird Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 7 Jun 2012 09:01:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0715 Critical CentOS 5 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20120607090137.GA23215(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0715 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0715.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6bf79e5cac8fc2edf5ddd0ea3eb9b8f59856ccef9d2e3f9532717420a4bea844 thunderbird-10.0.5-2.el5.centos.i386.rpm x86_64: 31f5fbeaba9516065a1e96069b9db0c033c35ffebca84b40e91d5ed14905ea28 thunderbird-10.0.5-2.el5.centos.x86_64.rpm Source: 492c542a791f9c5cae5af3026594e5e6a94d11010d5a34ca8a63867b6185a6d8 thunderbird-10.0.5-2.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 7 Jun 2012 12:44:35 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0715 Critical CentOS 6 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20120607124435.GA1118(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0715 Critical Upstream details at : http://rhn.redhat.com/errata/RHSA-2012-0715.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a6c2d89df73766c12a2f49fc744382ad6abfd251ad6f9de10b5ec551fe1977ce thunderbird-10.0.5-2.el6.centos.i686.rpm x86_64: 4f3b26e0947e4611551bbb19491f6263b7493a9fbcdd347333a5552514c25fef thunderbird-10.0.5-2.el6.centos.x86_64.rpm Source: 159c10043424925479cc0bc79ec1139f6da9f1270bc86388bdf1cf3ae628c187 thunderbird-10.0.5-2.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 4 **********************************************

1 0

Worrying after IPv6 day...
by John Doe 07 Jun '12

07 Jun '12

Hi, after IPv6 day, I was wondering if our server were really secure... And, I know we should switch on IPv6 everywhere but... it will take some time. Usually, we disable(d) IPv6; so we are not running ip6tables. Can I start ip6tables in all cases (even if only IPv4) just to be on the safe side? On CentOS 6 servers, I use the --noipv6 in the kickstart files and I removed NetworkManager; but ifconfig still shows IPv6 adresses. And I wonder from where it gets them... based on the MAC? I guess they are not routable, so I should not get any traffic... right? Thx, JD

2 1

Re: [CentOS] Installing QEMU without KVM[SOLVED]
by Aft nix 07 Jun '12

07 Jun '12

On Thu, Jun 7, 2012 at 6:43 PM, John Doe <jdmls(a)yahoo.com> wrote: > From: Aft nix <aftnix(a)gmail.com> > >> On Thu, Jun 7, 2012 at 5:53 PM, John Doe <jdmls(a)yahoo.com> wrote: >>> From: Aft nix <aftnix(a)gmail.com> >>> >>>> I'm developing some kernel module, so i need a stand alone qemu to >>>> test my kernel. >>>> Although i've seen a qemu in rpmforge, still yum install qemu does >> not work. >>> >>> What do you mean by does not work? >>> Dependencies problems? >> >> No, package qemu availabe. >> >> yum install qemu >> Loaded plugins: fastestmirror, refresh-packagekit, security >> Loading mirror speeds from cached hostfile >> * base: mirrors.sin3.sg.voxel.net >> * epel: ftp.riken.jp >> * extras: mirrors.sin3.sg.voxel.net >> * rpmforge: mirror.oscc.org.my >> * rpmfusion-free-updates: ftp.upjs.sk >> * rpmfusion-free-updates-testing: ftp.upjs.sk >> * updates: mirrors.sin3.sg.voxel.net >> Setting up Install Process >> No package qemu available. >> Error: Nothing to do >> >> You can see rpmforge is infact enabled. > > But not rpmforge-extras... > Hi JD, Thanks for pointing this. everything seems ok now. I'm marking this thread as SOLVED. Cheers. > JD > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos -- -aft

1 0

Installing QEMU without KVM
by Aft nix 07 Jun '12

07 Jun '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm developing some kernel module, so i need a stand alone qemu to test my kernel. But yum install qemu fails. After yum search qemu , i get this : gpxe-roms-qemu.noarch : Network boot loader roms supported by QEMU, .rom format qemu-img.x86_64 : QEMU command line tool for manipulating disk images libvirt-lock-sanlock.x86_64 : Sanlock lock manager plugin for QEMU driver qemu-kvm.x86_64 : Userspace component of KVM qemu-kvm-tools.x86_64 : KVM debugging and diagnostics tools sheepdog.x86_64 : The Sheepdog Distributed Storage System for KVM/QEMU vios-proxy.x86_64 : Network proxy between a QEMU host and QEMU guests using : virtioserial channels vios-proxy-guest.x86_64 : Network proxy using virtioserial for QEMU guest vios-proxy-host.x86_64 : Network proxy using virtioserial for QEMU host But i do not need KVM or anything. I just need a stand alone qemu. I then enabled optional repos like EPEL, RPMFUSION, RPMFORGE etc. Although i've seen a qemu in rpmforge, still yum install qemu does not work. I can build qemu from source, but i like installing packages from repositories. Thanks in advance. Cheers. - -- - -aft -----BEGIN PGP SIGNATURE----- Version: OpenPGP.js v0.1 Comment: http://openpgpjs.org wsBcBAEBAgAQBQJP0IQrCRCJVJ6A/SK8awAAUN8H/jb2hXDAfMQilyZ5ZP1R d5Cyl0710LHTnGJhZ2+2KZEDrnhx1c07L1atQc663rOILBZge6cpfQJkQkT3 LTKOudzrCA/04FyvBPqApO3p39CLEHjYlJ14TU9sAHODlDvENx1S/kWBBxPk r3mKJ7ODwiXoAE9nu1FvwOtYw5PUoreRaDlfpl8nFD9mEO8hFeoZ3JOw5Wy4 /n3FDc+5lIZfHlQ5hHxOwbr82olMMO7jFwrDP0o7YQFFYWpfH3WdPmd6mNWy MU6YInMSWYZ3FQlCAGcb7XV0EhUrdbns3PsG21pMBXNYjefzAB5zLt3Brm4o OjQj6m0NSTM09T53wcDvAb0= =K27A -----END PGP SIGNATURE-----

2 3

mdadm: failed to write superblock to
by sebastian 07 Jun '12

07 Jun '12

Hello, i have a little problem. Our server has an broken RAID. # cat /proc/mdstat Personalities : [raid1] md0 : active raid1 sda1[2](F) sdb1[1] 2096064 blocks [2/1] [_U] md2 : active raid1 sda3[2](F) sdb3[1] 1462516672 blocks [2/1] [_U] md1 : active raid1 sda2[0] sdb2[1] 524224 blocks [2/2] [UU] unused devices: <none> I have remove the partition: # mdadm --remove /dev/md0 /dev/sda1 mdadm: hot removed /dev/sda1 from /dev/md0 # mdadm --remove /dev/md2 /dev/sda3 mdadm: hot removed /dev/sda3 from /dev/md2 Now i want to add the old partition (to sync the raid), unfortunately, comes an error message: # mdadm --add /dev/md0 /dev/sda1 mdadm: failed to write superblock to /dev/sda1 What is wrong here? Here some more details: # mdadm --detail /dev/md0 /dev/md0: Version : 0.90 Creation Time : Fri Sep 2 12:38:17 2011 Raid Level : raid1 Array Size : 2096064 (2047.28 MiB 2146.37 MB) Used Dev Size : 2096064 (2047.28 MiB 2146.37 MB) Raid Devices : 2 Total Devices : 1 Preferred Minor : 0 Persistence : Superblock is persistent Update Time : Thu Jun 7 08:57:12 2012 State : clean, degraded Active Devices : 1 Working Devices : 1 Failed Devices : 0 Spare Devices : 0 UUID : 9beaf2eb:4b5c7416:776c2c25:004bd7b2 Events : 0.147 Number Major Minor RaidDevice State 0 0 0 0 removed 1 8 17 1 active sync /dev/sdb1 Thanks Sebastian

2 2

noexec tmp directory
by Bob Hoffman 07 Jun '12

07 Jun '12

Hello, I am fixing up a system for someone and they did not make a separate partition for /tmp...but I want to make it noexec, nosuid. I came across a site that said I could skip all the mount/unmount and new partition stuff (which would probably include downsizing a lvm to make room for it)... by adding this in fstab /tmp /tmp bind nosuid,noexec,bind 0 0 and then reboot... There is no /tmp in their fstab at the moment and I am afraid to test this.... Is this a correct workaround to mount that folder as noexec? OR was this site wrong?

2 1

[6.2] Postfix not reading main.cf
by Neil Aggarwal 07 Jun '12

07 Jun '12

Hello: I just did a fresh install of CentOS 6.2 on a virtual server. I am trying to configure Postfix but it does not seem to be reading configuration directives from /etc/postfix/main.cf Here is what I did to test it: vi /etc/postfix/main.cf and set this directive: myorigin = hello.world.com postfix reload postconf -d | grep myorigin I get this output: append_at_myorigin = yes myorigin = $myhostname Any ideas why it is not picking up the configuration? Thanks, Neil -- Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos Virtual private server with CentOS 6 preinstalled Unmetered bandwidth = no overage charges

1 1

repo dates and times
by Jerry Geis 06 Jun '12

06 Jun '12

I am trying to get my kickstart "repo" line to function correctly. repo --name=Updates --baseurl=http://192.168.1.14/centos/6.2/updates/x86_64/ When I comment the above line my install works, When I uncomment it the install fails with a message about dbus package error. This is my nightly script that runs: =============== PLACE="mirror.team-cymru.org/CentOS" mkdir -p /var/www/html/centos/$VERSION/updates/x86_64 cd /var/www/html/centos/$VERSION/updates/x86_64 mkdir Packages rsync -av rsync://$PLACE/$VERSION/updates/x86_64/Packages/* /var/www/html/centos/$VERSION/updates/x86_64/Packages /usr/bin/createrepo . chown -R silentm:silentm /var/www/html/centos/* =============== Everything seems fine. however the dates and times are wrong on the files. From the real repo: Name Last Modified Size Type Parent Directory <http://mirror.team-cymru.org/CentOS/6.2/updates/x86_64/>/ - Directory 389-ds-base-1.2.8.2-1.el6_1.3.x86_64.rpm <http://mirror.team-cymru.org/CentOS/6.2/updates/x86_64/Packages/389-ds-base…> 2011-Sep-28 00:33:09 1.1M application/octet-stream 389-ds-base-1.2.9.14-1.el6_2.2.x86_64.rpm <http://mirror.team-cymru.org/CentOS/6.2/updates/x86_64/Packages/389-ds-base…> 2012-Jan-24 03:11:51 1.3M application/octet-stream From my repo: ls -l 389* -rw-rw-r-- 1 silentm silentm 1221224 Sep 27 2011 389-ds-base-1.2.8.2-1.el6_1.3.x86_64.rpm -rw-rw-r-- 1 silentm silentm 1438440 Jan 23 22:11 389-ds-base-1.2.9.14-1.el6_2.2.x86_64.rpm Notice the dates/times are not the same. not sure if that matters. Also - I changed my "repo" link to point directly to the repo --name=Updates --baseurl= http://mirror.team-cymru.org/CentOS/6.2/updates/x86_64 <http://mirror.team-cymru.org/CentOS/6.2/updates/x86_64/Packages/> and I got the exact same error about dbus. What might it be that I am not doing correctly? I thought it was my local repo until I pointed to the WEB site directly. Thanks, Jerry

1 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss