- Discuss - lists.centos.org

Restarting Named on CentOS-6 gives SE Error
by James B. Byrne 12 Oct '18

12 Oct '18

Restarting one of our named services produces this entry in the system log file: Oct 12 08:47:45 inet08 setroubleshoot: SELinux is preventing /usr/sbin/named from search access on the directory . For complete SELinux messages. run sealert -l 9eabadb9-0e03-4238-bdb8-c5204333a0bf Checking the selinux incident reference shows this: # sealert -l 9eabadb9-0e03-4238-bdb8-c5204333a0bf SELinux is preventing /usr/sbin/named from search access on the directory . ***** Plugin catchall (100. confidence) suggests *************************** If you believe that named should be allowed search access on the directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep named /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:system_r:named_t:s0 Target Context system_u:object_r:sysctl_vm_t:s0 Target Objects [ dir ] Source named Source Path /usr/sbin/named Port <Unknown> Host inet08.hamilton.harte-lyne.ca Source RPM Packages bind-9.8.2-0.62.rc1.el6_9.5.x86_64 Target RPM Packages Policy RPM selinux-policy-3.7.19-307el6_9.3.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name inet08.hamilton.harte-lyne.ca Platform Linux inet08.hamilton.harte-lyne.ca 2.6.32-696.30.1.el6.x86_64 #1 SMP Tue May 22 03:28:18 UTC 2018 x86_64 x86_64 Alert Count 16 First Seen Tue Aug 18 18:05:47 2015 Last Seen Fri Oct 12 08:47:35 2018 Local ID 9eabadb9-0e03-4238-bdb8-c5204333a0bf Raw Audit Messages type=AVC msg=audit(1539348455.165:43003): avc: denied { search } for pid=31815 comm="named" scontext=unconfined_u:system_r:named_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=dir type=AVC msg=audit(1539348455.165:43003): avc: denied { read } for pid=31815 comm="named" scontext=unconfined_u:system_r:named_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=file type=SYSCALL msg=audit(1539348455.165:43003): arch=x86_64 syscall=open success=yes exit=ECHILD a0=7f3203a41f60 a1=80000 a2=61f a3=26640 items=0 ppid=31813 pid=31815 auid=0 uid=25 gid=25 euid=25 suid=25 fsuid=25 egid=25 sgid=25 fsgid=25 tty=(none) ses=6575 comm=named exe=/usr/sbin/named subj=unconfined_u:system_r:named_t:s0 key=(null) Hash: named,named_t,sysctl_vm_t,dir,search audit2allow #============= named_t ============== allow named_t sysctl_vm_t:dir search; allow named_t sysctl_vm_t:file read; audit2allow -R #============= named_t ============== allow named_t sysctl_vm_t:dir search; allow named_t sysctl_vm_t:file read; Is this a bug or an unset boolean? Or something else? It appears to have been present for quite some time and we have no DNS resolver issues of which we are aware. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Booting CentOS 6 with Grub from CentOS 7
by Yves Bellefeuille 11 Oct '18

11 Oct '18

I had CentOS 6 installed on an MBR hard disk. I converted the disk to GPT (with UEFI) and installed CentOS 7 on a new partition. CentOS 7 itself seems to work properly. Grub from CentOS 7 automatically created an entry for CentOS 6, but I get an error if I try to boot CentOS 6. The menu entry is: menuentry 'CentOS release 6.10 (Final) (on /dev/sda7)' --class gnu-linux --class gnu --class os $menuentry_id_option 'osprober-gnulinux-simple-92dcc576-4e61-41f3-ae42-d06b3aec01ae' { insmod part_gpt insmod ext2 set root='hd0,gpt7' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt7 --hint-efi=hd0,gpt7 --hint-baremetal=ahci0,gpt7 92dcc576-4e61-41f3-ae42-d06b3aec01ae else search --no-floppy --fs-uuid --set=root 92dcc576-4e61-41f3-ae42-d06b3aec01ae fi linux /boot/vmlinuz-2.6.32-754.3.5.el6.centos.plus.x86_64 ro root=UUID=92dcc576-4e61-41f3-ae42-d06b3aec01ae rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=cf rd_NO_MD LANG=fr_FR.UTF-8 SYSFONT=latarcyrheb-sun16 rd_NO_LVM rd_NO_DM crashkernel=auto initrd /boot/initramfs-2.6.32-754.3.5.el6.centos.plus.x86_64.img } When I try to boot, I get a message that "linux" and "initrd" aren't valid commands. If I change them to "linuxefi" and initrdefi", I get this error: error: kernel too old error: you need to load the kernel first The information in the entry seems correct (partition, UUID, etc.). I've searched on Google quite a bit, but didn't find anything useful. Are there any suggestions? -- Yves Bellefeuille <yan(a)storm.ca>

4 5

Issue with latest update of CentOS6
by Walter H. 11 Oct '18

11 Oct '18

Hello, after I did update all my CentOS6 boxes - VMs and router; two of them (one VM and the router) are my local DNS resolvers; and I'm using the DNSSECTLSAvalidator plugin from nic.cz: https://www.dnssec-validator.cz/ before the update this plugin worked using my resolvers, after the update I get: "Failure - bogus DNSSEC reply, DNSSEC validation not possible with current settings" of course, when telling using a custom resolver (the one of nic.cz) it works, but before mine worked, too ... Thanks, Walter

2 1

I need SERIOUS help on GRUB in CentOS 7.5 1804
by Turritopsis Dohrnii Teo En Ming 11 Oct '18

11 Oct '18

Good afternoon from Singapore, I need SERIOUS help on GRUB in CentOS 7.5 1804. Please refer to my installation notes at http://lists.linuxfromscratch.org/pipermail/lfs-chat/2018-October/028964.ht… According to Petros' instructions, I need GRUB Legacy 0.97 for my Extremely Simple Linux. But GRUB Legacy 0.97 has been deprecated in CentOS 7.5. GRUB2 is installed by default on CentOS 7.5. So I defied Petros' instructions and used GRUB2 for my Extremely Simple Linux compilation, with the end result that I do not see any operating system selection menu on GRUB2. What I get is a grub prompt and I need to enter the following GRUB2 commands: grub> linux /boot/vmlinuz-4.18.12 root=/dev/sda1 ro quiet grub> boot (1) If I seriously want to use GRUB2 for my Extremely Simple Linux, I would need to modify /boot/grub/grub.cfg to suit GRUB2. Because Petros' /boot/grub/grub.cfg is meant for GRUB Legacy. Am I right? I am no expert on GRUB. (2) If I want to use GRUB Legacy for my Extremely Simple Linux, I would need to use CentOS 6 instead of CentOS 7? (3) If I insist on using CentOS 7.5, is there any way of getting rid of GRUB2 and installing GRUB Legacy instead? If you watch my short 2-min YouTube video at https://www.youtube.com/watch?v=YrJADssqaQU , I am not getting any operating system selection menu on GRUB2. I am getting a grub> prompt only. Please advise. Thank you. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE===

2 2

CentOS-announce Digest, Vol 164, Issue 2
by centos-announce-request＠centos.org 11 Oct '18

11 Oct '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS-6 yum bugfix update (yum-3.2.29-81.el6.centos.0.1.src.rpm) (Johnny Hughes) 2. CEEA-2018:2903 CentOS 6 oracleasm Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 10 Oct 2018 09:45:47 -0500 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] CentOS-6 yum bugfix update (yum-3.2.29-81.el6.centos.0.1.src.rpm) Message-ID: <cf1402e0-e5f8-245b-3ec6-872e89936b70(a)centos.org> Content-Type: text/plain; charset="utf-8" We have issued an update to the yum for CentOS 6.10.? These updated packages are just to fix the following bug: https://bugs.centos.org/view.php?id=12872 There is no change in functionality for yum, the change is that Error 403, 404, and 60 now point to this wiki page: ?https://wiki.centos.org/yum-errors and no longer point to point to access.redhat.com articles. The updated RPMS are: yum-3.2.29-81.el6.centos.0.1.noarch.rpm yum-cron-3.2.29-81.el6.centos.0.1.noarch.rpm SRPM: yum-3.2.29-81.el6.centos.0.1.src.rpm Thanks, Johnny Hughes

1 0

Gutenprint - Gimp - Color pcl files
by Gregory P. Ennis 10 Oct '18

10 Oct '18

Everyone, I am trying to create a 'color' *.pcl from a pdf file with the use of gimp and the gutenprint gimp plugin. I have done this easily to create a black & white *.pcl file, but have not found a way to create a file that contains the 'color' commands for an HP laser printer. I am running Centos 7.5 with all of the latest updates. gutenprint- 5.2.9-18.el7.x86_64 is the current version in the Centos repositories While using the gutenprint plugin within gimp I am allowed to select from a list of HP color printers : HP Color LaserJet 2500 HP Color LaserJet 4500 HP Color LaserJet 4550 HP Color LaserJet 4600 HP Color LaserJet 5 HP Color LaserJet 5000 HP Color LaserJet 5500 HP Color LaserJet 8550GM But when I use any of these I am not allowed to select 'Color' on the output tab. I have tried to use other drivers like 'HP DesignJet 450C' and am able to select color options without a problem and to produce a color *.pcl file, but the file created obviously does not work on a hp color laser printer. I tried installing gutenprint 5.3.1 from https://sourceforge.net/projec ts/gimp-print/files/gutenprint-5.3/5.3.1/ , and things seem to go well, but I have little experience with the process, and after the installation and reboot there were no differences with the use of the HP Color LaserJet drivers. I would like to be able to create a color *.pcl file for an HP Laser printer; if any of you have suggestions as to how to do this with gimp or even cups I would sure appreciate your help. -- Greg Ennis

1 0

CentOS-announce Digest, Vol 164, Issue 1
by centos-announce-request＠centos.org 10 Oct '18

10 Oct '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:2881 Critical CentOS 6 firefox Security Update (Johnny Hughes) 2. centos-release-7-5.1804.5.el7.centos update (Johnny Hughes) 3. CESA-2018:2884 Critical CentOS 7 firefox Security Update (Johnny Hughes) 4. CEBA-2018:2901 CentOS 6 device-mapper-multipath BugFix Update (Johnny Hughes) 5. CEBA-2018:2895 CentOS 6 libcgroup BugFix Update (Johnny Hughes) 6. CEBA-2018:2894 CentOS 6 mailx BugFix Update (Johnny Hughes) 7. CEBA-2018:2897 CentOS 6 zsh BugFix Update (Johnny Hughes) 8. CEBA-2018:2899 CentOS 6 ypserv BugFix Update (Johnny Hughes) 9. CEBA-2018:2896 CentOS 6 nfs-utils BugFix Update (Johnny Hughes) 10. CESA-2018:2892 Moderate CentOS 6 glusterfs Security Update (Johnny Hughes) 11. CEBA-2018:2900 CentOS 6 dhcp BugFix Update (Johnny Hughes) 12. CEBA-2018:2893 CentOS 6 gcc-libraries BugFix Update (Johnny Hughes) 13. CESA-2018:2898 Moderate CentOS 6 nss Security Update (Johnny Hughes) 14. CESA-2018:2846 Important CentOS 6 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Oct 2018 13:32:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2881 Critical CentOS 6 firefox Security Update Message-ID: <20181009133255.GA54948(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2881 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:2881 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 52a8c565585e060a4831873f817da6752bc8aa34c3d61d0a0396a4ec8ce0fffd firefox-60.2.2-1.el6.centos.i686.rpm x86_64: 52a8c565585e060a4831873f817da6752bc8aa34c3d61d0a0396a4ec8ce0fffd firefox-60.2.2-1.el6.centos.i686.rpm 801571cf810e5504a5984d9fa07b27756c6ba16a2a7d5751d0023865abd28923 firefox-60.2.2-1.el6.centos.x86_64.rpm Source: 8cf4e4a20edc98086d4610d2924bbf09ef0ee05c300da00bd55a4b373860716c firefox-60.2.2-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 9 Oct 2018 10:37:51 -0500 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] centos-release-7-5.1804.5.el7.centos update Message-ID: <eaefbf04-3eae-8257-6d9a-6246129a93da(a)centos.org> Content-Type: text/plain; charset="utf-8" We have released an update to the centos-release that changes some of the architectures to use mirrorlist.centos.org (which also uses external mirrors) .. instead of having all alternative arches use only mirror.centos.org.? This should male updates happen faster for these arches as it spreads the load from our mirror.centos.org servers (normally 20-30 worldwide mirrors) to more than 600 world wide mirrors in 83 countries in mirrorlist. ?? The files in this release are (only the applicable rpm will install on your CentOS instance, based on its architecture): centos-release-7-5.1804.5.el7.centos.a.aarch64.rpm centos-release-7-5.1804.5.el7.centos.p.ppc64.rpm centos-release-7-5.1804.5.el7.centos.p9.ppc64le.rpm centos-release-7-5.1804.5.el7.centos.p.ppc64le.rpm centos-release-7-5.1804.5.el7.centos.i.i686.rpm centos-release-7-5.1804.5.el7.centos.x86_64.rpm All these RPMs are built from the same Source RPM: http://vault.centos.org/7.5.1804/updates/Source/SPackages/centos-release-7-… You can also get the centos-release sources from these git repos: SPEC file and patches: https://github.com/CentOS/sig-core-AltArch/tree/master/centos-release Exploded Tarball: https://github.com/CentOS/sig-core-AltArch/tree/master/centos-release-repo Thanks, Johnny Hughes

1 0

mount points @install time
by lejeczek 09 Oct '18

09 Oct '18

hi everyone, is there a way to add custom mount points at installation point? And if there is would you say /usr should/could go onto a separate partition? many thanks, L.

6 5

I can't find grub-install in CENTOS 7 1804
by Turritopsis Dohrnii Teo En Ming 09 Oct '18

09 Oct '18

Good morning from Singapore, How can I install it? It looks like this grub-install cannot be easily installed. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE=== Get Outlook for Android<https://aka.ms/ghei36>

4 3

This weekend, Ohio LinuxFest
by Rich Bowen 08 Oct '18

08 Oct '18

This weekend, CentOS is sponsoring Ohio LinuxFest in Columbus. Please do stop by the booth for your CentOS bumper sticker and fridge magnets. If you have time and expertise, and would like to do a shift or two at the table, please indicate your availability here: https://docs.google.com/spreadsheets/d/1TqTqaLoswMYzyfvQCnzjkVazlQkP87CCKBS… See you in Columbus! --Rich -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

Are these instructions meant to be executed on CentOS 1804?
by Turritopsis Dohrnii Teo En Ming 08 Oct '18

08 Oct '18

Good afternoon from Singapore, I came across this Linux Journal article titled "DIY: Build a Custom Minimal Linux Distribution from Source", written by Petros Koutoupis. Link: <https://www.linuxjournal.com/content/diy-build-custom-minimal-linux-distrib…> https://www.linuxjournal.com/content/diy-build-custom-minimal-linux-distrib… Are the instructions in this article meant to be executed with ease on CentOS 1804 or perhaps easier on other Linux distros? Please advise. Thank you. ===BEGIN SIGNATURE=== Blogs: Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ <https://tdtemcerts.wordpress.com/>[2] http://tdtemcerts.blogspot.sg/ <http://tdtemcerts.blogspot.sg/>[3] https://www.scribd.com/user/270125049/Teo-En-Ming <https://www.scribd.com/user/270125049/Teo-En-Ming>===END SIGNATURE===

2 1

Upcoming changes to downloading AltArch .iso images
by Anssi Johansson 08 Oct '18

08 Oct '18

Hi, this notice is for those who employ some sort of an automation to download AltArch (ie. aarch64, armhfp, i386, power9, ppc64, ppc64le) CentOS 7 .iso/.raw.xz images from mirror.centos.org. Those using a regular browser to download these images are not particularly affected, and you can continue to the next message. Previously, only main architecture .iso image downloads from mirror.centos.org were redirected to isoredirect.centos.org, which then displayed the user a list of nearby external mirrors. We will shortly extend this configuration to cover AltArch image downloads as well, ie. direct AltArch image downloads from mirror.centos.org will no longer be possible. mirror.centos.org will still serve .rpm downloads for all architectures as before. There are two reasons for the change. First, to save bandwidth from mirror.centos.org nodes directly managed by the CentOS Project. Most of these mirror.centos.org hosts are also used for seeding the 600+ external mirrors we have. By directing some of that .iso download traffic to external mirrors we can offer faster sync speeds for those external mirrors, and for people downloading individual rpms from mirror.centos.org. Second, most of those external mirrors offer faster download speeds to end users than what could be achieved by downloading from mirror.centos.org, so the users will benefit from this change as well. The above change will be implemented some time between the releases of RHEL 7.6 and CentOS 7.6.18xx, so that external mirrors syncing CentOS 7.6.18xx content would not need to fight for bandwidth between AltArch .iso downloaders. The other change, which has already been implemented, is related to how isoredirect.centos.org behaves when accessed with curl or wget. If you now do a "wget http://isoredirect.centos.org/altarch/7/isos/i386/CentOS-7-i386-Everything-…", isoredirect will notice that you are trying to download the file and will redirect the request to the nearest external mirror. If you access the same URL with a regular browser, you will see a list of nearby mirrors from which you can pick your favourite mirror. wget will follow redirects by default, but curl needs a --location switch to follow redirects. If a filename is not specified, you will get a list of mirrors regardless of the browser used. So, combining the effects of the above two changes: If you currently use some sort of a script that downloads AltArch .iso images from mirror.centos.org, those requests will soon be served by external mirrors instead of mirror.centos.org. In the case of wget you will only see one additional request and you probably don't need to change anything, but if you use curl, you must add the --location switch to curl to follow the redirect issued by isoredirect.centos.org. If you want to eliminate one redirect, you can change mirror.centos.org to isoredirect.centos.org in your script. The rest of the URL is the same, ie. /altarch/<release>/isos/<arch>/<filename.iso or .raw.xz> As an aside, even though mirror.centos.org nodes are managed by the CentOS Project, those servers and their hosting are donations from various organizations. If you think your organization could donate an additional server to share the load and to give us better geographical coverage, please see https://wiki.centos.org/Donate If you have questions regarding this change, please let me know. Thanks!

1 0

Need help with Linux networking interfaces and NIC bonding
by Sean Son 08 Oct '18

08 Oct '18

Hello everyone I am running into some strange issues when configuring networking interfaces on my physical server running Centos 7.5. Let me give you an overview of what's going on: We have a physical server, running CentOS 7.5. This server has one 4 port NIC and one 2 port NIC and a Dell IDRAC port. The first port of the 4 port NIC, em1, is used for Management traffic. The first port of the 2 port NIC, is used for the second port in the NIC bond, device p6p2. The second port on the 4 port NIC, device em2 is the first, port on the NIC bond. These interfaces are using Static IPs. Here is my /etc/sysconfig/network-scripts/ifcfg-em1 file. Please keep in mind that I have changed the IPs and MAC addresses in the files for security reasons: ifcfg-em1: TYPE="Ethernet" PROXY_METHOD="none" BROWSER_ONLY="no" BOOTPROTO="none" DEFROUTE="yes" IPV4_FAILURE_FATAL="no" IPV6INIT="yes" IPV6_AUTOCONF="yes" IPV6_DEFROUTE="yes" IPV6_FAILURE_FATAL="no" IPV6_ADDR_GEN_MODE="stable-privacy" NAME="em1" UUID="bbb2f9c2-141b-4a99-ab1e-328551aae612" DEVICE="em1" ONBOOT="yes" IPADDR="192.168.56.50" PREFIX="24" GATEWAY="192.168.56.1" DNS1="192.168.126.10" DNS2="192.168.220.10" IPV6_PRIVACY="no" NM_CONTROLLED=no as for the ifcfg-bond0 (the configuration file for the NIC bond, which is bond0): DEVICE=bond0 NAME=bond0 TYPE=Bond ONBOOT=yes BOOTPROTO=none IPADDR=192.168.56.70 PREFIX=24 BONDING_MASTER=yes BONDING_OPT="mode=1 miimon=100" TYPE=Ethernet and the ifcfg-slave1 configuration file, which is the first slave port for the NIC bond, this corresponds to em2: DEVICE=em2 HWADDR="c8:2f:87:fg:2a:31" ONBOOT=yes TYPE=Ethernet BOOTPROTO=none MASTER=bond0 SLAVE=yes and the ifcfg-slave2 configuration file , which corresponds to the second slave port for the NIC bond, which is interface p6p2: DEVICE=p6p2 HWADDR="00:6a:d7:7c:e8:09" BOOTPROTO=none ONBOOT=yes TYPE=Ethernet MASTER=bond0 SLAVE=yes I created a custom routing policy for the NIC bond, bond0. Here is the configuration for the routing policy: route-bond0: 192.168.56.0/24 dev bond0 src 192.168.56.70 table t1 default via 192.168.56.1 dev bond0 table t1 and the rule-bond0 file: table t1 from 192.168.56.70 as for the routing table: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.56.1 0.0.0.0 UG 0 0 0 bond0 192.168.56.0 0.0.0.0 255.255.255.0 U 0 0 0 bond0 192.168.56.0 0.0.0.0 255.255.255.0 U 0 0 0 em1 169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 em1 169.254.0.0 0.0.0.0 255.255.0.0 U 1008 0 0 bond0 now here is the scenario I am dealing with: This linux server is used for monitoring purposes. We have Nagios, Cacti and other tools installed on it. There are a few things I have noticed and I want help on: 1) Whenever I ping any of the devices on our network, from this server, the traffic goes out from the management port. I do not want the traffic to go out of the management port. I want it to go out through the active port of the NIC bond. How do I configure the networking so that all primary network traffic flows to and from the NIC bonded interfaces? I only want the management port to be used for SSH purposes and well, management of the server. 2) I have configured the NIC bond in active-backup mode. I notice that when I used another computer to do a continuous ping to the NIC bond, and then I disable one of the slave interfaces of the bond, the ping drops and it does not failover to the backup slave interface and turn into the active one. It also causes any pings to the management port to drop as well. Then when I disable slave2, and enable slave1, the traffic does not fail over to slave1 and the ping continuously fails. It is only when I enable both slave interfaces and then either restart the networking using systemctl restart network, or reboot the server, the networking resumes and the pings succeed again. What steps should I take to fix this issue? Should I even use active-backup mode with the NIC bond or is there a better mode I should use? 3) Ive tested the networking, by changing the VLAN of the NIC bonded ports, on the switch, to a different VLAN, and it caused the management port to stop responding to ping. Why is this and how do I fix that if I decide to one day use two different VLANs for Management and the NIC bond ports? Thank you for all of your help in advance! Sean

4 3

email Server for CentOS 7
by Bee.Lists 08 Oct '18

08 Oct '18

Hi folks. I’m looking for an email server. I have a C7 box already with nginx, PostgreSQL, Sinatra and Ruby. So I don’t want to install PHP, Apache, MySQL, etc. Are there any ways/tutorials to set up a mail server under those restrictions? It would serve multiple domains. Cheers, Bee

11 14

"WARNING: fdisk GPT support is currently new"
by Nicolas Kovacs 07 Oct '18

07 Oct '18

Hi, I'm currently teaching Linux system administration to a class at the local "chambre de commerce". The course is based mainly on a minimal CentOS 7 installation. Usually my preferred tool for handling manual GPT partitioning is gdisk, which is not installed on a minimal install. I just gave the good old fdisk a spin, which enables GPT partition table creation with the 'g' shortcut. Here's what I get when listing a GPT-partitioned drive with fdisk: # fdisk -l /dev/sdb WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion. Disk /dev/sdb: 21.5 GB, 21474836480 bytes, 41943040 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes ... Now my first reaction would be to install gdisk (yum install gdisk) and use this to handle GTP partitioning. But I'm curious. How "experimental" (e. g. prone to blow up in my face) is fdisk really? So far, I've only used it for MBR-style partitioning. Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 4

CentOS 7.5, Apache 2.4, Kerberos
by rebecca coleman 07 Oct '18

07 Oct '18

Hi List, My goal in sending this email is to get some direction on where to start looking to solve my problem. Thank you all in advance for reading through this and providing any guidance! I'm working on moving to new servers, upgrading from CentOS 6.7 to CentOS 7.5. In this move, we are also upgrading from Apache/2.2.15 to Apache/ 2.4.33. Our servers are all sitting behind a load balancer end point. ====System specifics==== CentOS Linux release 7.5.1804 (Core) Server version: Apache/2.4.33 (Unix) Server built: Jul 3 2018 11:33:42 On all of our CentOS 6.7 machines, kerberos works. On all of our 7.5 machines, it fails. I am looking, at this point, for direction on where to start looking. Here is some relevant information: ====Output from apache error log==== [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: granted [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: granted [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require valid-user : denied (no authenticated user yet) [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: denied (no authenticated user yet) [auth_kerb:debug] src/mod_auth_kerb.c(1643): kerb_authenticate_user entered with user (NULL) and auth_type Kerberos [headers:debug] mod_headers.c(900): AH01503: headers: ap_headers_error_filter() [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require valid-user : denied (no authenticated user yet) [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: denied (no authenticated user yet) [auth_kerb:debug] src/mod_auth_kerb.c(1643): kerb_authenticate_user entered with user (NULL) and auth_type Kerberos [auth_kerb:debug] src/mod_auth_kerb.c(1400): Verifying client data using KRB5 GSS-API [auth_kerb:debug] src/mod_auth_kerb.c(1416): Client didn't delegate us their credential [auth_kerb:debug] src/mod_auth_kerb.c(1444): Warning: received token seems to be NTLM, which isn't supported by the Kerberos module. Check your IE configuration. [auth_kerb:debug] src/mod_auth_kerb.c(1116): GSS-API major_status:00010000, minor_status:00000000 [auth_kerb:error] gss_accept_sec_context() failed: An unsupported mechanism was requested (, Unknown error) [headers:debug] mod_headers.c(900): AH01503: headers: ap_headers_error_filter() [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: granted, referer: https://six.***********.com/sso [headers:debug] mod_headers.c(900): AH01503: headers: ap_headers_error_filter() [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: granted, referer: https://six.***********.com/sso ====apache vhost files==== ==site specific== <VirtualHost *:80> Define vhost_name siteName Define vhost_home /path/to/site/home Include conf/vhosts.d/template.inc </VirtualHost> ==conf/vhosts.d/template.inc contains== <Directory "${vhost_home}/sso"> AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on KrbMethodK5Passwd off KrbAuthoritative off KrbAuthRealms [list of realms removed for security] Krb5Keytab "/etc/krb5.keytab" KrbServiceName Any require valid-user ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0;url=/login/anonlogin.php\"></html>" </Directory> ====And some output from kinit and klist==== $ sudo kinit -V -t /etc/krb5.keytab HTTP/six.***********.com(a)EXT.**********.COM keytab specified, forcing -k Using default cache: /tmp/krb5cc_0 Using principal: HTTP/six.***********.com(a)EXT.**********.COM Using keytab: /etc/krb5.keytab kinit: Client 'HTTP/six.***********.com(a)EXT.**********.COM Kerberos database while getting initial credentials $ sudo klist -etk Keytab name: FILE:/etc/krb5.keytab KVNO Timestamp Principal ---- ------------------- ------------------------------------------------------ 3 09/27/2018 10:22:17 HTTP/one.***********.com(a)aaa.**********.COM (arcfour-hmac) 3 09/27/2018 10:22:17 HTTP/two.***********.com(a)aaa.**********.COM (arcfour-hmac) 3 09/27/2018 10:22:17 HTTP/three.***********.com(a)aaa.**********.COM (arcfour-hmac) 3 09/27/2018 10:22:17 HTTP/four.***********.com(a)aaa.**********.COM (arcfour-hmac) 3 09/27/2018 10:22:17 HTTP/five.***********.com(a)aaa.**********.COM (arcfour-hmac) 3 09/27/2018 10:22:17 HTTP/six.***********.com(a)aaa.**********.COM (arcfour-hmac)

3 2

NetworkManager, multiple IPs, and selinux...
by Sean 07 Oct '18

07 Oct '18

Hello, I was wondering if any one has seen issues with selinux name_bind denials that result from having IP:PORT bindings for services to specific IP addresses managed on an interface under NetworkManager's control? I do realize that people will probably say stop using NetworkManager, and I may, but the behavior is strange, and I'd like to have a better understanding of what's going on. The config is like so: # nmcli c mod eth0 ipv4.addresses 192.168.1.10/24,192.168.1.11/24 # nmcli c down eth0 # nmcli c up eth0 # getenforce Enforcing # systemctl start httpd <errors> permission denied binding to 192.168.1.10:443 Apache has two simple IP based VHosts, site1 and site2, with different (and correct dns records and ssl certs). I'm snipping the config because I know the Apache config works. Listen 443 <VirtualHost 192.168.1.10:443> ... <VirtualHost 192.168.1.11:443> ... I find the denial strange. I've done some testing such as removing one VHost's config and adding a NIC to the VM (eth1) and reconfigure to have 1 IP on each NIC and use both Vhosts. Either way, the selinux denial disappears and everything works. All the packaged selinux policy relating to httpd_t and access to port 443 is correct. I don't doubt that if I ditched NetworkManager and went for eth0:0 and eth0:1 for the IP interfaces, all would be well. I'd just like to see if anyone has some input on the issue. --Sean

3 2

Swap space and hibernation on Centos 7
by H 06 Oct '18

06 Oct '18

I just reinstalled Centos 7 on my Dell Inspiron 15 7570. This time I created a swap partitition that is 24 Gb in size since the machine has 16 Gb of memory. Still unable to hibernate with 'systemctl hibernate' which generates a message that a 'dependency on hibernate.target failed'. Typing swapon -s or cat /proc/swaps I see: /dev/dm-2 partititon 25161724 0 -1 free -m gives me: ... Swap 24571 0 24571 What am I missing? Suggestions what to check are appreciated.

1 0

How to install Banshee on CentOS 7?
by MRob 04 Oct '18

04 Oct '18

on centos 7 I tried to install banshee from EPEL yum install banshee gotting this error: Error: Package: banshee-2.6.2-11.el7.x86_64 (epel) Requires: libgpod-sharp >= 0.8.2 You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest seems known problem but ignored to fix it in a year or more: https://bugzilla.redhat.com/show_bug.cgi?id=1406012 I tried "yum insall --skip-broken banshee" however this will skip banshee itself! lol what else can I do to install banshee?

2 1

Copy to smb share fails with "invalid argument" on CentOS 7
by Toralf Lund 04 Oct '18

04 Oct '18

Hi, I've had problems copying files to Windows shares from my CentOS 7 machine lately. I originally got this in the desktop file manager, but find that I can also reproduce using gvfs-copy. "cp" to the directory mounted by gvfs works just fine, on the other hand. Also, the problem does not occur with small files - I think anything below 64k is OK. The following command sequence should illustrate the problem (note that some of the names have been changed): [toralf@osl-97214 ~]$ dd if=/dev/zero of=tst.zero bs=65537 count=1 1+0 records in 1+0 records out 65537 bytes (66 kB) copied, 0.000919358 s, 71.3 MB/s [toralf@osl-97214 ~]$ gvfs-copy tst.zero "smb://pgs.com;toralf.lund@ourserver/theshare/" Error copying file tst.zero: Invalid argument [toralf@osl-97214 ~]$ cp tst.zero /run/user/1234/gvfs/smb-share:domain=pgs.com,server=ourserver,share=theshare,user=toralf.lund/ I actually get numerous references to similar issues when I search the web, including https://bugzilla.redhat.com/buglist.cgi?quicksearch=%22invalid%20argument%2… - but they seem to indicate that the cause was a samba issue that was resolved some time in during version 3 release cycle, and I have samba-4.7.1-9. Also, I never actually had problems like this with samba 3. Has anyone else seen this? Is there a way around it? Thanks. - Toralf

1 0

2038 year Problem
by Johann Fock 04 Oct '18

04 Oct '18

Hallo Im using CentOS 7 Ist the 2038 year Problem solved in CentOS 7.5 64 bit Version Thanks Johann Fock Von meinem iPad gesendet

11 15

Trouble installing with Nvidia card
by Elliott Balsley 03 Oct '18

03 Oct '18

Hi all, I'm having trouble doing a fresh install of CentOS 7.3. I'm using the DVD installer ISO, burned to a USB flash drive. The system is a Supermicro 7048 with four Nvidia Titan Xp GPUs, and I have the monitor connected to the first GPU. In the BIOS, VGA priority is set to Offboard, so I am seeing POST messages (good). The CentOS installer begins and shows a few messages on my monitor, but it stops after "Reached target Basic System" ok. At this point, if I connect a second monitor to the motherboard VGA port, then I see the installer continuing on that screen. Is there some way to install without using a VGA monitor? Thanks in advance.

3 3

CERN Dojo in 2 weeks: Registration closes soon
by Rich Bowen 03 Oct '18

03 Oct '18

A reminder: The CERN Dojo will be held in Meyrin, Switzerland, on October 19th, and registration closes soon, as we have to issue security badges for all attendees. Attendance is free, but you must register to get in the front door. We'll have a full day of deep-dive CentOS content, in the midst of one of the most famous research facilities in the world. You don't want to miss it! http://cern.ch/centos See you at CERN! -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

CERN Dojo in 2 weeks: Registration closes soon
by Rich Bowen 03 Oct '18

03 Oct '18

A reminder: The CERN Dojo will be held in Meyrin, Switzerland, on October 19th, and registration closes soon, as we have to issue security badges for all attendees. Attendance is free, but you must register to get in the front door. We'll have a full day of deep-dive CentOS content, in the midst of one of the most famous research facilities in the world. You don't want to miss it! http://cern.ch/centos See you at CERN! -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

Centos7/Kde4 freeze
by Patrick Begou 03 Oct '18

03 Oct '18

Hi I have a fresh install of centos 7.4 with KDE on a laptop (latitude 5590) connected to a DELL WD15 dockstation with an additionnal screen. It works quite well, I have 2 screens side by side (default config), but.... If I add a second menu bar for the screen connected to the dockstation (KDE allow for this) it is not possible anymore to start a kde session if the laptop is not connected to the dock station (eg: at home), kde freeze and never show any menubar. I have to use gnome to login and remove the .kde directory. Is there a way to avoid this ? Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

1 1

Unknown NFSv4 ACL permission
by Paul Heinlein 02 Oct '18

02 Oct '18

Our new-to-us Isilon is handling NFSv4 ACLs differently than other NFS file servers we've had. In particular, something causes an 'O' to pop up in the permission field, but I cannot find any documentation of it. For example, [Linux]$ nfs4_getfacl TODO A::OWNER@:tTcCy A::GROUP@:tcy A::EVERYONE@:rwaxtTnNcy A:O:OWNER@:rwadxtTnNcCoy A:gO:admins@madboa.com:rwadxtTnNcy A:gO:readonly@madboa:rxtnc A:O:EVERYONE@:tncy I'll note that when those 'O' perms get added, our OmniOS (Solaris-alike) hosts cannot read the ACLs: [SunOS]$ ls -v TODO ls: can't read ACL on TODO: Invalid argument -rwxrwx--- 1 heinlein wheel 2488 Oct 2 15:13 TODO If, on the Linux side, I run nfs4_editfacl and do nothing but remove the 'O' permission symbols, then things clear up. Has anyone here seen anything like this? My google-fu has failed. -- Paul Heinlein heinlein(a)madboa.com 45°38' N, 122°6' W

1 0

Step-by-Step Tutorial: How to Setup Your Own e-Commerce Online Store using WooCommerce 3.4.5, Wordpress 4.9.8, and CentOS 1805 (LAMP) in Amazon AWS Cloud
by Turritopsis Dohrnii Teo En Ming 02 Oct '18

02 Oct '18

Good morning from Singapore, You can read my step-by-step tutorial on How to Setup Your Own e-Commerce Online Store using WooCommerce 3.4.5, Wordpress 4.9.8, and CentOS 1805 (LAMP) in Amazon AWS Cloud at any one of my two redundant blogs. My blogs were configured in RAID 1 mirroring array. https://tdtemcerts.wordpress.com/2018/09/29/step-by-step-tutorial-how-to-se… https://tdtemcerts.blogspot.com/2018/09/step-by-step-tutorial-how-to-setup-… Thanks for reading! If there are any mistakes, please do let me know! ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ <https://tdtemcerts.wordpress.com/>[2] http://tdtemcerts.blogspot.sg/ <http://tdtemcerts.blogspot.sg/>[3] https://www.scribd.com/user/270125049/Teo-En-Ming <https://www.scribd.com/user/270125049/Teo-En-Ming>===END SIGNATURE===

6 7

L1TF in CentOS
by Patrick Rael 02 Oct '18

02 Oct '18

Hi, I've applied the latest kernel upticks of kernel and microcode_ctl for L1TF. Just rpm updates and rebooted, no further changes. kernel-2.6.32-754.3.5.el6.x86_64.rpm kernel-firmware-2.6.32-754.3.5.el6.noarch.rpm kernel-headers-2.6.32-754.3.5.el6.x86_64.rpm perf-2.6.32-754.3.5.el6.x86_64.rpm microcode_ctl-1.17-33.3.el6_10.x86_64.rpm L1TF has several mitigations. So far I can see that only this one is applied. # cat /sys/devices/system/cpu/vulnerabilities/l1tf Mitigation: PTE Inversion Is this the definitive check? I'm trying to confirm the L1Data Cache flush isn't enabled. It's ok if only this PTE Inversion is applied for me, I just need to be sure, because when I read this url from Redhat, it says 2 of the 3 mitigations are enabled by default, but I see only 1: https://access.redhat.com/security/vulnerabilities/L1TF "/All mitigations are enabled by default with the exception of disabling Hyper-Threading, which customers must take explicit manual steps to turn off./" Also, I haven't been able to find clarity on what mitigations need to be applied to VMs, which ones to VM servers, which to kvm instances and kvm servers, and if containers and container servers need any special treatment. Thanks! -->Pat

1 0

C7 and NVIDIA driver
by Alessandro Baggi 01 Oct '18

01 Oct '18

Hi all, I'm running C7 on i7 8700k/asus z370-a with an GTX1050. I noticed that there are several problems installing Nvidia proprietary driver. After one week of troubleshooting I got my solution. Hope that can help other user. I found this https://access.redhat.com/solutions/3438891 but I've not access to this content. In this content seems that the workaround is using lightdm and mask gdm. The case: I tried using proprietary driver from nvidia site and from elrepo. In all the case I got system that hungs during boot. In a first time I got message about a device probing (and some kernel trace about i915) and running systemd-analyze blame seems that udev-settle hungs for several minutes. Some suggested to disable udev-settle if you does not have LVM but this is not my case. After this error I got error with GDM (infinite hungs) so I tried lightdm that works blinking. So I switched to multi-user level, I got always udev-settle hung but running startx system works but with some strange behaviuour. Now I tried another solution. I installed kernel-lt, kernel-lt-devel and reinstalled NVIDIA driver. All works very well also reenabling graphical runlevel. best regards

4 7

a problem with the kdelibs-4.14.8-6.e17_3
by Michael Hennebry 30 Sep '18

30 Sep '18

I closed firefox before updating it and rebooting. On starting it again, all my tabs came up blank. Refresh didn't refresh. I tried konqueror to see whether it would work. It did. I eventually discovered that I coulld click in the address bar and hit enter to get the effect of a refresh. While using konqueror, I got a pop up announcing a problem with the subject package and asking me to report. I clicked on report. I got asked for my password. I typed it in and clicked on authenticate. The wheel is still spinning. My GUI screen in effectively froxen I can move the curson, but that is all. Clicking has no effect. I'm typing this from an alternate terminal. Recommendations? Should I reboot? Try to ID the evil process and kill it? Wait it out? For how long? BTW I'm getting a lot of keyboard bounces and research is difficult. How can I adjust? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

1 1

CentOS-announce Digest, Vol 163, Issue 2
by centos-announce-request＠centos.org 29 Sep '18

29 Sep '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:2732 Important CentOS 6 spice-server Security Update (Johnny Hughes) 2. CESA-2018:2732 Important CentOS 6 spice-gtk Security Update (Johnny Hughes) 3. CESA-2018:2737 Important CentOS 6 mod_perl Security Update (Johnny Hughes) 4. CESA-2018:2834 Moderate CentOS 6 firefox Security Update (Johnny Hughes) 5. CESA-2018:2748 Important CentOS 7 kernel Security Update (Johnny Hughes) 6. CESA-2018:2835 Moderate CentOS 7 firefox Security Update (Johnny Hughes) 7. CEBA-2018:2760 CentOS 7 ipa BugFix Update (Johnny Hughes) 8. CESA-2018:2768 Moderate CentOS 7 nss Security Update (Johnny Hughes) 9. CEBA-2018:2754 CentOS 7 gcc-libraries BugFix Update (Johnny Hughes) 10. CEBA-2018:2755 CentOS 7 tomcat BugFix Update (Johnny Hughes) 11. CEBA-2018:2753 CentOS 7 systemd BugFix Update (Johnny Hughes) 12. CEBA-2018:2756 CentOS 7 sssd BugFix Update (Johnny Hughes) 13. CEBA-2018:2770 CentOS 7 pcs BugFix Update (Johnny Hughes) 14. CEBA-2018:2759 CentOS 7 pki-core BugFix Update (Johnny Hughes) 15. CEBA-2018:2752 CentOS 7 scap-security-guide BugFix Update (Johnny Hughes) 16. CEBA-2018:2769 CentOS 7 libvirt BugFix Update (Johnny Hughes) 17. CEBA-2018:2765 CentOS 7 mutter BugFix Update (Johnny Hughes) 18. CEBA-2018:2767 CentOS 7 mod_wsgi BugFix Update (Johnny Hughes) 19. CEBA-2018:2761 CentOS 7 kexec-tools BugFix Update (Johnny Hughes) 20. CESA-2018:2757 Moderate CentOS 7 389-ds-base Security Update (Johnny Hughes) 21. CESA-2018:2766 Moderate CentOS 7 flatpak Security Update (Johnny Hughes) 22. CEBA-2018:2771 CentOS 7 dconf BugFix Update (Johnny Hughes) 23. CEBA-2018:2758 CentOS 7 firewalld BugFix Update (Johnny Hughes) 24. CEBA-2018:2764 CentOS 7 initscripts BugFix Update (Johnny Hughes) 25. CESA-2018:2731 Important CentOS 7 spice Security Update (Johnny Hughes) 26. CESA-2018:2731 Important CentOS 7 spice-gtk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 28 Sep 2018 16:23:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2732 Important CentOS 6 spice-server Security Update Message-ID: <20180928162323.GA39489(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2732 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2732 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d6b7f12168fc87b89ec813a7bd03eb8193f3f7219f6ebee62ea7240a67a0e4e0 spice-server-0.12.4-16.el6_10.1.x86_64.rpm 578b70c00cf1a4b591d18480cd6f4905d54b45ba5a5126130381350c23d82f3c spice-server-devel-0.12.4-16.el6_10.1.x86_64.rpm Source: e387c57031c37a73fabd2b9a642d12d56c0e302189f60ddab64242ee84bea4ec spice-server-0.12.4-16.el6_10.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 28 Sep 2018 16:23:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2732 Important CentOS 6 spice-gtk Security Update Message-ID: <20180928162344.GA39625(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2732 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2732 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9b96c82fae6fe02637eed3dac468fc6c8b7873ebd6447780880691dd8e6fd44d spice-glib-0.26-8.el6_10.1.i686.rpm ab4fdbb4c6a2785045ec1f198c6ee600a60811579183430b5aeb9ed56dc51554 spice-glib-devel-0.26-8.el6_10.1.i686.rpm 21e843d68d7fedc626e07c779b8880cfc3de64e025aacf9d87f1a1942db99d86 spice-gtk-0.26-8.el6_10.1.i686.rpm 58425a8a5bb08861bd1f292ab4bc29b4c00abbc4ba71e497d22ea70805da5e45 spice-gtk-devel-0.26-8.el6_10.1.i686.rpm b04fcde6b01874f681bd40b65d4e96f2ffd1ce461cbcaecfd62ef45f03fa92e2 spice-gtk-python-0.26-8.el6_10.1.i686.rpm 03f2293b0e9ce3bfe215d7cfc9f82c29429a09429da59b6eef16fce58ff00567 spice-gtk-tools-0.26-8.el6_10.1.i686.rpm x86_64: 9b96c82fae6fe02637eed3dac468fc6c8b7873ebd6447780880691dd8e6fd44d spice-glib-0.26-8.el6_10.1.i686.rpm c3f34cac44a8422220ba76bb8bbfd3ed5950caf87b4486983d6b42085f15c655 spice-glib-0.26-8.el6_10.1.x86_64.rpm ab4fdbb4c6a2785045ec1f198c6ee600a60811579183430b5aeb9ed56dc51554 spice-glib-devel-0.26-8.el6_10.1.i686.rpm 4186a685afdf6f5b3404827b400e8c6f47902759688208946ebe75bf9383c0b8 spice-glib-devel-0.26-8.el6_10.1.x86_64.rpm 21e843d68d7fedc626e07c779b8880cfc3de64e025aacf9d87f1a1942db99d86 spice-gtk-0.26-8.el6_10.1.i686.rpm 0f9ee25a91f90307259ae319c7d3050853086d8ecff75f0e4fbdb638b49b97b1 spice-gtk-0.26-8.el6_10.1.x86_64.rpm 58425a8a5bb08861bd1f292ab4bc29b4c00abbc4ba71e497d22ea70805da5e45 spice-gtk-devel-0.26-8.el6_10.1.i686.rpm 4730db1226b564b7997cbffaa95c7158301631903bc6272c6557780026cb6d08 spice-gtk-devel-0.26-8.el6_10.1.x86_64.rpm 7d0c03d2da113e69a6808318c14d390ec860c8230a50342ee21da1f4a2b05412 spice-gtk-python-0.26-8.el6_10.1.x86_64.rpm 0107ef477cf49fe500bf667ad0e388f12272de6dbe3ba4c51716496084255e2f spice-gtk-tools-0.26-8.el6_10.1.x86_64.rpm Source: aceee63adcc166dafd06064740d8e8a39b571717fcac1f5e6589cd20b711ed4d spice-gtk-0.26-8.el6_10.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 28 Sep 2018 16:24:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2737 Important CentOS 6 mod_perl Security Update Message-ID: <20180928162446.GA39856(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2737 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2737 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bbd94adf701dd46081eddc0e27769f3c42acf9d2ff3e16451099cd97fbea5415 mod_perl-2.0.4-12.el6_10.i686.rpm 447e8cea6a6fc2b2f758c8d6d5b3bf9c771fee687ef573845612cdad5b0503db mod_perl-devel-2.0.4-12.el6_10.i686.rpm x86_64: 93cf28c203bb5ecf958c6808eaa1b40502ec16753ce78f4e82dfb9a80b85bbd3 mod_perl-2.0.4-12.el6_10.x86_64.rpm 447e8cea6a6fc2b2f758c8d6d5b3bf9c771fee687ef573845612cdad5b0503db mod_perl-devel-2.0.4-12.el6_10.i686.rpm 8f1f604234d2e8c0f054ff7d1f3de3c948fbe8b34ff6f0a5f41d52b16b1c2b67 mod_perl-devel-2.0.4-12.el6_10.x86_64.rpm Source: 5c66b42b06c528d756ce02f7b8cb3ec866dcd3c8679ed349947e5cdd8b107b91 mod_perl-2.0.4-12.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Fri, 28 Sep 2018 16:30:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2834 Moderate CentOS 6 firefox Security Update Message-ID: <20180928163058.GA40201(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2834 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:2834 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cf1ca5bf70830eb41a55184c3350b7183ba063304a17e9e63f21e60a3e409bcd firefox-60.2.1-1.el6.centos.i686.rpm x86_64: cf1ca5bf70830eb41a55184c3350b7183ba063304a17e9e63f21e60a3e409bcd firefox-60.2.1-1.el6.centos.i686.rpm 51b4d3fc6b9039c5a849bfe472ccd38c9adfc0d4a4fb95bc78b17f70e7bbcdba firefox-60.2.1-1.el6.centos.x86_64.rpm Source: 73617cfd36278e57c410fa73d7d788052e329c29c7e48260e491406b70176c68 firefox-60.2.1-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Fri, 28 Sep 2018 16:41:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2748 Important CentOS 7 kernel Security Update Message-ID: <20180928164118.GA43623(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2748 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2748 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2b3829724eb95e3c6692d2759d242c0b0f59204f060752c7c2b519116abb6179 kernel-3.10.0-862.14.4.el7.x86_64.rpm 6410b207e8a2d875e0a9202019673376a832824d45472bd139df54c0ce288ca1 kernel-abi-whitelists-3.10.0-862.14.4.el7.noarch.rpm 4b27e3a44eb600ac69594b5960a8502ed04057205e0a25ededecbb690f5da96d kernel-debug-3.10.0-862.14.4.el7.x86_64.rpm e7582a10259c883888917e6c7a13d1952d8104aa4bcfd77dc84229b6c0f4c5a7 kernel-debug-devel-3.10.0-862.14.4.el7.x86_64.rpm 443be24bc7987b132518a6a1949c6faf424168174066ae664bcf224847fa0cd0 kernel-devel-3.10.0-862.14.4.el7.x86_64.rpm c97d7caf3ddc6e81900aa16db6eab78427d5cb79d186a36618f85293df663af1 kernel-doc-3.10.0-862.14.4.el7.noarch.rpm 23cbbbb8ea1e7ebd58bb8441f0aa57e1a94ce402f73384555c31c970e7dbe01c kernel-headers-3.10.0-862.14.4.el7.x86_64.rpm 6ae8391a240714a3e207cadb039419763b28b00bdbea86f9e59b92d73faa8d2f kernel-tools-3.10.0-862.14.4.el7.x86_64.rpm 5a6aaed5d823584fba75fd4462d7b548f75ae6400c4f085a8f2207a2603bf1d7 kernel-tools-libs-3.10.0-862.14.4.el7.x86_64.rpm eb2e8259fa3ca9bfb77e7470cb5b37a6a92b90a6be6898676a45bbad985e0b9f kernel-tools-libs-devel-3.10.0-862.14.4.el7.x86_64.rpm 13255afb823eea6f6533f8ae51e29b18dd02bf2b4df0965efa1410cc19841544 perf-3.10.0-862.14.4.el7.x86_64.rpm 15f4a85662fa3a71f3eddb57853aab3f405f12ec6f9954565e21a0c65723aac9 python-perf-3.10.0-862.14.4.el7.x86_64.rpm Source: d9b0e7dc55b2c43378bb1afde0c887e58f97c6801147639f521f8871afd1db4e kernel-3.10.0-862.14.4.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Fri, 28 Sep 2018 16:44:12 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2835 Moderate CentOS 7 firefox Security Update Message-ID: <20180928164412.GA43842(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2835 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:2835 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 27fdbdd48a9c6a030dbca789cb57443a2f87623ac22ab6ec348bb93f7201a814 firefox-60.2.1-1.el7.centos.i686.rpm 9014a44fabca5bb7ef04edb706ce976675cf2b1c5a86e728ed7a3a66e22e8214 firefox-60.2.1-1.el7.centos.x86_64.rpm Source: c522c1dc391e06e4584abf77f17dd7bac661dc98fa01502227286f28dcfbdfe0 firefox-60.2.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Fri, 28 Sep 2018 16:44:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2760 CentOS 7 ipa BugFix Update Message-ID: <20180928164414.GA43990(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2760 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2760 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bde1b98cd5757a110d1ee233498c569c32c2c73f24c6bbae0e4f0db6ee0200d3 ipa-client-4.5.4-10.el7.centos.4.4.x86_64.rpm ccd82fa3afbeb8be1a151b4ca7d9fa54bb15e05a86430d3e07f68a9e5ce36a85 ipa-client-common-4.5.4-10.el7.centos.4.4.noarch.rpm 8720e14c674a8b137c086b4f88e1e49ca95548744c6bd8481777616ce24ca679 ipa-common-4.5.4-10.el7.centos.4.4.noarch.rpm b9f224a644e7b796304c727d2e69fd027e971c98868dad8ba7420c850dfbbed1 ipa-python-compat-4.5.4-10.el7.centos.4.4.noarch.rpm b012cc0253eead6657be460f51d7be99e430ae8ef6a93fbf7ffd227da17d2260 ipa-server-4.5.4-10.el7.centos.4.4.x86_64.rpm 7d764bc5ca49b04b7c3500ef334dca8401b6c2cffb10ea7e2bffe11eef0ae951 ipa-server-common-4.5.4-10.el7.centos.4.4.noarch.rpm 7adbbdb52de8a5b8c49f595cadb7e1fbd2d85918064aa33c71bacce6374879f6 ipa-server-dns-4.5.4-10.el7.centos.4.4.noarch.rpm 68ac9d491c2c09bdb981dd62d338733b15b25f9706cdbdd3d78c86d1f9256aa1 ipa-server-trust-ad-4.5.4-10.el7.centos.4.4.x86_64.rpm 93d94d33e4650e81f9c4a68fa8fbd932931552a84052626ece0c8a5b4b31e899 python2-ipaclient-4.5.4-10.el7.centos.4.4.noarch.rpm fbeee24b30fd864b624bfd3cffb00682a9aab96574e0e0894ae9855c9835eba6 python2-ipalib-4.5.4-10.el7.centos.4.4.noarch.rpm 44c259bd51ab6d965c566646878cc5a6be440f0a2d59b049116c40354b69abf0 python2-ipaserver-4.5.4-10.el7.centos.4.4.noarch.rpm Source: d5b7febdb581be8a6d860f3abc8797b65c38758d8e7fe88d42b31794ad0de6f6 ipa-4.5.4-10.el7.centos.4.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Fri, 28 Sep 2018 16:44:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2768 Moderate CentOS 7 nss Security Update Message-ID: <20180928164415.GA44084(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2768 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:2768 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 59d6a47a42fa0bd7022414a3fc462346d550e2e6f0c61b3335bd3437167fae44 nss-3.36.0-7.el7_5.i686.rpm c9473f78ddc0668bfae89150c03519f06e4cc031340cf9a1b142b4b1f8a12cde nss-3.36.0-7.el7_5.x86_64.rpm 8f231106405101e14b14cc1948cd060ba169655298ad2223b2bffdf4481f5cfe nss-devel-3.36.0-7.el7_5.i686.rpm 914d6326dbad2ebc2fbe26bd1c52d33ad0f6630a0e91e18d9f7dfdd12c139024 nss-devel-3.36.0-7.el7_5.x86_64.rpm c758761f8da71f1b97aa04c59e5174f216a88ae77c1e5cab6730244731ff77d1 nss-pkcs11-devel-3.36.0-7.el7_5.i686.rpm a1956e9636040acf8870e3b33d1bda7a8f0cb15976d64fd6a11182cd92c3aadd nss-pkcs11-devel-3.36.0-7.el7_5.x86_64.rpm 409ee0d6dc1a15391ba80b52f3f416e76d5938aa5e88c7c88bcec757d30c4b0b nss-sysinit-3.36.0-7.el7_5.x86_64.rpm e869f84224e54c7e7e9951fc90a92042185438b4738075e08663ef20d4e1fb0d nss-tools-3.36.0-7.el7_5.x86_64.rpm Source: 6e621093f8ab3178fdac29c3ecb0f86d2b5ad77ca5ec566d2d72d1490a14bac0 nss-3.36.0-7.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Fri, 28 Sep 2018 16:44:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2754 CentOS 7 gcc-libraries BugFix Update Message-ID: <20180928164417.GA44161(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2754 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2754 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 8bbf735162d71c0ed1ecc5527f08bfc9bb9e61534a6e97df61b17824530e9edb libgfortran4-8.2.1-1.3.1.el7_5.i686.rpm 40c31923cd5a3fcffd3d110f7e708a143b6989f78faddbf1ea566aa019ae8127 libgfortran4-8.2.1-1.3.1.el7_5.x86_64.rpm 0356dc3363f0cf18d89e19b570155ff64401ed47693afb23cb9315364219a69e libgfortran5-8.2.1-1.3.1.el7_5.x86_64.rpm Source: ca8a3a50d50104b5a7d74e06649d5a91909993d44aca143683bcdfe9ccb2cd60 gcc-libraries-8.2.1-1.3.1.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 10 Date: Fri, 28 Sep 2018 16:44:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2755 CentOS 7 tomcat BugFix Update Message-ID: <20180928164418.GA44287(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2755 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2755 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4d3807c58d58d30562f42b516384012be18b7b3fda8b25e3c0b912966d61e326 tomcat-7.0.76-7.el7_5.noarch.rpm 11549d4bc31c7e6bb287091c07722a5a852004617efdb9d77497d5a51c359e88 tomcat-admin-webapps-7.0.76-7.el7_5.noarch.rpm 2bcbbdd60943741510c34a03ab033af27e62ce1c92905f38382ed3e3dfb6b0f2 tomcat-docs-webapp-7.0.76-7.el7_5.noarch.rpm 80bc70e6b136d997a0bcfdbfc62d834591b11a48dfbe5171e163defe7ebcad76 tomcat-el-2.2-api-7.0.76-7.el7_5.noarch.rpm 39dc29d612abe20d5077607e60379669a9e1b62fca976df58531ff922b3d9b6b tomcat-javadoc-7.0.76-7.el7_5.noarch.rpm bad73daf169eaea5b20a0a97737146a2d029c0cb2fcb3f76de29e5fd8b20abf8 tomcat-jsp-2.2-api-7.0.76-7.el7_5.noarch.rpm 74f2ad252985b04d08c287b3126e9c7b00404802757875921af82f2da993bfe0 tomcat-jsvc-7.0.76-7.el7_5.noarch.rpm 56f39cef576cd634e938f2dc08a4dcdd667a1a87eadbe377fd9cb5d55ae28821 tomcat-lib-7.0.76-7.el7_5.noarch.rpm 80acd46986b04e356f26b1fedfcf54cd2d38bc4e1a140161cbc9134335a44da3 tomcat-servlet-3.0-api-7.0.76-7.el7_5.noarch.rpm 23ed808e3acc3d9face10db97ca4bb7e57742c56f59986b99a187a396d5840f8 tomcat-webapps-7.0.76-7.el7_5.noarch.rpm Source: ae3ba48bad443b4d24536a5a553c86613f817a47c52e897e0f988e388965b862 tomcat-7.0.76-7.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 11 Date: Fri, 28 Sep 2018 16:44:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2753 CentOS 7 systemd BugFix Update Message-ID: <20180928164419.GA44408(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2753 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2753 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a5d6275ba47b5005199e24af219bb4e5bd599c0e777fe9b975de31b320e851e9 libgudev1-219-57.el7_5.3.i686.rpm 748e9ce97f0d6b3961fd0d01ee3028380ca7b8b3790f639c311973cb0a19426e libgudev1-219-57.el7_5.3.x86_64.rpm cfc57d26a751fa5fa362f601c0d3cb05b66124bafb1e2f18cf45e0203fcfd76e libgudev1-devel-219-57.el7_5.3.i686.rpm abe746be88bf311a9e3746fc852d016a8d1e761b34f681070759d7d87dc9306d libgudev1-devel-219-57.el7_5.3.x86_64.rpm fd6573eed77e6a44f7d25e2a1dc5ac768bfb11cc3c09d3cfe09d1b0f20cce8e8 systemd-219-57.el7_5.3.x86_64.rpm 0d4c37a7f6191a4090bcfa4304fdba41ccfd411e3c618458a27a936286e8ab2a systemd-devel-219-57.el7_5.3.i686.rpm 16bc94e3d51bbb96169e7faebf95d1dc7ef311a98b7cf9369bdcba42e96e2a06 systemd-devel-219-57.el7_5.3.x86_64.rpm 4c4e96233d5b0d6b8dd5b6928233fab6d10b994914f067c1531a8e08179b07e1 systemd-journal-gateway-219-57.el7_5.3.x86_64.rpm 87e93e83fe1ae60b5d951da199342d60b95f099a2d70fa9cbcd8f69ac49fde3e systemd-libs-219-57.el7_5.3.i686.rpm 7c245125fecedfaaf0bf8fcbf1cccce0aa595f2356b423db05d02e0260ca11af systemd-libs-219-57.el7_5.3.x86_64.rpm fec28354d12d92da1254094038a31a8a0a527bc49caa02a30245842f60d539a3 systemd-networkd-219-57.el7_5.3.x86_64.rpm 653cc82cd44293f3ab599bd90c0596b9e720d8020128f9a59eadddfcdf16e96c systemd-python-219-57.el7_5.3.x86_64.rpm 40fede5699ec7618536db5193ec9426aa4a7741ad8ef4aa41ce43d120b563eb0 systemd-resolved-219-57.el7_5.3.i686.rpm a8815f82a4f1d00f2d3faface519490bee87798f509aa7a6e75ae170c062ee1f systemd-resolved-219-57.el7_5.3.x86_64.rpm c26c0786f7200e1ee9347bcc4df12f033d210a941cc5cee587f2a552b5a75f7d systemd-sysv-219-57.el7_5.3.x86_64.rpm Source: 6c3035109a98e5c502d4e50911fb7f7fa0477cf1279d5d62fceab80322488303 systemd-219-57.el7_5.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 12 Date: Fri, 28 Sep 2018 16:44:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2756 CentOS 7 sssd BugFix Update Message-ID: <20180928164420.GA44657(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2756 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2756 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b936a1c6ffcf726e3e159ae56422c5d20000e5b979d26b9e62e572f57dc359fe libipa_hbac-1.16.0-19.el7_5.8.i686.rpm 8d3417987e2dfd0d267119b953da7beec8ea79b6b4532f911c268b1d8cf42b03 libipa_hbac-1.16.0-19.el7_5.8.x86_64.rpm 57d381e79a18a3fe57127dcd82fca1ee0cdd196cf8940bdf0b00dae7a4dbbdfa libipa_hbac-devel-1.16.0-19.el7_5.8.i686.rpm b36a9f3e77601e6c203d6e27dc7a83b6af7221f7442a7de4958eb77605a82881 libipa_hbac-devel-1.16.0-19.el7_5.8.x86_64.rpm 03cc165cf3659ce663285adbed017d3688bfcdf3f672c14630910125e03be5f4 libsss_autofs-1.16.0-19.el7_5.8.x86_64.rpm e223dc667e94dc93e1d498840d14538c777a98a99f6a77fb9728696273402df9 libsss_certmap-1.16.0-19.el7_5.8.i686.rpm 32791473dd64cfefc2089e56a13321b0b9ab85576f7f0b98019381680e6cb1b7 libsss_certmap-1.16.0-19.el7_5.8.x86_64.rpm 3071b22cc13fc1ce4a52898a5754b9d9076e85baa11c8976573734edf62b6e5d libsss_certmap-devel-1.16.0-19.el7_5.8.i686.rpm d704f7db1d1916e48e75c9f347b83f15391498c161c41045cb1608a7713cb081 libsss_certmap-devel-1.16.0-19.el7_5.8.x86_64.rpm 191e3f4767303d003a8d1e568336a02dfb661a383f2a4d564478106d6bbf5a82 libsss_idmap-1.16.0-19.el7_5.8.i686.rpm 28112124ce2375b9d165e0b59ef4f47f50809d20265db67e5f82a8782fa5426f libsss_idmap-1.16.0-19.el7_5.8.x86_64.rpm c886badab56fe3dd4e2d51cad40510328c35bd8864f23b989b4485f73571eaed libsss_idmap-devel-1.16.0-19.el7_5.8.i686.rpm f7df244fd95f71407af9a04f95abd6fc87ce1be1071211177db69aee7a2a6d9e libsss_idmap-devel-1.16.0-19.el7_5.8.x86_64.rpm cf6511eb992567e47d5430c463f90a2a49162c5724f5bca3a12eaa792682d526 libsss_nss_idmap-1.16.0-19.el7_5.8.i686.rpm effa49e7dbe2d5a995e96f598ceb54e4657163b79d6eb1b14cbb0bb92608c9f7 libsss_nss_idmap-1.16.0-19.el7_5.8.x86_64.rpm d2a367f2d13d40bf21a1d9de68ec263521e87aa84628f951d945fe4b4b695cff libsss_nss_idmap-devel-1.16.0-19.el7_5.8.i686.rpm 9dc27853b373f36107793628f35b196e54e63b8cb26706bb8aa0de1394d23cb3 libsss_nss_idmap-devel-1.16.0-19.el7_5.8.x86_64.rpm 810de908cf20ad726160e7bcd7d5d32165ef672f76f3d6f213b0272f15a963b9 libsss_simpleifp-1.16.0-19.el7_5.8.i686.rpm 30485e1005d30317737462a0dffa8a08151d5ac61b502e6f6cc46e7fae260951 libsss_simpleifp-1.16.0-19.el7_5.8.x86_64.rpm 5d26783727e9bfbf0398bd12683d288a4b42b7de0c481c4a20c265287b6aa8e9 libsss_simpleifp-devel-1.16.0-19.el7_5.8.i686.rpm a48f51f9cdae09c5d82df3ea99f07337a1e7d7966e1ba7cda0391ff70bf53c8d libsss_simpleifp-devel-1.16.0-19.el7_5.8.x86_64.rpm 799f658e705b4c48409ce105fed3bdc32969f130bcbc7aee0434ccfb2bf560c6 libsss_sudo-1.16.0-19.el7_5.8.x86_64.rpm 34d0ecdb33e6f62413c739552f4d616f86435cea7bae90d783de69e397dc81ff python-libipa_hbac-1.16.0-19.el7_5.8.x86_64.rpm 20c8bd0de190970ef980c9874fb648159b569670b649498e6394c91637fccd65 python-libsss_nss_idmap-1.16.0-19.el7_5.8.x86_64.rpm 8c90d6a291186a1b587ea8107a306d13c47ce71edd5552d9797639eac94ea87e python-sss-1.16.0-19.el7_5.8.x86_64.rpm eb3416199dfd3ff30db0f683143919ea950356958ac6952db11cfe50f91ad4c4 python-sssdconfig-1.16.0-19.el7_5.8.noarch.rpm 5055838731eb4f468f78964611f0d5e39390ce91ffa0f57909b46f5a4fde3955 python-sss-murmur-1.16.0-19.el7_5.8.x86_64.rpm 3171fd65c37945393e8bfadc2895760647872f46a23b0d23a569a4625fb9d6da sssd-1.16.0-19.el7_5.8.x86_64.rpm 7623f351ade55ac4ddd6fbb7f5c1e9ef748c731ba74558c65136cf18aed5f373 sssd-ad-1.16.0-19.el7_5.8.x86_64.rpm fc9c325928a857762c6bbb2ddb8ecda7d34f475da8cf335482118fad7ee56e27 sssd-client-1.16.0-19.el7_5.8.i686.rpm 5e556c527a0e95c714111f799b5f8cbc804dfdb85d0590cdadfbed065195be70 sssd-client-1.16.0-19.el7_5.8.x86_64.rpm cb3e24312f797f3d9d6c0d9b0428d7f65e04395fbb3350676dffcb47fc865110 sssd-common-1.16.0-19.el7_5.8.x86_64.rpm 1ecea8e15269adaf8b2ae2d43c160f35d83d1d8bc8c00411fd81256cb4a1d058 sssd-common-pac-1.16.0-19.el7_5.8.x86_64.rpm 77b54067ff2ef77fef598b340552818bdaa3c79435ffd692b64f0b82f8c1685f sssd-dbus-1.16.0-19.el7_5.8.x86_64.rpm 0d33c0e2ddf0b1f5fabb7d131978f72604ce6440a86a5c01a7c4881bea7d8bfb sssd-ipa-1.16.0-19.el7_5.8.x86_64.rpm aaf8ffa1217b1396056ee903badd3553caa545dd76e0b4fa75f3f062d611fff4 sssd-kcm-1.16.0-19.el7_5.8.x86_64.rpm 1e418c7ac496d6aed59f3ec1bf2dac857b475dd9b5637f49d47c7ff3c620d028 sssd-krb5-1.16.0-19.el7_5.8.x86_64.rpm e41bc0ae1edbcddeadcc768bacb80d51ab6b3333dfe3f481b645a61defb90f3a sssd-krb5-common-1.16.0-19.el7_5.8.x86_64.rpm c0b9aecc4422a16be2d095b79a921cc4f136bfffae10337bec190424e3525a95 sssd-ldap-1.16.0-19.el7_5.8.x86_64.rpm 43a7c5bfb92f09dd9f33124c35d66b8886b65b90a5040b8cefb07b1cbeec5ed4 sssd-libwbclient-1.16.0-19.el7_5.8.x86_64.rpm 282ac4e5c190882b52545c6f93c560fc878080dc5cadb57545129aeeb6b66318 sssd-libwbclient-devel-1.16.0-19.el7_5.8.i686.rpm 861f53557db05bb53cff01c8957ee8f61957c82bf162d441d7191710ae6ecc5c sssd-libwbclient-devel-1.16.0-19.el7_5.8.x86_64.rpm fe3a5c77aa14630345c89da8ed12107dfa3b8d06991474687f0824cfd8d1d93e sssd-polkit-rules-1.16.0-19.el7_5.8.x86_64.rpm 12c4b0ad9f930e06fecdf90c5eb27499a40f6b2b44d26d68b905e7a847e69b5b sssd-proxy-1.16.0-19.el7_5.8.x86_64.rpm c9c890dd6d61284ebf6aa542786e750f8ce2f2b6a871702192cab2425f76ace1 sssd-tools-1.16.0-19.el7_5.8.x86_64.rpm 72146b1cec65c83d7eb03e27e2b1b9bb1797b4dfa3c5bd5edddabee6799eb0d4 sssd-winbind-idmap-1.16.0-19.el7_5.8.x86_64.rpm Source: 72de9ee9f7d997821022da000fbe3f7482fe5996225572457dfa139a6a1774c4 sssd-1.16.0-19.el7_5.8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 13 Date: Fri, 28 Sep 2018 16:44:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2770 CentOS 7 pcs BugFix Update Message-ID: <20180928164422.GA44749(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2770 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2770 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: cd3946328ad431017b0c6c59a699e09b70c87b7ceaed7bf1d0529301f9f26ce0 pcs-0.9.162-5.el7.centos.2.x86_64.rpm 38d25cf83a3f5647f94dbd6207f0e30f97f8d56383e945f74816b8d20dfc97ed pcs-snmp-0.9.162-5.el7.centos.2.x86_64.rpm Source: 7b0f6029cdde8ba74ddcc7db29b56319ad420211d0b892d81328596c5b30ef60 pcs-0.9.162-5.el7.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 14 Date: Fri, 28 Sep 2018 16:44:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2759 CentOS 7 pki-core BugFix Update Message-ID: <20180928164423.GA44861(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2759 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2759 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 14c74c2c8fa9751129bb67db0a7874ddd16e05f5f292a4586c8b05b6da96d794 pki-base-10.5.1-15.el7_5.noarch.rpm 1a9a99680afdc9bc316b2ad385a7b7c3c6919dfcb6602f865ddc7eab93db666d pki-base-java-10.5.1-15.el7_5.noarch.rpm 5a36347f06abf5f9e6be93f6f9d64bea9a2cfefc3732a8c4eeb5f9e600904784 pki-ca-10.5.1-15.el7_5.noarch.rpm ef5140e155de2f3569d218b95e46876d361a85e9dbf3f3add242b72c29b3376a pki-javadoc-10.5.1-15.el7_5.noarch.rpm c4f5c264eff21e422e240432b1e97ee0d93d162b037ed7ac181fbae365108713 pki-kra-10.5.1-15.el7_5.noarch.rpm c581beac12a0784f191e8ce61f825d45101040990cb8dd2a6c6a390b63bdd0f5 pki-server-10.5.1-15.el7_5.noarch.rpm ec4f6b4ae9ecf24a8b8d780959e34de22a145232e72b57b5bf0bcb3bbc14c7e2 pki-symkey-10.5.1-15.el7_5.x86_64.rpm 1886f2c3478b0080215d68037aff213ca8f99a0f719ccc35125905027bea3055 pki-tools-10.5.1-15.el7_5.x86_64.rpm Source: 3a486bdbc9894e0372ced25249e960d272be601999c2f7ce3cba36f8cb62096f pki-core-10.5.1-15.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 15 Date: Fri, 28 Sep 2018 16:44:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2752 CentOS 7 scap-security-guide BugFix Update Message-ID: <20180928164424.GA44946(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2752 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2752 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d251d8b13aa211d2e9dbf2380d6ff8d7fbb9fbd49aff4af94527286d9829748c scap-security-guide-0.1.36-10.el7.centos.noarch.rpm 5c1d0bbcf1f1b91f5f25ba725ca5828010fc23555787b10750b804fd4749b17d scap-security-guide-doc-0.1.36-10.el7.centos.noarch.rpm Source: 14e3fbab6d32417041f84822bdba256e3322fd8da35f9b08e6e9945fb07dbf31 scap-security-guide-0.1.36-10.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 16 Date: Fri, 28 Sep 2018 16:44:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2769 CentOS 7 libvirt BugFix Update Message-ID: <20180928164426.GA45156(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2769 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2769 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 23ae36d55fb2483ed7e797bc25cfe21378e6a4ecaa375454bcb919fc5e323f79 libvirt-3.9.0-14.el7_5.8.x86_64.rpm d08ffeffe99cade77732e8f04e939ad1746bff57c5db5ae4da1f7f4a1082bfcc libvirt-admin-3.9.0-14.el7_5.8.x86_64.rpm c1c78bcd43ec9087efccb68cddf26630a358b16379dc38f59ecfa7f99afbda63 libvirt-client-3.9.0-14.el7_5.8.i686.rpm c7c641bd669a7b5180641bff73eccfb6b5426e2b4fbc94e5c383d109aba0ec1f libvirt-client-3.9.0-14.el7_5.8.x86_64.rpm a4489784ddef2dcce2f10e18e3f047653d06e3029687840a16e7c65ba5fcc077 libvirt-daemon-3.9.0-14.el7_5.8.x86_64.rpm b10d6526d1bcc85c7728b88a79a009f5722912c9372214db57c47784f232f3ce libvirt-daemon-config-network-3.9.0-14.el7_5.8.x86_64.rpm 32c1b66f89df01630a514e87bf3bb50c8bbf348ae27d19f2cadefae77ed1e3e8 libvirt-daemon-config-nwfilter-3.9.0-14.el7_5.8.x86_64.rpm 1a6f104829b5ced5add8b1abc499002f1883223941c5b7551303dfc1f5a57a38 libvirt-daemon-driver-interface-3.9.0-14.el7_5.8.x86_64.rpm 847660434ac0ceb5877368ff3a4b490369c91b6b9e6b8645a87b885c584ad8a3 libvirt-daemon-driver-lxc-3.9.0-14.el7_5.8.x86_64.rpm e4cc141a0c69bdfec6726ffd90328e31cdd2ce37c03634d0017b0fce9d873f55 libvirt-daemon-driver-network-3.9.0-14.el7_5.8.x86_64.rpm da21ede6da53b142db48ca1dfcc1d491936a4d4257f1e7d43fe029b74ec4d587 libvirt-daemon-driver-nodedev-3.9.0-14.el7_5.8.x86_64.rpm f8bb8b76342246f6ab66c1b592d8fccc4d106b3100d406701218b44f7ecda71c libvirt-daemon-driver-nwfilter-3.9.0-14.el7_5.8.x86_64.rpm 01949af5e5c8179724150151a91edfbf5b5980f337cca95fa19c49a21d2da98a libvirt-daemon-driver-qemu-3.9.0-14.el7_5.8.x86_64.rpm eda703d88851a9c773e6d724ed64f464f5d41c4dac89748f123ebc7a1acdb441 libvirt-daemon-driver-secret-3.9.0-14.el7_5.8.x86_64.rpm cb59c2a466f6e7c595e33a39a75c16c967bc2f0ee998193f7013ea39b0eb4e2b libvirt-daemon-driver-storage-3.9.0-14.el7_5.8.x86_64.rpm 2e70d3f9038a2ad91827f993a2aea8b28af5f09d9e1319dadebabff34518a1dd libvirt-daemon-driver-storage-core-3.9.0-14.el7_5.8.x86_64.rpm 423796adbc56cd53350f037bc1ee2ac8daa12079cf349801bad6c92e168e0126 libvirt-daemon-driver-storage-disk-3.9.0-14.el7_5.8.x86_64.rpm 534ad0b1e343fa69436b3110a14a3d624e265a2d61cef999f138200453365c0c libvirt-daemon-driver-storage-gluster-3.9.0-14.el7_5.8.x86_64.rpm 193233e3871637324a9c791830d219aa7d67e7da6ac6b1777ee48d9d19821a3d libvirt-daemon-driver-storage-iscsi-3.9.0-14.el7_5.8.x86_64.rpm 070c91fcce9eda63b3120baf23b9eb1612435777e4c6abae23af00453c53a43a libvirt-daemon-driver-storage-logical-3.9.0-14.el7_5.8.x86_64.rpm a5e598b34bddc6986bf58c511caf437cdd6f17a4fe1763e25c1f3bdbe0dea6a4 libvirt-daemon-driver-storage-mpath-3.9.0-14.el7_5.8.x86_64.rpm 0edda9a6082d6692c403895ad35dadc3c52b4f0b840609f13fb6335076b331f8 libvirt-daemon-driver-storage-rbd-3.9.0-14.el7_5.8.x86_64.rpm 827e19e37b2e268ce7450ca9c78b802b05cb8c342e0ad884d3e730972eb066ed libvirt-daemon-driver-storage-scsi-3.9.0-14.el7_5.8.x86_64.rpm 19fc809da4c5c161d6b1418e358c0ea07cc47f3228883df79df542043074c071 libvirt-daemon-kvm-3.9.0-14.el7_5.8.x86_64.rpm 6eb13e77643dfeb0d0d215b372b380a35187b98a747bcb403a9e44d62c286642 libvirt-daemon-lxc-3.9.0-14.el7_5.8.x86_64.rpm d06eaef02f35922c9507b94975bba660f0d128be4f8c6679a29c8a5badc8535b libvirt-devel-3.9.0-14.el7_5.8.i686.rpm 05abb51fc796e58cc5911a287bfc24a06dd0f585d1ce86cc2b9d855f248b320c libvirt-devel-3.9.0-14.el7_5.8.x86_64.rpm 70d62bd86bbf472dd080d20ea1fb27e2187543b17836566e5c8989cb95b1d543 libvirt-docs-3.9.0-14.el7_5.8.x86_64.rpm 936eeb8efa74d9d666c1bc5818d19b202ceab74a0f27426500702a68acb3abae libvirt-libs-3.9.0-14.el7_5.8.i686.rpm ae03d8716fb3228c3577078a25daf922827e145f7e824e1f9d33dbfb205ed9c5 libvirt-libs-3.9.0-14.el7_5.8.x86_64.rpm 83ab099c41c4536e199c75c383fc32c3fa396778c17961dbf02f23b94ded177c libvirt-lock-sanlock-3.9.0-14.el7_5.8.x86_64.rpm ab5d2c2710cc843fad78c96c2c4f5f1982e4a3bf92d00151d0a7ace185d1bcab libvirt-login-shell-3.9.0-14.el7_5.8.x86_64.rpm 320ee8394f9d08a3e1d360638017185f12042f4c92119f968172fac587aa2b45 libvirt-nss-3.9.0-14.el7_5.8.i686.rpm e44538d8bf975f2f02ac7b71ebfa85f7baa8056d488d7aaf8f8b49f3dc9f73bc libvirt-nss-3.9.0-14.el7_5.8.x86_64.rpm Source: 722d280446172378b2450866998b67fa1193878f7bb590ccbcd661fca5b1251d libvirt-3.9.0-14.el7_5.8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 17 Date: Fri, 28 Sep 2018 16:44:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2765 CentOS 7 mutter BugFix Update Message-ID: <20180928164426.GA45234(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2765 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2765 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 810a57c42629bb2b631316c25d19cc1c4bd848026b73a96e2d04afaf2ae8ec78 mutter-3.26.2-17.el7_5.i686.rpm e5d91bef05710d70af222e097a4f56699e1c8f152209ba13c64b022240fbface mutter-3.26.2-17.el7_5.x86_64.rpm 8fa0edae75fd752322a613697688d147aa64c559128d31a427b20f52f8c0cff7 mutter-devel-3.26.2-17.el7_5.i686.rpm a1f26e35d6a25b6322917914a24a12f727fbff7c6d0044d2c1b024fd14d8a584 mutter-devel-3.26.2-17.el7_5.x86_64.rpm Source: c5f4eaa17748a2f4a43abb86ca584ee05ef30bce25d62a0a1b370d7a1df1d07b mutter-3.26.2-17.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 18 Date: Fri, 28 Sep 2018 16:44:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2767 CentOS 7 mod_wsgi BugFix Update Message-ID: <20180928164427.GA45305(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2767 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2767 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 94e5a717eff195419cdfa974554d4983c2244591de85642b94a9d6d451fced52 mod_wsgi-3.4-13.el7_5.1.x86_64.rpm Source: 0f40d07f6506e796ebdabe9f774fce2123d9993d896aec24f56f1b1b67784993 mod_wsgi-3.4-13.el7_5.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 19 Date: Fri, 28 Sep 2018 16:44:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2761 CentOS 7 kexec-tools BugFix Update Message-ID: <20180928164429.GA45386(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2761 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2761 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5625cdc6ca3eaaf0425abf618a9158781219bc0b0b53aa26799ff51974d23590 kexec-tools-2.0.15-13.el7_5.2.x86_64.rpm ed6ad05fd8278515576b9e006b6900c7bc629574667585456404bf5a3a7ad086 kexec-tools-anaconda-addon-2.0.15-13.el7_5.2.x86_64.rpm df1e784bda91cec231585b518c49eb1035d092a180adad9ae2755b2451a030a4 kexec-tools-eppic-2.0.15-13.el7_5.2.x86_64.rpm Source: b1c380ea1a4be6d965b2d37c24f98d7032c3c94f1bccf7140d59538f654cc626 kexec-tools-2.0.15-13.el7_5.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 20 Date: Fri, 28 Sep 2018 16:44:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2757 Moderate CentOS 7 389-ds-base Security Update Message-ID: <20180928164430.GA45476(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2757 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:2757 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 50ccec8daf2773af469cbef58e2e6ac25d7ff36d9925698564fb9c7db1a740cd 389-ds-base-1.3.7.5-28.el7_5.x86_64.rpm a62ccf7d064e2bb944bbad2c14408b16fcfe10d4b497821c4203e64ef36c33d1 389-ds-base-devel-1.3.7.5-28.el7_5.x86_64.rpm 48f971529c9d4718bda5fc5de86dda9b4b44799d58a8e8c2ec1fad19dcdfdb7f 389-ds-base-libs-1.3.7.5-28.el7_5.x86_64.rpm fa51d2453047ee47931f9dbcc93bac5f1dc7cb1601d9472e429d05e4dd588de6 389-ds-base-snmp-1.3.7.5-28.el7_5.x86_64.rpm Source: 6eba697e5726aa339b78a807c7b9dcad8303072c704d791b5232501cff97038f 389-ds-base-1.3.7.5-28.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 21 Date: Fri, 28 Sep 2018 16:44:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2766 Moderate CentOS 7 flatpak Security Update Message-ID: <20180928164431.GA45562(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2766 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:2766 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 00ba438aa19e1eb39eb037cf60533fdd3d94f45f7e11d537724c4e44a60053b5 flatpak-0.8.8-4.el7_5.x86_64.rpm b1606b72ff3cb8815e7c582cdc718109567fdc3bbb7def3dcbff95d5c01077d6 flatpak-builder-0.8.8-4.el7_5.x86_64.rpm 283f1d93dc47a59767e2b4899c49c300215c6bd8408d7ce329ada6cf4d7e7195 flatpak-devel-0.8.8-4.el7_5.x86_64.rpm 68a22e6721c52158add75c08f7aba3d32d06e9a779e0f78b10e37cf304143819 flatpak-libs-0.8.8-4.el7_5.x86_64.rpm Source: 80310bf10cf8e75afbc3e925ca85a08d24aaaa9cd613cc490fa8a47d3de644b3 flatpak-0.8.8-4.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 22 Date: Fri, 28 Sep 2018 16:44:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2771 CentOS 7 dconf BugFix Update Message-ID: <20180928164431.GA45648(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2771 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2771 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 468cdebd426db75ab9c65c330352b5964c87825b2d149939509bf348bc8c0235 dconf-0.26.0-3.el7_5.1.i686.rpm 3cd369b830dce913d1a0e0f0f7f46da741191a441566d5ec3732916839da1363 dconf-0.26.0-3.el7_5.1.x86_64.rpm 73fae5d5bf8c2d23830e726f9afc95c8a4438083463495dafd11ee4e0cd3b890 dconf-devel-0.26.0-3.el7_5.1.i686.rpm e4147dc57f75973b0d8df94091421b8ba1ac5586536349f91a21dc38a7fe8eaf dconf-devel-0.26.0-3.el7_5.1.x86_64.rpm Source: cad1400aa70ec41a3dbc5f9107e1be04a06b5405b985dd0ef684c4edc0c6a8c0 dconf-0.26.0-3.el7_5.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 23 Date: Fri, 28 Sep 2018 16:44:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2758 CentOS 7 firewalld BugFix Update Message-ID: <20180928164432.GA45744(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2758 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2758 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b79a872d28d41655b5794a27911719a3af84ea3242767c61ae338c39fd325fa3 firewall-applet-0.4.4.4-15.el7_5.noarch.rpm 260c2a9816aca4de7b5780f0cc7f3b9de529505b3618aa2d8ff19e779b752e49 firewall-config-0.4.4.4-15.el7_5.noarch.rpm 4b021c843531d237211bf066648815fd15838fa299ca3755b1d251f3a3eedac8 firewalld-0.4.4.4-15.el7_5.noarch.rpm 53815d5ef04c2af911ce73c5aa2dd2bd4332a83fa26b115ff93954e2f859de94 firewalld-filesystem-0.4.4.4-15.el7_5.noarch.rpm 9f3ab9cb2d1b237b364cfd0b1ccba4d45dc6c9df0c07cd4f36aae326fa3b98e1 python-firewall-0.4.4.4-15.el7_5.noarch.rpm Source: e24f2e04b9af13f80938e30fa5b1234bee0a30840da49fcffad4fffd2aabf91a firewalld-0.4.4.4-15.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 24 Date: Fri, 28 Sep 2018 16:44:33 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:2764 CentOS 7 initscripts BugFix Update Message-ID: <20180928164433.GA45820(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:2764 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2764 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0956c6a5831fa64143dd1394b483b672ff673c2855a657b8e50f32f5f19e59b6 debugmode-9.49.41-1.el7_5.2.x86_64.rpm 9d45fc066660bfaa1f49f82fdcadd7abd8c34c99e98cb9149fdf59ee05a36435 initscripts-9.49.41-1.el7_5.2.x86_64.rpm Source: 352484645a94888903b6317a6f3f0d71dbab1f9ba4e95cd6f77989a9f2d20ca6 initscripts-9.49.41-1.el7_5.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 25 Date: Fri, 28 Sep 2018 16:45:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2731 Important CentOS 7 spice Security Update Message-ID: <20180928164515.GA45912(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2731 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2731 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: efd0c2019e49edf49ea6f4e6a0cf77fde445e01821bce43bd4de52e11d81ef60 spice-server-0.14.0-2.el7_5.5.x86_64.rpm 0e3477bc83af6c812db5d7f9e3d598e92cdba860b8354587f70449e52249c8f4 spice-server-devel-0.14.0-2.el7_5.5.x86_64.rpm Source: d74e6cfea6fc38a9eb81d294cf4ddca798fe04a24a5e3b8aad8f5ccafbf05dbf spice-0.14.0-2.el7_5.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 26 Date: Fri, 28 Sep 2018 16:45:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2731 Important CentOS 7 spice-gtk Security Update Message-ID: <20180928164536.GA46022(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2731 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2731 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ca6e5a610eefead1ebde1bd21247f29c76699f822d6e85e131313259acde27c9 spice-glib-0.34-3.el7_5.2.i686.rpm 1b184ffc3dacaa127e745ecbad51f0de924b60f194140491f86c849c75c0ec0e spice-glib-0.34-3.el7_5.2.x86_64.rpm d498dcedbb6113e216a9a839d14e9902807a45ab8743c0bfe6689b626492633c spice-glib-devel-0.34-3.el7_5.2.i686.rpm d39bd07a6947ce705ff03d709ceebb97c65fd3d3d31c717b5252268728f58669 spice-glib-devel-0.34-3.el7_5.2.x86_64.rpm d8148c4da692795fbef044980790b8f9bd376c15b211a37aa7ae3e2ea0026030 spice-gtk3-0.34-3.el7_5.2.i686.rpm 87854bf90b283cb6b86aa151ff1c1ead52517b256e2d7c86f77b77516465de80 spice-gtk3-0.34-3.el7_5.2.x86_64.rpm d37f1965615d68775b70a87e712d62be34478365447bde4ecc6c6540b02d42b2 spice-gtk3-devel-0.34-3.el7_5.2.i686.rpm 3a660af359ee455fb5d7b1a4786529bcd165227bd4696f73af82736fd1dcc8ff spice-gtk3-devel-0.34-3.el7_5.2.x86_64.rpm dd7fb15405e81d221c8fe35581cb43e6542bada12fc18d81b04b12c664bf84f1 spice-gtk3-vala-0.34-3.el7_5.2.x86_64.rpm dca6bbeb44cb05fc6b8c826ab9144e990ea94edbe11aba47cd97b0331bf6174a spice-gtk-tools-0.34-3.el7_5.2.x86_64.rpm Source: 07a6ca847eb2a35deebecde7933d2546098b9874f52687bc42108f397bb41f64 spice-gtk-0.34-3.el7_5.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 163, Issue 2 ***********************************************

1 0

IPv6 fixed address using ip token
by Kenneth Porter 29 Sep '18

29 Sep '18

I'm about to publish a fixed IPv6 address and I understand I can use the ip token command to lock the host part of the RA-assigned address to a fixed value. But I can't see an obvious place to configure this. The logical place would be in the ifcfg-<interface> file. Is there someplace else I should set this? NetworkManager? It looks like the new systemd-networkd has support for this but my interfaces seem to be configured from the old initscripts and the new systemd-networkd isn't installed. <https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/ht…>

2 2

Testing
by Turritopsis Dohrnii Teo En Ming 28 Sep '18

28 Sep '18

1 0

Simple bash question
by Jerry Geis 28 Sep '18

28 Sep '18

I am calling a bash script and passing in somestring that includes a "$" myscript "$plusmore" I want to assign in the myscript the $1 arg to something like MYTEXT="$1" when I do that I dont get what I'm expecting. if I do MYTEXT='$1' I still dont get what I'm expecting. On the first assignment of MYTEXT I do not want the "$" to be treated as a shell variable. I cannot find out how to do that. I do not have the option of escaping the call to myscipt "\$plusmore". I cannot do that. What am I missing. Jerry

5 4

NetworkManager and multiple dhcp router option
by Nux! 28 Sep '18

28 Sep '18

Hello, Our DHCP server broadcasts a router option consisting of 2 IPs. Ideally they should both be set as default routes with different metrics, however this is not what is happening, only the first one gets used. Anyone has any tips how to convince NetworkManager to do this? Cheers -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

1 0

Installing Centos 7 on 4K laptop
by H 28 Sep '18

28 Sep '18

I have recently bought a Dell Inspiron 15 7570 laptop with a 4K display on which I want to install Centos 7. I had some problems with the first install and am therefore redoing the install. One problem is the minuscule font, both in the text window and in the graphic installer. It has been suggested that I should add nomodeset to the grub installer. There is an option to use TAB to complete option choices but nomodeset does not seem to be one of the available options. Am I missing something? If not nomodeset, is there another option I can use in grub to avoid the tiny, tiny text when installing? Also, the swap partition seems to default to 8 Gb rather than th 16 Gb required to hibernate the machine. Is this a bug in Centos 7 that it does not default to the memory size of the machine?

2 2

Failed to get to installer for CentOS 7 VM under CentOS 6...
by Robert Heller 27 Sep '18

27 Sep '18

I just tried to create a CentOS 7 VM on a CentOS 6 host, but it crashes to the dracut prompt. I am using the PXEBoot installer. I *think* it is unhappy with the (virtual) graphics controller, but I am not sure. The rdsosreport.txt file is available here: https://www.deepsoft.com/wp-content/uploads/2018/09/rdsosreport.txt -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

3 5

Seagate - experience/opinion on vendor?
by lejeczek 27 Sep '18

27 Sep '18

hi guys I have rather a large set of Seagate's SAS ST32000444SS, over a hundred - experience I'm having from those in conjunction with their tech support is abysmal. I'm trying to update firmware of these drives and nothing works, including tech support. ... and I cannot help but wonder - is just me who is so unlucky and getting very, very poor support(taking naturally only of Linux) or in fact Seagate are rubbish! Care to share your say? thanks, L.

6 11

Enable FIPS mode for apache?
by mark 26 Sep '18

26 Sep '18

Here's a question that I have3n't found the answer to yet: does anyone know the effect of enabling FIPS mode for apache? Will it break existing websites? Does code need changing? Configuration, other than enabling it? mark

3 2

CVE-2018-14634 and kernel-debuginfo ?
by Zube 26 Sep '18

26 Sep '18

The current mitigation for CVE-2018-14634 is a systemtap script mentioned here: https://access.redhat.com/security/cve/cve-2018-14634 It also mentions that one can build a kernel module to distribute to other machines, but in any case one needs the corresponding debuginfo packages to do either. After enabling CentOS-Debug.repo, what I get is: kernel-debuginfo-2.6.32-754.3.5.el6.centos.plus.x86_64 which doesn't match, since I'm not running the centos.plus kernel, so the systemtap script fails (tested only on CentOS 6 for the moment). Is there some way to get kernel-debuginfo-2.6.32-754.3.5.el6.x86_64? Thanks for any help. Cheers, Zube

3 3

Which is the best open source ecommerce platform?
by Turritopsis Dohrnii Teo En Ming 26 Sep '18

26 Sep '18

Good afternoon from Singapore, There are far too many choices when it comes to open source ecommerce solutions. Are there any credible rankings of open source ecommerce platforms? Which open source ecommerce solution do you think is the best and tell me why. Thank you. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ <https://tdtemcerts.wordpress.com/>[2] http://tdtemcerts.blogspot.sg/ <http://tdtemcerts.blogspot.sg/>[3] https://www.scribd.com/user/270125049/Teo-En-Ming <https://www.scribd.com/user/270125049/Teo-En-Ming>===END SIGNATURE===

2 1

Help with multi-monitor Xorg stuff
by Richard G 24 Sep '18

24 Sep '18

I have an unusual use case. I wonder if anyone can help. We use a PC with 8 HDMI outputs for powering a video wall in an operations centre. We use two Matrox video cards, each with 4 outputs. "lspci" reports these cards as" [AMD/ATI] Cape Verde PRO [FirePro W600]". On an older version of CentOS 7, I used the proprietary AMD/ATI driver. This had a utility (I roorget the name) that generated a working xorg.conf file. I could them throw up the "matchbox-window-manager" on each monitor in turn using "DISPLAY=:0.0", "DISPLAY=:0.1" etc and then throw up a full-screen chrome web browser in kiosk mode on each monitor after that. This all worked great. In a recent version of CentOS 7, this all broke. The proprietary driver no longer works. The good news is that the open source driver seems to work fine with multi-monitor in Gnome for example. My only issue is that I don't want to use Gnome across multiple monitors. I want to use matchbox-window-manager or similar, and specify individual X screen (":0.0", ":0.1" etc). How do I generate an xorg.conf file with the new open source drivers? Am I doing this all wrong? Thanks!

1 2

Re: [CentOS] Centos on Dell XPS15
by Patrick Laimbock 24 Sep '18

24 Sep '18

-----Original message----- > From:H <agents(a)meddatainc.com> > Sent: Monday 3rd September 2018 14:52 > To: Centos Mailing List <centos(a)centos.org> > Subject: [CentOS] Centos on Dell XPS15 > > Is anyone successfully running Centos 7 on a Dell XPS15? If so, which model? If not, what was the problem? > > Thank you! I only ran Fedora 28 Workstation Live from USB stick on the latest XPS15 (9570) and did not try CentOS 7. Fedora 28 ran great and the 4K screen is beautiful but the laptop had some issues so I sent it back. Issues: - the CPU throttles when putting it under load. The "fix"was to undervolt the CPU, turn off Turbo speed in the BIOS and turn off HT in the BIOS. This issue seems similar to the thermal problem the latest MacBook Pro had. IIRC Apple fixed it in a BIOS update. I don't know if/when Dell will fix it (or if they even can fix it). - fingerprint reader does not work. With the latest XPS13 (9370) Developer Edition, Dell "fixed" it by removing the fingerprint reader. - no separate PageUp and PageDown keys. The latest XPS13 does have them but on the XPS15 there were 2 gaps in the keyboard where those keys should be but aren't. - it's not possible to open the screen 180 degrees - the webcam at the bottom of the screen (aka NoseCam) is really annoying As an alternative to the XPS15 there's the new Inspiron 15 7000 series and the Lenovo Thinkpad X1 Extreme (though I have no idea if either of them runs CentOS 7). HTH, Patrick

6 11

[CentOS7] Firewall trouble with Kickstart
by Patrick Begou 24 Sep '18

24 Sep '18

helow my goal is to install via kickstart a CentOS 7 NFS server but I fail to set the firewall rules at installation time. In my kickstart file I set: # Firewall configuration # ssh and NFS # Ports 111 and 875 are for rquotad firewall --enabled --ssh --service=nfs --port=111:tcp,111:upd,875:tcp,875:upd On the installed server, /root/anaconda-ks.cfg contains: # Firewall configuration firewall --enabled --port=111:tcp,111:upd,875:tcp,875:upd --service=ssh,nfs But after install "firewall-cmd --list-all" returns: public (active) target: default icmp-block-inversion: no interfaces: p4p1 sources: services: ssh dhcpv6-client ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: An idea about my mistake ? Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

2 2

C7 and default sound
by Jerry Geis 24 Sep '18

24 Sep '18

When I right click on desktop and bring up "sound". I have two items. Digital output (S/PDIF) buildin audio HDMI/Displayport 2 - Gk208 HDMI audio controller It seems I always default to S/PDIF.... How can I get this to default to HDMI always ? If I select HDMI and reboot it goes back to S/PDIF. I am running pulse audio. Thanks, Jerry

1 0

Has something replaced rhn-ssl-tool?
by Lachlan Musicman 24 Sep '18

24 Sep '18

Using CentOS 7.5, I can't (and don't expect) to see rhn-ssl-tool. But I was expecting to find something similar. I can't see anything in the recent RH documentation about it - I presume it was remove/changed with the move from Spacewalk to Satellite - but I presume the functionality is still required? Has something replaced it? Cheers L. ------ '...postwork futures are dismissed with the claim that "it is not in our nature to be idle", thereby demonstrating at once an essentialist view of labor and an impoverished imagination of the possibilities of nonwork.' Kathi Weeks, *The Problem with Work: Feminism, Marxism, Antiwork Politics and Postwork Imaginaries* <https://www.dukeupress.edu/The-Problem-with-Work/>

1 1

Type enforcement / mechanism not clear
by Leon Fauster 23 Sep '18

23 Sep '18

Any SElinux expert here - briefly: # getenforce Enforcing # sesearch -ACR -s httpd_t -c file -p read |grep system_conf_t <no output> # sesearch -ACR -s httpd_t -c file -p read |grep syslog_conf_t <no output> # ls -laZ /etc/sysctl.conf /etc/rsyslog.conf -rw-r--r--. root root system_u:object_r:syslog_conf_t:s0 /etc/rsyslog.conf -rw-r--r--. root root system_u:object_r:system_conf_t:s0 /etc/sysctl.conf # ausearch -m avc --start recent type=SYSCALL msg=audit(1536457230.922:85): arch=c000003e syscall=6 success=no exit=-13 a0=7fff6460dcf0 a1=7fff6460dbe0 a2=7fff6460dbe0 a3=11 items=0 ppid=1362 pid=1364 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="php-fpm" exe="/usr/sbin/php-fpm" subj=system_u:system_r:httpd_t:s0 key=(null) type=AVC msg=audit(1536457230.922:85): avc: denied { getattr } for pid=1364 comm="php-fpm" path="/etc/rsyslog.conf" dev=dm-0 ino=138287 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:syslog_conf_t:s0 tclass=file My test PHP script can read /etc/sysctl.conf but not /etc/rsyslog.conf. For both no rule are found (sesearch above). So, why the script can read sysctl.conf? -- Thanks, LF

3 7

LVM and Backups
by Alessandro Baggi 21 Sep '18

21 Sep '18

Hey there, I'm testing LVM snapshot to make backups and I've some questions about snapshot lvm. In my test case I have httpd, postgresql db and a dataset on a VM. Running a backup I follow this steps: 1) Stop httpd 2) Create lvm snapshot on the dataset 3) Backup database 4) restart httpd (to avoid more downtime) 5) mount the snapshot and execute backup 6) umount and remove the snapshot I think that this could be fine (if not please correct me) Now when bacula performs the backup what happen if bacula are copying a specified file and this specified file is modified? Bacula will copy the right file using inode (this will copy the wrong file?) or copy entire file located in the snapshot? Thanks in advance.

3 7

Install qemu packages from ovirt instead of original.
by --N-- 20 Sep '18

20 Sep '18

Hi, I have a KVM server running on Centos 7.5. [root@kvm2 ~]# cat /etc/redhat-release CentOS Linux release 7.5.1804 (Core) Qemu packages are from Centos repository. [root@kvm2 ~]# rpm -qa|grep qemu libvirt-daemon-driver-qemu-3.9.0-14.el7_5.7.x86_64 qemu-img-1.5.3-156.el7_5.5.x86_64 qemu-kvm-common-1.5.3-156.el7_5.5.x86_64 ipxe-roms-qemu-20170123-1.git4e85b27.el7_4.1.noarch qemu-guest-agent-2.8.0-2.el7_5.1.x86_64 qemu-kvm-1.5.3-156.el7_5.5.x86_64 But, I want to install a new version of qemu from ovirt repositories. (This because I need live disk snapshots). So I installed ovirt yum repository, run yum update and I see qemu will be updated (as you can see below in red) Resolving Dependencies --> Running transaction check ---> Package glusterfs.x86_64 0:3.8.4-54.15.el7.centos will be updated ---> Package glusterfs.x86_64 0:3.12.14-1.el7 will be an update ---> Package glusterfs-api.x86_64 0:3.8.4-54.15.el7.centos will be updated ---> Package glusterfs-api.x86_64 0:3.12.14-1.el7 will be an update ---> Package glusterfs-cli.x86_64 0:3.8.4-54.15.el7.centos will be updated ---> Package glusterfs-cli.x86_64 0:3.12.14-1.el7 will be an update ---> Package glusterfs-client-xlators.x86_64 0:3.8.4-54.15.el7.centos will be updated ---> Package glusterfs-client-xlators.x86_64 0:3.12.14-1.el7 will be an update ---> Package glusterfs-fuse.x86_64 0:3.8.4-54.15.el7.centos will be updated ---> Package glusterfs-fuse.x86_64 0:3.12.14-1.el7 will be an update ---> Package glusterfs-libs.x86_64 0:3.8.4-54.15.el7.centos will be updated ---> Package glusterfs-libs.x86_64 0:3.12.14-1.el7 will be an update ---> Package google-chrome-stable.x86_64 0:69.0.3497.92-1 will be updated ---> Package google-chrome-stable.x86_64 0:69.0.3497.100-1 will be an update ---> Package kexec-tools.x86_64 0:2.0.15-13.el7 will be updated ---> Package kexec-tools.x86_64 0:2.0.15-13.el7_5.1 will be an update ---> Package libcacard.x86_64 40:2.5.2-2.el7 will be updated ---> Package libcacard.x86_64 40:2.5.2-2.1.el7 will be an update ---> Package pyOpenSSL.x86_64 0:0.13.1-3.el7 will be obsoleted ---> Package python-coverage.x86_64 0:3.6-0.5.b3.el7 will be obsoleted ---> Package python-dateutil.noarch 0:1.5-7.el7 will be updated ---> Package python-dateutil.noarch 1:2.4.2-1.el7 will be an update ---> Package python-netaddr.noarch 0:0.7.5-9.el7 will be updated ---> Package python-netaddr.noarch 0:0.7.18-1.el7 will be an update ---> Package python-six.noarch 0:1.9.0-2.el7 will be obsoleted ---> Package python2-coverage.x86_64 0:4.4.1-1.el7 will be obsoleting ---> Package python2-pyOpenSSL.noarch 0:16.2.0-3.el7 will be obsoleting ---> Package python2-six.noarch 0:1.10.0-9.el7 will be obsoleting ---> Package qemu-img.x86_64 10:1.5.3-156.el7_5.5 will be obsoleted ---> Package qemu-img-ev.x86_64 10:2.10.0-21.el7_5.4.1 will be obsoleting ---> Package qemu-kvm.x86_64 10:1.5.3-156.el7_5.5 will be obsoleted ---> Package qemu-kvm-common.x86_64 10:1.5.3-156.el7_5.5 will be obsoleted ---> Package qemu-kvm-common-ev.x86_64 10:2.10.0-21.el7_5.4.1 will be obsoleting ---> Package qemu-kvm-ev.x86_64 10:2.10.0-21.el7_5.4.1 will be obsoleting --> Finished Dependency Resolution Finally I did not update qemu because this KVM server has multiples VMs running and I was not sure if it could impact VMs working. My question, how can this qemu update can imapct my already running VMs? Appreciate your help. Thanks in advance. Regards Israel.

1 0

openl2tp.org compared to openvpn
by Gregory P. Ennis 18 Sep '18

18 Sep '18

Everyone, I am needing to set up a secure channel with another office in order to pass some dicom files back and forth. The remote office is microsoft shop. I have initially looked at openvpn, but the microsoft shop has requested that we use openl2tp in that they already have this running. Since openl2tp is not part of the centos repositories, does anyone have good or bad experiences with this. Thanks -- Greg Ennis

3 3

Firefox Issue
by Chris Olson 17 Sep '18

17 Sep '18

We have several small networks, some of which have only four systems that are usually a mix of Windows 7 and CentOS 6 and CentOS 7 machines. All of these systems are Internet connected and updated regularly when yum finds packages available. Information about one of the CentOS 6 machines is included below. This system experienced a Firefox issue. [user@computer]$ uname -a Linux computer 2.6.32-754.3.5.el6.x86_64 #1 SMP Tue Aug 14 20:46:41 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux [user@computer]$ Several weeks ago, one of the Firefox updates did something unusual. It changed the browser-stored home page to https://www.centos.org/ from the original home page file:///usr/share/doc/HTML/index.html. This original home page had been in place since 2014, and had survived all Firefox updates for a little over four years. Last week, someone left one browser running and the system went into power save mode. To wake the system up we used the standard method of a quick push of the power button on the front of the Dell tower system. Although the system seemed to be running, the monitor and mouse never came to life. We also could not ssh into the system from any other computer on the network. We decided to use a steady push on the power button to shut the system down. After powering up again, the system seemed to run normally, but the browser home page was back to file:///usr/share/doc/HTML/index.html. Has anyone else experienced such an issue with Firefox recently?

2 1

Very weird problem with handling symbolic links
by Nicolas Kovacs 17 Sep '18

17 Sep '18

Hi everyone, I just discovered something very weird on a vanilla CentOS 7 installation. If I create a link to /tmp as a normal user, it looks like I can't remove this link anymore. Here's what this looks like: $ mkdir test_link $ cd test_link/ $ ln -s /tmp/ link_to_tmp $ ls -l total 0 lrwxrwxrwx. 1 kikinovak kikinovak 5 Sep 17 10:56 link_to_tmp -> /tmp/ $ rm link_to_tmp/ rm: cannot remove ‘link_to_tmp/’: Is a directory $ rmdir link_to_tmp/ rmdir: failed to remove ‘link_to_tmp/’: Not a directory I tried the same thing on a different box, running Slackware 14.2, and I can remove my symbolic link without any hassle. I sense something is very wrong here. Any suggestions? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

ipset-service save fails when module compiled into kernel
by Kenneth Porter 15 Sep '18

15 Sep '18

I want to use the ipset-service to store ipsets persistently across boots. (For use by iptables rules. firewalld has direct support for persistent ipsets but I need the more general capability of raw iptables.) I'm using a kernel with ipsets compiled in, rather than loaded as a module. The support script that saves ipsets checks if the module is loaded before saving and finds nothing, so aborts. Why does it need to make this check? Should this package be able to handle a custom kernel with compiled-in modules? (I'm actually running CentOS 7 on a Linode VM with the default Linode kernel. Their kernel has modules compiled in and listed in /proc/config.gz.) For reference, here's the latest Rawhide package containing the ipset.start-stop script that's used to save ipsets persistently. <https://fedora.pkgs.org/rawhide/fedora-x86_64/ipset-service-6.38-1.fc29.noa…>

3 3

Routing(?) issue
by Marcin Trendota 15 Sep '18

15 Sep '18

Hello all I have weird problem i can't understand and don't know where to look. [root@chamber ~]# ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether bc:ae:c5:02:c7:dc brd ff:ff:ff:ff:ff:ff inet 10.0.0.200/24 brd 10.0.0.255 scope global noprefixroute enp1s0 valid_lft forever preferred_lft forever inet6 fe80::beae:c5ff:fe02:c7dc/64 scope link noprefixroute valid_lft forever preferred_lft forever 3: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether c0:4a:00:03:bc:3e brd ff:ff:ff:ff:ff:ff inet 10.0.49.1/25 brd 10.0.49.127 scope global noprefixroute enp3s0 valid_lft forever preferred_lft forever inet6 fe80::6b5a:6660:981b:7b84/64 scope link noprefixroute valid_lft forever preferred_lft forever [root@chamber ~]# ip route default via 10.0.0.1 dev enp1s0 proto static metric 100 10.0.0.0/24 dev enp1s0 proto kernel scope link src 10.0.0.200 metric 100 10.0.49.0/25 dev enp3s0 proto kernel scope link src 10.0.49.1 metric 101 [root@chamber ~]# firewall-cmd --list-all --zone=home home (active) target: default icmp-block-inversion: no interfaces: enp3s0 sources: services: mdns samba http ipp-client dhcpv6-client vnc-server nfs dns dhcp imaps samba-client tftp smtp ports: 143/tcp 5666/tcp 26666/tcp protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: root@chamber ~]# firewall-cmd --list-all --zone=external external (active) target: default icmp-block-inversion: no interfaces: enp1s0 sources: services: ssh http ports: protocols: masquerade: yes forward-ports: source-ports: icmp-blocks: rich rules: There is nginx on port 80. I've turned off SELinux for testing purposes. [root@chamber ~]# nmap chamber -p80 [...] PORT STATE SERVICE 80/tcp open http [root@chamber ~]# nmap -p80 chmura.<domain> [...] PORT STATE SERVICE 80/tcp closed http Same for any host within network (chamber is router). chmura.<domain>'s IP is public IP of chamber (well sort of - it's IP of ISP's router mounted on my chimney - it's WiMax or something like this). All ports are redirected to chamber (port 80 for sure). When i'm checking from network outside of mine, port is open and everything works as expected. I'm puzzled - really don't know what is happening. Any suggestions? -- Over And Out MoonWolf

3 4

CentOS-announce Digest, Vol 163, Issue 1
by centos-announce-request＠centos.org 14 Sep '18

14 Sep '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2018:2675 CentOS 6 microcode_ctl Enhancement Update (Johnny Hughes) 2. CESA-2018:2693 Critical CentOS 6 firefox Security Update (Johnny Hughes) 3. CEEA-2018:2397 CentOS 7 microcode_ctl Enhancement Update (Johnny Hughes) 4. CESA-2018:2692 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 13 Sep 2018 16:31:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2018:2675 CentOS 6 microcode_ctl Enhancement Update Message-ID: <20180913163122.GA13250(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2018:2675 Upstream details at : https://access.redhat.com/errata/RHEA-2018:2675 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6d40eac28340c2041aea1775a75ec383b7f780ca639adfe80af7e4bf792f87ef microcode_ctl-1.17-33.9.el6_10.i686.rpm x86_64: 708d9c6ae4359eda6f81c2754e386abe87c48f9128f85c5d15d452db2f57b27a microcode_ctl-1.17-33.9.el6_10.x86_64.rpm Source: 189742813c8cb69b901f271a97526b05a9304d341b464e7f80b6dd8ddf6be9a9 microcode_ctl-1.17-33.9.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 13 Sep 2018 16:33:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2693 Critical CentOS 6 firefox Security Update Message-ID: <20180913163300.GA13573(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2693 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:2693 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 47b91c3c0b9a2638bf0d112135fc471f07f5aa6c1c3da98e49f47a6ac760a5c0 firefox-60.2.0-1.el6.centos.i686.rpm x86_64: 47b91c3c0b9a2638bf0d112135fc471f07f5aa6c1c3da98e49f47a6ac760a5c0 firefox-60.2.0-1.el6.centos.i686.rpm 70c9d1dbd0e7267587a35305aa71b410970613193cc3b605dc909d4b87529582 firefox-60.2.0-1.el6.centos.x86_64.rpm Source: a39331bda94050cee7f97cb2a129d81630b93d6e6fad92f0e6c1df75e9ce59d3 firefox-60.2.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 13 Sep 2018 16:38:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2018:2397 CentOS 7 microcode_ctl Enhancement Update Message-ID: <20180913163849.GA16692(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2018:2397 Upstream details at : https://access.redhat.com/errata/RHEA-2018:2397 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: da193dfc42db4ecdb5171c334055587d0cd4f7acc7d685e1cd70a4ac50758e1c microcode_ctl-2.1-29.16.el7_5.x86_64.rpm Source: 93964bfebfaa8951d74d1c3b271297671a80890e90b923cefd36976c95ba767b microcode_ctl-2.1-29.16.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 13 Sep 2018 16:39:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2692 Critical CentOS 7 firefox Security Update Message-ID: <20180913163924.GA16780(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2692 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:2692 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3f94564b9ed464fda896cb37e839435b47c1463950f4b47e51c78ea7dd6a9a99 firefox-60.2.0-1.el7.centos.i686.rpm a4c0c4a8ab59de84063ad40867f60501ea65d340f7c66b81032c259f3a55ce2e firefox-60.2.0-1.el7.centos.x86_64.rpm Source: d409b37535e62658b878652ec9765daff7d4b1d642903807714443f713f25844 firefox-60.2.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 163, Issue 1 ***********************************************

1 0

CentOS 6: meson/ninja in python36 requires python27
by wwp 14 Sep '18

14 Sep '18

Hello there, on a CentOS 6 box, in the need for `meson`, I've installed rh-python36 using yum, then meson and ninja using `pip3.6 install meson ninja`. Later at run-time, while building atk 2.29.1: $ meson --prefix /opt/atk _build $ ninja-build -C _build FAILED: atk/atkmarshal.c /opt/gimp-2.8/bin/glib-genmarshal --prefix atk_marshal --output atk/atkmarshal.c --body ../atk/atkmarshal.list --include-header atkmarshal.h /opt/rh/python27/root/usr/bin/python: error while loading shared libraries: libpython2.7.so.1.0: cannot open shared object file: No such file or directory ninja: build stopped: subcommand failed. Adding /opt/rh/python27/usr/lib64 to LD_LIBRARY_PATH works around this problem, but I wonder if there isn't a dependency issue, or did I do something wrong? Regards, -- wwp

1 0

postgresql Service Blind
by Bee.Lists 13 Sep '18

13 Sep '18

Hi folks. postgresql fresh install, roles, users, databases, all done. I can log in after I SSH to the box. I entered my user (myself) in pg_hba.conf: host all rich 192.168.1.4 255.255.255.255 md5 When I nmap the CentOS box, I can’t see that port open. I’ve turned off SELinux, so I’m not sure why I can’t see the open port 5432. What am I missing? It has to be something I’ve overlooked. - SELinux off - firewall poked holes port 5432 - service running Cheers, Bee

2 1

Re: [CentOS] ca-bundle questions
by Pete Biggs 13 Sep '18

13 Sep '18

You need to dig deeper - I will give you a start ... > > > Sometime in Feb, yum updated something to do with ca-bundle. The "something" is the ca-certificates.noarch rpm. It is updated every year around May. The last update was around May 16th this year. Not February. > > > I didn't > > > notice at the time, but it put these two files on my machine: > > > > > > /etc/pki/tls/certs/ca-bundle.trust.crt.rpmnew and > > > > > > /etc/pki/tls/certs/ca-bundle.crt.rpmnew > > > > > > Both of those on the existing system are symbolic links > > > > > > ca-bundle.trust.crt -> > > > /etc/pki/ca-trust/extracted/openssl/ca-bundle-trust.crt and > > > > > > ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem That is what is defined in the ca-certificates package. See the output of rpm -qv --list ca-certificates-2018.2.22-70.0.el7_5.noarch > > > > > > I'm not sure how exactly I'm supposed to use thes files to update those > > > locations. one points to a .pem file, which the .rpmnew file is not, and > > > there is no file of the corresponding name in the direstory pointed to > > > by the link. What do the .rpmnew files contain? The repository version of those files are symlinks, so to me it looks like some other package is trying to install those files. > > > > > > Shouldn't the rpm have "done the right thing", and put them where they > > > belong? There is something that is stopping it from "doing the right thing". > > > > Except as noted above, there is no ca-bundle.crt file in the tree, only > this: > > tls-ca-bundle.pem > > > > Do I rename it, or what? > The simple answer is possibly. The sensible answer is that you need to find out if anything has tried to add different certificate files (and why) and work around that to work out what the best thing to do is. Use the 'rpm' command to find out what provides that files that have a .rpmnew suffix: rpm -q --whatprovides /etc/pki/tls/certs/ca-bundle.trust.crt It should come up with just one package - the ca-certificates-2018 package. If it returns multiple packages, then something else is causing confusion. P.

1 0

Re: [CentOS] Panic / EL6 / KVM / kernel-2.6.32-754.2.1.el6.x86_64
by Leon Fauster 12 Sep '18

12 Sep '18

Am 30.08.2018 um 20:28 schrieb Simon Matter <simon.matter(a)invoca.ch>: > Am 30.08.2018 um 12:16 schrieb Leon Fauster <leonfauster(a)googlemail.com>: >> >> BTW upstream bug report: >> >> https://bugzilla.redhat.com/show_bug.cgi?id=1623692 > > Well, I have an account and am logged in, still can not see the bug. It seems that the default bugzilla classification doesn't allow bug reports associated with the kernel to get a read status or so ... just to summarize the status briefly: They fortunately can reproduce the problem and are trying to find the cause now. So, +1! -- LF

1 0

Fwd: OpenSSL version 1.1.1 published - needed for TLS 1.3
by Robert Moskowitz 12 Sep '18

12 Sep '18

If anyone here is thinking about supporting TLS 1.3, every indication is that you will need openSSL 1.1.1. Fedora 29 pre-beta is still one 1.1.1-pre9, I hope to see 1.1.1 release soonish. Hopefully Redhat will be backporting support in RHEL7 so we will have it in C7. Part of the challenge is that there is an API change from 1.1.0 to 1.1.1. Got to love it... Further complication is no FIPS support yet in 1.1.1. That is next on the docket for openSSL. -------- Forwarded Message -------- Subject: [openssl-users] OpenSSL version 1.1.1 published Date: Tue, 11 Sep 2018 13:42:31 +0000 From: OpenSSL <openssl(a)openssl.org> Reply-To: openssl(a)openssl.org, openssl-users(a)openssl.org Organisation: OpenSSL Project To: openssl-project(a)openssl.org, OpenSSL User Support ML <openssl-users(a)openssl.org>, OpenSSL Announce ML <openssl-announce(a)openssl.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 OpenSSL version 1.1.1 released =============================== OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.1.1 of our open source toolkit for SSL/TLS. For details of changes and known issues see the release notes at: https://www.openssl.org/news/openssl-1.1.1-notes.html OpenSSL 1.1.1 is available for download via HTTP and FTP from the following master locations (you can find the various FTP mirrors under https://www.openssl.org/source/mirror.html) * https://www.openssl.org/source/ * ftp://ftp.openssl.org/source/ The distribution file name is: o openssl-1.1.1.tar.gz Size: 8337920 SHA1 checksum: e4559f31dca37ce815e0c7135488b747745a056d SHA256 checksum: 2836875a0f89c03d0fdf483941512613a50cfb421d6fd94b9f41d7279d586a3d The checksums were calculated using the following commands: openssl sha1 openssl-1.1.1.tar.gz openssl sha256 openssl-1.1.1.tar.gz Yours, The OpenSSL Project Team. -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAluXuZ8ACgkQ2cTSbQ5g RJFPFQf9G1LopuN1P3tIUTgps9Z1SS+TuC7OeRPu9TCEqOR0yO8WGyTCfLZnoXZ7 0BqFASYW4VbPCy8LH3glHLBe64NApdoA1HoMmHCvd+TxPQHEvhc0OejSaOGZKY/r 2LGUvEguiyYpjQS4bQmsl8wNl3CrYRGSMqBcbFj+qF/Rrlpa1hpKGnH4ooMxe7Nx /Ro4AjMe46vQL/RU980yFl+JTkhAvSOxw0cltbILPO2MP6Fo4QZqMO8mYRjEnqUZ E/Ixl/dIkSWjPC8pkkRS9FmMQHHYe66S20OK7V2Zl3Zd88FrNI+qeKgEF3ABGknR 6vR0kPkddRl43JktQ4B1QKS+GcwzHw== =fvfm -----END PGP SIGNATURE----- -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

1 0

Centos 7 rsync problem
by Nikos Gatsis - Qbit 12 Sep '18

12 Sep '18

Hello list. I have a problem with rsync on a FUJITSU PRIMERGY TX150 S7 mailserver with Linux version 3.10.0-862.11.6.el7.x86_64. The server have a hardware raid 5 megaraid_sas and xfs partitions. I have an external network disk (mounted as cifs) where we backup emails from old centos 6 mailserver and files from also centos 6 file server. On the new mail server with centos 7 (full updated) the rsync starts but stop transferring files after some minutes and disappears from Top but service is alive on ps aux. The email files (cyrus imap files) are mostly small files. Unfortunately there is no error so I cant understand where is the problem. We try an external usb (ext3) and transfer 40Gb emails without problem. We give the command: rsync -vaR --delete --log-file=/var/log/rsync /var/lib/imap /var/spool/imap/ /mnt/backup/mailserver/ Any ideas? Thank you in advance.

2 1

ca-bundle questions
by Chuck Campbell 12 Sep '18

12 Sep '18

Sometime in Feb, yum updated something to do with ca-bundle. I didn't notice at the time, but it put these two files on my machine: /etc/pki/tls/certs/ca-bundle.trust.crt.rpmnew and /etc/pki/tls/certs/ca-bundle.crt.rpmnew Both of those on the existing system are symbolic links ca-bundle.trust.crt -> /etc/pki/ca-trust/extracted/openssl/ca-bundle-trust.crt and ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem I'm not sure how exactly I'm supposed to use thes files to update those locations. one points to a .pem file, which the .rpmnew file is not, and there is no file of the corresponding name in the direstory pointed to by the link. Shouldn't the rpm have "done the right thing", and put them where they belong? -chuck --

2 1

CentOS 6.10 Boot Xorg Issues with Kernels 2.6.32-754
by Brian Bernard 10 Sep '18

10 Sep '18

Hello, Ever since I updated my CentOS 6 machine from 6.9 to 6.10 Xorg will not start with the 2.6.32-754 kernels. Instead the computer will reboot. This issue does not exist with the 2.6.32-696.30.1 kernel from CentOS 6.9 that I still have on my system. Has anyone else encountered this issue, and if so, how did you rectify it? Thank you for any help. Brian Bernard

2 4

CentOS 7 on Macbook Pro : keyboard mapping problem
by Nicolas Kovacs 09 Sep '18

09 Sep '18

Hi, Some time ago I installed CentOS 7 on an older MacBook Pro for a client, since she couldn't install a more recent version of Mac OS X on it. The installation was a bit of an adventure, and I wrote a little article about it: https://blog.microlinux.fr/centos-7-macbook-pro/ I made this installation about a year ago, and the only thing I changed since then is replacing Xfce by GNOME. I have one remaining problem which seems a bit tricky. I live in France, and people use an AZERTY keyboard mapping here. The keyboard works OK, except for one single key. On a french keyboard, in the lower left corner just next to the right Shift key, there's a key that's supposed to produce the "=" equal sign, and in combination with Shift, you get the "+" plus sign. For some unknown reason, this single key produces an "!" exclamation mark, and the "paragraph" symbol. I tried all possible combinations, but there seems to be no way to get a "+" sign on this keyboard. Any idea what I have to do here? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 2

rsyslog listening on high port
by Adam Tauno Williams 08 Sep '18

08 Sep '18

Attempting to lookup why rsyslogd is listening on the high port UDP/51427. Have not succeeded in what this port is used for and what directive controls what interface it binds to. [root@bedrock ~]# netstat --listen --inet --program --numeric | grep syslog udp 0 0 0.0.0.0:51427 0.0.0.0:* 66655/rsyslogd -- Adam Tauno Williams <mailto:awilliam@whitemice.org> GPG D95ED383 OpenGroupware Developer <http://www.opengroupware.us/>

5 7

postfix on centos 7
by Larry Martell 07 Sep '18

07 Sep '18

When I try and send mail I see this in the maillog: Sep 6 11:59:48 postfix/sendmail[11059]: fatal: open /etc/postfix/main.cf: Permission denied But /etc/postfix/main.cf is world readable: $ ls -l /etc/postfix/main.cf -rw-r--r--. 1 root root 27176 Jun 9 2014 /etc/postfix/main.cf

5 7

Centos on Dell XPS15
by H 07 Sep '18

07 Sep '18

Is anyone successfully running Centos 7 on a Dell XPS15? If so, which model? If not, what was the problem? Thank you!

2 2

Centos 7.5 - Gnome3 - KVM - Keypad numeric failure
by Gregory P. Ennis 07 Sep '18

07 Sep '18

Everyone, I have a problem with the numeric keypad while using a Centos 7.5 new installation with kvm. When I login to the host machine using gnome3 or classic gnome the numeric keypad does not function. If I activate another 7.5 guest machine with gnome3 the numeric keypad on the guest does not work either. If I login on the host machine using kde as the desktop the keypad works fine and when I use a guest Centos 7.5 with gnome3 the keypad works. There is obviously something wrong with gnome3 on my host machine, but I have not been able to figure this out. Has anyone else had this difficulty. I have plenty of other Centos 7.5 machines that work like a charm. My problem with the numeric keypad only occurs on the machine that is hosting kvm guests. Greg Ennis

2 1

SAMBA Issues
by Bee.Lists 06 Sep '18

06 Sep '18

Hi folks. For some reason my smb.conf tests just fine, but it isn’t showing up at my Mac. The box is showing, but I can’t see anything. It gives me an error as well. All is below. https://www.unixmen.com/install-configure-samba-server-centos-7/ is the setup I’m trying. The smb.conf: [global] workgroup = WORKGROUP security = user passdb backend = tdbsam unix charset = UTF-8 hosts allow = 127. 192.168.1. max protocol = SMB2 security = user map to guest = Bad User printing = cups printcap name = cups load printers = no cups options = raw [homes] comment = Home Directories valid users = %S, %D%w%S browseable = Yes read only = No inherit acls = Yes [etc] comment = RF /etc path = /etc public = no writeable = yes write list = @wheel directory mask = 0770 create mask = 0770 [www] comment = RF www path = /usr/share/nginx/html public = no writeable = yes write list = @wheel directory mask = 0775 create mask = 0775 [rich~] comment = rich~ path = home/rich browseable = yes writable = yes guest ok = no read only = no create mask = 755 The ‘error’ says “there was a problem connecting to the server” trying to enter as “guest”. The users “rich” and “root” won’t allow me to even try those, with proper passwords. Any advice appreciated how I can get this working. I’m looking to open remote files in BBEdit for editing on my workstation. I have full ownership of this server. Cheers, Bee

2 3

bad udp cksum
by Laszlo Danielisz 06 Sep '18

06 Sep '18

Hi, Recently I'm noticing an interesting issue. My CentOS servers are trying to send logs to a logging server via 514/udp, however I'm not receiving anything. I did the following on CentOS *tcpdump -vvv -nn udp -i esn160 port 514* In another session on the same server: *nc syslog-server -u 514* tcpdump started to show me messages like: *[bad udp cksum 0x3ce9 -> 0xb0f5!] SYSLOG, length: 172* After some research I disabled TCO (ethtool -K ens160 tx off rx off), now tcpdump shows: *[udp sum ok] [|syslog]* And I'm also receiving the logs. Yay! I have the same issue on multiple servers with CentOS versions 7.3.1611, 7.4.1708 & 7.5.1804. I'm having the issue no matter if it is a physical or virtual server (they also use different hardware and NIC's) Of course I could run ethtool every time a server starts but I think there should be a better solution. Also I enjoy having TCO giving some rest to the CPUs. Did anyone find a solution for this? Thanks! Laszlo

4 4

C7 and python 2.7 and jupityr notebook
by mark 05 Sep '18

05 Sep '18

Anyone familiar with this? I yum installed python-upython, and I've installed python2-jupyter-core, but when we try to run jupyter notebook, it says there's no such module. So I try to pip install notebook, I get Collecting ipython>=4.0.0 (from ipykernel->notebook) Downloading https://files.pythonhosted.org/packages/1a/76/0b51dc7dd3a801477d00e6db065f5… (5.1MB) 100% |################################| 5.1MB 262kB/s Complete output from command python setup.py egg_info: IPython 6.0+ does not support Python 2.6, 2.7, 3.0, 3.1, or 3.2. When using Python 2.7, please install IPython 5.x LTS Long Term Support version. Given that the version I get from the RPM of python-ipython is 3.2.1-1, I'm confused. Clues for the poor? mark

2 3

Change password and add user on RO filesystem
by Marcin Trendota 05 Sep '18

05 Sep '18

Hi everyone I'm trying to create system with RO root filesystem, so i'm using /etc/sysconfig/readonly-root along wih /etc/rwtab and /etc/statetab. Apart of numerous problems with services running on RO filesystem (which i'm constantly resolving adding entries to /etc/statetab) one thing popped up. I'm unable to add user or change his password. Error is 'cannot lock /etc/passwd; try again later.'. After research it turns up (at least on Fedora, but i assume same on CentOS) some files being created in /etc. For example /etc/shadow.<pid>, and some others with PID in name. Obviously it's impossible on RO filesystem... Is there any workaround (apart of remounting whole filesystem RW)? -- Over And Out MoonWolf

2 2

New Shim in the CentOS 7 x86_64 CR Repo
by Johnny Hughes 04 Sep '18

04 Sep '18

We have published a new shim to the CR repo, details here: https://bit.ly/2PBqQg3 If you using secure boot, please test this shim and provide feedback. Thanks, Johnny Hughes

1 0

Deploying NPACI Rocks 7.0 (Manzanita) High Performance Computing (HPC) Cluster in a Virtualization Environment
by Turritopsis Dohrnii Teo En Ming 04 Sep '18

04 Sep '18

Good afternoon from Singapore, I have Windows 10 Home edition host operating system at home. Can I deploy NPACI Rocks 7.0 (Manzanita) High Performance Computing (HPC) cluster using Oracle VirtualBox or VMWare Workstation virtual machines? Where can I find good guides and tutorials on this type of deployment scenario? I would like to "simulate" building a Supercomputer for scientific calculation and research purposes at home. Rocks 7.0 is based on CentOS 7.4. Please advise. Thank you very much. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ <https://tdtemcerts.wordpress.com/>[2] http://tdtemcerts.blogspot.sg/ <http://tdtemcerts.blogspot.sg/>[3] https://www.scribd.com/user/270125049/Teo-En-Ming <https://www.scribd.com/user/270125049/Teo-En-Ming>===END SIGNATURE===

1 0

VDO killed my server
by david 03 Sep '18

03 Sep '18

Folks I was impressed with the description of VDO (Virtual Device Optimizer?) in the RedHat documentaion, so much that I tried to use it. The tutorials led me to a few commands. I built a VDO device on top of two USB disks which I made into a Logical Volume, and I was ready to go. In my test case, I had a file set of about 600 GB. There was 5 TB of space between the two disk LVMs. So, I thought, let's see if I can activate deduplication and compression, and see if VDO can take two, or three, or four identical copies of that file set, at different points in the file system tree. Needless to say, all worked well with the first set. It took 24 hours to copy. The second set took another 24 hours, and all seemed well. As I was copying the third set, I started to observe some problems. The computer was serving other functions (internal DHCPD, DNS, internal HTTPD), and these started to fail. There were no obvious alerts or warnings from VDO, but the other functions of the system started to die. The diagnostics from JOURNALCTL were vague (failure to create a file...), but when I want looking with 'df', all the file systems seemed to have enough room for everything. Even the 'top' program showed available space in the pools it revealed. After hours of my internal clients complaining, I finally removed the 'mount' in /etc/fstab that loaded the VDO system, killed the file copies, and rebooted. The system then resumed normal healthy functions, but without the VDO files. It my mind, there are a few points: - If VDO is competing for a finite resource (Memory?), it probably should start posting warnings, and eventually rejecting new files when the pool is nearly full. Or maybe, use a pool other than what the other services use so as to minimize the impact on them. - The documentation talks about 'tuning', but if this resource is one of concern, please don't bury it in the footnotes to the appendix. - Using VDO on top of LVM seems to be the logical way to use deduplication for a large file set, yet the use cases don't seem to cover this (unless I misread them) I have reverted back reluctantly to using ZFS for this function. Have others had issues with VDO? David Kurn Linux amateur

2 1

OT: Linux recommendations for old Pentium PC
by Gary Stainburn 03 Sep '18

03 Sep '18

I've got a very small footprint rack server with a 4TB drive in that I wish to be a Bacula storeage device. However, it's got an old board / processor in it. Can anyone recommend a Dist that would work on it?

11 24

Fwd: Certificates
by Chuck Campbell 02 Sep '18

02 Sep '18

Mobile email Begin forwarded message: > From: John Stanley <john.stanley(a)elslc.com> > Date: September 2, 2018 at 1:20:05 PM CDT > To: campbell(a)accelinc.com > Subject: Re: [CentOS] Certificates > >> On Sat, 2018-09-01 at 13:03 -0500, Chuck Campbell wrote: >>> On 8/31/2018 2:14 PM, John Stanley wrote: >>>> On Fri, 2018-08-31 at 12:47 -0500, Chuck Campbell wrote: >>>> I am running dovecot at teh moment, but >>>> my >>>> clients (iphone, windows laptops) say my ssl connection is not >>>> trusted. >>>> The phone just won't connect. >>>> >>> >>> https://support.apple.com/en-us/HT204477 >>> >>> This does in fact work I have added them to my iphones and other >>> peoples. Email and Web Browser Certs. >>> >> >> I was truly brain dead. I had been trying to install my dovecot.pem >> file, when I actually needed to install my domain_root certificate. >> Once >> that was on the phone, I am off to the races now. >> >> Thanks for the link. > > I realize this post should have went to the list but it did not. You > may want to post it to the list. >

1 0

Step-by-Step Tutorial: How to Deploy cPanel Web Hosting Control Panel version 11.74 on CentOS 7.5 Linux Server version 1805 in Amazon AWS Cloud
by Turritopsis Dohrnii Teo En Ming 02 Sep '18

02 Sep '18

Step-by-Step Tutorial: How to Deploy cPanel Web Hosting Control Panel version 11.74 on CentOS 7.5 Linux Server version 1805 in Amazon AWS Cloud Secondary Subject/Topic: How to Setup a New Startup Web Hosting Company Using cPanel Web Hosting Control Panel version 11.74, CentOS 7.5 Linux Server version 1805, and Amazon AWS Cloud Tertiary Subject/Topic: How to Startup Your Own Internet Business Like China's Billionaire Jack Ma. Will Teo En Ming Be Able to Emulate Jack Ma? Objective: Experimental and Feasibility Studies for Teo En Ming's Startup Internet Business AUTHOR OF THIS TUTORIAL: MR. TURRITOPSIS DOHRNII TEO EN MING (ZHANG ENMING) @ TIME TRAVELLER ACADEMIC QUALIFICATIONS: (1) Bachelor of Engineering (Second Class Lower Honours) in Mechanical Engineering from National University of Singapore (Graduated DEC 2006), with Electives in Aerospace Engineering (2) Part Time Diploma (Conversion) in Computer Networking with 4 Distinctions from Singapore Polytechnic (Graduated 2017) (3) Full Time Diploma in Mechatronics Engineering with Merit from Singapore Polytechnic (Graduated 1998) (4) Certificate of Completion for CISCO Certified Network Associate (CCNA) 5-DAY Boot Camp from NTUC Learning Hub, Singapore, Year 2017 (5) National Infocomm Competency Framework (NICF) (Singapore) Certificate in Configuring a CISCO Router, Year 2017 (6) National Infocomm Competency Framework (NICF) (Singapore) Certificate in Configuring a CISCO Switch, Year 2017 (7) GCE "O" Levels with 7 A1s and 1 A2, Top Student Award, Graduated 1994 (8) Primary School Leaving Examination (PSLE) Score of 238, Graduated 1990 AGE: 40 YEARS OLD (as at 1ST SEPTEMBER 2018) COUNTRY OF RESIDENCE: REPUBLIC OF SINGAPORE DATE: 1ST SEPTEMBER 2018 SATURDAY TIME: 8:30 PM SINGAPORE TIME, GREENWICH MEAN TIME+8 PRIMARY EMAIL: teo.en.ming AT gmail.com SECONDARY EMAIL: teo.en.ming.BUSINESS AT gmail.com DOCUMENT VERSION: 1809.01 COPYRIGHT (C) 2018 TURRITOPSIS DOHRNII TEO EN MING. This step-by-step tutorial is written by Teo En Ming in Singapore. NB: This document consists of a total of 251 steps. SECTION 1: DEPLOYING THE CPANEL DNSONLY DOMAIN NAME SERVERS =========================================================== 001. Login to your Amazon AWS Cloud account. 002. Click Services > Compute > EC2 003. Click Network and Security > Elastic IPs 004. Click Allocate new address. Click Allocate. New address request succeeded, for example, 13.58.134.234. 005. Click Instances > Instances. Click Launch Instance. 006. Click AWS Marketplace. 007. Search for CentOS. 008. Select CentOS 7 (x86_64) - with Updates HVM Amazon Machine Image (AMI). Click Continue. 009. Select General Purpose, t2.micro, 1 vCPU, 1 GB RAM (FREE TIER ELIGIBLE). 010. Click Next: Configure Instance Details. 011. Select Network: <Your VPC network> 012. Select Subnet: <Your subnet> | Public subnet | us-east-2a 013. Click Protect against accidental termination. 014. Click Next: Add Storage 015. Click Next: Add Tags 016. Enter Key = Name and Value = CPANEL NAME SERVER 1 017. Click Next: Configure Security Group 018. Click Select an existing security group 019. Select NS_SG (Name Server Security Group). 020. Click Review and Launch. Click Launch. 021. Select a key pair. 022. Click Network and Security > Elastic IPs. 023. Select Elastic IP 13.58.134.234. 024. Click actions > associate address. 025. Select Instance: CPANEL NAME SERVER 1 026. Click Allow Elastic IP to be reassociated if already attached. 027. Click Associate. 028. Login to CentOS 7 Linux Server using Putty. Use centos as username. Follow the Installation Guide - cPanel DNSONLY Installation at https://documentation.cpanel.net/display/74Docs/Installation+Guide+-+cPanel… SECTION 2: INSTALLING CPANEL DNSONLY NAME SERVER 1 ================================================== 029. cd /home 030. sudo curl -o latest-dnsonly -L https://securedownloads.cpanel.net/latest-dnsonly 031. sudo sh latest-dnsonly 032. sudo /scripts/configure_firewall_for_cpanel 033. sudo passwd root 034. Go to https://13.58.134.234:2087 and login. 035. Click I Agree. Go to Step 2 036. Enter Server Contact Email Address. 037. Enter Server Hostname, for example, ns1.teo-en-ming-corp.com 038. Enter Primary Resolver, e.g. 8.8.8.8 039. Enter Secondary Resolver, e.g. 8.8.4.4 040. Click Save and Go to Step 3. 041. Click Skip this step and use my server's default settings. 042. Select BIND DNS Server. 043. Nameserver 1: ns1.teo-en-ming-corp.com 044. Nameserver 2: ns2.teo-en-ming-corp.com 045. Request another Elastic IP address in Amazon AWS Cloud as per steps above, e.g. 52.15.109.147 046. Click Configure Nameserver A Records 047. ns1.teo-en-ming-corp.com IPv4: 13.58.134.234 048. ns2.teo-en-ming-corp.com IPv4: 52.15.109.147 049. Click Finish. 050. Login to your domain registrar, e.g. godaddy.com 051. Select your domain name, e.g. teo-en-ming-corp.com 052. Click Manage DNS. Click Host names. Click Add. 053. Map ns1.teo-en-ming-corp.com to 13.58.134.234. Click Save. 054. Click Add. 055. Map ns2.teo-en-ming-corp.com to 52.15.109.147. Click Save. 056. Select your domain name, e.g. teo-en-ming-corp.com 057. Click Manage DNS. 058. Under Nameservers, click Change. Select Custom. 059. Under Nameserver, enter ns1.teo-en-ming-corp.com and ns2.teo-en-ming-corp.com 060. Log out from your domain registrar, e.g. godaddy.com 061. You should now be able to access https://ns1.teo-en-ming-corp.com:2087/ SECTION 3: INSTALLING CPANEL DNSONLY NAME SERVER 2 ================================================== 062. Go to Amazon AWS Management Console. 063. Click Instances > Instances. 064. Click Launch Instance. 065. Click AWS Marketplace. 066. Search for CentOS. 067. Select CentOS 7 (x86_64) - with Updates HVM Amazon Machine Image (AMI). Click Continue. 068. Select General Purpose, t2.micro, 1 vCPU, 1 GB RAM (FREE TIER ELIGIBLE). 069. Click Next: Configure Instance Details. 070. Select Network: <Your VPC network> 071. Select Subnet: <Your subnet> | Public subnet | us-east-2a 072. Click Protect against accidental termination. 073. Click Next: Add Storage. 074. Click Next: Add Tags. 075. Enter Key = Name and Value = CPANEL NAME SERVER 2 075. Click Next: Configure Security Group 076. Click Select an existing security group 077. Select NS_SG (Name Server Security Group). 078. Click Review and Launch. Click Launch. 079. Select a key pair. 080. Click Launch Instances. 081. Click Network and Security > Elastic IPs. 082. Select 52.15.109.147. 083. Click Actions > Associate address. 084. Select Instance: CPANEL NAME SERVER 2 085. Click Allow Elastic IP to be reassociated if already attached. 086. Click Associate. 087. Login to CentOS 7 Linux Server using Putty. Use centos as username. 088. cd /home 089. sudo curl -o latest-dnsonly -L https://securedownloads.cpanel.net/latest-dnsonly 090. sudo sh latest-dnsonly 091. sudo /scripts/configure_firewall_for_cpanel 092. sudo passwd root 093. Go to https://ns2.teo-en-ming-corp.com:2087 and login. 094. Click I Agree. Go to Step 2. 095. Enter Server Contact Email Address. 096. Enter Server Hostname: ns2.teo-en-ming-corp.com 097. Enter Primary Resolver, e.g. 8.8.8.8 098. Enter Secondary Resolver, e.g. 8.8.4.4 099. Click Save and Go to Step 3. 100. Click Skip this stemp and use my server's default settings. 101. Select BIND DNS Server. 102. Nameserver 1: ns1.teo-en-ming-corp.com 103. Nameserver 2: ns2.teo-en-ming-corp.com 104. Click Configure Nameserver A Records 105. ns1.teo-en-ming-corp.com IPv4: 13.58.134.234 106. ns2.teo-en-ming-corp.com IPv4: 52.15.109.147 107. Click Finish. SECTION 4: INSTALLING THE CPANEL WEB/VIRTUAL SERVER =================================================== Follow the Installation Guide at https://documentation.cpanel.net/display/74Docs/Installation+Guide 108. Click Network and Security > Elastic IPs 109. Click Allocate new address. Click Allocate. 110. New address request succeeded, e.g. 18.223.26.190 111. Click Instances > Instances. 112. Click Launch Instance. 113. Click AWS Martketplace. 114. Search for CentOS. 115. Select CentOS 7 (x86_64) - with Updates HVM Amazon Mage Image (AMI). Click Continue. 116. Select General purpose, t2.micro, 1 vCPU, 1 GB RAM (FREE TIER ELIGIBLE). 117. Click Next: Configure Instance Details. 118. Select Network: <Your VPC network> 119. Select Subnet: <Your subnet> | Public subnet | us-east-2a 120. Click Protect against accidental termination. 121. Click Next: Add Storage. 122. Change Size (GiB) from 8 to 30. It is still free tier eligible. 123. Click Next: Add Tags. 124. Enter Key = Name and Value = CPANEL WEB SERVER 125. Click Next: Configure Security Group 126. Click Select an existing security group. 127. Select VS_SG (Virtual Server Security Group). 128. Click Review and Launch. Click Launch. 129. Select a key pair. 130. Click Launch Instances. 131. Click Network and Security > Elastic IPs. 132. Select 18.223.26.190 133. Click Actions > Associate address. 134. Select Instance: CPANEL WEB SERVER. 135. Click Allow Elastic IP to be reassociated if already attached. 136. Click Associate. 137. Login to CentOS 7 Linux Server using Putty. Use centos as username. 138. sudo passwd root 139. su - root 140. cd /home && curl -o latest -L https://securedownloads.cpanel.net/latest && sh latest 141. /scripts/configure_firewall_for_cpanel 142. Go to https://18.223.26.190:2087 which is your Virtual Server and login. 143. Click I Agree. Go to Step 2. 144. Enter Server Contact Email Address. 145. Enter Server Hostname: cpanel.teo-en-ming-corp.com 146. Enter Primary Resolver, e.g. 8.8.8.8 147. Enter Secondary Resolver, e.g. 8.8.4.4 148. Click Save and Go to Step 3. 149. Click Skip this step and use my server's default settings. 150. Under Nameserver Configuration, select Disabled. DNS Server is not necessary for a Virtual Server. 151. Nameserver 1: ns1.teo-en-ming-corp.com 152. Nameserver 2: ns2.teo-en-ming-corp.com 153. Click Configure Nameserver A Records 154. ns1.teo-en-ming-corp.com IPv4: 13.58.134.234 155. ns2.teo-en-ming-corp.com IPv4: 52.15.109.147 156. Click Save and Go to Step 5. 157. Under FTP Configuration, select Pure-FTPD. 158. Click Enable Brute Force Protection. Select Everything. 159. Click Save and Go to Step 6. 160. Click Use filesystem quotas. 161. Click Finish. 162. Click Go to WHM. 163. Enable Global DCV Passthrough. 164. Enable The SSL/TLS Wizard in cPanel. 165. Click Save Settings. SECTION 5: CONFIGURING CPANEL DNS CLUSTER ========================================= SECTION 5.1: CONFIGURING DNS CLUSTER FOR THE PRIMARY NAME SERVER NS1.TEO-EN-MING-CORP.COM ========================================================================================= 166. Go to https://ns1.teo-en-ming-corp.com:2087 167. Click Clusters > DNS Cluster. 168. Click Enable DNS Clustering. 169. Click Return to Cluster Status. 170. Go to https://ns2.teo-en-ming-corp.com:2087 171. Click Clusters > DNS Cluster 172. Click Enable DNS Clustering. 173. Click Return to Cluster Status. For the following steps, please refer to Part 3: How I Built a cPanel Hosting Environment on Amazon AWS at https://blog.cpanel.com/part-3-how-i-built-a-cpanel-hosting-environment-on-… 174. Go to https://ns1.teo-en-ming-corp.com:2087 175. Click Development > Manage API Tokens. API = Application Programming Interface. 176. Click Generate Token. 177. Enter name: NS1 178. Click Everything 179. Click Save. 180. Copy your API token from Name Server 1 to the clipboard. 181. Go to https://18.223.26.190:2087 which is your Virtual Server. 182. Click Clusters > DNS Cluster 183. Click Enable DNS Clustering 184. Click Return to Cluster Status. 185. Select Backend Type: cPanel 186. Click Configure. 187. Remote cPanel & WHM DNS host: ns1.teo-en-ming-corp.com 188. Remote server username: root 189. Paste the API token from Name Server 1. 190. Click Setup Reverse Trust Relationship 191. Set DNS Role to Synchronize Changes. 192. Click Submit. 193. Click Return to Cluster Status 194. Go to https://18.223.26.190:2087 which is your Virtual Server. 195. Click Development > Manage API Tokens. 196. Click Generate Token. 197. Enter Name: VS 198. Click Everything. 199. Click Save. 200. Copy the API Token from the Virtual Server to the clipboard. 201. Go to https://ns1.teo-en-ming-corp.com:2087 202. Click Clusters > DNS Cluster 203. Click Configure. 204. Remote cPanel & WHM DNS host: cpanel.teo-en-ming-corp.com 205. Remote server username: root 206. Paste the API Token from the Virtual Server. 207. Click Setup Reverse Trust Relationship. 208. Set DNS Role to Standalone. 209. Click Submit. It says DNS Lookup Failed for cpanel.teo-en-ming-corp.com 210. Go to https://18.223.26.190:2087 which is your Virtual Server. 211. Click DNS Functions. Click Add an A Entry for Your Hostname. 212. Hostname: cpanel.teo-en-ming-corp.com 213. Server Main IP: 18.223.26.190 214. Click Add Entry. Added cpanel.teo-en-ming-corp.com ok You should now be able to ping cpanel.teo-en-ming-corp.com 215. Go to https://ns1.teo-en-ming-corp.com:2087 216. Click Clusters > DNS Cluster 217. Click Configure. 218. Remote cPanel & WHM DNS host: cpanel.teo-en-ming-corp.com 219. Remote server username: root 220. Copy the API Token from the Virtual Server. 221. Click Setup Reverse Trust Relationship. 222. Set DNS Role to Standalone. 223. Click Submit. 224. Click Return to Cluster Status. SECTION 5.2: CONFIGURING DNS CLUSTER FOR THE SECONDARY NAME SERVER NS2.TEO-EN-MING-CORP.COM =========================================================================================== 225. Go to https://ns2.teo-en-ming-corp.com:2087 226. Click Development > Manage API Tokens 227. Click Generate Token 228. Enter Name: NS2 229. Click Everything 230. Click Save. 231. Copy the API Token from Name Server 2 to the clipboard. 232. Go to https://18.223.26.190:2087 which is your Virtual Server. 233. Click Clusters > DNS Cluster 234. Click Configure. 235. Remote cPanel & WHM DNS host: ns2.teo-en-ming-corp.com 236. Remote server username: root 237. Paste the API Token from Name Server 2. 238. Click Setup Reverse Trust Relationship. 239. Set DNS Role to Synchronize Changes. 240. Click Submit. 241. Go to https://ns2.teo-en-ming-corp.com:2087 242. Click Clusters > DNS Cluster 243. Click Configure. 244. Remote cPanel & WHM DNS host: cpanel.teo-en-ming-corp.com 245. Remote server username: root 246. Paste the API Token from the Virtual Server. 247. Click Setup Reverse Trust Relationship 248. Set DNS Role to Standalone. 249. Click Submit 250. Click Return to Cluster Status SECTION 6: CONCLUSION ===================== 251. You should now be able to access your Virtual Server at https://cpanel.teo-en-ming-corp.com:2087/ ===END OF TUTORIAL=== If you happen to find any mistake with my step by step tutorial, please drop me a message. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ <https://tdtemcerts.wordpress.com/>[2] http://tdtemcerts.blogspot.sg/ <http://tdtemcerts.blogspot.sg/>[3] https://www.scribd.com/user/270125049/Teo-En-Ming <https://www.scribd.com/user/270125049/Teo-En-Ming>===END SIGNATURE===

5 5

kvm & keypad on Centos 7.5
by Gregory P. Ennis 02 Sep '18

02 Sep '18

Everyone, I have a lab computer I am using to test kvm. It was difficult to install with NetworkManager running. After I turned nm off I got the bridge to work and to stay in place. NetworkManager kept chaning things. I have several things I would like to learn and to tweak with KVM and virtal machines. The first small tweak is how to turn on the keypad on a keyboard. I have tried two logitech keyboards and both fail to allow the use of the keypad on the guest. On the host it works fine. I have a nvidia card in place with kmod-nvidia installed; the numeric keypad failed before and after kmod-nvidia was installed. Any ideas, or this a bug??? Greg Ennis

1 1

GNOME, numeric keypad & commas
by Nicolas Kovacs 02 Sep '18

02 Sep '18

Hi, Our local school has a 100 % CentOS network on servers and desktops. Until recently, we were using a highly customized Xfce desktop environment. Last week I decided to migrate all desktops from Xfce to GNOME, which went quite well. Now I have to sand down some rough edges. The secretary complained that she can't use the numeric keypad as before. She's using LibreOffice Calc a lot, and she has to type in a lot of numbers with commas. With Xfce this was not a problem. Under GNOME, this won't work anymore. As far as I can tell, this has to do with the locale-specific syntax of 0.00 vs 0,00. Our systems are all localized in french. Any idea how this can be solved? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

Certificates
by Chuck Campbell 02 Sep '18

02 Sep '18

I am getting myself confused, and need someone who fully understands this process to help me out a bot. I would like to obtain an ssl certificate, so I can run my own imap server on a machine in my office. My domain is hosted by networksolutions, but I don't run my imap server there. I am assuming I'll need to pay a CA to generate what I need, but I'm confused about what I need. I am running dovecot at teh moment, but my clients (iphone, windows laptops) say my ssl connection is not trusted. The phone just won't connect. I tried emailing the dovecot.pem file to my phone and installing it, but it just says it is not trusted. This leads me to obtaining a real CA issued certificate. I'm not sure what to do with it, once I get one, and then if I need to subsequently regenerate my dovecot.pem file?? Thanks, -chuck --

17 25

vdo statustics on Dedup?
by david 31 Aug '18

31 Aug '18

Folks I've started to use "vdo" instead of zfs in Centos 7. I hope this is a wise decision. However, I'm a bit mystified in decoding the "vdostats" output. I'd like to figure out how well deduplication is working. One measure would be to find two numbers: L = How many bocks are in use as reported to tools like df P = How many actual blocks are in use. Then a value such as L/P, which can never be less than 1, would be interesting. If I have typically four copies of everything, I'd expect to see L/P close to 4.00. What two numbers, in the "vdostats" do this if any? David

1 0

bash completion in C7
by wwp 31 Aug '18

31 Aug '18

Hello there, while bash completion was working great to me in CentOS6, since I'm using C7 I spend my day stuck on completion not working the way it should. The bad situations I'm facing are: - it doesn't expand *foo whereas there are *foo-named files in current dir, for instance: # rm *foo will show nothing whereas there's a file barfoo in curdir. - completion takes 10 sec to propose me something, I don't have an example right here but I'd prefer no completion instead of a completion that hangs for more than 3 sec. I don't care much about command-specific completion (command --switches and so on), but it generally fails in listing files in curdir, that is a huge fail to me. I have this installed: bash-4.2.46-30.el7.x86_64 bash-completion-2.1-6.el7.noarch bash-completion-extras-2.1-11.el7.noarch Didn't touch global or user prefs around bash completion if there are. Am I missing something or is it just an itchy fail, real pain in the *ss? Regards, -- wwp

3 8

TUTORIAL: How to Install Apache Web Server in CentOS 7.5 (1805) Linux in Amazon AWS Cloud with URL/HTTP/HTTPS Redirection
by Turritopsis Dohrnii Teo En Ming 31 Aug '18

31 Aug '18

TUTORIAL: How to Install Apache Web Server in CentOS 7.5 (1805) Linux in Amazon AWS Cloud with URL/HTTP/HTTPS Redirection AUTHOR OF THIS TUTORIAL: MR. TURRITOPSIS DOHRNII TEO EN MING (ZHANG ENMING) @ TIME TRAVELLER AGE: 40 YEARS OLD COUNTRY OF RESIDENCE: SINGAPORE DATE: 30TH AUGUST 2018 THURSDAY TIME: 10:49 AM SINGAPORE TIME Greenwich Mean Time+8 1. Sign up for Amazon AWS Cloud or Google Cloud Platform or Microsoft Azure Cloud or Ali Baba Cloud account (your preference). 2. Login to Amazon AWS Management Console. 3. Click EC2 under Compute. 4. Click Elastic IPs under Network and Security. 5. Click Allocate New Address. 6. Click the Allocate button. 7. You will receive a permanent public IPv4 address from Amazon AWS Cloud, eg. 18.223.148.223. Alternative IPv4 address: 18.220.9.93. IPv6 address is not applicable. 8. Click Instances under INSTANCES. 9. Click Launch Instance. 10. Click AWS Marketplace. 11. Search for CentOS in the Search box. Press ENTER. 12. Select CentOS 7 (x86_64) - with Updates HVM 1805_1 Amazon Machine Image (AMI). 13. Click Continue. 14. Select General purpose, t2.micro, 1 vCPU, 1 GB RAM (FREE TIER ELIGIBLE). 15. Click Next: Configure Instance Details. 16. Select Network: <Your VPC network>. 17. Select Subnet: <Your subnet> | Public subnet | us-east-2a. 18. Click Protect against accidental termination. 19. Click Next: Add Storage. 20. Click Next: Add Tags. 21. Click Next: Configure Security Group. 22. Click Select an existing security group. 23. Select VS_SG (Virtual Server Security Group). 24. Click Review and Launch. 25. Click Launch. 26. Select a Secure Shell (SSH) key pair. 27. Click Launch Instances. 28. Click Elastic IPs under Network and Security. 29. Select the Elastic IP 18.223.148.223. 30. Click Actions. 31. Click Associate address. 32. Select the Instance you have created previously. 33. Click Allow Elastic IP to be reassociated if already attached. 34. Click Associate. 35. Open Putty/SSH client and login to CentOS 7.5 (1805). 36. Login as username centos. 37. Sign Out from Amazon AWS Management Console. 38. Install Apache web server with the Secure Sockets Layer (SSL) module: sudo yum install httpd mod_ssl 39. Start the Apache web server process: sudo /usr/sbin/apachectl start 40. Visit and test your web server at 18.223.148.223 Using Google Chrome. 41. You should see an Apache Web Server test page. 42. Install the nano text editor in Linux: sudo yum install nano 43. Go to the main Apache web server configuration directory: cd /etc/httpd/conf 44. Edit the main Apache web server configuration file: sudo nano httpd.conf 45. Append the following code to the end of httpd.conf: <VirtualHost *:80> ServerName blogger.teo-en-ming.com Redirect / https://tdtemcerts.blogspot.sg </VirtualHost> Alternative Code: <VirtualHost *:80> ServerName wordpress.teo-en-ming.com Redirect / https://tdtemcerts.wordpress.com </VirtualHost> 46. Restart the Apache web server process: sudo /usr/sbin/apachectl restart 47. Open an Internet Protocol Security (IPsec) Virtual Private Networking (VPN) connection to your corporate network using Shrew Soft VPN client. 48. Open a Remote Desktop Connection to your Windows Server 2019 Active Directory Domain Controller. 49. Under Server Manager, click Tools. Then Click DNS (Domain Name Service). 50. Click Forward Lookup Zones. 51. Click TEO-EN-MING.COM 52. Right Click, select New Host (A or AAAA). 53. Fill in Hostname: blogger 54. Fill in IP address: 18.223.148.223 55. Click Add Host. 56. Alternative DNS Host Record: Fully Qualified Domain Name (FQDN): WORDPRESS.TEO-EN-MING.COM IP address: 18.220.9.93 57. Test http://blogger.teo-en-ming.com. It should redirect to https://tdtemcerts.blogspot.sg 58. Alternative test: http://wordpress.teo-en-ming.com. It should redirect to https://tdtemcerts.wordpress.com 59. Go to Apache web server alternative configuration directory: cd /etc/httpd/conf.d 60. Edit the Apache web server Secure Socket Layer (SSL) configuration file: sudo nano ssl.conf 61. Find the section that says <VirtualHost _default_:443> 62. Insert the following code: ServerName blogger.teo-en-ming.com Redirect / https://tdtemcerts.blogspot.sg Alternative Code: ServerName wordpress.teo-en-ming.com Redirect / https://tdtemcerts.wordpress.com 63. Restart the Apache web server process: sudo /usr/sbin/apachectl restart 64. Test https://blogger.teo-en-ming.com. It should redirect to https://tdtemcerts.blogspot.sg 65. Alternative test: https://wordpress.teo-en-ming.com. It should redirect to https://tdtemcerts.wordpress.com 66. USEFUL REFERENCES: (A) Article: Install Apache and PHP on CentOS 6 Link/URL: https://support.rackspace.com/how-to/centos-6-apache-and-php-install/ (B) Article: How To Create Temporary and Permanent Redirects with Apache and Nginx Link/URL: https://www.digitalocean.com/community/tutorials/how-to-create-temporary-an… 67. Exit Putty/SSH client. 68. END OF TUTORIAL. ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE===

3 2

Re: [CentOS] Mail has quit working
by Richard 30 Aug '18

30 Aug '18

> Date: Monday, August 27, 2018 09:57:01 -0400 > From: TE Dukes <tdukes(a)palmettoshopper.com> > >> From: CentOS [mailto:centos-bounces@centos.org] On Behalf Of >> centos--- via CentOS >> Sent: Monday, August 27, 2018 9:31 AM >> >> On 08/27/2018 09:05 AM, TE Dukes wrote: >> > >> > >> > Thanks again! I still think it's a mail issue. I can't get mail >> > using usermin either. >> > >> > Think I'm going to remove the TLS stuff from postfix main.cf >> > that I added yesterday and retry. >> >> If I missed this further up thread my apologies - is SELinux >> enabled and are there any relevant exceptions being logged? > > Pretty sure SELinux is turned off unless it got turned on without my > knowledge through an updtate/upgrade. > > I removed the TLS lines from main.cf I added last night and > remotely did a reboot from here at work. > > Mail is again working!! I am skeptical to mark this thread solved > as I thought it was solved back in July. > > I think, removing my ISP's DNS servers from resolve.conf was the > fix, could be removing IPV6 from etc/hosts. Might put it back in > just to see. > As I indicated earlier, removing those lines from your postfix config will have no impact on your ability to reach your roundcube instance. Unlike the windowz world, you mostly don't need to "reboot" a machine after making changes to a service (e.g., your postfix config change). An unnecessary reboot can bring in many issues so makes debugging a problem difficult. Instead, restart the service in question (often a reload is all that's needed, but a service restart generally doesn't hurt in a single/lower user environment). Unless you are VPN-ing (or equiv) my sense is that you are currently getting to your mail (roundcube) from outside your network. Earlier, when it wasn't working, my sense was that you were inside. If that's true you can't really tell if your issue has been resolved as you are coming at things from different network directions.

3 5

missing CESA-2018:2571 Important CentOS 6 bind Security Update
by Ulf Volmer 30 Aug '18

30 Aug '18

Hello, i'm running bind on an up to date CentOS 6.10 and missing the bind update from the announcement above. [root@fw ~]# yum list bind Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * epel: ftp.nluug.nl Installed Packages bind.x86_64 32:9.8.2-0.68.rc1.el6 @base is there is something wrong on my side? Or with the CentOS- repo? (My repo config is on https://cloud.u-v.de/index.php/s/ksNcosfmBrN57SQ ) best regards Ulf

3 3

SecureBoot : rolling out new shim pkgs for CentOS 7.5.1804 in CR repository - asking for testers/feedback
by Fabian Arrotin 30 Aug '18

30 Aug '18

When we consolidated all CentOS Distro builders in a new centralized setup, covering all arches (so basically x86_64, i386, ppc64le, ppc64, aarch64 and armhfp those days), we wanted also to add redundancy where it was possible to. The interesting "SecureBoot" corner case came on the table and we had to find a different way to build the following packages: - shim (both signed and unsigned) - grub2 - fwupdate - kernel The other reason why we considered rebuilding it is that the cert we were using has expired : curl --location --silent https://github.com/CentOS/sig-core-SecureBoot/raw/master/CentOS_7/kernel/SO… | openssl x509 -inform der -text -noout|grep -A2 Validity While technically it doesn't really matter for Secureboot itself, it was better to get a new key/cert rolled-in and use the new one for new builds. That's where it's interesting as because shim embeds the certs in the Machine Owner Key (MOK), and that each other component used in the boot chain is validated against that (so grub2 first, then kernel and kernel modules) that means that once deployed , the new shim would not be able to boot previous grub2/kernel. But there is a solution for that : instead of "embedding" only the new cert, we can have both the old one and new one, permitting us to still boot older kernels but also the new ones we'll build/push soon (built on the new build system), and that's what we used for that new shim package. That's where we'd like you (SecureBoot users) to give us feedback about that new shim pkg. It was already validated on some hardware nodes, passed some QA tests, but we'd prefer to have more feedback. Worth noting that such rebuild has also a patch that should fix an issue we had with shim not allowing to import key in MOK through mokutil (see https://bugs.centos.org/view.php?id=14050) How can you test ? If you're using UEFI with SecureBoot enabled , we have signed/pushed those pkgs to the CR repository (see https://wiki.centos.org/AdditionalResources/Repositories/CR) That repo is by default disabled, but following command would let you update shim : yum update shim --enablerepo=cr Then reboot and it should work like before, so validating the boot chain (while still using grub2/kernel packages signed with previous key) We'd appreciate feedback on this list, or #centos-devel on irc.freenode.net I'd like to thank Patrick Uiterwijk and Peter Jones for their help for the patch and validation for that shim -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

1 0

Re: [CentOS] Stuck on loading of CentOS
by Dhanasekaran Balakrishnan 29 Aug '18

29 Aug '18

Hi, Yes nvidia driver is installed in the computer. I am not sure how my colleague did this and presently he is not in my lab. -Dhana -- PhD Student, Bionanoscience and Biochemistry Laboratory (Heddle Lab), Malopolska Center of Biotechnology, Jagiellonian University, Krakow, Poland.

2 1

grub.cfg
by Steffan A. Cline 29 Aug '18

29 Aug '18

I ran into something with a recent batch of updates on CentOS 7. It seems that possibly one of the kernel updates running dracut changed all of the volume groups in the grub.cfg file making the system unable to boot until I manually edited each line putting it back to the way it was originally. My volume group is called vg_h1 but it changed them all to the default “centos”. Is there a config somewhere I need to edit so this never happens again? Steffan A. Cline steffan(a)hldns.com 602-793-0014

2 3

Kickstart file for software raid
by Jerry Geis 29 Aug '18

29 Aug '18

I am using a kickstart file for CentOS 7 raid / --device=md0 --fstype="xfs" --level=1 --useexisting raid /home --noformat --device=md1 --level=1 --useexisting It is erroring out on the --useexisting. The exact text is: RAID volume "0" specified with "--useexisting" does not exist. What did I do wrong? Jerry

2 3

C7, system-auth-ac, and authconfig
by mark 29 Aug '18

29 Aug '18

I read the clear-as-mud docs, and it appears that if we want to modify system-auth-ac, we can create a local, and point system-auth to it. Howver.. in the default, I see auth [success=3 default=ignore] pam_succeed_if.so service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensaver quiet use_uid Now, we'd like to add sudo to that list. Does anyone know *where* authconfig gets that list in the first place? I haven't been able to find anything yet, and I've been looking. mark

1 0

Remote update OS from 6 to 7
by Jerry Geis 29 Aug '18

29 Aug '18

Hello all... I have a remote machine running C6. I desire to update it to C7. Not possible to be on-site. Can I copy the Everything ISO for C7 to the machine, mount -o loop C7.Everything.iso /media/cdrom then do a "yum upgrade" ? Will that work? The server is using software raid. Thanks Jerry

3 2

CentOS-announce Digest, Vol 162, Issue 5
by centos-announce-request＠centos.org 29 Aug '18

29 Aug '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:2571 Important CentOS 6 bind Security Update (Johnny Hughes) 2. CESA-2018:2557 Important CentOS 7 postgresql Security Update (Johnny Hughes) 3. CESA-2018:2570 Important CentOS 7 bind Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 28 Aug 2018 15:39:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2571 Important CentOS 6 bind Security Update Message-ID: <20180828153955.GA34287(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2571 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2571 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 248124b6482789bfbb5f6e656a98e915769c55168b3d23009652527526e331a8 bind-9.8.2-0.68.rc1.el6_10.1.i686.rpm f1c0a5f60d808dafd3d67b4ce198019bc13632e07f71cefb29a75ebe2af4fd63 bind-chroot-9.8.2-0.68.rc1.el6_10.1.i686.rpm 87bffb7bd45681565d5ef4b18579169f187d4fa66fbec4741c570430ee0c06d2 bind-devel-9.8.2-0.68.rc1.el6_10.1.i686.rpm 2f6f7ac42ca47afd420d62c6f21ef2d4e7d1505fedb6a9a70bc9b2c6461e50d9 bind-libs-9.8.2-0.68.rc1.el6_10.1.i686.rpm 1ed256461a14d8fe827d6aaa3aa46a8e6ed9ce55532aa3c27a5eba1921f06257 bind-sdb-9.8.2-0.68.rc1.el6_10.1.i686.rpm 7e481a255c517a66d7222957ad199ef61455f918f1ba80160ab42a07f1b1f544 bind-utils-9.8.2-0.68.rc1.el6_10.1.i686.rpm x86_64: 960846e8ce3a15bab85789a29ad4e9ac3e9d00b9d9fe158a07ab16eec065fabc bind-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm 09b0b1148ddb2de55b5165b51be9c3c250ccb981fbdc4e01934c8a23a1c4c098 bind-chroot-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm 87bffb7bd45681565d5ef4b18579169f187d4fa66fbec4741c570430ee0c06d2 bind-devel-9.8.2-0.68.rc1.el6_10.1.i686.rpm 0018e4f38542d2d56fa15893ffb5cd34e8023fdc2b30a3b42d28666fe55d946a bind-devel-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm 2f6f7ac42ca47afd420d62c6f21ef2d4e7d1505fedb6a9a70bc9b2c6461e50d9 bind-libs-9.8.2-0.68.rc1.el6_10.1.i686.rpm a885a7dd62446139f83677fde3dc9769ba2990463575cba4e8f4914d7ffa22a5 bind-libs-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm dc3892983716d2275054bbfea53267131b78806cb2926444a8ea6d846193929b bind-sdb-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm baf936fc48052e6ba44bd76af3a14094c0b16c26c92923ff83ffc597a58ed23e bind-utils-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm Source: 8564b64b5870e90091523c0fb7e9bc86d99d43faefafa91132f4be497e8eb259 bind-9.8.2-0.68.rc1.el6_10.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 28 Aug 2018 15:47:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2557 Important CentOS 7 postgresql Security Update Message-ID: <20180828154741.GA34512(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2557 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2557 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 435c54da90ac6a986123ebeed8a46ca06198945148412400bcc25165b20b0901 postgresql-9.2.24-1.el7_5.i686.rpm 88083a8c3867858fc230fb8e123d1884ad447630af3d0b7cdbc9f415a2cb7691 postgresql-9.2.24-1.el7_5.x86_64.rpm 26607e1d2c701a5a0a8203fc4a4ddd74c3f7d5ed6d9b121753535c673bf3df82 postgresql-contrib-9.2.24-1.el7_5.x86_64.rpm fae26c6c1a2e35d21388f9e9bb601e2e65ebf6ebee491c7879fe3e841c89d2bd postgresql-devel-9.2.24-1.el7_5.i686.rpm 97d1b913fd93b28fedcff9d9889b74a86c1c8fc80619ca2a9f9050cc21a2c840 postgresql-devel-9.2.24-1.el7_5.x86_64.rpm f06e0c08f35f44e82d81c6a953a2095229c5c8ea6a1ed557ed3428b2d982b2a0 postgresql-docs-9.2.24-1.el7_5.x86_64.rpm 5fb3d8e7c46ef84c38761fbf8eb0fa45b3d6bb78271be062d864d7038ce42dcf postgresql-libs-9.2.24-1.el7_5.i686.rpm d8435352291ac2627b65f0a3a65f41906390307cf2300d020dfb793e705cdb06 postgresql-libs-9.2.24-1.el7_5.x86_64.rpm 2a20977c047a2a3e7efef79b589ba8bf95285a5fad766dd485f258d33b8b3201 postgresql-plperl-9.2.24-1.el7_5.x86_64.rpm 8b0d205949e154882da55d7d472489ba7414b856ed59039614b6590c75a45c60 postgresql-plpython-9.2.24-1.el7_5.x86_64.rpm 75fe3d5666368c6f0bc80e64c203b91286f1e4c81ed82bbd5db988b9425fcbbd postgresql-pltcl-9.2.24-1.el7_5.x86_64.rpm 6955c0e9151487a7bde24418fee9af6072916190e1879c20a8ee95623cb56e05 postgresql-server-9.2.24-1.el7_5.x86_64.rpm 2232aae0691e140707437ba1422329bd6193aacb98929508838f8f8a37f062b8 postgresql-static-9.2.24-1.el7_5.i686.rpm a1ec84aeb970a247c7075be4e2e44dc1d1662a5f4ce63b20b65ebd69fad3aeae postgresql-static-9.2.24-1.el7_5.x86_64.rpm 70a4adbd0edfe7f982395b928129e82da3cc6ce4bcee4e30dd395116da1c60b4 postgresql-test-9.2.24-1.el7_5.x86_64.rpm fd8c23fc70230e52d47f56b0ed72325152e59e9dcdb777b55805acef4ac96ce7 postgresql-upgrade-9.2.24-1.el7_5.x86_64.rpm Source: 9fd884c340f9aae296653aff2b30fcc4362acba9912508bb07c8778dc8e78f9e postgresql-9.2.24-1.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 28 Aug 2018 15:48:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:2570 Important CentOS 7 bind Security Update Message-ID: <20180828154800.GA34656(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:2570 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:2570 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ee4027789eafae8c2855a1702e117ff6dc517820a231df6eab0aed16eece8fab bind-9.9.4-61.el7_5.1.x86_64.rpm 45e7ad9b9c08a7ca8e78b95084a9b61caf86d664290d660c3ee6fd41661058f3 bind-chroot-9.9.4-61.el7_5.1.x86_64.rpm 303502657386d0c4e394811ba56b8d72025c92be2237e2045eb85c2661233807 bind-devel-9.9.4-61.el7_5.1.i686.rpm 1e2110e750b3adb5857904f19167109f418ee1f430f900308f1e009c7c1944d8 bind-devel-9.9.4-61.el7_5.1.x86_64.rpm 44328049069dfe2efbfb2c5e14c10d5482e23d39009eec290032232697d91cbb bind-libs-9.9.4-61.el7_5.1.i686.rpm db10791c7f7966843cd78ec1b71025935d4caee8746b01622068eb8cb404bea2 bind-libs-9.9.4-61.el7_5.1.x86_64.rpm 8850fc3b588e95fc9a72b857cbccfd18093cc1c69b95b85eeec608433964d044 bind-libs-lite-9.9.4-61.el7_5.1.i686.rpm c3fff9b6f6fca10a4fe77653fde96568f6a6353d8bf6fd87d526c45de7bed1a2 bind-libs-lite-9.9.4-61.el7_5.1.x86_64.rpm 2953e193ef6197ac414bf6ed2d15f59e3c85ffb824dd89a06f98189844eb1010 bind-license-9.9.4-61.el7_5.1.noarch.rpm 5c9df998d37413f862f619d0815e3131eba2e172ae63decf0efbeb5259fe633f bind-lite-devel-9.9.4-61.el7_5.1.i686.rpm d77653fd680bfeef0dfd799fe1a8f2f6027e63693108567e3c6bba2474d0cd87 bind-lite-devel-9.9.4-61.el7_5.1.x86_64.rpm 1ef96a7ea43061542dbc97c4c7a2b1d9dc26b002d1593b0980b6027ca343a7aa bind-pkcs11-9.9.4-61.el7_5.1.x86_64.rpm 6f0afbee32b1536325fbdcffccbe81aff3b47d8e2de0dedc981cd393c22120c4 bind-pkcs11-devel-9.9.4-61.el7_5.1.i686.rpm 6e27874eaa335a46cede258f11e23ad20e8ef7678886698d275cd7c3e8bfc8d9 bind-pkcs11-devel-9.9.4-61.el7_5.1.x86_64.rpm 971f7b0c47c778862444dffafc36616cb7dba597af7e721d8ab9e92e0be8e2ce bind-pkcs11-libs-9.9.4-61.el7_5.1.i686.rpm a865deb5b2c4771820fdbdea2e42a01a891644d6ed9ca0a06fb532142c411044 bind-pkcs11-libs-9.9.4-61.el7_5.1.x86_64.rpm 65d05f02bdf025e23ea9d9142e3255432ec39c5c6b29e5fe6920dfd665bf8b99 bind-pkcs11-utils-9.9.4-61.el7_5.1.x86_64.rpm 790f90103359863a59b552100ba8a3c03067795bab42fb518625fa54143e66ca bind-sdb-9.9.4-61.el7_5.1.x86_64.rpm a3bbb400e22a538a3c2b98e8a241714d58fb2713e2f3bb6a2f140068b606283f bind-sdb-chroot-9.9.4-61.el7_5.1.x86_64.rpm 3c474addd9b809ec82d7d8f9cad68ea950b658d43c2a362fc4ffe94ad2e3f12d bind-utils-9.9.4-61.el7_5.1.x86_64.rpm Source: 3b9245b26b6677828475193eface9f2e30c478bf3b38f37e507398b04e082b8c bind-9.9.4-61.el7_5.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 162, Issue 5 ***********************************************

1 0

Stuck on Loading CentOS
by Dhanasekaran Balakrishnan 29 Aug '18

29 Aug '18

Hello, I am currently using CentOS 7 and for the last two days GUI is not working in my computer and the operating system is not starting. Black Screen lists something like in Red Color [ ] Started show Plymouth Boot screen [ ] Reached target Paths [ ] Reached target Basic System . . . . . . [ ] Stopped Apply Kernel Variables [ ] Stopping Apply Kernel Variables [ ] Stopping udev Kernel Device Manager Please do let me know the way for starting the device properly. Thank you. Kind Regards, Dhana

2 1

OpenLDAP support in future versions of CentOS
by Alicia Smith 28 Aug '18

28 Aug '18

Hello! I just joined this mailing list, so I apologize in advance if this topic has already been covered. Red Hat and Suse announced they are no longer supporting OpenLDAP in future releases. https://www.ostechnix.com/redhat-and-suse-announced-to- withdraw-support-for-openldap/ However, we mainly use CentOS and while it's a RH derivative, I wanted to find out what CentOS plans on doing in this regard. Will you continue to include OpenLDAP or will it simply be removed? I wasn't able to find any CentOS related articles in response to this, and the only thing I did find that said CentOS hasn't released whether they will continue to support it or not is from two years ago? https://daasi.de/en/2017/09/25/red-hat-wont-continue-openldap-support-rhel-… Any updates/feedback/information is appreciated :) Thank you! -- Alicia Smith @phrozyn Information Security Engineer asmith(a)mozilla.com

8 8

Where are my /tmp and /var/tmp files?
by Kenneth Porter 28 Aug '18

28 Aug '18

I was pulling my hair out this morning trying to figure out why my PHP web script could see files in /var/tmp/scriptname but I couldn't see them with ls or my text editor. I was certain I'd gotten rootkitted. Then I thought maybe it was a new chroot in the latest Apache config. It turns out it's systemd's unit file for Apache, which containerizes /tmp and /var/tmp for selected apps. The httpd.service unit file includes the PrivateTmp setting. Here's some details for anyone else confused by this: https://access.redhat.com/blogs/766093/posts/1976243

1 0

Very odd: /proc/sys/net/ipv6/conf/all/disable_ipv6
by mark 27 Aug '18

27 Aug '18

CentOS 7.5, and on one system, I'm getting: setroubleshoot: SELinux is preventing /usr/sbin/sendmail.sendmail from read access on the file disable_ipv6 ll -Z shows -rw-r--r--. root root system_u:object_r:sysctl_net_t:s0 /proc/sys/net/ipv6/conf/all/disable_ipv6 I find this peculiar. Anyone have a resolution, or is this a bug? mark

1 0

Re: [CentOS] Mail has quit working
by TE Dukes 27 Aug '18

27 Aug '18

Third time trying respond! -------- Original Message -------- Subject: Re: [CentOS] Mail has quit working From: Gordon Messmer < <mailto:gordon.messmer@gmail.com> gordon.messmer(a)gmail.com> Date: Tue, July 24, 2018 10:31 am To: <mailto:centos@centos.org> centos(a)centos.org On 07/23/2018 03:39 PM, TE Dukes wrote: > Mail has come to an abrupt stop. Running C7, postfix and dovecot. > ... > Crond is no longer send mail. In one terminal: "tail -f /var/log/maillog" or "journalctl -f" In another, "echo test | mail -s test your(a)email.address" What do you see in the maillog at that time? What does the "df" command output? _______________________________________________ CentOS mailing list <mailto:CentOS@centos.org> CentOS(a)centos.org <https://lists.centos.org/mailman/listinfo/centos> https://lists.centos.org/mailman/listinfo/centos Thanks, Output from tail: Jul 24 10:05:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:15:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:25:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:35:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:35:59 ts130 postfix/qmgr[8283]: C33128410546: from=< <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com>, size=949, nrcpt=1 (queue active) Jul 24 10:36:29 ts130 postfix/smtp[19763]: connect to <http://paalmettodomains.com> paalmettodomains.com[198.105.254.65]:25: Connection timed out Jul 24 10:36:59 ts130 postfix/smtp[19763]: connect to <http://paalmettodomains.com> paalmettodomains.com[104.239.198.84]:25: Connection timed out Jul 24 10:36:59 ts130 postfix/smtp[19763]: C33128410546: to=< <mailto:tdukes@paalmettodomains.com> tdukes(a)paalmettodomains.com>, relay=none, delay=13075, delays=13015/0.02/60/0, dsn=4.4.1, status=deferred (connect to <http://paalmettodomains.com> paalmettodomains.com[104.239.198.84]:25: Connection timed out) Jul 24 10:45:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 10:55:02 ts130 clamd[3226]: SelfCheck: Database status OK. Jul 24 11:04:19 ts130 postfix/pickup[19912]: 55271840D734: uid=0 from=<root> Jul 24 11:04:19 ts130 postfix/cleanup[21840]: 55271840D734: message-id=< <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com> Jul 24 11:04:19 ts130 postfix/qmgr[8283]: 55271840D734: from=< <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com>, size=466, nrcpt=1 (queue active) Jul 24 11:04:20 ts130 postfix/smtpd[21846]: connect from localhost[127.0.0.1] Jul 24 11:04:20 ts130 postfix/smtpd[21846]: 49161841ED92: client=localhost[127.0.0.1] Jul 24 11:04:20 ts130 postfix/cleanup[21840]: 49161841ED92: message-id=< <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com> Jul 24 11:04:20 ts130 postfix/qmgr[8283]: 49161841ED92: from=< <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com>, size=951, nrcpt=1 (queue active) Jul 24 11:04:20 ts130 postfix/smtpd[21846]: disconnect from localhost[127.0.0.1] Jul 24 11:04:20 ts130 amavis[423]: (00423-03) Passed CLEAN {RelayedInbound}, [127.0.0.1] < <mailto:root@ts130.palmettodomains.com> root(a)ts130.palmettodomains.com> -> < <mailto:tdukes@palmettodomains.com> tdukes(a)palmettodomains.com>, Message-ID: < <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com>, mail_id: eYD2cL7fZ7rY, Hits: -0.001, size: 466, queued_as: 49161841ED92, 941 ms Jul 24 11:04:20 ts130 postfix/smtp[21842]: 55271840D734: to=< <mailto:tdukes@palmettodomains.com> tdukes(a)palmettodomains.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=1, delays=0.07/0.01/0/0.94, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 49161841ED92) Jul 24 11:04:20 ts130 postfix/qmgr[8283]: 55271840D734: removed Jul 24 11:04:20 ts130 dovecot: lda(tdukes): msgid=< <mailto:20180724150419.55271840D734@ts130.palmettodomains.com> 20180724150419.55271840D734(a)ts130.palmettodomains.com>: saved mail to INBOX Jul 24 11:04:20 ts130 postfix/local[21847]: 49161841ED92: to=< <mailto:tdukes@palmettodomains.com> tdukes(a)palmettodomains.com>, relay=local, delay=0.09, delays=0.02/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to command: /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT") Jul 24 11:04:20 ts130 postfix/qmgr[8283]: 49161841ED92: removed >From df: Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/cl-root 97605056 12762640 84842416 14% / devtmpfs 8025676 0 8025676 0% /dev tmpfs 8043100 70176 7972924 1% /dev/shm tmpfs 8043100 59284 7983816 1% /run tmpfs 8043100 0 8043100 0% /sys/fs/cgroup tmpfs 262144 0 262144 0% /var/spool/MailScanner/incoming /dev/mapper/cl-home 97605056 34632 97570424 1% /home /dev/sda2 993004 391180 601824 40% /boot /dev/mapper/cl-data 3685467928 1205578432 2479889496 33% /data /dev/sdb1 3845548044 2677536044 972662756 74% /media tmpfs 1608620 56 1608564 1% /run/user/0

12 70

kernel-plus (plus 1?)
by lejeczek 24 Aug '18

24 Aug '18

hi guys did you notice, if you use kernel-plus on 7.5 this CentOS Linux (3.10.0-862.11.6.el7.centos.plus.1.x86_64) 7 (Core) CentOS Linux (3.10.0-862.11.6.el7.centos.plus.x86_64) 7 (Core) is that "plus.1" a new naming convention or just one off? regards, L

2 3

using lpadmin to add printers in CentOS 7 (v. CentOS 6)
by Zube 24 Aug '18

24 Aug '18

In CentOS 6, I could do: lpinfo -m then pick the model I want and put it as the option to -m in lpadmin (line wrapped): /usr/sbin/lpadmin -p printer -o printer-is-shared=false -o Duplex=None -o Resolution=600dpi -m 'gutenprint.5.2://pcl-g_5e/expert Generic PCL 5e Printer - CUPS+Gutenprint v5.2.5' -v 'socket://mydomain.edu' Alas, in CentOS 7, no matter what I do, I always get: Unable to copy PPD file! and the error in the cups error log: Returning IPP server-error-internal-error for CUPS-Add-Modify-Printer (ipp://localhost:631/printers/printer) from localhost Bad ppd-name "gutenprint.5.2://pcl-g_5e/simple Generic PCL 5e Printer - CUPS+Gutenprint v5.2.9 Simplified" (-6)! copy_model: empty PPD file I assumed this was due to the newer version of cups. To make it work (kinda, sorta) the way it used to: 1) mkdir -p /usr/share/cups/model/gutenprint/5.2 2) cups-genppd.5.2 3) lpinfo -m, but choose one that is a file, not a gutenprint.5.2:// URL (?): /usr/sbin/lpadmin -p printer -o printer-is-shared=false -o Duplex=None -o Resolution=600dpi -m 'gutenprint/5.2/stp-hp-lj_4250.5.2.ppd.gz' -v 'socket://mydomain.edu' And this is fine, but I assume the other way should work as well. What am I missing? Thanks for any clues. Cheers, Zube

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss