- Discuss - lists.centos.org

Problems with latest Firefox update -- can't install new extensions
by Kay Schenk 15 Feb '17

15 Feb '17

Since the latest Firefox update to 45.7.0 on my CentOS 6.8 system, I can no longer install add-ons/extensions. Things LOOK like they're working but the extensions don't get stored in my normal area and they don't appear in my Add-Ons menu. Is anyone else having this issue? It has been a while since I added any new extensions so I can't say WHEN exactly this problem happened but .... :( -- ------------------------------------------------ MzK "Trust, but verify." -- Ronald Reagan

2 2

CentOS 7, systemd, NetworkMangler, oh, my
by m.roth＠5-cent.us 15 Feb '17

15 Feb '17

My manager tells me a system in the datacenter is down. I go down there, and plug in a monitor-on-a-stick and keyboard. It's up, but no network. I try systemctl restart NetworkManager several times, and ip a shows *no* change. Finally, I do an ifdown, followed by an ifup, and everything's wonderful. My manager thinks that the NM daemon thinks everything's fine, and there've been no changes, so it does nothing. He suggests that it might have to be stopped, then started, rather than restarted. This is completely unacceptable behavior, since it leave the system with no network connection. Pre-systemd, as we all know, restart *RESTARTED* the damn thing. Is there some Magic (#insert "pixie-dust-sparkles") incantation, either restarting NetworkManager, or using nm-cli, to force it to perform the expected actions? Btw, if this is supposed to be part of the "hide stuff, desktop Linux users don't need to know this stuff", this is a *much* worse result. mark (and yes, my manager's truly aggravated about this, also)

13 34

(re)build sssd-client.i686 for x86_64
by Stijn De Weirdt 15 Feb '17

15 Feb '17

hi all, i'm trying to rebuild the current sssd-client.i686 rpm that is part of the x86_64 repo, but i fail to do so. rebuilding the sssd.src.rpm on x86_64 does not produce this rpm. i can rebuild sssd.src.rpm with --target=i686, but that sssd-client rpm has conflicts and a whole bunch of i686 deps that the rpm from the centos repo doesn't have. tips/help welcome stijn

3 5

Re: [CentOS] Serious attack vector on pkcheck ignored by Red Hat
by m.roth＠5-cent.us 15 Feb '17

15 Feb '17

Johnny Hughes wrote: > On 02/15/2017 09:37 AM, Leonard den Ottolander wrote: >> On Thu, 2017-02-09 at 15:27 -0700, Warren Young wrote: >>> So you’ve now sprayed the heap on this system, but you can’t upload anything else to it because noexec, so…now what? What has our nefarious attacker gained? >> >> So the heap is set with data provided by the (local) attacker who could initialize it to his liking using either of the two memory leaks in the options parsing. >> >> The heap, that is entirely under the control of the attacker, now contains a call to a library with parameters such that it invokes a zero day kernel escalation privilege exploit. And now the exploit will run because pkcheck allowed the attacker to initialize its entire heap via the command line. <snip> I've skipped most of this thread, but went through this post, and excuse me if this sounds like a stupid question... but when the attacker runs their job, isn't it *THEIR* heap, one allocated for this PID, and not any other, such as the heap allocated for PID 1? mark

1 0

Unable to see Desktop folder and file
by MOHD HOMAIDUR RAHMAN 15 Feb '17

15 Feb '17

Dear Cent OS User Today my Mendeley Reference Manager was crash. To recover freshly I deleted Mendeley file from my system from two place, 1) from share folder and 2) from cache folder by using this command. Copy from history 730 ls -a 731 cd .Mendeley\ Desktop/ 732 ls 733 ll 734 cd ../ 735 mv .Mendeley\ Desktop/ mendelyDestop 736 ll 737 rm -rf mendelyDestop 738 locate Mende 739 rm -rf /home/chinmai/.local/share/data/Mendeley Ltd./Mendeley Desktop/Downloaded* 740 locate Mende 741 rm -rf /home/chinmai/.local/share/data/Mendeley Ltd./Mendeley Desktop* 742 locate Mende 743 clear 744 locate Mende 745 rm -rf /home/chinmai/.local/share/data/Mendeley Ltd./Mendeley Desktop/www.mendeley.com/rajanikr08@gmail.com-1a4c 746 rm -rf /home/chinmai/.local/share/data/Mendeley Ltd./Mendeley Desktop/www.mendeley.com/* 747 locate Mende 748 df -h 749 cd .local/share/data 750 ll 751 rm -rf Mendeley\ Ltd./ 752 ll 753 locate Mende 754 cd ../ 755 ls -a 756 cd .cache/ 757 ll 758 rm -rf Mendeley\ Ltd./ 759 ll 760 top 761 clear 762 ls 763 cd 764 ls -a 765 cd .local/share/ 766 ll 767 cd 768 cd .cache/ 769 ll After deletion, my Mendeley start working but my all folder and file from Desktop are missing. When I am locating the file and folder from desktop it showing their name but I ma unable to see that file or folder. Any guidance regarding how to recover is very helpful to me. Thanks & regards Rahman ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' *M*d* H*omaidur* R**ahman *( Research Scholar ) Lab No. 510, Computational Biophysics Lab. Department of Biotechnology Indian Institute of Technology-Madras Chennai-600 036, India *Mobile No = +91- 7845991785* '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

1 0

Centos7 and old Bind bug
by Robert Moskowitz 15 Feb '17

15 Feb '17

This is my new Centos7 DNS server. In logwatch I am seeing: **Unmatched Entries** dispatch 0xb4378008: open_socket(0.0.0.0#5546) -> permission denied: continuing: 1 Time(s) dispatch 0xb4463008: open_socket(::#1935) -> permission denied: continuing: 1 Time(s) dispatch 0xb4464440: open_socket(::#8554) -> permission denied: continuing: 1 Time(s) dispatch 0xb4464440: open_socket(::#8614) -> permission denied: continuing: 1 Time(s) dispatch 0xb4465008: open_socket(::#1935) -> permission denied: continuing: 1 Time(s) dispatch 0xb4465440: open_socket(0.0.0.0#4321) -> permission denied: continuing: 1 Time(s) dispatch 0xb4465878: open_socket(0.0.0.0#2605) -> permission denied: continuing: 1 Time(s) dispatch 0xb4465878: open_socket(0.0.0.0#4444) -> permission denied: continuing: 1 Time(s) dispatch 0xb4465878: open_socket(0.0.0.0#8611) -> permission denied: continuing: 1 Time(s) dispatch 0xb4466008: open_socket(0.0.0.0#1935) -> permission denied: continuing: 1 Time(s) dispatch 0xb4466008: open_socket(0.0.0.0#5546) -> permission denied: continuing: 1 Time(s) dispatch 0xb4466008: open_socket(0.0.0.0#8611) -> permission denied: continuing: 1 Time(s) dispatch 0xb4466440: open_socket(0.0.0.0#2605) -> permission denied: continuing: 1 Time(s) dispatch 0xb4466440: open_socket(0.0.0.0#4444) -> permission denied: continuing: 1 Time(s) dispatch 0xb4466878: open_socket(0.0.0.0#1935) -> permission denied: continuing: 1 Time(s) dispatch 0xb4466878: open_socket(0.0.0.0#8610) -> permission denied: continuing: 1 Time(s) dispatch 0xb4467440: open_socket(0.0.0.0#8613) -> permission denied: continuing: 1 Time(s) dispatch 0xb4467440: open_socket(0.0.0.0#8614) -> permission denied: continuing: 1 Time(s) etc. This seems to be bug 1103439 which was 'fixed' for Centos6. What should I do about this? Is there a SELinux policy to apply or should I the avoid upd-ports option in Bind? thank you

2 7

vsftp problem C7
by Alessandro Baggi 15 Feb '17

15 Feb '17

Hi list, I've a problem with vsftpd on C7.3. This is a dedicated server protected by a Zywall5. SELINUX is disabled. This is my vsftpd configuration: anonymous_enable=NO local_enable=YES write_enable=YES local_umask=022 dirmessage_enable=YES xferlog_enable=YES connect_from_port_20=YES xferlog_file=/var/log/vsftpd.log xferlog_std_format=YES idle_session_timeout=600 data_connection_timeout=120 ftpd_banner=Welcome listen=YES listen_port=21 pasv_enable=YES pasv_min_port=50000 pasv_max_port=50100 pasv_address=public-ip port_enable=YES pasv_addr_resolve=NO listen_ipv6=NO pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES Connecting from localhost to the local ip with ftp command, I've no problems. If I try to connect from remote host to the ftp server I got some problems. Connecting from my workstation I can log in with user and pwd but when listing I get: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 227 Entering Passive Mode (188,213,172,158,206,207) ftp: connect: Connection refused ftp> Seems to be a firewall (zywall5) problem. On server firewalld is disabled and there are not iptables rules. So I've open port 20,21,50000:50100 from my ip to server ip. The problem persists. I've tried to open all ports (Using Any TCP and Any UDP) but the problem persists. I've tried with another local server with the same vsftpd configuration and I've reproduced the problem by closing all ports with iptables. I get the same messages but after enabling specified ports with iptables on server the issue is solved. How I can solve this issue on remote server? THanks in advance.

1 1

CentOS-announce Digest, Vol 144, Issue 4
by centos-announce-request＠centos.org 14 Feb '17

14 Feb '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0269 Critical CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) 2. CESA-2017:0269 Critical CentOS 5 java-1.7.0-openjdk Security Update (Johnny Hughes) 3. CESA-2017:0269 Critical CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 13 Feb 2017 17:16:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0269 Critical CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20170213171615.GA22675(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0269 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0269.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5e812e4583b71107b72779cfc77f78c7fdc1a147a56126136f87d14cc3b4efb8 java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el6_8.i686.rpm ce382ede1a4eac4ffdba9aa870cc9c06a083749fb40b4d9ca342b17354836553 java-1.7.0-openjdk-demo-1.7.0.131-2.6.9.0.el6_8.i686.rpm 4ad8906f9df3db8a1812a2b3b326762a9c2a694d6a494eb0e5220b9596d0718c java-1.7.0-openjdk-devel-1.7.0.131-2.6.9.0.el6_8.i686.rpm 191ff23c7449d819ca45243beb432c700c66476597fd08c57c39ae8ceda8ffd2 java-1.7.0-openjdk-javadoc-1.7.0.131-2.6.9.0.el6_8.noarch.rpm 800b7ed498f4b4fd6d0e024652ad05eef8682237fe2349f82a69106a4ca09d54 java-1.7.0-openjdk-src-1.7.0.131-2.6.9.0.el6_8.i686.rpm x86_64: d9381ac7f354a3d066efe9ef1160264309f46c9373c5b28e26365ca3d81dad1a java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el6_8.x86_64.rpm 0057a0bbfe965f73222b4806b7be62f4b79507a1c9903ccc5c4daeb65cd1addf java-1.7.0-openjdk-demo-1.7.0.131-2.6.9.0.el6_8.x86_64.rpm 7872f4fef9d877d2e9de8d9e1c11cd64e6afaf3620266997706fcdad9d9b196d java-1.7.0-openjdk-devel-1.7.0.131-2.6.9.0.el6_8.x86_64.rpm 191ff23c7449d819ca45243beb432c700c66476597fd08c57c39ae8ceda8ffd2 java-1.7.0-openjdk-javadoc-1.7.0.131-2.6.9.0.el6_8.noarch.rpm 3c2b900af1a17e21b63aab28f034e6026d983cf96e1ffd7231a677e1ada30623 java-1.7.0-openjdk-src-1.7.0.131-2.6.9.0.el6_8.x86_64.rpm Source: bf4fbc5136e1640ade4a455baa073d802fc25f099af1075fd636d3d1484ee9cb java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 13 Feb 2017 17:21:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0269 Critical CentOS 5 java-1.7.0-openjdk Security Update Message-ID: <20170213172105.GA27499(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0269 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0269.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f2fb7e8343760a6cc3535a6124bd71411b20795da0ac056b8361c8826ce9a69e java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el5_11.i386.rpm 72c2fee994a496787fe7a8080b0871b0d015c63fc57cf5f2457107620bbb9ac1 java-1.7.0-openjdk-demo-1.7.0.131-2.6.9.0.el5_11.i386.rpm 2563c40d3b9b9d9ce7787284a8f8808491d4adb7af5ee3a6f9a1daeba47e8012 java-1.7.0-openjdk-devel-1.7.0.131-2.6.9.0.el5_11.i386.rpm d4ca35c4e689c276e1f746664e9d9f7fd46a44df643bc7e42a87183473870530 java-1.7.0-openjdk-javadoc-1.7.0.131-2.6.9.0.el5_11.i386.rpm c9e4741823aec2cfc8674f0c0bf52d87eca0fb31c5ea682a7d4208d1d2f29928 java-1.7.0-openjdk-src-1.7.0.131-2.6.9.0.el5_11.i386.rpm x86_64: b277770918246adb9966adbdcc06306e0863392d4cbf327bdfb570d4ade8bf73 java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el5_11.x86_64.rpm e0ce4d7487d50528ea6fffb32c47f5e2405f3863a91b7ca85025b5b86e07ae99 java-1.7.0-openjdk-demo-1.7.0.131-2.6.9.0.el5_11.x86_64.rpm f18a46c869e0fe0bda885e6876f117e3a35604ef23a3c7cdc6c71df754d59ab1 java-1.7.0-openjdk-devel-1.7.0.131-2.6.9.0.el5_11.x86_64.rpm 4a16817c9069a4f5f7d176df443a30e6309bb3551244bfe057054c058b329b70 java-1.7.0-openjdk-javadoc-1.7.0.131-2.6.9.0.el5_11.x86_64.rpm 1d7b5898fd46ae5a447d7b8116919e8e7e16179b40ea3551c0f2ed62b5d1e22f java-1.7.0-openjdk-src-1.7.0.131-2.6.9.0.el5_11.x86_64.rpm Source: 41d3efcc5b6cccbb9ea0af1bde1b2fc4aab16274d55d26db3e64924068128bc8 java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 13 Feb 2017 18:45:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0269 Critical CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20170213184543.GA36647(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0269 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0269.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: afcc43329737c25752cc4e38a34c8ea0430ab0be696d4cfd2c50f9ac82184984 java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el7_3.x86_64.rpm 57c42d32708e71c1778811b6201f189f0d9682ef1ee64ac4f5ca221725ecf41f java-1.7.0-openjdk-accessibility-1.7.0.131-2.6.9.0.el7_3.x86_64.rpm 962b228787c68649003f8a1e5df6875958fdda37866a9d55dc451643ebf1b865 java-1.7.0-openjdk-demo-1.7.0.131-2.6.9.0.el7_3.x86_64.rpm c68e9ed21e04c0ab6d86cbb445f692eb277346a3a51ffc735ba0893d295a109a java-1.7.0-openjdk-devel-1.7.0.131-2.6.9.0.el7_3.x86_64.rpm 629a4dc16c4fb283a3be2b19070cc97ea864018f3b2a18f7a5383eb483154bee java-1.7.0-openjdk-headless-1.7.0.131-2.6.9.0.el7_3.x86_64.rpm 087c956bb48670bd96f861a5996b8535c89b3c83b7f1472af81fbacd7946d754 java-1.7.0-openjdk-javadoc-1.7.0.131-2.6.9.0.el7_3.noarch.rpm a8237710facd516d1d6eda6d749a5fb724746172d866b93168c261933569192f java-1.7.0-openjdk-src-1.7.0.131-2.6.9.0.el7_3.x86_64.rpm Source: 1edbdfcdfacb9daec6390aed4fdad4fe38dbf36023f1a095fff518d29e585594 java-1.7.0-openjdk-1.7.0.131-2.6.9.0.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 144, Issue 4 ***********************************************

1 0

dhcpcd.conf
by Alice Wonder 14 Feb '17

14 Feb '17

Hi, ran into a problem w/ linode hosted VM where IPv6 address changed after they migrated it to a different host. They claim I can fix it with sed -i 's/slaac private/slaac hwaddr/' /etc/dhcpcd.conf However there appears to be no dhcpcd.conf on any of my CentOS 7 systems. What is the CentOS 7 equivalent?

2 1

A question on networking (CentOS 6)
by KM 13 Feb '17

13 Feb '17

Hi AllThis is NOT specifically related to CentOS per se. I have 2 servers that are on two networks. I did NOT set this up. The NIC went bad and it has been replaced. I knew enough to update the HW address in the ifcfg-* files. The network service restarts successfully without errors. However I cannot connect via ping or ssh with the pt2pt network setup on 192.168.x.*. When I use our internal network ip addresses it is fine. I am not sure how to troubleshoot this separate connection. What can I provide here that will allow someone to help? Thanks in advance. I tried searching a bit but didn't find anything of use so far. KM

2 4

Re: [CentOS] Wich web browser on CentOS6 ?
by James B. Byrne 13 Feb '17

13 Feb '17

On Fri, February 10, 2017 15:44, Alice Wonder wrote: > On 02/10/2017 12:34 PM, James B. Byrne wrote: >> >> On Fri, February 10, 2017 06:26, Patrick Begou wrote: >>> Hello >>> >>> I have more and more troubles using firefox in professional >>> environment with >>> CentOS6. The latest version is 45.7.0 But I can't use it anymore to >>> access some >>> old server hardware (IDRAC7 of DELL C6100) because of >>> "/SSL_ERROR_WEAK_SERVER_CERT_KEY/". I had to install an old >>> Firefox32 >>> version >>> to administrate these servers. >>> >>> Today I upgrade the firmware of 2 DELL switch and now Firefox >>> cannot >>> connect to them anymore saying: /An error occurred during a >>> connection to xxx.xxx.xxx.xxx. The server rejected >>> the handshake because the client downgraded to a lower TLS version >>> than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT >>> >>> /Is there a CentOS6 recommended web browser allowing continuous >>> connections to olds and new base level (and local) system >>> administration services ? >>> >> >> This situation arises because older, dare I say old, equipment >> released with embedded software and using http/https as the >> administrative front end were shipped with minimally compliant x-509 >> certificates. Often self-signed with 1kb keys and md5 signature >> hashes. Not to mention many are past their expiry dates. >> >> However, given the revelations of state sanctioned snooping on >> network >> traffic browsers are being pushed to implement increased compliance >> checking for the overall security of users. Firefox is simply >> implementing what various 'authorities' are recommending as secure >> practices with respect to authentication using pki and x-509 >> certificates. >> >> The present situation is a PIA. It could be a lot more >> user-friendly >> if FF so chose. They could have easily allowed one to turn off these >> advanced compliance checks for specific IP and DNS addresses so that >> the intended benefit remained but the interference with existing >> infrastructure was minimised. >> >> But, FF is on its own chosen path to oblivion and the idea of >> compromise is totally absent from their project plan. >> >> > > IMHO FireFox is doing the right thing. Compromises in policy is how > system compromises often happen. > > If you can change the setting to be more forgiving of certain bad > vendors, then so can malware. > > What we really need to do is demand better from the manufacturers of > products we use in a "professional environment" - and it is extremely > important we demand better from them now, during the dawn of IoT. > > It is a bit difficult for an end user to insist that a vendor improve a ten year old piece of equipment. Sure, that might be as simple as a firmware update. But why not insist that people buy new product instead and thereby add to the bottom line? Which way do see most commercial firms going? FF is a consumer item that is being shipped with a supposedly Enterprise Linux distribution. This leads to problems that are created by the divergence between the target audience and Enterprise users. Enterprises tend to have a much more robustly secured gateware to the wider Internet than consumers. Which for that audience makes a lot of the more esoteric security enhancements rather useless. If an intruder can carry out a MTM attack on your internal LAN then nothing FF can do is going to have much of an effect. A professional organisation would not simply cut administrators off from the devices that they are required to manage. Nor would it dictate how a company spends its money on hardware. A bunch of self-righteous zealots might. Which may account for the fact that FF (all versions) market share is now less than 10%.[1] [1] https://www.netmarketshare.com/browser-market-share.aspx?qprid=2&qpcustomd=… -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Alsa pulseaudio & procmail
by Adrian van Bloois 13 Feb '17

13 Feb '17

Hi, I'm using a program called morse to generate morse code signals when mail is received. This is done by calling this program depending on de subject or from of the incoming mail. THis worked fine on CentOS 6 but since I'm using CentOS 7 it does nt work anymore. In my procmail logging I get: ALSA lib pulse.c:243:(pulse_connect) PulseAudio: Unable to connect: Connection refused Can't access speaker. Normal listening to streams on the Internet works fine, the program morse itself works fine, but runningit from procmail fails. Any ideas? Adrian -- Adri P. van Bloois Antonlaan 104 email: adrian(a)pa0rda.nl 3701 VG Zeist voice: +31-(0)-30-6912741 The Netherlands fax: NONE 52 05'15.77"N 5 4'44.56"E QTH-locater JO 22 OC "Elegance is not a dispensable luxury but a factor that decides between success and failure." Edsger W. Dijkstra

1 0

Manual Install fail in first steps
by Andreas Benzler 13 Feb '17

13 Feb '17

Hello everyone, while I wanne try out very special partition, i walk through https://wiki.centos.org/HowTos/ManualInstall but fail allready at "INSTALL setup basesystem filesystem" This is very clear to me, because rpm don't know the full path (real version) or is there some thing wrong ?? Anaconda it self works with groups like @base etc... Very wired. Doesn't looks like up to date. Sincerely Andy

1 0

Re: [CentOS] Automounting a USB drive
by tdukes＠palmettoshopper.com 13 Feb '17

13 Feb '17

-------- Original Message -------- Subject: Re: [CentOS] Automounting a USB drive From: Fred Smith <fredex(a)fcshome.stoneham.ma.us> Date: Sun, February 12, 2017 9:52 pm To: centos(a)centos.org On Sun, Feb 12, 2017 at 06:19:34PM -0700, tdukes(a)palmettoshopper.com wrote: > > Hello, > > Been try to use autofs to mount and unmount a usb flashdrive. I've never had to do anything at all to make this work,... I insert the USB device, wait a few seconds, and voila! are you trying this because you can't get it to work the "normal" way, or is this simply an educational experience? Fred Its not mounting on its own as it did in 6.8. If I click on it in gnome, it mounts but REAR won't backup to it. If i manually mount it from a terminal, I have read/write access. Haven't been able to get a backup since I upgraded back in mid-January.

3 2

pam_tally2 after unlock time
by Naveen Kumar 13 Feb '17

13 Feb '17

Hi All, I prepared a Centos 6.8 Minimal server, as part of hardening i added PAM rules under system-auth and password-auth to lock the user account for 30 minutes after 3 failed login attempts. ############system-auth############### auth required pam_tally2.so deny=3 unlock_time=1800 auth required pam_env.so auth sufficient pam_unix.so auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_deny.so account required pam_unix.so account required pam_tally2.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 type= password sufficient pam_unix.so sha512 shadow nullok use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so ###################password-auth######### auth required pam_tally2.so deny=3 unlock_time=1800 auth required pam_env.so auth sufficient pam_unix.so auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_deny.so account required pam_unix.so account required pam_tally2.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 type= password sufficient pam_unix.so sha512 shadow nullok use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so ################################################################# Now, *after 3 failed attempts user locked successfully but after 30mins when i tried with wrong password for first attempt it again got locked. It should wait for 3 more attempts after unlock, but got locked after first time,* after unlock. Anyway to correct the logic.

1 0

Automounting a USB drive
by tdukes＠palmettoshopper.com 13 Feb '17

13 Feb '17

Hello, Been try to use autofs to mount and unmount a usb flashdrive. The mount point is /media When the drive is NOT inserted, /media is empty. When Iinsert the drive, I see directories in /media that are on the usb drive but nocontent. So, its kind working. /etc/auto,master: # # Sample auto.master file # This is a 'master' automounter map and it has thefollowing format: # mount-point [map-type[,format]:]map [options] # For details of the format look at auto.master(5). # /misc /etc/auto.misc # # NOTE: mounts done from a hosts map will be mounted withthe # "nosuid"and "nodev" options unless the "suid" and "dev" # optionsare explicitly given. # /net -hosts # # Include /etc/auto.master.d/*.autofs # The included files must conform to the format of thisfile. # +dir:/etc/auto.master.d # # Include central master map if it can be found using # nsswitch sources. # # Note that if there are entries for /net or /misc (as # above) in the included master map any keys that are the # same will not be seen as the first read key seen takes # precedence. # +auto.master /media /etc/auto.usb /etc/auto.usb: usb -fstype=auto :/dev/sdb1 The particular usb drive is a REAR backup drive but Iused -fstype=auto in case it may be something different. TIA

2 1

Licence text questions
by Walter Dnes 12 Feb '17

12 Feb '17

I'm running a CentOS 6.5 chroot to build Pale Moon (a Firefox fork) for older machines running distros like Puppy linux. Before anyone asks... * Yes, even though the older machines are using "ancient" glibc, etc, they do have security patches back-ported, e.g. http://www.murga-linux.com/puppy/viewtopic.php?t=90461 "Lucid Puppy Revitalized as 5.2.8.7 - December, 2016" * I realize that CentOS 6.5 is "not safe for surfing". It starts at the commandline, and the only network activity is pulling down source code with git, and scp to send the compiled package to the host, i.e. my desktop PC. If necessary, that could be done by the host OS. It's used for building, and nothing else. Currently just Pale Moon, but other software could also be built. Other people are interested in doing the same. My choices are... * explain how to install CentOS 6.5, which options to choose, turn off boot-to-gui, and how to download and build newer gcc, yasm, and python-2.7 to duplicate my build environment, etc, etc. * or send out a 1.3 gigabyte centos65.tar.xz and give simple instructions to extract the archive, copy over /etc/resolv.conf, bind-mount /dev and /proc, chroot into the directory, and get going right away. I'm not charging money, but the 2nd choice literally involves re-distributing CentOS, and additional Open Source software. I believe that I'm required to provide at least the location from which it can be obtained. Here's a first draft of my "licences.txt". Any problems, suggestions? ======================================================================== The tarball is a collection of various Open Source software, assembled and bundled together by Walter Dnes <waltdnes(a)waltdnes.org>. It's based on a 32-bit CentOS 6.5 install. Additional components necessary for the building of Pale Moon 27 were built from source. It was originally installed in a QEMU VM (Virtual Machine), and then rsync'd to a directory on the host machine for use as a chroot environment. The tarballed directory is intended to run as a chroot environment. The various softwares remain subject to their original licences. As required by many Open Source licences, here is a list of where the original software can be obtained. * The CentOS 6.5 distro can be obtained at http://vault.centos.org/6.5/isos/i386/CentOS-6.5-i386-bin-DVD1.iso http://vault.centos.org/6.5/isos/i386/CentOS-6.5-i386-bin-DVD2.iso DVD1 is approx 3.6 gigabytes and DVD2 is approx 1 gigabyte The following additional source code was downloaded and used to build additional infrastructure required for building Pale Moon. * Python 2.7.13 can be otained at https://www.python.org/ftp/python/2.7.13/Python-2.7.13.tgz * gcc 4.9.4 can be obtained at http://gcc.parentingamerica.com/releases/gcc-4.9.4/gcc-4.9.4.tar.bz2 * gcc 5.4.0 can be obtained at http://gcc.parentingamerica.com/releases/gcc-5.4.0/gcc-5.4.0.tar.bz2 * YASM 1.3.0 can be obtained at http://www.tortall.net/projects/yasm/releases/yasm-1.3.0.tar.gz ======================================================================== -- Walter Dnes <waltdnes(a)waltdnes.org>

2 5

chcon failed to change context Permission denied
by Tim Smith 12 Feb '17

12 Feb '17

Hi, I'm confused, why can root not change context of a directory ? I've moved a mysql dir from /var/lib to another drive. But running sudo chcon -R -t mysqld_t ./mysql Yields a screen full of messages such as chcon: failed to change context of ‘schema_table_lock_waits.frm’ to ‘system_u:object_r:mysqld_t:s0’: Permission denied (and yes, mysql was shut down before the move and is till shut down).

2 2

Wich web browser on CentOS6 ?
by Patrick Begou 11 Feb '17

11 Feb '17

Hello I have more and more troubles using firefox in professional environment with CentOS6. The latest version is 45.7.0 But I can't use it anymore to access some old server hardware (IDRAC7 of DELL C6100) because of "/SSL_ERROR_WEAK_SERVER_CERT_KEY/". I had to install an old Firefox32 version to administrate these servers. Today I upgrade the firmware of 2 DELL switch and now Firefox cannot connect to them anymore saying: /An error occurred during a connection to xxx.xxx.xxx.xxx. The server rejected the handshake because the client downgraded to a lower TLS version than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT /Is there a CentOS6 recommended web browser allowing continuous connections to olds and new base level (and local) system administration services ? Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

8 9

Re: [CentOS] Wich web browser on CentOS6 ?
by James B. Byrne 11 Feb '17

11 Feb '17

On Fri, February 10, 2017 06:26, Patrick Begou wrote: > Hello > > I have more and more troubles using firefox in professional > environment with > CentOS6. The latest version is 45.7.0 But I can't use it anymore to > access some > old server hardware (IDRAC7 of DELL C6100) because of > "/SSL_ERROR_WEAK_SERVER_CERT_KEY/". I had to install an old Firefox32 > version > to administrate these servers. > > Today I upgrade the firmware of 2 DELL switch and now Firefox cannot > connect to them anymore saying: /An error occurred during a > connection to xxx.xxx.xxx.xxx. The server rejected > the handshake because the client downgraded to a lower TLS version > than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT > > /Is there a CentOS6 recommended web browser allowing continuous > connections to olds and new base level (and local) system > administration services ? > This situation arises because older, dare I say old, equipment released with embedded software and using http/https as the administrative front end were shipped with minimally compliant x-509 certificates. Often self-signed with 1kb keys and md5 signature hashes. Not to mention many are past their expiry dates. However, given the revelations of state sanctioned snooping on network traffic browsers are being pushed to implement increased compliance checking for the overall security of users. Firefox is simply implementing what various 'authorities' are recommending as secure practices with respect to authentication using pki and x-509 certificates. The present situation is a PIA. It could be a lot more user-friendly if FF so chose. They could have easily allowed one to turn off these advanced compliance checks for specific IP and DNS addresses so that the intended benefit remained but the interference with existing infrastructure was minimised. But, FF is on its own chosen path to oblivion and the idea of compromise is totally absent from their project plan. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Re: [CentOS] An rpm package with country flags in PNG format for CentOS 6
by Alexander Farber 10 Feb '17

10 Feb '17

awstats is good suggestion, thank you Frank Also found https://github.com/hjnilsson/country-flags - public domain and any size

1 0

An rpm package with country flags in PNG format for CentOS 6
by Alexander Farber 10 Feb '17

10 Feb '17

Hello fellow CentOS users, does anybody please know a package for CentOS 6 with at least 200 country flag images in PNG format and (lowercased or uppercased) ISO-conform 2-letter naming (like "us.png", "de.png", "ru.png", ...)? This does not have to be a specific graphic-related package, but can be anything - like a Nagios package, or maybe KDE-help package... I am looking for a package to install at my CentOS 6 LAMP server and to (ab)use those images to display the country flags on the served webpages. Thank you for any ideas Alex

2 1

Centos7 - SELinux messing with my named.conf
by Robert Moskowitz 09 Feb '17

09 Feb '17

Well, actually it is me cp-ing files and SELinux yelling at me later... I had named working, but detected that I had a couple clean ups to do in /etc/named.conf and an include file in /etc/named. I made the changes, scp to my user id from my notebook, 'su' in my ssh session and cp the named.conf and other files. Made sure to fix the file ownership with chown root:named, and that permissions were correct. Then restarted named. Of course if failed. After a little playing and digging around I find: # journalctl -xe -- -- Unit named-setup-rndc.service has finished starting up. -- -- The start-up result is done. Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: Starting Berkeley Internet Nam -- Subject: Unit named.service has begun start-up -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit named.service has begun starting up. Feb 09 16:27:41 rigel.htt-consult.com bash[3082]: open: /etc/named.conf: permiss Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: named.service: control process Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: Failed to start Berkeley Inter -- Subject: Unit named.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit named.service has failed. -- -- The result is failed. Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: Unit named.service entered fai Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: named.service failed. Feb 09 16:27:41 rigel.htt-consult.com polkitd[567]: Unregistered Authentication setenforce 0 and named starts right up, indicating it IS a SELinux issue. So what SELinux magic do I need here and were is it documented? thanks

2 2

Re: [CentOS] mach64 driver, latest update in CentOS 6.8, symbol lookup error - workaround
by Styma, Robert (Nokia - US) 09 Feb '17

09 Feb '17

> This is a known issue: >https://www.centos.org/forums/viewtopic.php?f=13&t=58168 >I would recommend filing a bug with Red Hat to have them fix it. I am going to see if I can find someone in the organization with a Red Hat account to open the bug. In the meantime, I came up with a workaround. I wanted to see if I could role the updates back to CentOS 6.7 since the system was 6.7 until I applied the updates. The alternative is to load the system from scratch, so what is there to loose. The result seems to be working so I will document what I did. # First I rebooted and specified to use the original kernel # Then mount the place where I unloaded the original DVD ISOs mount -t nfs phxbkup2:/iso/centos6.7x64 /media/CentOS # Tried to sync from this location, but it did not work, yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 distribution-synchronization # There were a number of conflicts that prevented the yum to run. # The troublesome packages did not look like they would prevent booting, so I got rid of them yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 erase python-libipa_hbac-1.13.3-22.el6_8.4.x86_64 mesa-libxatracker-11.0.7-4.el6.x86_64 xorg-x11-drivers-7.3-13.4.el6.x86_64 mesa-libxatracker-11.0.7-4.el6.x86_64 yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 erase xcb-util xcb-util-renderutil # Tried the distro sync again and it went through. yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 distribution-synchronization # Tried to put back the problem packages, especially since one contained the driver I needed. The drivers went in. # The xcb-util xcb-util-renderutil got reinstalled as part of the distro sync yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 install xorg-x11-drivers # The other packages were not part of the media, so they got left out. yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 install python-libipa_hbac mesa-libxatracker mesa-libxatracker # Finally, I disabled the CentOS-Base repos and enabled the CentOS-Vault 6.7 repos (Same3 as from the Base) and ran "yum update" to get to the latest set from 6.7. The xorg and x11dirvers were not updated. Rebooted and I have a desktop. This is not the first time distribution-synchronization has pulled my butt out of the fire. Thank you for the suggestions which eventually helped me narrow down the problem.

2 1

Amavisd-new DKIM query timeout
by Tim Smith 09 Feb '17

09 Feb '17

Hi, amavisd is adding the following header to my mails : Authentication-Results: my.example.com (amavisd-new); dkim=neutral reason="invalid (public key: DNS query timeout for their._domainkey.example.com)" header.d=example.com The problem is that this is not quite true ! I have no DNS problems, e.g. if I do : dig their._domainkey.example.com TXT dig returns fine without any substantial wait. What setting am I missing ? Where am I going wrong ? Thanks ! Tim

1 0

centosplus version of firefox
by Leon Fauster 09 Feb '17

09 Feb '17

I known its lower prioritized but any signs of the centosplus version of firefox? Just asking because of the severity class. Thanks for the effort! LF

3 4

Spotty internet connection
by TE Dukes 08 Feb '17

08 Feb '17

How do you IT guys diagnose the problem with a spotty internet connection? Just spent an hour on the phone with TWC/Spectrum. Of course they don't see anything wrong with their service. They send me to speedtest.net. The first attempt, the page didn't fully load, the second attempt, the page didn't load at all, the third attempt, it loaded. On a 20/2MB line I get 24.83/2.47MB. The speed is better than what I'm paying for but its spotty. Lately I have been getting slow and partial page loads, server not found, server timed out, etc.. Get knocked off ssh when accessing my home server from work, etc. Its not the work connection because I don't have problems accessing other sites, just here at home and my home server. Is there any kind of utility to check for failing hardware? TIA

8 14

selinux contexts for openntpd portable
by Jordan Ladora 08 Feb '17

08 Feb '17

I was wondering if someone could help with selinux context for the portable openntpd library on centos7. I compiled openntpd-6.0p1 and it runs great on centos7, but have not had much luck with selinux contexts for it. This is what I tried- semanage fcontext -a -t ntp_conf_t /usr/local/etc/ntpd.conf # seems to work semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpd # gets reset on reboot to bin_t and/or stops ntpd from working semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpctl # stops ntpd from working semanage fcontext -a -t ntp_drift_t /usr/local/var/db/ntpd.drift # seems ok No idea about context for /usr/local/var/db/ntpd.sock Thanks in advance for any help, jl

1 0

Rebuild gstreamer
by Jerry Geis 07 Feb '17

07 Feb '17

Hi all, I have a need to rebuild the gstreamer and gst-plugins in CentOS 7. So I found the wiki for rebuilding a source package... I downloaded the vault.centos.org files, installed them with dependencies. I did the rpmbuild -ba for each of the four packages. All seemed to go well. No errors reported. However - the /usr/bin/gst-inspect* listing shows the files as OLD ls -l /usr/bin/gst-inspect* -rwxr-xr-x 1 root root 16000 Jun 9 2014 /usr/bin/gst-inspect -rwxr-xr-x 1 root root 45488 Jun 9 2014 /usr/bin/gst-inspect-0.10 -rwxr-xr-x 1 root root 45552 Nov 20 2015 /usr/bin/gst-inspect-1.0 However the file was genereated as shows here: pwd /root/rpmbuild/BUILD/gstreamer-0.10.36/tools [root@W530 tools]# ls -l gst-inspect* -rwxr-xr-x 1 root root 36632 Feb 7 08:42 gst-inspect -rwxr-xr-x 1 root root 8436 Feb 7 08:42 gst-inspect-0.10 -rw-r--r-- 1 root root 1768 Feb 7 08:42 gst-inspect-0.10.1 -rw-r--r-- 1 silentm silentm 1768 Dec 11 2011 gst-inspect.1.in -rw-r--r-- 1 silentm silentm 53933 Feb 7 08:42 gst-inspect.c -rw-r--r-- 1 silentm silentm 47400 Dec 29 2011 gst-inspect.c.rpm-provides So the package built... why did /usr/bin/gst-inspect* not match the above directory. Did I miss something? Thanks, Jerry

4 5

Re: [CentOS] Rebuild gstreamer
by Andreas Benzler 07 Feb '17

07 Feb '17

Hello Jerry, don't know why you need to upgrade gst-inspect plugin. But I did update gstreamer plugin last year. If you like to take a view http://centos.cms4all.org/repo/7/gstreamer/ cms4all.repo [cms4all-gstreamer] name=cms4all-gstreamer #baseurl=http://centos.cms4all.org/repo/7/gstreamer/ baseurl=file:///srv/repo/centos/7/gstreamer gpgcheck=0 enabled=1 This are private package, does it fit or what you are looking for? Plays all my personaly files. Sincerely Andy PS: Enable midi, ffmpeg dvd(css) lame etc... > > Hi all, > > > > I have a need to rebuild the gstreamer and gst-plugins in CentOS 7. > > So I found the wiki for rebuilding a source package... > > I downloaded the vault.centos.org files, installed them with dependencies. > > > > I did the rpmbuild -ba for each of the four packages. All seemed to go well. > > No errors reported. > > > > However - the /usr/bin/gst-inspect* listing shows the files as OLD > > ls -l /usr/bin/gst-inspect* > > -rwxr-xr-x 1 root root 16000 Jun 9 2014 /usr/bin/gst-inspect > > -rwxr-xr-x 1 root root 45488 Jun 9 2014 /usr/bin/gst-inspect-0.10 > > -rwxr-xr-x 1 root root 45552 Nov 20 2015 /usr/bin/gst-inspect-1.0 > > > > However the file was genereated as shows here: > > pwd > > /root/rpmbuild/BUILD/gstreamer-0.10.36/tools > > [root@W530 tools]# ls -l gst-inspect* > > -rwxr-xr-x 1 root root 36632 Feb 7 08:42 gst-inspect > > -rwxr-xr-x 1 root root 8436 Feb 7 08:42 gst-inspect-0.10 > > -rw-r--r-- 1 root root 1768 Feb 7 08:42 gst-inspect-0.10.1 > > -rw-r--r-- 1 silentm silentm 1768 Dec 11 2011 gst-inspect.1.in > > -rw-r--r-- 1 silentm silentm 53933 Feb 7 08:42 gst-inspect.c > > -rw-r--r-- 1 silentm silentm 47400 Dec 29 2011 gst-inspect.c.rpm-provides > > > > > > So the package built... why did /usr/bin/gst-inspect* not match the above > > directory. > > > > Did I miss something? > > Thanks, > > > > Jerry > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos >

1 0

Trick to compile older packages
by Jerry Geis 07 Feb '17

07 Feb '17

I am trying to add a package (I know its older - but it should work) gst-rtsp-server-0.10.8 to CentOS 7. The gstreamer 0.10 packages are included in C7 and they compile just fine. When I extract and try to compile gst-rtsp-server 0.10.8 the ./configure goes fine. but the make results in errors: make make all-recursive make[1]: Entering directory `/home/silentm/LayeredSolutions/webkit-0.10/gst-rtsp-server-0.10.8.2' Making all in gst make[2]: Entering directory `/home/silentm/LayeredSolutions/webkit-0.10/gst-rtsp-server-0.10.8.2/gst' Making all in rtsp-server make[3]: Entering directory `/home/silentm/LayeredSolutions/webkit-0.10/gst-rtsp-server-0.10.8.2/gst/rtsp-server' CC libgstrtspserver_0.10_la-rtsp-media.lo rtsp-media.c: In function 'gst_rtsp_media_class_init': rtsp-media.c:143:3: error: 'g_thread_create' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:104): Use 'g_thread_new' instead [-Werror=deprecated-declarations] klass->thread = g_thread_create ((GThreadFunc) do_loop, klass, TRUE, &error); ^ rtsp-media.c: In function 'gst_rtsp_media_init': rtsp-media.c:160:3: error: 'g_mutex_new' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:277) [-Werror=deprecated-declarations] media->lock = g_mutex_new (); ^ rtsp-media.c:161:3: error: 'g_cond_new' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:281) [-Werror=deprecated-declarations] media->cond = g_cond_new (); ^ rtsp-media.c: In function 'gst_rtsp_media_finalize': rtsp-media.c:242:3: error: 'g_mutex_free' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:279) [-Werror=deprecated-declarations] g_mutex_free (media->lock); ^ rtsp-media.c:243:3: error: 'g_cond_free' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:283) [-Werror=deprecated-declarations] g_cond_free (media->cond); ^ rtsp-media.c: In function 'gst_rtsp_media_get_status': rtsp-media.c:1504:5: error: 'g_cond_timed_wait' is deprecated (declared at /usr/include/glib-2.0/glib/deprecated/gthread.h:285) [-Werror=deprecated-declarations] if (!g_cond_timed_wait (media->cond, media->lock, &timeout)) { ^ How to I get this package to compile just like the gst-plugins (bad, good, base) 0.10 for C7? I was trying to look at the spec file for the other packages - but I dont see the trick. Any pointers? Jerry

2 1

CentOS-announce Digest, Vol 144, Issue 3
by centos-announce-request＠centos.org 07 Feb '17

07 Feb '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0253 Moderate CentOS 6 spice-server Security Update (Johnny Hughes) 2. CESA-2017:0252 Moderate CentOS 6 ntp Security Update (Johnny Hughes) 3. CESA-2017:0252 Moderate CentOS 7 ntp Security Update (Johnny Hughes) 4. CESA-2017:0254 Moderate CentOS 7 spice Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Feb 2017 11:24:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0253 Moderate CentOS 6 spice-server Security Update Message-ID: <20170206112447.GA35597(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0253 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0253.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 679c8a61f4dcc929e8ee00e7d8fc676579060a4a987a89496733aecdcc1c5f0c spice-server-0.12.4-13.el6_8.2.x86_64.rpm 7e48a65bb2f1adf110ea3e49fc802310c06ced45787c02bccbdf51d26fa516b7 spice-server-devel-0.12.4-13.el6_8.2.x86_64.rpm Source: 582f4684ddfbee8b14740b6543f8bfa6a1d4edebc2a05933fee8dcbb1adf1540 spice-server-0.12.4-13.el6_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 6 Feb 2017 11:25:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0252 Moderate CentOS 6 ntp Security Update Message-ID: <20170206112517.GA35860(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0252 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0252.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b9dfb7436c9ef8ab1b0cb6068d042d27f0c7e6d0f21315b8485b789c90bf8492 ntp-4.2.6p5-10.el6.centos.2.i686.rpm ba89750ee097aa27f63b351d309a55d1d3b3b4ad296d01d1668b971f5f96859e ntpdate-4.2.6p5-10.el6.centos.2.i686.rpm 6a1819a41222249fdd0ee1be5d17baf889e449083b43d04fc2816b19e55a7dcc ntp-doc-4.2.6p5-10.el6.centos.2.noarch.rpm 2e1a9c4fcd6be3e8d11c6568545d904e046eae02884897951f1efbdf9a1b2a51 ntp-perl-4.2.6p5-10.el6.centos.2.i686.rpm x86_64: 8400f1a18a703e7d5f8074261635d1ddf6439278309f59b8715c46180eb07403 ntp-4.2.6p5-10.el6.centos.2.x86_64.rpm 5c0f9d494d781918b20f11db573fd81e33f07286d60696dd8e3d5384988fff1f ntpdate-4.2.6p5-10.el6.centos.2.x86_64.rpm 6a1819a41222249fdd0ee1be5d17baf889e449083b43d04fc2816b19e55a7dcc ntp-doc-4.2.6p5-10.el6.centos.2.noarch.rpm de075c90b1050f370fa713a83b83e403f3971460626f6eaf2817354505a701bd ntp-perl-4.2.6p5-10.el6.centos.2.x86_64.rpm Source: 771f9b7b1d9e5e109fb35ac6d98f52bfc29c2ece60d09a07254033212046695a ntp-4.2.6p5-10.el6.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 6 Feb 2017 12:22:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0252 Moderate CentOS 7 ntp Security Update Message-ID: <20170206122253.GA49275(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0252 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0252.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: eb1819614fa19cf5cf8ca7ed7c3372bc38bf4942c93ac4637c0c51f2d815c31f ntp-4.2.6p5-25.el7.centos.1.x86_64.rpm 8457f5c379cdddc6e0580b7d2a79c457591dc4bee292b5a4315a3909025a0114 ntpdate-4.2.6p5-25.el7.centos.1.x86_64.rpm 6c99631e1924b51dceba0c8ec17248c20e99e6b7149297bc96802cc17938b8ca ntp-doc-4.2.6p5-25.el7.centos.1.noarch.rpm ab24d7808313a1c65d0fc3154ca92707becaa9c0a463ae122eb1dadcfd2aa48b ntp-perl-4.2.6p5-25.el7.centos.1.noarch.rpm 1b63fb91ae4e32d626e855c7abbbc96afbd4efd7756f54131b3f8f58a07b20f7 sntp-4.2.6p5-25.el7.centos.1.x86_64.rpm Source: 3ecac3a33e3dc48362b5a52174ddeb6a552d571f1e19baa33f4cf8799a6cd5d4 ntp-4.2.6p5-25.el7.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 6 Feb 2017 12:23:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0254 Moderate CentOS 7 spice Security Update Message-ID: <20170206122323.GA49344(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0254 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0254.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f579cf6528ad3b90eb6c2c6c779d899db2f3d7d424fa044bfa544429c17874f7 spice-server-0.12.4-20.el7_3.x86_64.rpm d953580820c483452db1771e8f2f902a74920c3d7aabfeefd3d22b30c19fc690 spice-server-devel-0.12.4-20.el7_3.x86_64.rpm Source: 9990cf4655bafdc4c5b7d4ec78400898cce6dfb8f345854911a61ded403d4af5 spice-0.12.4-20.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 144, Issue 3 ***********************************************

1 0

Chrony vd NTP
by Robert Moskowitz 06 Feb '17

06 Feb '17

I have read: http://thegeekdiary.com/centos-rhel-7-chrony-vs-ntp-differences-between-ntp… My server is up all the time and will serve time to internal systems (via DHCP options). Caveat is that my server is an armv7 (Cubieboard2) which does not have an RTC (no battery). So whenever the system boots, the time is ZERO (Dec 31, 1969 or some such). Chrony fixes this really fast; shortly after boot the time is good. Chrony CAN be configed as an internal time server. But chrony does not seem to step the clock for any adjustments needed. It is more important that this systems time be right all the time than to avoid clock steps. This brings me back to NTP, which normally takes hours to bring the time from ZERO to current, but keeps the time correct. So: Can Chrony check the time, say once a day? Or can NTP make a BIG time jump all at once (on system restart)? thanks

4 5

install of audacity kills audio
by ken 06 Feb '17

06 Feb '17

# uname -r 3.10.0-514.6.1.el7.x86_64 # cat /etc/centos-release CentOS Linux release 7.3.1611 (Core) Prior to the below the sound/audio on my system worked just fine. Then a yum of install of audacity with dependencies: ... Downloading packages: (1/6): vamp-plugin-sdk-2.5-4.el7.x86_64.rpm | 172 kB 00:03 (2/6): wxGTK-2.8.12-20.el7.x86_64.rpm | 2.9 MB 00:00 (3/6): audacity-2.1.1-1.el7.x86_64.rpm | 4.3 MB 00:08 (4/6): portaudio-19-16.el7.x86_64.rpm | 88 kB 00:09 (5/6): libid3tag-0.15.1b-17.el7.x86_64.rpm | 48 kB 00:09 (6/6): wxBase-2.8.12-20.el7.x86_64.rpm | 588 kB 00:10 ... Now nothing which is supposed to output is working; e.g., something as simple as "play file.wav" hangs at the start and outputs no sound at all. Two minutes prior to the install the exact same command worked. Same story with other apps using sound. I "erased" (rpm -e ...) all of the installed packages listed above. That didn''t fix the problem. My guess is that the install loaded one or more bogus kernel modules, it would be nice if lsmod showed WHEN the modules were loaded, but it doesn't. Is there some way to find this out? # lspci -vv -s 00:1f.3 00:1f.3 Audio device: Intel Corporation Sunrise Point-H HD Audio (rev 31) Subsystem: Hewlett-Packard Company Device 80ee Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+ Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx- Latency: 32, Cache Line Size: 64 bytes Interrupt: pin A routed to IRQ 130 Region 0: Memory at 96220000 (64-bit, non-prefetchable) [size=16K] Region 4: Memory at 96210000 (64-bit, non-prefetchable) [size=64K] Capabilities: [50] Power Management version 3 Flags: PMEClk- DSI- D1- D2- AuxCurrent=55mA PME(D0-,D1-,D2-,D3hot+,D3cold+) Status: D0 NoSoftRst+ PME-Enable- DSel=0 DScale=0 PME- Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Address: 00000000fee003d8 Data: 0000 Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel # rmmod snd_hda_intel rmmod: ERROR: Module snd_hda_intel is in use snd_hda_intel probably isn't the offending module anyway. I recall having this same problem five or ten years ago with an audacity install, but don't recall what I did to fix it. Anyone here closer to this issue? Thanks much.

1 0

Delaying services starting at boot
by Robert Moskowitz 06 Feb '17

06 Feb '17

Back to the challenge of a server with no RTC. Chrony advances the clock some 14B sec a bit after bootup. So sometimes services like httpd start with a bad time of Dec 31, 1969. Is there some way to delay services starting until Chrony has done its job to bring the clock up? I think it matters to some extent, as /var/log/http/error.log is filled this time with messages about http starting with that 1969 date. Other times, on boot, I don't see these messages, and thus guess that Chrony set the time before httpd started. thanks

1 0

CentOS 7.3.1611 scap-security-guide issue
by Michał Jankowski 06 Feb '17

06 Feb '17

Hello, I have noticed that pci-dss profile, ssg-centos7-xccdf.xml will always fail on test and remediation for disable_prelink rule. That seem to be caused by insufficient CentOS RPM customization of upstream code. Specifically this: https://github.com/OpenSCAP/scap-security-guide/blob/master/shared/oval/dis… <https://github.com/OpenSCAP/scap-security-guide/blob/master/shared/oval/dis…> That condition will always fail on CentOS because it misses: <extend_definition comment="Installed OS is CentOS7" definition_ref=" installed_OS_is_centos7" /> I was thinking about raising a bug on https://bugs.centos.org or committing a fix in https://git.centos.org/summary/rpms!scap-security-guide but I am unsure as to what action should I take. The other issue I'm facing is trying to workaround the disable_prelink rule by simply taking it out of tests. I have create a tailor file but it doesn't seem to be taken into consideration. The file: <?xml version="1.0" encoding="UTF-8"?> <cdf-11-tailoring:Tailoring xmlns:cdf-11-tailoring=" http://open-scap.org/page/Xccdf-1.1-tailoring" xmlns:xccdf=" http://checklists.nist.gov/xccdf/1.1" id="xccdf_scap-workbench_tailoring_default"> <cdf-11-tailoring:benchmark href="/private/tmp/ssg-centos7-xccdf.xml"/> <cdf-11-tailoring:version time="2017-01-31T14:41:00">1</cdf-11-tailoring:version> <xccdf:Profile id="pci-dss_disable_rule_prelink" extends="pci-dss"> <xccdf:title xmlns:xhtml="http://www.w3.org/1999/xhtml" xml:lang="en-US" override="true">PCI-DSS v3 Control Baseline for CentOS Linux 7 [CUSTOMIZED]</xccdf:title> <xccdf:description xmlns:xhtml="http://www.w3.org/1999/xhtml" xml:lang="en-US" override="true">This is a *draft* profile for PCI-DSS v3</xccdf:description> <xccdf:select idref="disable_prelink" selected="false"/> </xccdf:Profile> </cdf-11-tailoring:Tailoring> Then the oscap command I tried: oscap xccdf eval --remediate --tailoring-file tailor.xml --profile pci-dss --fetch-remote-resources /usr/share/xml/scap/ssg/content/ssg-centos7-xccdf.xml It is my debut on the list, thank you for your consideration :-)

2 2

CentOS 6, 8, mplayer, "vector smash protection is enabled"
by m.roth＠5-cent.us 06 Feb '17

06 Feb '17

This *just* started happening. Video works, but if I try to play streaming audio, I get nothing. In .xsession-errors, I see that message, along with others Object::connect: No such slot TaskManager::GroupManager::taskDestroyed(QObject*) ALSA lib pulse.c:243:(pulse_connect) PulseAudio: Unable to connect: Connection refused ###!!! [Parent][MessageChannel::Call] Error: (msgtype=0xAA0001,name=PPluginInstance::Msg___delete__) Channel error: cannot send/recv Based on a brief google, it *appears* as though vector smash protection is protecting me from playing music. Note that mplayer does play videos with no audio (i.e., from our surveillance cameras in our secure rooms). Can I turn it off, or is there something else blocking me? Let me note that flash-plugin works to play music... except, as I noted last week, it crashes every 15-20 minutes, so I was going to mplayer from the command line.... mark

1 0

Centos6.8 and Python33
by Patrick Begou 06 Feb '17

06 Feb '17

I've some trouble with installing numpy in python 3.3 on Centos 6.8 as installation request a different python version... [root@sge ~]$ yum install python33 python33-python-tools [root@sge ~]$ scl enable python33 bash ===== *this load Python 3.3.2* === [root@sge ~]$ easy_install pip [root@sge ~]$ pip install numpy Collecting numpy Using cached numpy-1.12.0.zip Complete output from command python setup.py egg_info: Traceback (most recent call last): File "<string>", line 1, in <module> File "/tmp/pip-build-wyb0pj/numpy/setup.py", line 34, in <module> raise RuntimeError("Python version 2.7 or >= 3.4 required.") *RuntimeError: Python version 2.7 or >= 3.4 required. [root@sge ~]$which python /opt/rh/python33/root/usr/bin/python [root@sge ~]$which pip /opt/rh/python33/root/usr/bin/pip *I'm not familar with python and I do not find on google how to work arround this.... Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

2 3

Buttons too big in Firefox for Linux
by Gary Stainburn 06 Feb '17

06 Feb '17

A while back, after doing a yum update, a new version of Firefox was installed and since then, the contents of my pages don't fit any more because the buttons are now much bigger. I've done some searching and to be honest I've drowned in the results. To make matters worse, most of the results are OLD, referring to IE version 6 and Firefox version 30. This problem is only very recent (months). The problem is only in Firefox for Linux. Firefox for Android and Windows look fine, as does Chrome on everything and I.E. Does anyone have any relevant / current suggestions on how to fix this? Firefox on Linux is my main development platform so having it look different to everything else is a real pain It doesn't seem to matter whether I use <input type=button> or <button type=button>

7 13

dicom viewer for Centos 7 and pacs servers
by Greg Ennis 05 Feb '17

05 Feb '17

Everyone, Have any of you had any luck getting aeskulap to work with Centos7. We have just migrated some desktops from Fedora 20 to Centos. but aeskulap is not in the centos 7 repos. aeskulap was a decent dicom viewer and was able to connect to our pacs server. If there are other viewers that any of you have used I would be interested in the dialog of what you have used and any difficulties related to the installation process and use. Thanks, Greg Ennis

1 0

Centos7 and logwatch
by Robert Moskowitz 05 Feb '17

05 Feb '17

Is logwatch a service that now needs to be enabled with systemctl? Or is it all handled by crony? This is my first C7 setup... thanks

1 1

Help with httpd userdir recovery
by Robert Moskowitz 05 Feb '17

05 Feb '17

I lost my harddrive on my little personal webserver that only serves some private files from my userdir. So I am trying to build this from notes on a new Centos7.3 installation (well really Centos7.3-arm, but supposedly same sources). Right now the server is running on a test subnet, not the production, but I have set up the hostname and my standard httpd edits. I have enabled userdir and setup my /home/rgm/public_html directory with 711 permissions. I can display the /home/rgm/public_html/index.html file that only has "Hello World' in it (to prevent anyone from walking my file tree from the root). But when I try to display the files in a subdir with ipaddr/~rgm/mydir I get You don't have permission to access /~rgm/mydir/ on this server. So obviously I have forgotten something that I did not put into my notes, or something has changed from Centos6. I have tried both: <Directory "/home/*/public_html"> AllowOverride FileInfo AuthConfig Limit Indexes Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec Require method GET POST OPTIONS </Directory> which is what the current /etc/httpd/conf.d/userdir.conf has, and what I have in my notes: <Directory /home/*/public_html> # AllowOverride FileInfo AuthConfig Limit # Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec <Limit GET POST OPTIONS> Order allow,deny Allow from all </Limit> <LimitExcept GET POST OPTIONS> Order deny,allow Deny from all </LimitExcept> </Directory> Neither seems to make a difference. thank you for your assistance.

9 37

test builds on private server (drivers, kernel, media, mesa, winehq, java)
by Andreas Benzler 04 Feb '17

04 Feb '17

Hello Guys, from christmas till now I updated follow packages in my privated builds: http://centos.cms4all.org/repo/7/ Drivers: libdrm 2.4.75 (update) vulkan 1.0.3 Kernel: 4.9.1 & firmware (update) Media: Kodi 17.0 + pvr addons & vlc 2.2.4 (update) Mesa: 13.0.4 (update) WineHQ: wine 2.0.1 & wine-stage 2.0.1 (update), winetricks http://centos.cms4all.org/repo/java/ Oracle Java 1.8.0 121 Netbeans 8.2.1 Sincerely Andy PS: This are no signed packages, but the source is there - as always. Work daily with my packages since 03/2016.

1 0

raid 10 not in consistent state?
by lejeczek 04 Feb '17

04 Feb '17

hi everyone I've just configured a simple raid10 on a Dell system, but one thing is puzzling to me. I'm seeing this below and I wonder why? There: Consist = No ... /c0/v1 : ====== --------------------------------------------------------------- DG/VD TYPE State Access Consist Cache Cac sCC Size Name --------------------------------------------------------------- 3/1 RAID10 Optl RW No RWBC R OFF 18.188 TB --------------------------------------------------------------- Cac=CacheCade|Rec=Recovery|OfLn=OffLine|Pdgd=Partially Degraded|dgrd=Degraded Optl=Optimal|RO=Read Only|RW=Read Write|B=Blocked|Consist=Consistent| R=Read Ahead Always|NR=No Read Ahead|WB=WriteBack| AWB=Always WriteBack|WT=WriteThrough|C=Cached IO|D=Direct IO|sCC=Scheduled Check Consistency PDs for VD 1 : ============ ----------------------------------------------------------------------- EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp ----------------------------------------------------------------------- 50:0 76 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:1 75 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:2 57 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:3 181 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:4 33 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:5 179 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:6 37 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:7 45 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:8 36 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:9 28 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:10 46 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:11 31 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:12 26 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:13 43 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:14 27 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:15 29 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:17 53 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:18 55 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:19 89 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U 50:20 54 Onln 3 1.818 TB SAS HDD N N 512B ST32000444SS U ----------------------------------------------------------------------- EID-Enclosure Device ID|Slt-Slot No.|DID-Device ID|DG-DriveGroup DHS-Dedicated Hot Spare|UGood-Unconfigured Good|GHS-Global Hotspare UBad-Unconfigured Bad|Onln-Online|Offln-Offline|Intf-Interface Med-Media Type|SED-Self Encryptive Drive|PI-Protection Info SeSz-Sector Size|Sp-Spun|U-Up|D-Down|T-Transition|F-Foreign UGUnsp-Unsupported|UGShld-UnConfigured shielded|HSPShld-Hotspare shielded CFShld-Configured shielded VD1 Properties : ============== Strip Size = 64 KB Number of Blocks = 39059456000 Span Depth = 2 Number of Drives Per Span = 10 Write Cache(initial setting) = WriteBack Disk Cache Policy = Enabled Encryption = None Data Protection = None Active Operations = Background Initialization (0%) Exposed to OS = Yes Creation Date = 03-02-2017 Creation Time = 04:14:41 PM Emulation type = None #end Would you know if this is normal? I also cannot start consistency check: $ perccli /c0/v1 start cc force Controller = 0 Status = Failure Description = None Detailed Status : =============== ------------------------------------------------ VD Operation Status ErrCd ErrMsg ------------------------------------------------ 1 CC Failed 1001 Start CC not possible ------------------------------------------------ to me it's weird, but then, it's my fist raid10 on Dell hardware. many thanks, L.

3 3

rpm conflict on new install
by Gary Stainburn 03 Feb '17

03 Feb '17

Yesterday I did a clean install of Centos 6 -> Workstation -> Plasma. I then added some recommended repo's and did a yum update. I'm now getting the following: [root@lcomp5 ~]# yum check Loaded plugins: fastestmirror, langpacks ipa-client-4.4.0-14.el7.centos.4.x86_64 has installed conflicts freeipa-client: ipa-client-4.4.0-14.el7.centos.4.x86_64 ipa-client-common-4.4.0-14.el7.centos.4.noarch has installed conflicts freeipa-client-common: ipa-client-common-4.4.0-14.el7.centos.4.noarch ipa-common-4.4.0-14.el7.centos.4.noarch has installed conflicts freeipa-common: ipa-common-4.4.0-14.el7.centos.4.noarch ipa-python-compat-4.4.0-14.el7.centos.4.noarch has installed conflicts freeipa-python-compat: ipa-python-compat-4.4.0-14.el7.centos.4.noarch Error: check all [root@lcomp5 ~]# (The yum check takes a good 5 minutes to run) Googling shows that a number of people seem to be suffering from this but doesn't seem to give a solution. Does anyone have any suggestion?

3 4

tmp option of crypttab
by Leon Fauster 03 Feb '17

03 Feb '17

I have successfully used the swap option of crypttab (# man crypttab) to encrypt the swap partition dynamically. rc.sysinit enables that swap partition successfully at the right point (after encryption). The same doesn't work for the tmp option of crypttab (# man crypttab). The encrypted partition is present after booting the system. Manually mounting it works but adding "/dev/mapper/luks-tmp" into fstab shows that the boot process tries to mount it to early (not encrypted yet). This is confusing because other encrypted volumes (not dynamically) in fstab are successfully mounted. It seems that volumes with random keys are skipped at that stage. Does someone use a tmp directory with dynamic encryption enabled? # cat /etc/centos-release CentOS release 6.8 (Final) -- LF

1 0

CentOS 7.3, SPF+ 10GBit network
by Helmut Drodofsky 03 Feb '17

03 Feb '17

Hello, our server uses 1 GBit Nic and 10 GBit SPF+ NIC. When both nics are configured ONBOOT=yes, then both nics are OK. Wen 1GBit nic is ONBOOT=no, netwerk does not come up. Missing driver? What else? -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Dr.-Ing. Roswitha Hahn-Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Tel. 0711 781941 0 Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

1 0

CentOS-announce Digest, Vol 144, Issue 2
by centos-announce-request＠centos.org 03 Feb '17

03 Feb '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0238 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 2. CESA-2017:0238 Important CentOS 5 thunderbird Security Update (Johnny Hughes) 3. CESA-2017:0238 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 2 Feb 2017 21:10:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0238 Important CentOS 6 thunderbird Security Update Message-ID: <20170202211046.GA37444(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0238 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 90f269847c3699fd7398c3a86f6288870ab445ab298037966798bae235741903 thunderbird-45.7.0-1.el6.centos.i686.rpm x86_64: 4efb5d100af2b433cd4510c00decc6e1f6318769fcdd5c02f561a4c9103b66bc thunderbird-45.7.0-1.el6.centos.x86_64.rpm Source: 855e8913a6cf2149e2c031deecd4c7e7789beda8376ff74c985b50f157d63d85 thunderbird-45.7.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 2 Feb 2017 21:18:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0238 Important CentOS 5 thunderbird Security Update Message-ID: <20170202211832.GA19745(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0238 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e1b6ac1d30a0a889c718bf74a47d3522d0f86771ab3452e5028ae0fa8833b2c1 thunderbird-45.7.0-1.el5.centos.i386.rpm x86_64: e2834be9a4504a127b900526aa4850f1d494e6422576d657f8c752f404cae5f1 thunderbird-45.7.0-1.el5.centos.x86_64.rpm Source: 4a2466886146a766afc55b658cc559e00cfdc2074802ae8f8fc54148f93021b8 thunderbird-45.7.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 2 Feb 2017 22:03:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0238 Important CentOS 7 thunderbird Security Update Message-ID: <20170202220328.GA50497(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0238 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5a5de6ff5c320c4b58b896932d9d94ba4251b7ea113306188f30c4a7a79913f6 thunderbird-45.7.0-1.el7.centos.x86_64.rpm Source: 4aa52cb2455594e1c303159eb7e2cd77b351b137917d62281847d03e528874ea thunderbird-45.7.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 144, Issue 2 ***********************************************

1 0

AWS ami are out of date / support restricted instance subset
by Kadrach 03 Feb '17

03 Feb '17

Hi all, the current AWS Marketplace CentOS7 AMIs (1602) are restricted to an outdated subset of EC2 instance types (at least m4.16xlarge and x1.* are missing). The AMIs are also based on 7.2.1511, which is now quite outdated. Are there any concrete plans to update the AMIs? Is this due to a lack of time, or are there other roadblocks that prevent an update? Cheers, Kad

2 2

downgrading packages
by Jon LaBadie 02 Feb '17

02 Feb '17

After the large update from 7.2 -> 7.3 there is one major problem, the amanda backup packages. Strange situation, the host is the amanda server is working fine at backing up all my remote clients. But it has an error backing up itself. The amanda packages did not change version (3.3.3) and I've done no configuration change. I'm not looking for help debugging this at the moment. Instead I'd like to downgrade the amanda packages to see if the original function can be restored. But when I ask yum to downgrade, there are no packages available. Is it still possible to downgrade just these 4 packages? How? What potential problems? Jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

3 3

Cron.Hourly
by Matt 02 Feb '17

02 Feb '17

When I have multiple scripts in /etc/cron.hourly/ using noanacron do they all start at same time or sequentially? I would rather they all went at same time in case one takes close to an hour to complete.

2 1

CentOS-announce Digest, Vol 144, Issue 1
by centos-announce-request＠centos.org 02 Feb '17

02 Feb '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0225 Moderate CentOS 6 libtiff Security Update (Johnny Hughes) 2. CEBA-2017:0210 CentOS 7 pcs BugFix Update (Johnny Hughes) 3. CESA-2017:0225 Moderate CentOS 7 libtiff Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 1 Feb 2017 12:51:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0225 Moderate CentOS 6 libtiff Security Update Message-ID: <20170201125143.GA7770(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0225 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0225.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3018100828240e2c2c83b573df5e9598622f83a41135fee6a200563e7a66a94a libtiff-3.9.4-21.el6_8.i686.rpm d3bdd6a9ce2957f7a44d585691ee5ea4f08003673e060a30e9f1934cec20b702 libtiff-devel-3.9.4-21.el6_8.i686.rpm f2587cbd663958f58787ceb333ed7171686372045931cd616c6da0f4478130da libtiff-static-3.9.4-21.el6_8.i686.rpm x86_64: 3018100828240e2c2c83b573df5e9598622f83a41135fee6a200563e7a66a94a libtiff-3.9.4-21.el6_8.i686.rpm 882756e964228ec72fc7bd4df910cb48519bfa844419d8134325883356603997 libtiff-3.9.4-21.el6_8.x86_64.rpm d3bdd6a9ce2957f7a44d585691ee5ea4f08003673e060a30e9f1934cec20b702 libtiff-devel-3.9.4-21.el6_8.i686.rpm 945a1724bde913a860279ab77ca5e5d70145fbcc39bdedbffe8f238398cdb8ab libtiff-devel-3.9.4-21.el6_8.x86_64.rpm 45de39b49d028b8b2bf4ff74c14d0b77759bc78d09b7d07fd755ddd0c1d770bf libtiff-static-3.9.4-21.el6_8.x86_64.rpm Source: ccd394a0cf21cc9e5aac9bc9d14d76dc687b583fafd77ccacdba31cf4cc9591f libtiff-3.9.4-21.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 1 Feb 2017 12:53:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0210 CentOS 7 pcs BugFix Update Message-ID: <20170201125311.GA9202(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0210 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0210.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 6f38291f2d2648eb49e62c3d569cf8b910ed0be65c2773faad3ee4b5db246796 pcs-0.9.152-10.el7.centos.1.x86_64.rpm Source: 88aadde70b53cfe8db2e5ab3a7d6ace5a17462bb24bbaf545f486a7ab396157a pcs-0.9.152-10.el7.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 1 Feb 2017 12:53:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0225 Moderate CentOS 7 libtiff Security Update Message-ID: <20170201125326.GA9917(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0225 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0225.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 539fea96e8048e1a5621580a7b9922ed99b5dbbcb7918b8ef57f3902f3593222 libtiff-4.0.3-27.el7_3.i686.rpm 1f18c4d3858341c9b3663658117ffd6c1fe44124db7767b00b3589c72269278c libtiff-4.0.3-27.el7_3.x86_64.rpm 8c58f8f11c044659d2ba0c2a256940bbf5ec931865fdcb2410186ca86e44cadc libtiff-devel-4.0.3-27.el7_3.i686.rpm d5e29119ea6a7b21928ab61a748cea20f843075ad5128005101107c2e5db9aa3 libtiff-devel-4.0.3-27.el7_3.x86_64.rpm 07ce167e4fa1a865323ca8fb69eaf58f8534d790a8565f9f7e97557a662169ac libtiff-static-4.0.3-27.el7_3.i686.rpm 0efc3507cda6ff80ef90128092e61c92bdca694e94f4cca7451109f3cad6dbb5 libtiff-static-4.0.3-27.el7_3.x86_64.rpm 787e8894b1e878d39e9f1d11bdde1e72b7c24c79057e11e5426e8c77c8e1463a libtiff-tools-4.0.3-27.el7_3.x86_64.rpm Source: e37eb69267d9726561d23cd75cd0d5cbc539447fe812085c9578bc71d87d5255 libtiff-4.0.3-27.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 144, Issue 1 ***********************************************

1 0

Squashfs as root filesystem
by Marcin Trendota 02 Feb '17

02 Feb '17

Hello all I have squashfs file i want use as root filesystem for diskless machines (PXE boot). I can't figure out how to configure it. I was able to embed this file in initrd (builded by dracut) - but i don't know how to mount it in /sysroot automatically, and what put in 'kernel=' commandline option. Maybe there is another way to achieve this? TIA -- Over And Out MoonWolf

1 1

Script not running correctly as cronjob
by Daniel Reich 02 Feb '17

02 Feb '17

Hi I have a script to resign all DNS zones every two weeks. When i run the script from bash, it works like it should. But when it is executed in cron not. Its starting normal as cronjob: Feb 1 03:00:01 xxx CROND[20116]: (root) CMD (sh /opt/dnssec/resign_dnssec_zones.sh) But after i get a mail that everything is finsihed, but it isn't. 03:04:28 DNSSEC-Signierung abgeschlossen The script deletes the old signed zones, but don't resign it. The mail is also sent. Below the script. Anybody an idea why it doesn't work in cron?^ I cannot find any error in any log. Best regards Daniel #!/bin/bash KSKDIR="/etc/named/KSK" ZSKDIR="/etc/named/ZSK" ZONEDIR="/var/named/chroot/var/named" LOG="/var/named/chroot/var/log/dnssec_resign.log" MAILREC="monitor@xx" #delete old signed files rm -rf $ZONEDIR/*.signed #delete the old log rm -rf $LOG #read the zonefiles ZONEFILES=$(ls -p $ZONEDIR | grep -v '/$' | grep -v 'dsset*') for FILES in $ZONEFILES; do #remove the .zone at the end ZONE=$(echo "${FILES%.*}") #remove the old signed zone rm -rf $ZONEDIR/$ZONE.signed #Sign the zone cd $ZONEDIR dnssec-signzone -o $ZONE -k $KSKDIR/K$ZONE.*.key -e +3024000 -f $ZONE.signed $ZONEDIR/$ZONE.zone $ZSKDIR/K$ZONE.*.key >> $LOG #Set the correct permissions chown named.named $ZONEDIR/*.signed chmod 755 $ZONEDIR/*.signed sleep 5 done rm -rf $ZONEDIR/named.zone echo $(date +"%T")"DNSSEC-Signierung abgeschlossen - Neustart des Servers" >> $LOG echo "$(cat $LOG)" | mail -s "DNSSEC-Signierung abgeschlossen auf xxx" $MAILREC

4 5

Re: [CentOS] CentOS 6, flash-plugin crashing - anyone have a clue?
by m.roth＠5-cent.us 01 Feb '17

01 Feb '17

Fred Smith wrote: > On Wed, Feb 01, 2017 at 10:54:58AM -0500, m.roth(a)5-cent.us wrote: >> I wrote: >> Anyone else seeing this? I'm playing streaming media, and after about 10 or 15 min, flash-plugin crashes. I've had this happen today on streams from two separate radio stations. >> ************* >> >> So, is anyone else having this issue? Not only am I having it, but I'm seeing it on other users, running CentOS 7. On my system, I see in my logs >> plugin-containe[17209]: segfault at 3e78991a13c4 ip 00007f06e29fe522 sp 00007ffe9b68de08 error 6 in libflashplayer.so[7f06e238d000+107b000] >> >> I'm running Version : 24.0.0.194 on CentOS 6.8, which appears to be the same version as is running on CentOS 7, though I see it on someone's 7.3 with flash-plugin 24.0.0.186. That's from Dec 10, and that's about when, IIRC, I started seeing crashes. > > This may not be the same thing: > > I'm running Centos-7, up to date. Flash seems to mostly work fine,... I can see videos on CNN, for example, as well as other places. > > however, I have a weekly online course that uses Adobe Connect, > which requires flash. At least in the Firefox that ships with (and is updated occasionally by) Centos, flash crashes whenever I try to open Connect. If I back out the 24.x.x.x flash version and go back to the 11.x.x.x version it works fine. > I just tried, both on 6.8 and 7.3, and yum tells me "nothing to do", so I can't downgrade. By the way, googling, I find it's been filed as a bug with upstream: https://bugzilla.redhat.com/show_bug.cgi?id=1411972 mark

2 1

CentOS 6, flash-plugin crashing - anyone have a clue?
by m.roth＠5-cent.us 01 Feb '17

01 Feb '17

I wrote: Anyone else seeing this? I'm playing streaming media, and after about 10 or 15 min, flash-plugin crashes. I've had this happen today on streams from two separate radio stations. ************* So, is anyone else having this issue? Not only am I having it, but I'm seeing it on other users, running CentOS 7. On my system, I see in my logs plugin-containe[17209]: segfault at 3e78991a13c4 ip 00007f06e29fe522 sp 00007ffe9b68de08 error 6 in libflashplayer.so[7f06e238d000+107b000] I'm running Version : 24.0.0.194 on CentOS 6.8, which appears to be the same version as is running on CentOS 7, though I see it on someone's 7.3 with flash-plugin 24.0.0.186. That's from Dec 10, and that's about when, IIRC, I started seeing crashes. I can't believe that we're the only ones with the problem. mark

2 2

Re: [CentOS] time zone [SOLVED}
by TE Dukes 01 Feb '17

01 Feb '17

Added php_value date.timezone "America/New_York" to /etc/http/conf.modules.d/10.php.conf

1 0

Re: [CentOS] time zone
by Richard 01 Feb '17

01 Feb '17

> Date: Tuesday, January 31, 2017 18:16:36 -0500 > From: TE Dukes <tdukes(a)palmettoshopper.com> > >> From: CentOS [mailto:centos-bounces@centos.org] On Behalf Of >> Richard Sent: Tuesday, January 31, 2017 5:19 PM >> >> >> > Date: Tuesday, January 31, 2017 16:59:32 -0500 >> > From: TE Dukes <tdukes(a)palmettoshopper.com> >> >> > >> > From: CentOS [mailto:centos-bounces@centos.org] On Behalf Of >> > Richard Sent: Tuesday, January 31, 2017 4:44 PM >> >> > >> >> Date: Tuesday, January 31, 2017 16:02:37 -0500 >> >> From: TE Dukes <tdukes(a)palmettoshopper.com> >> >> >> >> Today, I started getting this error when trying to login to >> >> zoneminder: >> >> >> >> ZoneMinder is not installed properly: php's date.timezone is >> >> not set to a valid timezone >> >> >> >> Zoneminder has been running since last Wednesday when I >> >> installed it. Today, I get this. >> >> >> >> In /etc/php.ini, I have date.timezone = America/New_York, which >> >> I added when zoneminder was installed. >> >> >> >> Output from date: Tue Jan 31 15:56:26 EST 2017 >> >> >> >> Output from ll /etc/localtime: lrwxrwxrwx. 1 root root 38 Jan 25 >> >> 19:05 /etc/localtime -> ../usr/share/zoneinfo/America/New_York >> >> >> >> Been searching for hours for another file that may be overriding >> >> php.ini >> >> >> > >> > Put a simple php page on your/the server (where zoneminder is >> > running) with the "phpinfo()" function, and then look at the >> > timezone information in the "date" section of the output. >> > >> > If it isn't showing the correct value, check the location of the >> > php.ini that is being used in the "Loaded Configuration File" >> > value toward the top of that output. >> > >> > By default, php doesn't use the system's TZ, >> > >> > >> > Hello, >> > >> > I did, it shows the error about not being correctly set: >> > >> > Warning: phpinfo(): It is not safe to rely on the system's >> > timezone settings. You are *required* to use the date.timezone >> > setting or the date_default_timezone_set() function. In case you >> > used any of those methods and you are still getting this >> > warning, you most likely misspelled the timezone identifier. We >> > selected the timezone 'UTC' for now, but please set >> > date.timezone to select your timezone. in >> > /var/www/html/phpinfo.php on line 4 >> > >> > Why would it just start doing this? >> > >> >> Obviously can't answer that as we don't know enough about what >> changes you may have made to your system. The default php.ini >> doesn't have a TZ set, so will always give that message >> unless/until you add a TZ. >> >> However, to fix this: >> >> - check the location of the php.ini that is being referenced, >> as indicated above (generally /etc/php.ini). >> >> - edit that php.ini file to set a correct TZ following the >> "date.timezone =" entry. >> >> - be certain to uncomment that line. >> >> - you probably need to restart the apache server to get any >> change picked up. >> > > [Date] > ; Defines the default timezone used by the date functions > ; http://php.net/date.timezone > date.timezone = America/New_York > > Its set. Not sure why its not seeing it. The only changes I made to > php.ini was this last week when I installed 7.3 and zoneminder. > > Its been working up till about noon today. > You need to make certain that the php.ini where you have that setting is the one that is being referenced by the server. See above notes on checking that. The apache server needs to be restarted to load changes made to the php.ini. These things don't change "magically". If this worked until noon, I'd check various logs to see who/what made changes then - including looking to see if the apache server was restarted then and loaded changes made previously.

2 5

Mail issues
by TE Dukes 01 Feb '17

01 Feb '17

I know I'm wearing you guys out. I thought I had mail working. It is but it isn't. Mail is stuck in /var/spool/mail. This is a fresh install of dovecot and postfix. I have uninstalled mailscanner as well until I can figure out what's wrong. I sent a test mail from root to tdukes but its not being delivered to ~/Maildir Here's the clip from maillog: Jan 30 18:40:42 ts130 postfix/pickup[4828]: 2DF2D82CA5B9: uid=0 from=<root> Jan 30 18:40:42 ts130 postfix/cleanup[6070]: 2DF2D82CA5B9: message-id=<20170130234042.2DF2D82CA5B9(a)ts130.palmettodomains.com> Jan 30 18:40:42 ts130 postfix/qmgr[4829]: 2DF2D82CA5B9: from=<root(a)ts130.palmettodomains.com>, size=480, nrcpt=1 (queue active) Jan 30 18:40:42 ts130 postfix/local[6071]: 2DF2D82CA5B9: to=<tdukes(a)ts130.palmettodomains.com>, orig_to=<tdukes>, relay=local, delay=0.1, delays=0.07/0.01/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox) Jan 30 18:40:42 ts130 postfix/qmgr[4829]: 2DF2D82CA5B9: removed Jan 30 18:40:49 ts130 dovecot: imap-login: Login: user=<tdukes>, method=PLAIN, rip=::1, lip=::1, mpid=6078, secured, session=<iqNhWFhHcgAAAAAAAAAAAAAAAAAAAAAB> Jan 30 18:40:49 ts130 dovecot: imap(tdukes): Disconnected: Logged out in=82 out=495 Do I need to install additional packages that move mail to the user's /Maildir? TIA

5 8

Re: [CentOS] time zone
by Richard 31 Jan '17

31 Jan '17

> Date: Tuesday, January 31, 2017 16:02:37 -0500 > From: TE Dukes <tdukes(a)palmettoshopper.com> > > Today, I started getting this error when trying to login to > zoneminder: > > ZoneMinder is not installed properly: php's date.timezone is not > set to a valid timezone > > Zoneminder has been running since last Wednesday when I installed > it. Today, I get this. > > In /etc/php.ini, I have date.timezone = America/New_York, which I > added when zoneminder was installed. > > Output from date: Tue Jan 31 15:56:26 EST 2017 > > Output from ll /etc/localtime: lrwxrwxrwx. 1 root root 38 Jan 25 > 19:05 /etc/localtime -> ../usr/share/zoneinfo/America/New_York > > Been searching for hours for another file that may be overriding > php.ini > Put a simple php page on your/the server (where zoneminder is running) with the "phpinfo()" function, and then look at the timezone information in the "date" section of the output. If it isn't showing the correct value, check the location of the php.ini that is being used in the "Loaded Configuration File" value toward the top of that output. By default, php doesn't use the system's TZ,

2 3

multipath show config different in CentOS 7?
by Gianluca Cecchi 31 Jan '17

31 Jan '17

Hello, suppose I want to use a special configuration for my IBM/1814 storage array luns, then I put something like this in multipath.conf devices { device { vendor "IBM" product "^1814" product_blacklist "Universal Xport" path_grouping_policy "group_by_prio" path_checker "rdac" features "0" hardware_handler "1 rdac" prio "rdac" failback immediate rr_weight "uniform" no_path_retry "12" } } In CentOS 6.x when you restart multipathd or restart server, using multipathd -k multipathd> show config multipathd> exit in output you see your particular configuration instead than the default one for this particular device. In CentOS 7.3 instead I see it two times, the first one with the default built-in values (eg "no_path_retry fail") and at the end the customized one. So it is not clear what is the actual configuration that device mapper multipath is using... The last wins? Is this expected behaviour? In that case what command can I use to crosscheck it (apart from real testing that is anyway necessary to verify too)? Eg in CentOS 7.3 I'm using device-mapper-multipath-0.4.9-99.el7_3.1.x86_64 while on CentOS 6.8 I'm using device-mapper-multipath-0.4.9-93.el6.x86_64 Thanks in advance, Gianluca

2 1

time zone
by TE Dukes 31 Jan '17

31 Jan '17

Today, I started getting this error when trying to login to zoneminder: ZoneMinder is not installed properly: php's date.timezone is not set to a valid timezone Zoneminder has been running since last Wednesday when I installed it. Today, I get this. In /etc/php.ini, I have date.timezone = America/New_York, which I added when zoneminder was installed. Output from date: Tue Jan 31 15:56:26 EST 2017 Output from ll /etc/localtime: lrwxrwxrwx. 1 root root 38 Jan 25 19:05 /etc/localtime -> ../usr/share/zoneinfo/America/New_York Been searching for hours for another file that may be overriding php.ini TIA

1 0

Question about 7.3
by TE Dukes 31 Jan '17

31 Jan '17

I haven't done a fresh install in years. I've always gone the upgrade route. Seemed to have always worked for me. I moved to 7.3 since it supports the latest versions of some programs I want to use to implement as a backup server/RAID/NAS for 3 machines here at home and a remote laptop at work. So, the question is, is there something different in 7.3 than the previous 7 versions? The reason I ask is I was running a lesser version of 7, I think 7.1, as a VM on 6.8. I remember I chose not to install the most recent version at the time. Never had these issues. Not really issues but everything just worked without a lot of expertise involved. One thing I could never figure out is that on 6.8, I have the zoneminder repo installed and when I did a yum update on the 7.1 VM, it was also accessing the zmrepo which wasn't installed. Just thought it was odd. Anyway, I really appreciate the help and keep paying it forward!!

3 2

CentOS-announce Digest, Vol 143, Issue 12
by centos-announce-request＠centos.org 31 Jan '17

31 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS AltArch 7 (1611) on i386 Architecture (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 30 Jan 2017 07:24:20 -0600 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS AltArch 7 (1611) on i386 Architecture Message-ID: <7a4903a6-8535-0cb4-a2ed-19c66b61ee87(a)centos.org> Content-Type: text/plain; charset="utf-8" The CentOS AltArch SIG is a group of people working to build alternative architecture support derived from CentOS Linux's sources. You can find more details about the AltArch group at: https://wiki.centos.org/SpecialInterestGroup/AltArch Including details on how to get involved and ways to get help for architecture specific issues. This is the release announcement for the i386 (Intel 32-bit) Architecture based on the source code released for CentOS-7 (1611). It includes all packages that build on x86 32-bit processors. The release notes for the normal CentOS-7 apply: https://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 with the following notes that are specific to i386: https://wiki.centos.org/SpecialInterestGroup/AltArch/i386 If you already have a previous version of CentOS-7 i386 installed, just running 'yum update' will get you the latest packages installed. ISOs can be downloaded from: http://mirror.centos.org/altarch/7/isos/i386/ Here are the SHA256SUMS for the ISOs: CentOS-7-i386-DVD-1611.iso: 25eff443460d53155cb837983c947fb3d74f4c0a3077dc699c7d50e9fdb4c0f3 CentOS-7-i386-Everything-1611.iso 578a475248ecef427269357b7ff22b973a007f534988f39f365b8dded43fad72 CentOS-7-i386-LiveGNOME-1611.iso: 16a75041a77e4d98922d2f68c54abef35f50a1e8aa863f182ab84b443cb0fcd1 CentOS-7-i386-LiveKDE-1611.iso: f9651851adee59d646b509757186f038f2b453d285d92dce5b7b91c396d20d1a CentOS-7-i386-Minimal-1611.iso: bf0e17041aad294fbb3fa5c6fb100258ace4f62b94d5bf3356b40f9807a88805 CentOS-7-i386-NetInstall-1611.iso: 249c344d3e82f49be3195e06741276f409815b1d4785f1439fc47c342eb6dd7c =========================== The CentOS team will have a Dojo in Brussels, Belgium on Friday 3th February 2017: https://wiki.centos.org/Events/Dojo/Brussels2017 I will be at the Dojo to discuss the i386 distribution with those who are interested. I will also be at the CentOS Booth at FOSDEM 2017 ( https://fosdem.org/2017/ ) in Brussels, Belgium on February 4th and 5th, 2017. I will also attend the Config Management Camp EU ( http://cfgmgmtcamp.eu/ ) in Ghent, Belgium on the 6th of February, 2017. If you have any questions and will be at any of those locations, please look me up. Bug reports and feedback about specific packages should be filed at https://bugs.centos.org/ against the relevant package name, for project CentOS Linux 7, in the same manner as you would for x86_64. However, do mention the architecture as applicable. =========================== Johnny Hughes CentOS-7 i386 AltArch Maintainer Twitter: @JohnnyCentOS Freenode IRC: hughesjr

1 0

CentOS 6, flash-plugin crashing
by m.roth＠5-cent.us 31 Jan '17

31 Jan '17

Anyone else seeing this? I'm playing streaming media, and after about 10 or 15 min, flash-plugin crashes. I've had this happen today on streams from two separate radio stations. mark

2 1

tor and selinux
by Mark 30 Jan '17

30 Jan '17

I'm experimenting with tor hidden services and got it to work nicely on my Centos7, with tor from epel. That is, until I booted the machine. Then SELinux kicked in and in the logs there's [warn] Directory /var/lib/tor/hidden_service/ cannot be read: Permission denied The permissions are drwx------. 2 toranon toranon 4096 Jan 28 23:39 hidden_service And SELinux gives the following SELinux is preventing /usr/bin/tor from using the dac_override capability. ***** Plugin dac_override (91.4 confidence) suggests ********************** If you want to help identify if domain needs this access or you have a file with the wrong permissions on your system Then turn on full auditing to get path information about the offending file and generate the error again. Do Turn on full auditing # auditctl -w /etc/shadow -p w Try to recreate AVC. Then execute # ausearch -m avc -ts recent If you see PATH record check ownership/permissions on file, and fix it, otherwise report as a bugzilla. ***** Plugin catchall (9.59 confidence) suggests ************************** If you believe that tor should have the dac_override capability by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'tor' --raw | audit2allow -M my-tor # semodule -i my-tor.pp Additional Information: Source Context system_u:system_r:tor_t:s0 Target Context system_u:system_r:tor_t:s0 Target Objects Unknown [ capability ] Source tor Source Path /usr/bin/tor Port <Unknown> Host <Unknown> Source RPM Packages tor-0.2.8.12-1.el7.x86_64 Target RPM Packages Policy RPM selinux-policy-3.13.1-102.el7_3.13.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name host Platform Linux host 3.10.0-514.6.1.el7.x86_64 #1 SMP Wed Jan 18 13:06:36 UTC 2017 x86_64 x86_64 Alert Count 5 First Seen 2017-01-29 22:42:46 EST Last Seen 2017-01-29 22:42:51 EST Local ID 51ceb58e-19cf-4f8f-ab1e-fe48265aaf1d Raw Audit Messages type=AVC msg=audit(1485747771.709:106): avc: denied { dac_override } for pid=2253 comm="tor" capability=1 scontext=system_u:system_r:tor_t:s0 tcontext=system_u:system_r:tor_t:s0 tclass=capability type=AVC msg=audit(1485747771.709:106): avc: denied { dac_read_search } for pid=2253 comm="tor" capability=2 scontext=system_u:system_r:tor_t:s0 tcontext=system_u:system_r:tor_t:s0 tclass=capability type=SYSCALL msg=audit(1485747771.709:106): arch=x86_64 syscall=open success=no exit=EACCES a0=7fcd2c12fe90 a1=20000 a2=0 a3=1 items=0 ppid=1 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=tor exe=/usr/bin/tor subj=system_u:system_r:tor_t:s0 key=(null) Hash: tor,tor_t,tor_t,capability,dac_override As I don't know what dac_override is I don't know if it's a good idea to give it to tor and the confidence seems quite low. Cheers Mark

2 3

Strange ABRT error when I try to switch to su
by Sean Son 30 Jan '17

30 Jan '17

Hello all One of my VMs, running RHEL 7, has been giving me the following ABRT error when I try to login as su Ive seen this error the past three times that Ive logged in. I know that the VM is using Red Hat,but seeing that RHEL/CentOS are pretty much the same thing, I figured I should ask the CentOS mailing list for help. Here is the error: $ su Password: ABRT has detected 1 problem(s). For more info run: abrt-cli list --since 1485781 # abrt-cli list --since 1485781 id b35dcbc9f05781fab04cdd9aca28bbe86a93eace reason: php-fpm killed by SIGSEGV time: Wed 25 Jan 2017 07:44:07 PM EST cmdline: 'php-fpm: pool www' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' package: rh-php56-php-fpm-5.6.5-9.el7 uid: 48 (apache) count: 4 Directory: /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637 Run 'abrt-cli report /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637' for creating a case in Red Hat Customer Portal id 27190e6535600b6fc4bc97de457b302a10698b95 reason: WARNING: at lib/vsprintf.c:1734 vsnprintf+0x691/0x6a0() time: Mon 01 Aug 2016 09:14:44 AM EDT cmdline: BOOT_IMAGE=/vmlinuz-3.10.0-327.22.2.el7.x86_64 root=/dev/mapper/VolGroup00-LogVol00 ro rd.lvm.lv=VolGroup00/LogVol00 vconsole.keymap=us vconsole.font=latarcyrheb-sun16 crashkernel=auto audit=1 rhgb quiet biosdevname=0 net.ifnames=0 LANG=en_US.UTF-8 package: kernel uid: 0 (root) count: 1 Directory: /var/spool/abrt/oops-2016-08-01-09:14:44-8775-0 Reported: cannot be reported What is this error trying to say and how do I fix the issue? All help is greatly appreciated! Thank you Sean

1 0

Centos 7 as a Hyper-V guest and Integration Services
by Adrian Jenzer 30 Jan '17

30 Jan '17

Dear all I'm running a Centos 7.3 as a Hyper-V guest on Windows Server 2012R2. Actually everything works fine but I'm still wondering if I do everything right regarding Linux Integration Services. When I installed Centos 7 I didn't installed any LIS package or so as I understood it's built-in. How are you handling this? Is it recommended to install/update to the latest LIS from Microsoft provided as ISO or do I need to install the hyperv-daemons? Currently my system reports: [root@share ~]# lsmod | grep hv hv_utils 24418 2 hv_storvsc 18032 6 hv_netvsc 40261 0 hv_vmbus 397185 6 hyperv_keyboard,hv_netvsc,hid_hyperv,hv_utils,hyperv_fb,hv_storvsc and I think this time shifts on rebbots are related to missing LIS (?): [root@share ~]# last root pts/0 172.16.4.103 Mon Jan 30 12:14 still logged in (unknown :0 :0 Sun Jan 29 03:59 still logged in reboot system boot 3.10.0-514.6.1.e Fri Feb 3 15:55 - 12:14 (-4+-3:-41) root pts/0 172.16.4.128 Fri Jan 27 15:24 - 15:57 (00:33) root pts/0 172.16.4.128 Fri Jan 27 12:22 - 12:49 (00:27) root pts/0 172.16.4.128 Mon Jan 23 13:53 - 14:00 (00:07) (unknown :0 :0 Mon Jan 23 13:53 - 02:00 (5+12:06) reboot system boot 3.10.0-514.6.1.e Tue Jan 24 23:41 - 02:00 (4+02:18) root pts/0 172.16.4.128 Mon Jan 23 13:36 - down (00:15) administ pts/0 172.16.4.128 Mon Jan 23 12:44 - 13:00 (00:15) (unknown :0 :0 Sun Jan 22 03:56 - 13:52 (1+09:55) reboot system boot 3.10.0-514.2.2.e Fri Jan 27 17:31 - 13:52 (-4+-3:-38) root pts/1 172.16.4.117 Mon Jan 16 12:20 - 13:28 (01:07) Do you also get this Warnings in Hyper-V Event Viewer?: Device 'Microsoft Synthetic Display Controller' in 'SHARE' is loaded but has a different version from the server. Server version 3.3 Client version 3.2 (Virtual machine ID C2D0C208-BC00-4E73-8AF1-DA595FE6ECE7). The device will work, but this is an unsupported configuration. This means that technical support will not be provided until this problem is resolved. To fix this problem, upgrade the integration services. To upgrade, connect to the virtual machine and select Insert Integration Services Setup Disk from the Action menu. Thanks best Adrian

1 0

firewalld
by TE Dukes 30 Jan '17

30 Jan '17

Got 7.3 installed Wednesday, things went so so. Been working on getting roundcubemail setup and firewalld is kicking my butt. I can't figure out all these zones. I opened imap, imaps, pop3, pop3s, smtp, smtps in zones internal, trusted and public. I still get connection refused. I telnet localhost 143, I get connection refused. What zone is used for the local network and what zone is used for outside access? Two days and can't access mail. Is this a Redhat brain child? According to firewalld.org, only Redhat, CentOS and Fedora are using it. Not too happy

7 19

Notes on openssh configuration
by Leonard den Ottolander 29 Jan '17

29 Jan '17

Hello list, To my astonishment the openssh versions on both C6 and C7 will by default negotiate an MD5 HMAC. C6 client, C7 server: debug2: mac_setup: found hmac-md5 debug1: kex: server->client aes128-ctr hmac-md5 none debug2: mac_setup: found hmac-md5 debug1: kex: client->server aes128-ctr hmac-md5 none C7 client & server: debug2: mac_setup: setup hmac-md5-etm(a)openssh.com debug1: kex: server->client aes128-ctr hmac-md5-etm(a)openssh.com none debug2: mac_setup: setup hmac-md5-etm(a)openssh.com debug1: kex: client->server aes128-ctr hmac-md5-etm(a)openssh.com none I reported this issue upstream: https://bugzilla.redhat.com/show_bug.cgi?id=1417263 https://bugzilla.redhat.com/show_bug.cgi?id=1417264 You might want to add MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1-etm@openssh.com,hmac-sha1,hmac-ripemd160-etm@openssh.com,hmac-ripemd160@openssh.com,hmac-ripemd160,umac-128@openssh.com,umac-128-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-sha1-96,umac-64-etm@openssh.com,umac-64@openssh.com to your C7 ssh_config and sshd_config, or MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,umac-64@openssh.com,hmac-sha1-96 to your C6 ssh_config and sshd_config. You might also want to prune your cipher list to exclude RC4 = arcfour ciphers with the option "Ciphers". Compare http://www.theregister.co.uk/2013/09/06/nsa_cryptobreaking_bullrun_analysis/ Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

3 6

Preferred mail client
by TE Dukes 29 Jan '17

29 Jan '17

Hello, again, What is the preferred remote mail client for 7.3? I have used openwebmail in the past, was using usermin and roundcube most recently. Never cared about squirrelmail but that was years ago. I don't use my server as a workstation. It mostly just sits over there collecting dust on the keyboard. TIA

6 6

mail delivery in 7.3
by TE Dukes 28 Jan '17

28 Jan '17

Hello, Still don't have mail working. It seems to be stuck in /var/spool/postfix/incoming It's not getting to ~Maildir or whatever 7.3 uses. I am clueless. Probably need a little break. TIA

1 0

large update - best practice
by Jon LaBadie 27 Jan '17

27 Jan '17

With a large update to be made, eg. the 900 package one I questioned yesterday, are there any suggestions to avoid possible complications? Two examples, I'd like to know of others too: I'm not running the most recently installed kernel, I assume I should reboot to that. I normally have a graphical environment running. Would it be better to: a) shutdown X and update from a straight CLI environment b) logout from the GUI and update from a vt CLI c) update from a GUI login as root or d) doesn't matter, do as normal -- from an ssh login, "sudo yum update"? Thanks, Jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

7 9

software raid 1 failure
by Jerry Geis 27 Jan '17

27 Jan '17

Hi All, I had a machine with software RAID-1 have a disk crash. I am attempting to get the data off the good disk. Using a USB to SATA device I plugged it into another machine. I tried many things to mount it, to mdadm add it but could not get it to cooperate. Another thought I had is can I use fdisk to change the "type" of the partition from "linux raid" to "linux" and then mount as normal? Does that work? Thanks, Jerry

3 2

yum adding 7.3 packages to 7.2 system
by Jon LaBadie 27 Jan '17

27 Jan '17

My system is 7.2.1511. When I run "yum update", it wants to install about 900 packages total. Most are labeled just "el7". A few "el7_1" and a lot are "el7_3" or 7.3. None are 7.2. I'm not surprised when I see 50-100 packages needing an update. But 900? And none specific to the installed system? My last update, of 4 packages, was Dec 31, 2016. I first noted the current behavior about 10 days later and have been trying to figure out why such an unusual report. Any suggestions? Jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

4 4

CentOS-announce Digest, Vol 143, Issue 11
by centos-announce-request＠centos.org 27 Jan '17

27 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0190 Critical CentOS 5 firefox Security Update (Johnny Hughes) 2. CESA-2017:0182 Moderate CentOS 7 squid Security Update (Johnny Hughes) 3. CESA-2017:0190 Critical CentOS 7 firefox Security Update (Johnny Hughes) 4. CEEA-2017:0188 CentOS 6 rtsx_pci Enhancement Update (Johnny Hughes) 5. CESA-2017:0183 Moderate CentOS 6 squid34 Security Update (Johnny Hughes) 6. CESA-2017:0190 Critical CentOS 6 firefox Security Update (Johnny Hughes) 7. CESA-2017:0184 Important CentOS 6 mysql Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 26 Jan 2017 20:58:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0190 Critical CentOS 5 firefox Security Update Message-ID: <20170126205846.GA22863(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0190 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0190.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bb7c734cceac8492f93bc3623d8b95a3c1f5b765af9286c1ed7c4b8528535ebd firefox-45.7.0-1.el5.centos.i386.rpm x86_64: bb7c734cceac8492f93bc3623d8b95a3c1f5b765af9286c1ed7c4b8528535ebd firefox-45.7.0-1.el5.centos.i386.rpm 202bb19502b662d84846286383e106f4018e3699db8c0588e3eeffead8cac8a8 firefox-45.7.0-1.el5.centos.x86_64.rpm Source: dcfedc05611839011adf391231df0213575d9be03345ca660f7b45223c75b5d2 firefox-45.7.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 26 Jan 2017 21:45:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0182 Moderate CentOS 7 squid Security Update Message-ID: <20170126214540.GA34760(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0182 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0182.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 275a75c85ff8c059d37c719dc5095b13f475d3713a3b464e4e45f4138ff78ddb squid-3.5.20-2.el7_3.2.x86_64.rpm d92cb53e1cd1ca105c79f40e434a04fd67635671255e5ca5f8655ffe877ca124 squid-migration-script-3.5.20-2.el7_3.2.x86_64.rpm 5e1c34b8905de8a5f82c9f35543671aa80facc44e21341e284042f0e2f5e7d1f squid-sysvinit-3.5.20-2.el7_3.2.x86_64.rpm Source: 8c17b5ff7d793529ed91f0ec5b772104019357863706e9636a2246c67d522bad squid-3.5.20-2.el7_3.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 26 Jan 2017 21:46:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0190 Critical CentOS 7 firefox Security Update Message-ID: <20170126214602.GA34892(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0190 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0190.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 34c0472b0952187186f440bfc92ba8623f074def7f9d3167adc812197c615428 firefox-45.7.0-1.el7.centos.i686.rpm bebce01ac11511a2e55ef51c4f63671ed5bbb1016d159ccbcfd8f21b0ad84fce firefox-45.7.0-1.el7.centos.x86_64.rpm Source: 92ff3bdf3c2f19b580e13dbe68b9b21d479351e5c4f0c0695d1cfc01c9ccc42f firefox-45.7.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 26 Jan 2017 20:22:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:0188 CentOS 6 rtsx_pci Enhancement Update Message-ID: <20170126202214.GA21177(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:0188 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-0188.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c2b35efce655a383ad0e9f18128bcb85fe3660b0ec6134ff4d09a57bf9e12170 kmod-rtsx_pci-642-1.el6_8.i686.rpm x86_64: 15aed624799009c5ce5de9989b6d34b0f6b3b4ae64b42b459fecf83d82be524d kmod-rtsx_pci-642-1.el6_8.x86_64.rpm Source: 49aeb3e303a4b561acdc901382022f3eb9d8e9c13c552148b2ef7f45583f5778 rtsx_pci-642-1.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 26 Jan 2017 20:22:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0183 Moderate CentOS 6 squid34 Security Update Message-ID: <20170126202231.GA21262(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0183 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0183.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ca6821bc977e58ddefd9bccf91dc98ee75d90aaf433f6a462d18786a23481d24 squid34-3.4.14-9.el6_8.4.i686.rpm x86_64: 05af47a8209fb31705b6e7916ff30c0ce1b89005f24fc427e88ba257348c2857 squid34-3.4.14-9.el6_8.4.x86_64.rpm Source: 59a82b8676b28b88dfdab8fc952dd5423414306e48cbdecc593b6760bd1a5add squid34-3.4.14-9.el6_8.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Thu, 26 Jan 2017 20:24:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0190 Critical CentOS 6 firefox Security Update Message-ID: <20170126202455.GA21483(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0190 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0190.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d029cd11706e8ccf1a68d2dbafaeb483d74db49c698dd7061bd9e2e51d576657 firefox-45.7.0-1.el6.centos.i686.rpm x86_64: d029cd11706e8ccf1a68d2dbafaeb483d74db49c698dd7061bd9e2e51d576657 firefox-45.7.0-1.el6.centos.i686.rpm 652667b06a4596e42b0ad12a5f88e49ad9ee68276e2c2002cadf19f597e58386 firefox-45.7.0-1.el6.centos.x86_64.rpm Source: 8e61cfbbfbd1dfc9daa8ba468c350ec9cd694aaffb3a98e42a42f790fc816f39 firefox-45.7.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Thu, 26 Jan 2017 22:35:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0184 Important CentOS 6 mysql Security Update Message-ID: <20170126223543.GA35878(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0184 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0184.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 90a5007752cc5dc69559fbac5117708c4aacd4ee45dc09ea79d4b86e739f6196 mysql-5.1.73-8.el6_8.i686.rpm d9fa54a3d70a5d9e5732d22cf2eac1f01b3e78df12cfd2f803488323736081c1 mysql-bench-5.1.73-8.el6_8.i686.rpm faac0fa3bfcba71701f3c85f1ab96cc0fb2ed27130f2cda55082d459dd960bde mysql-devel-5.1.73-8.el6_8.i686.rpm e8d0100a1dfe23387f41101b8cd6e458ea0b479e1262f4c06205a4cb25449c7e mysql-embedded-5.1.73-8.el6_8.i686.rpm cdce7ce86780ddec72435dbf96a336dc2c48166feff6c5bccea2873d58962658 mysql-embedded-devel-5.1.73-8.el6_8.i686.rpm afa9536c07ca2540d89e33b74299856708c1080de4453ef50ec5654b1d1ae092 mysql-libs-5.1.73-8.el6_8.i686.rpm bed77f90cc7dab7121d50e594becd0e583182d31df09422545d690f5b7c43629 mysql-server-5.1.73-8.el6_8.i686.rpm c2dcb64a748bc7fdbc77cb9fbfec0fe99b309d1c3af0fbe87dc25b82a5e74825 mysql-test-5.1.73-8.el6_8.i686.rpm x86_64: 3086e370dee78dcf420a882c33707369cedc0c16fff25020ef38ddc8dd10a1c2 mysql-5.1.73-8.el6_8.x86_64.rpm 1ec8a72b49e3942de13fa941555970ea979066fda8b30fab7744fa2235f31b33 mysql-bench-5.1.73-8.el6_8.x86_64.rpm faac0fa3bfcba71701f3c85f1ab96cc0fb2ed27130f2cda55082d459dd960bde mysql-devel-5.1.73-8.el6_8.i686.rpm ee4cafcc7ad0859a45ff54ca17997a903279732a96d45b0bdad99576f8596f8e mysql-devel-5.1.73-8.el6_8.x86_64.rpm e8d0100a1dfe23387f41101b8cd6e458ea0b479e1262f4c06205a4cb25449c7e mysql-embedded-5.1.73-8.el6_8.i686.rpm 5dbc5d8e5809e2901d5e8e8b1418750002b83e3406e03ae8d71cfb94127eb243 mysql-embedded-5.1.73-8.el6_8.x86_64.rpm cdce7ce86780ddec72435dbf96a336dc2c48166feff6c5bccea2873d58962658 mysql-embedded-devel-5.1.73-8.el6_8.i686.rpm 112a82ba493db96e355d00b6f1982e3b1edf91a43049eedc88e616e697c51f0f mysql-embedded-devel-5.1.73-8.el6_8.x86_64.rpm afa9536c07ca2540d89e33b74299856708c1080de4453ef50ec5654b1d1ae092 mysql-libs-5.1.73-8.el6_8.i686.rpm eb618e3896815be9548104036c272b9f17f54b8706b52451bcb8e6ddc0a2ed7b mysql-libs-5.1.73-8.el6_8.x86_64.rpm e903e2e57ff025de587503648680701f99c2162d852c04b6e3660b30087637ed mysql-server-5.1.73-8.el6_8.x86_64.rpm 847d84415d57eb33f505408b9676d59949b8b3d46002ae37dc028d0cc6977945 mysql-test-5.1.73-8.el6_8.x86_64.rpm Source: c328e9e7e4d58ccd09d5c40830f71215249a868c2eb80762e993d5d9eb7ee96d mysql-5.1.73-8.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 11 ************************************************

1 0

[EL6] How to follow upstream updates?
by Leon Fauster 27 Jan '17

27 Jan '17

Sorry, if it was answered already elsewhere. Where exactly are the current EL6 builds done? Or rephrased: I would like to look into the state of following security update: mysql-5.1.73-8.el6_8.src.rpm Looking into https://git.centos.org/repositories/ http://cbs.centos.org http://buildlogs.centos.org/ shows mostly EL7 stuff. Just curious, LF

3 5

Re: [CentOS] CentOS 7 install on one RAID 1 [not-so-SOLVED]
by m.roth＠5-cent.us 26 Jan '17

26 Jan '17

Let me see if I can, um, reboot this thread.... I made a RAID 1 of two raw disks, /dev/sda and /dev/sdb, *not* /dev/sdax /dev/sdbx. Then I installed CentOS 7 on the RAID, with /boot, /, and swap being partitions on the RAID. My problem is that grub2-install absolutely and resolutely refuses to install on /dev/sda or /dev/sdb. I've currently got it up in a half-assed rescue mode, and have mount -o bind /dev, /proc/ and /sys under /mnt/sysimage, and chrooted there. That's where I'm trying to do my grub2-install. So: 1. *Is* there space for grub2 to install the bootloader under where the mdadm starts? Or do I have to partition the disks (/dev/sda1 100%, ditto /dev/sdb1, then create the RAID 1 with the partitions, and *then* grub2-install? 2. I *think* that one thing that grub2-install is complaining about is that it can't find /boot/grub2. I've tried doing it with $ grub2-install --boot-directory=/boot /dev/sda and $ grub2-install --boot-directory=/dev/md127p1/ /dev/sda and $ grub2-install --boot-directory=/dev/md127pw/boot /dev/sda and it tells me it cannot find the canonical path for the grub2 directory. Is there some way to specify where it should fund /boot/grub2 that I've missed? mark

3 2

Re: [CentOS] CentOS 7 install on one RAID 1 [not-so-SOLVED]
by Eugene Poole 26 Jan '17

26 Jan '17

First let me say I am not a true expert, but I am experienced. If this machine you purchased was some name brand, you must be speaking about hardware raid, true? If this is true, it normally presents you with what looks like a standard drive (/dev/sda) for every 2 drives configured as raid-1. Also, most name brand servers give you a bootable machine day one. If you are using software raid, you must have configured it yourself. Here is what my custom machine has: 2 - 120 GB SSD 2 - 4 TB spinning drives During my CentOS 7 install is where I performed the software raid-1 configuration. I never do the default partition configuration so here is my setup (used fdisk -l): Disk /dev/sda: 120.0 GB, 120034123776 bytes, 234441648 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x0001d7e8 Device Boot Start End Blocks Id System /dev/sda1 2048 134604799 67301376 fd Linux raid autodetect /dev/sda2 134604800 184752127 25073664 fd Linux raid autodetect /dev/sda3 184752128 233191423 24219648 fd Linux raid autodetect /dev/sda4 233191424 234440703 624640 5 Extended /dev/sda5 * 233195520 234440703 622592 fd Linux raid autodetect Disk /dev/sdb: 120.0 GB, 120034123776 bytes, 234441648 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x000085a6 Device Boot Start End Blocks Id System /dev/sdb1 2048 134604799 67301376 fd Linux raid autodetect /dev/sdb2 134604800 184752127 25073664 fd Linux raid autodetect /dev/sdb3 184752128 233191423 24219648 fd Linux raid autodetect /dev/sdb4 233191424 234440703 624640 5 Extended /dev/sdb5 * 233195520 234440703 622592 fd Linux raid autodetect Disk /dev/sdc: 4000.8 GB, 4000787030016 bytes, 7814037168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk label type: gpt # Start End Size Type Name 1 2048 1699579903 810.4G Linux RAID 2 1699579904 3399157759 810.4G Linux RAID 3 3399157760 3911510015 244.3G Linux RAID 4 3911510016 5611087871 810.4G Linux RAID Disk /dev/sdd: 4000.8 GB, 4000787030016 bytes, 7814037168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk label type: gpt # Start End Size Type Name 1 2048 1699579903 810.4G Linux RAID 2 1699579904 3399157759 810.4G Linux RAID 3 3399157760 3911510015 244.3G Linux RAID 4 3911510016 5611087871 810.4G Linux RAID My df -h display shows me the following: /dev/md126 583M 317M 224M 59% /boot I have basically the definitions using CentOS 6 and CentOS 7 and it's my understanding you must have a /boot device. Also during installation of CentOS 7 when writing the MBR to the MD device (in my case md126) it writes the information to both sda and sdb. With CentOS 6, according to HowToForge there are extra steps required to get the MBR on both sda and sdb. I have not had to replace either of these SSD, but I have had to replace spinning drives on my CentOS 6 machines in the past. Gene On 1/26/2017 7:00 AM, centos-request(a)centos.org wrote: > > No. Brand new machine, pulled it out of the box and racked it. NOTHING on the > internal SSDs. Made an md RAID 0 on the raw disks - /dev/sda /dev/sdb. No > partitions, nothing. However, when I bring it up, fdisk shows an MBR with no > partitions. I can, however, mount /dev/md127p3 as /mnt/sysimage, and all is there. > > Did I need to make a single partition, on each drive, and then make the RAID 1 > out of *those*? I don't think I need to have /boot not on a RAID. > > mark > > > > ------------------------------ > > -- Eugene Poole Woodstock, Georgia

1 0

CentOS 7 install on one RAID 1
by m.roth＠5-cent.us 26 Jan '17

26 Jan '17

Hi, folks, I'm building a new box, and I want three partitions - /boot, /, and swap, on *one* RAID 1, not three separate partitions. Other than <alt-f2> mdadm..., *is* there any way in the graphical installer to do this? All I see is a way to make three separate partitions. Pointers to links happily accepted. mark, back to googling

9 18

samba rpm deps - with yum downgrade = kind of a mayhem
by lejeczek 26 Jan '17

26 Jan '17

hi guys, gals do you see this: ~]$ yum downgrade samba Resolving Dependencies --> Running transaction check ---> Package samba.x86_64 0:4.4.4-9.el7 will be a downgrade --> Processing Dependency: samba-libs = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 --> Processing Dependency: samba-common-tools = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 --> Processing Dependency: samba-common-libs = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 --> Processing Dependency: samba-common = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 --> Processing Dependency: samba-client-libs = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 --> Processing Dependency: libwbclient = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 ---> Package samba.x86_64 0:4.4.4-12.el7_3 will be erased --> Running transaction check ---> Package libwbclient.i686 0:4.4.4-9.el7 will be installed ---> Package samba.x86_64 0:4.4.4-9.el7 will be a downgrade --> Processing Dependency: samba-common-tools = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 --> Processing Dependency: samba-common-libs = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 --> Processing Dependency: samba-common = 4.4.4-9.el7 for package: samba-4.4.4-9.el7.x86_64 ---> Package samba.x86_64 0:4.4.4-12.el7_3 will be erased ---> Package samba-client-libs.i686 0:4.4.4-9.el7 will be installed --> Processing Dependency: samba-common = 4.4.4-9.el7 for package: samba-client-libs-4.4.4-9.el7.i686 --> Processing Dependency: libtevent.so.0(TEVENT_0.9.9) for package: samba-client-libs-4.4.4 ..and process fails. chained are i686 arch? Is it only us(centos) or redhat's bugzilla should be notified. Samba downgrade used to work I remember. bw. L.

2 4

SELinux file permissions
by Tim Smith 25 Jan '17

25 Jan '17

Hi, I'm trying to grant dovecot the ability to manage its socket within the postfix spool directory. I have added the below to file_contexts.local : /var/spool/postfix/private/dovecot-auth system_u:system_r:dovecot_t:s0 However, running "restorecon -v /var/spool/postfix/private/dovecot-auth" gives me the following error : restorecon: lstat(/var/spool/postfix/private/dovecot-auth) failed: No such file or directory I cannot create the socket file in advance, because dovecot manages it, and if you "touch" the file, dovecot complains. Where am I going wrong ? Thanks ! Tim

4 5

I'm making the change to a new OS
by TE Dukes 24 Jan '17

24 Jan '17

Decided to upgrade to 7.x. It's been a good ride 6.x, but you're living in the past. Everything is backed up, just waiting on my new 4TB HD to arrive for a fresh install. See ya'll on the other side!!

3 4

CentOS dojo in Brussels 3rd Feb
by Karanbir Singh 24 Jan '17

24 Jan '17

hi everyone, just a quick reminder that we only have a few more places available at the CentOS Dojo next week Friday : https://wiki.centos.org/Events/Dojo/Brussels2017 If you are in the area, or able to make it into the area, do come by. regards -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

1 0

CentOS-announce Digest, Vol 143, Issue 10
by centos-announce-request＠centos.org 23 Jan '17

23 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing the release for Gluster 3.9 on CentOS Linux 7 x86_64 (Niels de Vos) 2. Announcing the release for Gluster 3.9 on CentOS Linux 6 x86_64 (Niels de Vos) ---------------------------------------------------------------------- Message: 1 Date: Mon, 23 Jan 2017 10:45:53 +0100 From: Niels de Vos <ndevos(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing the release for Gluster 3.9 on CentOS Linux 7 x86_64 Message-ID: <20170123094553.GA7857(a)ndevos-x240.usersys.redhat.com> Content-Type: text/plain; charset="us-ascii" I am happy to announce the General Availability of Gluster 3.9 for CentOS 7 on x86_64. These packages are following the upstream Gluster Community releases, and will receive monthly bugfix updates. Gluster 3.9 is a Short-Term-Maintenance release, and will only receive updates until the next version (3.10) becomes available. The difference between Long-Term-Maintenance and Short-Term-Maintenance releases is explained on the Gluster release schedule page: https://www.gluster.org/community/release-schedule/ Users of CentOS 7 can now simply install Gluster 3.9 with only these two commands: # yum install centos-release-gluster39 # yum install glusterfs-server The centos-release-gluster39 package is delivered via CentOS Extras repos. This contains all the metadata and dependancy information, needed to install Gluster 3.9. Note that the standard centos-release-gluster (virtual) package is still available and points to the 3.8 version. This is intentional because 3.8 is a Long-Term-Maintenance version and does not require users to update the major versions avery couple of months. Some deployments may need to install the centos-release-gluster package as well as centos-release-gluster39 to fullfill dependencies (most recent versions of oVirt possibly). We have a quickstart guide specifically built around the packages are available, it makes for a good introduction to Gluster and will help get you started in just a few simple steps, this quick start is available at https://wiki.centos.org/SpecialInterestGroup/Storage/gluster-Quickstart More details about the packages that the Gluster project provides in the Storage SIG is available in the documentation: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster The centos-release-gluster* repositories offer additional packages that enhance the usability of Gluster itself. Utilities and tools that were working with previous versions of Gluster are expected to stay working fine. If there are any proboems, or requests for additional tools and applications to be provided, just send us an email with your suggestions. The current list of packages that is (planned to become) available can be found here: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster/Ecosystem-pkgs We welcome all feedback, comments and contributions. You can get in touch with the CentOS Storage SIG on the centos-devel mailing list ( https://lists.centos.org ) and with the Gluster developer and user communities at https://www.gluster.org/mailman/listinfo , we are also available on irc at #gluster on irc.freenode.net, and on twitter at @gluster . Cheers, Niels de Vos Storage SIG member & Gluster maintainer

1 0

Re: [CentOS] [CentOS-virt] Increase CPU usage on HV after upgrade (7.2 -> 7.3)
by Subscriber 22 Jan '17

22 Jan '17

Hello Sandro, Friday, January 20, 2017, 6:54:02 PM, you wrote: > On Thu, Jan 19, 2017 at 3:40 PM, Subscriber <ml-lists(a)agoris.net.ua> wrote: > Hello Sandro, > Thursday, January 19, 2017, 12:12:25 PM, you wrote: >> Discussed with KVM guys, here's the answer: >> 1% per VM seems to much on idle VM; if the VM is not idle you are >> getting better performance in exchange. For idle VMs the difference >> should be roughly 0.1% per VM. > I compared the graphics load on the CPU before and after the upgrade. > After the upgrade is clearly increased CPU System time load. In all > of this mode and load VM themselves became approximately the same. > Can you share exact version of kvm, libvirt and qemu-kvm / qemu-kvm-ev you're using? kvm_intel In CentOS 7.2.1511: kernel-3.10.0-327.36.3.el7.x86_64 qemu-kvm-1.5.3-105.el7_2.7.x86_64 libvirt-daemon-kvm-1.2.17-13.el7_2.5.x86_64 After upgrade from 7.2.1511 to 7.3.1611: It was (after upgrading to this version, I noticed described in the first report the situation): kernel-3.10.0-514.2.2.el7.x86_64 qemu-kvm-1.5.3-126.el7.x86_64 libvirt-daemon-kvm-2.0.0-10.el7_3.2.x86_64 Now (as of 2017/01/22): kernel-3.10.0-514.6.1.el7.x86_64 qemu-kvm-1.5.3-126.el7_3.3.x86_64 libvirt-daemon-kvm-2.0.0-10.el7_3.4.x86_64 It takes 1-2 days for monitoring, to determine whether the situation has changed since the last update.

1 0

CentOS-announce Digest, Vol 143, Issue 9
by centos-announce-request＠centos.org 22 Jan '17

22 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0180 Critical CentOS 6 java-1.8.0-openjdk Security Update (Johnny Hughes) 2. CESA-2017:0180 Critical CentOS 7 java-1.8.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 21 Jan 2017 15:53:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0180 Critical CentOS 6 java-1.8.0-openjdk Security Update Message-ID: <20170121155344.GA61934(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0180 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0180.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e04f0af0db6bf5966115be1c780071d3c25c5bbb91b2293d561a6fa15d1631aa java-1.8.0-openjdk-1.8.0.121-0.b13.el6_8.i686.rpm 864d94e6e625bc5a1c1917d7daadb5cb18d23edbd83a959e81f3e933a96127cc java-1.8.0-openjdk-debug-1.8.0.121-0.b13.el6_8.i686.rpm 14a0f1360afffd36590ddafbc3c85c2070ab29441431a35f424d533d4689e42f java-1.8.0-openjdk-demo-1.8.0.121-0.b13.el6_8.i686.rpm 0b27c5e7c38290daf4b10a3afd8088c2b98d32018dafdbe11fb85cb401ac99a1 java-1.8.0-openjdk-demo-debug-1.8.0.121-0.b13.el6_8.i686.rpm d7ec3be372b0b762035137aa79932ff4adba3113d15ddfc1728469c362d7bea6 java-1.8.0-openjdk-devel-1.8.0.121-0.b13.el6_8.i686.rpm e93b86d265215f0f7eed95889f479881b26436934ea1dcf7bfbb896c37e1579c java-1.8.0-openjdk-devel-debug-1.8.0.121-0.b13.el6_8.i686.rpm e7ec1b932abf317c54744e4053209ab525d129db5c4a55cf5aef2afaf894da3e java-1.8.0-openjdk-headless-1.8.0.121-0.b13.el6_8.i686.rpm ac9e8aeec13ad539b2ce43dda728936102a6dcf3337ec002d5fec1b22cba32b8 java-1.8.0-openjdk-headless-debug-1.8.0.121-0.b13.el6_8.i686.rpm ea03e4503f1d19fc9e07e4cf72abfe77cdca5a9fbf480f7361dbb474f750b724 java-1.8.0-openjdk-javadoc-1.8.0.121-0.b13.el6_8.noarch.rpm d27d67a2828310000afcda45aece8be486a4d07a24917618e2bbb1fd383b31c2 java-1.8.0-openjdk-javadoc-debug-1.8.0.121-0.b13.el6_8.noarch.rpm 156ed32eaf641980040ea33925b5325d89c9eea3d67bfb27835d66aaae5d1c8a java-1.8.0-openjdk-src-1.8.0.121-0.b13.el6_8.i686.rpm 72056b3acfc35e1512d431d170bf0bfb3ec41e014d63a37d44a947a3dd566e63 java-1.8.0-openjdk-src-debug-1.8.0.121-0.b13.el6_8.i686.rpm x86_64: 882720170cdd2b723de69104217ba3bfb6f9a88c1f42b4ab1f71d540974d7aca java-1.8.0-openjdk-1.8.0.121-0.b13.el6_8.x86_64.rpm 226b4196d0aeb6e69c68b79a25c761ff6a68002b8461d67eda8396c945fe7380 java-1.8.0-openjdk-debug-1.8.0.121-0.b13.el6_8.x86_64.rpm 25de4d1e1d3154aa6c96d23d2fe3e8c6b422ebd45e1d8d83f150f63b2b82bb2d java-1.8.0-openjdk-demo-1.8.0.121-0.b13.el6_8.x86_64.rpm 46839bfcaadc731258cf7f0434f0f9f4e3bc3ac869a60196b78f36dbfdd12602 java-1.8.0-openjdk-demo-debug-1.8.0.121-0.b13.el6_8.x86_64.rpm d99419b905892f7a4682cb6727a41b9c4c4a033efa9e78216f6c134b6633ee3b java-1.8.0-openjdk-devel-1.8.0.121-0.b13.el6_8.x86_64.rpm 02f44a59db465a34b851188016ed34f4e7086b5626728e7b3937cb0ad802ba4f java-1.8.0-openjdk-devel-debug-1.8.0.121-0.b13.el6_8.x86_64.rpm db7da24a1dd722fdcb576491fae25fe01c4ac85e19ffb039b0cd7aade82897de java-1.8.0-openjdk-headless-1.8.0.121-0.b13.el6_8.x86_64.rpm 4efccbc0830a05709ffa58a8d7124a52ef58e5c6ed57747fe5c63a0088ffdc4c java-1.8.0-openjdk-headless-debug-1.8.0.121-0.b13.el6_8.x86_64.rpm ea03e4503f1d19fc9e07e4cf72abfe77cdca5a9fbf480f7361dbb474f750b724 java-1.8.0-openjdk-javadoc-1.8.0.121-0.b13.el6_8.noarch.rpm d27d67a2828310000afcda45aece8be486a4d07a24917618e2bbb1fd383b31c2 java-1.8.0-openjdk-javadoc-debug-1.8.0.121-0.b13.el6_8.noarch.rpm 50f40ffa84e6f61c9e8de385618530246b14db4080b20efb43ae38aa3e52ac39 java-1.8.0-openjdk-src-1.8.0.121-0.b13.el6_8.x86_64.rpm b20148d489829fd3236174b32d6057a1d6b3a77cfaccd261825c68ca1952e73e java-1.8.0-openjdk-src-debug-1.8.0.121-0.b13.el6_8.x86_64.rpm Source: 893dd0e503edfbf2bbf0018a0c019bf55d9259a8aef8f3a768832870f7678673 java-1.8.0-openjdk-1.8.0.121-0.b13.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 21 Jan 2017 15:55:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0180 Critical CentOS 7 java-1.8.0-openjdk Security Update Message-ID: <20170121155544.GA64488(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0180 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0180.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b002bc39803820082dabc431b991958f9397bc317248e981f77530cf8428c717 java-1.8.0-openjdk-1.8.0.121-0.b13.el7_3.i686.rpm 460180c36d7248c993ed1c7efd333fe7c9819dc9be1b12208ddd3071c140a55a java-1.8.0-openjdk-1.8.0.121-0.b13.el7_3.x86_64.rpm e248153a1904ea792d4815c47960c5a73e59abc1c4cf5cec464bd453bc7762e6 java-1.8.0-openjdk-accessibility-1.8.0.121-0.b13.el7_3.x86_64.rpm 5d2c4f7cb529dcd1763a9ae648d447edbc5f07a01c54423a69cb0d140de0c6a6 java-1.8.0-openjdk-accessibility-debug-1.8.0.121-0.b13.el7_3.x86_64.rpm ecba68f71f2cbcb197c41220b648694e847a0437d2b24499a65107dadcdb3510 java-1.8.0-openjdk-debug-1.8.0.121-0.b13.el7_3.i686.rpm a87f43a746f505fc2827afa5ace424006850d07dc2647b79b534281898a5718f java-1.8.0-openjdk-debug-1.8.0.121-0.b13.el7_3.x86_64.rpm 39833c95afbc018e7a91c9a2476cb5055ca32fc2fcc6b60d79408e34b81f8ca1 java-1.8.0-openjdk-demo-1.8.0.121-0.b13.el7_3.x86_64.rpm ca5a4add5dbd60bac513d89e7e915660d31d1b8c4ce7f273990a1f45f387a931 java-1.8.0-openjdk-demo-debug-1.8.0.121-0.b13.el7_3.x86_64.rpm a0c638d96cbbcb3acea1b71f51adc571ff6a09c7c0c8d9cb519e654fce15cd07 java-1.8.0-openjdk-devel-1.8.0.121-0.b13.el7_3.i686.rpm 9e1bb8b701666ff38b321f8b7a152df363bf4f6ea0276f98bd540d151a901278 java-1.8.0-openjdk-devel-1.8.0.121-0.b13.el7_3.x86_64.rpm b9122db5db773a07675bfd042aff7b248ec7f4cdc905b78ce43b2d8fde466b31 java-1.8.0-openjdk-devel-debug-1.8.0.121-0.b13.el7_3.i686.rpm 4acc1c716632d0dc135a0ca0ed2d8de29e5813d62c9ef579bd2783191f254850 java-1.8.0-openjdk-devel-debug-1.8.0.121-0.b13.el7_3.x86_64.rpm 8f92a775f9a1056256baf5b132cbf4a61d12e3db79ae4b33dd7c6da80cd0e82f java-1.8.0-openjdk-headless-1.8.0.121-0.b13.el7_3.i686.rpm 820b3b25e699f6dc0768fee7f8362ea5bf3770046dfdbdfc2d1e7bd6d56946f8 java-1.8.0-openjdk-headless-1.8.0.121-0.b13.el7_3.x86_64.rpm e2e99c6977af60e940b6b6e74a35d744742a2a85cf9a2779c5f141375be2393d java-1.8.0-openjdk-headless-debug-1.8.0.121-0.b13.el7_3.i686.rpm e47d2e31358e70ebc3b83f8f32b986df3c293b465ba46da4c91f05a7c1c8e8cf java-1.8.0-openjdk-headless-debug-1.8.0.121-0.b13.el7_3.x86_64.rpm 77c3b0a2194e7239009c8f68f136e7eeeb2ce4ed287a6d9c52ff01dfc3655718 java-1.8.0-openjdk-javadoc-1.8.0.121-0.b13.el7_3.noarch.rpm f0b418e75b930fb391bbb05021d638e1569d83b85603c49267708adcef8777ed java-1.8.0-openjdk-javadoc-debug-1.8.0.121-0.b13.el7_3.noarch.rpm d06e1bfe81fd73e1c143a5bc22d5ad881794acc186408ba142fefdc3128a151d java-1.8.0-openjdk-javadoc-zip-1.8.0.121-0.b13.el7_3.noarch.rpm c68200d318c1b4c803e2b4822ba74963d955c737397e259f2c32c87127048b45 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.121-0.b13.el7_3.noarch.rpm 2d57cd90202ef0aa603585c9f5e2e9cba72e1c07aa324de697cc307dd4f17121 java-1.8.0-openjdk-src-1.8.0.121-0.b13.el7_3.x86_64.rpm e99b31852e84ff9e81784d68a53204b4f6168f0fde26f209c0eb56c41755e6ae java-1.8.0-openjdk-src-debug-1.8.0.121-0.b13.el7_3.x86_64.rpm Source: 6df0ee7bf1488263efafcc84765297e4b970ad8f1ca5291ae90f2d43536ec7f3 java-1.8.0-openjdk-1.8.0.121-0.b13.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 9 ***********************************************

1 0

CentOS 7 and Areca ARC-1883I SAS controller: JBOD or not to JBOD?
by Peter Peltonen 22 Jan '17

22 Jan '17

Hi, Does anyone have experiences about ARC-1883I SAS controller with CentOS7? I am planning to have RAID1 setup and I am wondering if I should use the controller's RAID functionality which has 2GB cache or should I go with JBOD + Linux software RAID? The disks I am going to use are 6TB Seagate Enterprise ST6000NM0034 7200rpm SAS/12Gbit 128 MB If hardware RAID is preferred, the controller's cache could be updated to 4GB and I wonder how much performance gain this would give me? Thanks! Peter

8 14

Restricting mirrors off a repo
by Mauricio Tavares 21 Jan '17

21 Jan '17

What is the best way to specify which mirrors off a repository you want to use? Have a host with rather restricted egress rules and want to allow it to reach a couple of mirrors for each repo it needs. And, yes, I am not ready to mirror them locally.

3 2

koji in extras older than epel
by Tony Schreiner 21 Jan '17

21 Jan '17

Now that EPEL 7 has koji-1.11, should the one in CentOS 7 extras be updated or removed?

2 1

Abrt Error abrt-cli list --since 1484935231
by Zulqarnain Khan 21 Jan '17

21 Jan '17

Hi, hopping everyone is fine. I am using a Centos 7 server based on Nginx. I am using the server for providing downloadable data. Around 8 TB per day is downloaded. The server was working fine and perfectly. I hired a freelancer to limit the download speed as i am unexperienced with linux (Worst Mistake Ever) he messed up the server and after 4 hours said he cant impletement a simple limit_rate in Nginx. So i said to him revert back the changes and he said its done. Since then i am getting this error abrt-cli list --since 1484935231 Error typed in terminal http://prntscr.com/dy6c4a Here is the Nginx log file http://prntscr.com/dy6k54 Here is my Php-fpm log file http://prntscr.com/dy6koa There servers is taking too much time to respond. Even a simple yum is taking time to respond. Listing directories is also taking time. So please help me out.

1 0

Standard Dracut configuration file /etc/dracut.conf
by SUDHANSHU BHUTANI 21 Jan '17

21 Jan '17

Hi Centos Experts, I want to have hands on /etc/dracut.conf file which standard centos 7.3 is using to create initrd.img present in the DVD ISO : /isolinux/initrd.img >From where can i get /etc/dracut.conf, so that i can create exact replica of initrd.img which centos 7.3 is sending in DVD ISO. ? Can any one please send me standard centos 7.3 dracut configuration? My goal is to change some kernel configuration in standard centos 7.3 kernel. I will be adding some new drivers statically and will be building new vmlinuz. I will also be building initrd.img compatible with this new kernel image. Then, i will copy these 2 newly formed images to /isolinux/ in my dvd-iso-layout folder and try to make a new ISO. This ISO should boot well. I need to prepare one complete ISO, which has my new modified kernel and modified initrd Currently, i am facing lot of errors in dracut. Not sure, what am i missing in my initrd.img. Sometimes, it says "/dev/root" does not exist. What command shall i use in centos 7.3 to make a new initrd.img which i can transfer to my ISO for new installation? Regards Sudhanshu

1 0

amanda and selinux
by Jon LaBadie 21 Jan '17

21 Jan '17

Anyone familiar with the selinux policy for the amanda backup software package? I'm getting lots of data not being backed up. For example, under /home there are 2 directory trees owned by root. Those get backed up, user home dirs do not. No AVC denials nor messages in /var/log/messages or journalctl log. But if I turn off selinux enforcing, or set amanda_t type to permissive, complete backups are made. I expected the selinux policy would have allowed amanda to be able to read all files. Else, how does one make backups? I'm seeing this on CentOS 7.2, Fedora 24 & 25. Amanda packages from the respective distro repos. As far as I can tell, the selinux policies are the same in all three. But then, I know little selinux speak. Jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

2 2

Can/should I mix entropy sources?
by Steve Snyder 20 Jan '17

20 Jan '17

I've got 2 sources of entropy in my CentOS7 system, a hardware RNG and the Intel rdrand instruction. Is it advisable to just use a single source or can/should I mix the 2 sources? If I mix the 2 sources how is it done? Presumably I could use the rngd service to handle the Intel source, but would it be a problem if 2 entities were writing to the entropy pool? Thanks.

1 0

SSSD cache case-sensitivity
by Robbert Eggermont 20 Jan '17

20 Jan '17

Dear all, I'm running CentOS 7.3 with SSSD. I'm using sssd-ad to talk to an AD backend. Group names in the AD contain capitals. When sssd-ad is working normally, group names returned are all lowercase. However, when the AD backend goes offline, group names returned from the SSSD cache contain capitals. The change in case breaks stuff (sshd's AllowGroups, for one). Has anybody else seen this behavior? Is there a way to make the group names uniform, whether they come from sssd-ad or the cache? Best, Robbert -- Robbert Eggermont Intelligent Systems R.Eggermont(a)tudelft.nl Electr.Eng., Mathematics & Comp.Science +31 15 27 83234 Delft University of Technology

3 4

CentOS 7 httpd cgi script file not able to write to /tmp
by Jerry Geis 20 Jan '17

20 Jan '17

Hi all, I have a script running in httpd. The script runs fine. However I want to "echo" some debug information into a file. The file is never created. Is there some security thing that has to be enable/disabled to allow a script in httpd to write to a file? Thanks, Jerry

4 5

CentOS-announce Digest, Vol 143, Issue 8
by centos-announce-request＠centos.org 20 Jan '17

20 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0086 Important CentOS 7 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 19 Jan 2017 13:30:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0086 Important CentOS 7 kernel Security Update Message-ID: <20170119133014.GA30129(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0086 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0086.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a301e9bd95957c5af03b85f8612aaf2053de837e1805e6e649312da8f49f952d kernel-3.10.0-514.6.1.el7.x86_64.rpm dad8a63d9c77bb941a0424b49ff21b6cc67f56e667258fbb3ae8fe9bf61a2812 kernel-abi-whitelists-3.10.0-514.6.1.el7.noarch.rpm c0f9f36cfe07a52320ac47449654f70400bf73707760037106be9563a1428d56 kernel-debug-3.10.0-514.6.1.el7.x86_64.rpm 09bdd98395b85932b2c73151ff6d025608e4fe874eb8b2a70190a5171bddeda3 kernel-debug-devel-3.10.0-514.6.1.el7.x86_64.rpm 628011a5e1958516519b9c65de9cbe9c17e37cd1d1ec26b123f5ddcfa52ef28c kernel-devel-3.10.0-514.6.1.el7.x86_64.rpm cfccc9265a4450544ef7fe783259517b9b0926e0982cccaa292781a82e6a9aa2 kernel-doc-3.10.0-514.6.1.el7.noarch.rpm 50decaf498dccec72c9925ef0c009158fd6cb298fcd5ed9e8dc688e0aeaf3b3e kernel-headers-3.10.0-514.6.1.el7.x86_64.rpm 389bc2f1b0999c01dbc57278a8a5fb45d353899c2fbc404f73e15ae7cecbb907 kernel-tools-3.10.0-514.6.1.el7.x86_64.rpm b2b363e82c863c73dafa895601bdd1fa9aea72bbd3325e1a63e8fbdec6290b35 kernel-tools-libs-3.10.0-514.6.1.el7.x86_64.rpm 5c32cfb66d0b0fc4c6aa6530b70c0d2a65dd6d2631ee68364c1843196ddcf35d kernel-tools-libs-devel-3.10.0-514.6.1.el7.x86_64.rpm 0e49420a74763b655ebf9b0dfbd3d8d9cb8fca551e7f4cd052667b253630b921 perf-3.10.0-514.6.1.el7.x86_64.rpm ea6b2f457ed461d2e1b1b451b834510dc8869be78d7aa3d59fc730c819f6edc0 python-perf-3.10.0-514.6.1.el7.x86_64.rpm Source: cb4cf328e79357f0d0884ee1c84ff4a014554b6e0c9094b6d616cab540c43289 kernel-3.10.0-514.6.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 8 ***********************************************

1 0

[OT] VOIP
by TE Dukes 20 Jan '17

20 Jan '17

Hello, I changed ISPs a few weeks ago and now I'm on cable. In doing so, I lost the ability to use the DSL as a FAX line. So, I bought an OOMA. Turns out it uses a number of ports, three of which are reserved, 53 TCP/UDP, 110 TCP and 443 TCP. These ports have already been port forwarded from my cable modem/router to my server. I'm thinking this isn't going to work unless I change some ports on my server, which I'm not willing to do. I spent over 30 minutes with their support people last night. It appears the ports cannot be changed on the OOMA device. Are there any work arounds? TIA

3 4

SELinux upgrade
by Scott Robbins 19 Jan '17

19 Jan '17

Well, got hit by this too. Ironically, I don't use docker, I think I had it installed being pulled in for something else. So, tried the yum remove docker* but no go. When I do semanage port -a -t ssh_port_t -p tcp <port> I get an error Bad type declaration at /etc/selinux/targeted/tmp/modules/100/docker/cil:1 which is something that doesn't exist. Tried installing container-selinux, but so far, the only way to get SSH to work on a default port is to setenforce 0. This isn't a really important machine, but it is certainly annoying. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

1 0

Increase CPU usage on HV after upgrade (7.2 -> 7.3)
by Subscriber 19 Jan '17

19 Jan '17

Hello , After upgrading the system from CentOS 7.2.1511 to CenOS 7.3.1611 I see that the average processing time has increased from 5-7% to 12-15% (doubled). Not critical but it is not pleasant. Server as KVM with 5 virtual machines. Someone noticed something similar? If so, how to fix that? Thx.

4 11

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss