- Discuss - lists.centos.org

CentOS-announce Digest, Vol 133, Issue 6
by centos-announce-request＠centos.org 16 Mar '16

16 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0448 Moderate CentOS 6 samba Security Update (Johnny Hughes) 2. CESA-2016:0449 Moderate CentOS 6 samba4 Security Update (Johnny Hughes) 3. CESA-2016:0448 Moderate CentOS 7 samba Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 15 Mar 2016 23:34:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0448 Moderate CentOS 6 samba Security Update Message-ID: <20160315233454.GA24717(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0448 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0448.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b5decc0e8074aa9e596c96b3323adab98335d5cd675cb9b51ccee1dd26353bed libsmbclient-3.6.23-25.el6_7.i686.rpm e14b5e4a88985ecb78679b877eb0a4dec5e605202ceb4c70d9ac88ad29c2a240 libsmbclient-devel-3.6.23-25.el6_7.i686.rpm 211aa86fc7e335d28dec4a3e1170d2e9c0ac581235674ed0b003970ddff7fffb samba-3.6.23-25.el6_7.i686.rpm 367f71d1b1cb957d4c0e5064e706f38d28bf0fbdeaf0b98146480f117dd365a9 samba-client-3.6.23-25.el6_7.i686.rpm 8a8f42a291d5e906f44feed5617804c4b6757667e05e623465be09bdbec2f68c samba-common-3.6.23-25.el6_7.i686.rpm 25057bd234c04a0edc7590488c68606eedc8223afc5cfae0aedecd31c558666a samba-doc-3.6.23-25.el6_7.i686.rpm 1e5d129320f06dbf0d3d93fc2991763d9bd1cb49ea2a88d0c93d1279fe60c15c samba-domainjoin-gui-3.6.23-25.el6_7.i686.rpm 640ac634c8d50a58e23af9fe78fcc4b0a821c8f8e4f8091ad545fb2250aa98f6 samba-swat-3.6.23-25.el6_7.i686.rpm e053bbb569673a04ce216ae8cbc5876853e2230968860aebf9ad099517e4c8a0 samba-winbind-3.6.23-25.el6_7.i686.rpm e8d6e75beb584ea9e5a2b05373808660387ac8ed9371ef58c2fc59cc8813e3ff samba-winbind-clients-3.6.23-25.el6_7.i686.rpm c03637316bc9fc0a4689711367540685e2de5b667c907d86d40788c00564c722 samba-winbind-devel-3.6.23-25.el6_7.i686.rpm 0c014a4a4585f0f5a99988d7663a3e0545f224d8ba42fe728205398eab7d0e5e samba-winbind-krb5-locator-3.6.23-25.el6_7.i686.rpm x86_64: b5decc0e8074aa9e596c96b3323adab98335d5cd675cb9b51ccee1dd26353bed libsmbclient-3.6.23-25.el6_7.i686.rpm 06c201497abcccc6e9d6ca5452f497596926a02f4655c0e8f088035982f5f7a7 libsmbclient-3.6.23-25.el6_7.x86_64.rpm e14b5e4a88985ecb78679b877eb0a4dec5e605202ceb4c70d9ac88ad29c2a240 libsmbclient-devel-3.6.23-25.el6_7.i686.rpm 3a272561feb500ac90f3b2f9df1381ed9bc164a0663c05d25ae752c0a2b8bfce libsmbclient-devel-3.6.23-25.el6_7.x86_64.rpm 44e3af03d1a0aab293efa611a2c0bd4f48f0ee3abdc8e0b1ad816369a32f9e63 samba-3.6.23-25.el6_7.x86_64.rpm e885e5fa406f5f5279e11c36bb8837ab633d4b1b0cfddf4eb386782310b662ec samba-client-3.6.23-25.el6_7.x86_64.rpm 8a8f42a291d5e906f44feed5617804c4b6757667e05e623465be09bdbec2f68c samba-common-3.6.23-25.el6_7.i686.rpm 7d281ec0a9cdb997c974b76e6ffe090080c521a4a7536b2aa74b3b94aadc8e21 samba-common-3.6.23-25.el6_7.x86_64.rpm 79195d1229850a6bc0872c4499f9e5f0952001ea3dfb7a809472e15632f5362b samba-doc-3.6.23-25.el6_7.x86_64.rpm 155b2372c505de3b0c6e37f28e702c24993205acee5cf1c1723fe3f322d5d234 samba-domainjoin-gui-3.6.23-25.el6_7.x86_64.rpm ed8f50e1b484bd6529f882a2e88cf2740f6eb08419fda15097c6c3d88a00786f samba-glusterfs-3.6.23-25.el6_7.x86_64.rpm c43cd36e8680659b26fa5a071bc7b5c7e29094335382199d608216cc70600b84 samba-swat-3.6.23-25.el6_7.x86_64.rpm 93304d35bbc21e244536799768f1a142a425959a475414d68e0b648bbc97274e samba-winbind-3.6.23-25.el6_7.x86_64.rpm e8d6e75beb584ea9e5a2b05373808660387ac8ed9371ef58c2fc59cc8813e3ff samba-winbind-clients-3.6.23-25.el6_7.i686.rpm 08f92d7b9c329a3d9c762590075c2910a9fddf3f33473ecbb6cf736dc8a83281 samba-winbind-clients-3.6.23-25.el6_7.x86_64.rpm c03637316bc9fc0a4689711367540685e2de5b667c907d86d40788c00564c722 samba-winbind-devel-3.6.23-25.el6_7.i686.rpm 21cad06ac779310c7fa5f556579c3fd4465552db161a3514caaca50b06a86dd2 samba-winbind-devel-3.6.23-25.el6_7.x86_64.rpm c9902a8e32c886a42103e3d907c855c5c3f4b3146d6457e5c4e4c96a31e30a96 samba-winbind-krb5-locator-3.6.23-25.el6_7.x86_64.rpm Source: e9e2e607ac462b38a0e534e9badd817b08c2badc0ecca1fa4a9e5c5b84ee4c0d samba-3.6.23-25.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 15 Mar 2016 23:36:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0449 Moderate CentOS 6 samba4 Security Update Message-ID: <20160315233602.GA25183(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0449 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0449.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 81b673f8138f2dd07c5b7da7c407019a3fdbad72dcae299320f082db2fd44c5e samba4-4.0.0-68.el6_7.rc4.i686.rpm 6691e7fd8436b9fd3fa786618a9cf55d9ec43f46db793f03ca02ae807a7bb40b samba4-client-4.0.0-68.el6_7.rc4.i686.rpm 9a2902004d50248c9eaeca24d3875cec18dc983213b414ae0c9ec66fc0d1dae1 samba4-common-4.0.0-68.el6_7.rc4.i686.rpm c576c5a0604d49cb440edaa7121ffbb4f7716b4e2a998e5c970b51c649ce79e4 samba4-dc-4.0.0-68.el6_7.rc4.i686.rpm 9d61faa081d7870660f2020a661d36764518606ac7259d03a1c6f97895003530 samba4-dc-libs-4.0.0-68.el6_7.rc4.i686.rpm ace320097a0e71ef33b535fe2d96be6e0a8ed87cdef6af88327899de0f9c3870 samba4-devel-4.0.0-68.el6_7.rc4.i686.rpm 8c8e4f07a3623d88a6c44a55921be4a8a738fba1d55e5ea99e9a137f34802f42 samba4-libs-4.0.0-68.el6_7.rc4.i686.rpm 9f47a014cebd152406acd5e2c08e7b97d7d116bcd64f4f0e6c70920ad81420dc samba4-pidl-4.0.0-68.el6_7.rc4.i686.rpm 2194f3117ac2aca866adac78c5b497a5e1ed2330a9a08483fd4701501e424e9f samba4-python-4.0.0-68.el6_7.rc4.i686.rpm fbdf435002051d20fe0d1f1208c0bc94fc041598338d2ecf9e64d57bddd6c472 samba4-swat-4.0.0-68.el6_7.rc4.i686.rpm b6e046d24ed24ef60e6c68bdb4bee14f42f2472ef97cfb59c7c68485119cea7d samba4-test-4.0.0-68.el6_7.rc4.i686.rpm f7adb813db4789b3d54eb3f21926e06244bd483cb53f1528f2cc6d81ae2da4e2 samba4-winbind-4.0.0-68.el6_7.rc4.i686.rpm 9bae92e4646c402258123193c5ac15639ec25039556ca8a959fe8f7fa7e79b20 samba4-winbind-clients-4.0.0-68.el6_7.rc4.i686.rpm 103c104561533a25f9b5fb3211eac0a1ee9c5706541253b2d68f365cd2097134 samba4-winbind-krb5-locator-4.0.0-68.el6_7.rc4.i686.rpm x86_64: 89b6244f7ea7f44e82b0724bbc9014673284d47ecbbef7037f78d20a36538665 samba4-4.0.0-68.el6_7.rc4.x86_64.rpm 384ace2be4554f2d4947bd84997e7dc1f9d216740bcb87b810cc831440bd65ee samba4-client-4.0.0-68.el6_7.rc4.x86_64.rpm ea8f08e7f0e1f8ed1cc3c4f45c5d38627c746bb474332e272b8eb6e012f6f74f samba4-common-4.0.0-68.el6_7.rc4.x86_64.rpm 563790e31cd6997d767e51cdd87594399b4a15728c2db181ceaff211d9d223a0 samba4-dc-4.0.0-68.el6_7.rc4.x86_64.rpm 732a7aaa07e1439558dbda0e08a5c92c3609487626ba0c63ee0e1dc84e6c81c4 samba4-dc-libs-4.0.0-68.el6_7.rc4.x86_64.rpm 001f341684a1182e3b02c5e565b1238ebaa8a2c2adafa534b33c6ab5eb1748c8 samba4-devel-4.0.0-68.el6_7.rc4.x86_64.rpm c81a9246444cb1e8777355783a94245ba77b482312569bcf3407d3eb4102e5d0 samba4-libs-4.0.0-68.el6_7.rc4.x86_64.rpm cc7a4f0eb21b859807fa04554a5b0e72cc81f4d945f2bed12fb837dbccc50fa1 samba4-pidl-4.0.0-68.el6_7.rc4.x86_64.rpm f852593cf4d2fc8300e6cd4d338be42c4669846ef4392d03882325d9561c9486 samba4-python-4.0.0-68.el6_7.rc4.x86_64.rpm e74441c9e2a590e3fcb8dec6b65bdc81ae5ef509cdb26c42d85290a4fd9ecbb7 samba4-swat-4.0.0-68.el6_7.rc4.x86_64.rpm 7bfee12336a558e8de44994b3254ee1cd3886cd3e073b1c0ab05043287415602 samba4-test-4.0.0-68.el6_7.rc4.x86_64.rpm f5a670ad012ff91c90b841cb83c87eb11f9f48d1670fa5e5da97a7a331b2a75f samba4-winbind-4.0.0-68.el6_7.rc4.x86_64.rpm a5eb2a76aa1a797d59b677d88c3a8071c4c70a4ae6c336ce45e2485ac1611024 samba4-winbind-clients-4.0.0-68.el6_7.rc4.x86_64.rpm 3373fd48c2810dfa5b7ca5f8a8c72c2ee1b0121f751730562ff93e1c5567d2bb samba4-winbind-krb5-locator-4.0.0-68.el6_7.rc4.x86_64.rpm Source: 25199187aba97fd9c62e550b1f8d8def3516f75060103ceadabce56b6108df49 samba4-4.0.0-68.el6_7.rc4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 15 Mar 2016 23:40:45 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0448 Moderate CentOS 7 samba Security Update Message-ID: <20160315234045.GA29767(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0448 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0448.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 8c3cc313c91dd609e0548a46d3e4d2934d57a57e3cd44736cbc0f0d825e6206c ctdb-4.2.3-12.el7_2.x86_64.rpm ade9f36fbd89362e7424f236b4468e24a0de88968207e07036e1eba25b9ea58c ctdb-devel-4.2.3-12.el7_2.i686.rpm 88f0d6c5d02025f004d21805c79c278738161300c7c6be4ce1ad8701c02141fd ctdb-devel-4.2.3-12.el7_2.x86_64.rpm b5f57d8cfcefb045cf2451d576f0c623710485785f5ac93b0a03a4d0355c0719 ctdb-tests-4.2.3-12.el7_2.x86_64.rpm 45fe5fe849f0c6d3c2a075b39d0f37037e98f5fcb1a5ca70d54e29f2a79b4803 libsmbclient-4.2.3-12.el7_2.i686.rpm 552ea0c2e6bd4d8f4ac86dacb64d926cedca3175d516738974421585e562ab00 libsmbclient-4.2.3-12.el7_2.x86_64.rpm 260f87f58de4bf41661c9576239150670f1b47bd01f0448aacfbbc4c23c42f9a libsmbclient-devel-4.2.3-12.el7_2.i686.rpm dca10cd6b8c2bf5b6d0eab592f93df40b225fe98fa570016c65b5386cac7cf4c libsmbclient-devel-4.2.3-12.el7_2.x86_64.rpm f625e020324143d87a9c7c24b43ec12e44435530e4019858f0e38b4e6594b600 libwbclient-4.2.3-12.el7_2.i686.rpm 7743fcace1ba6514e6cde34a14fb5423b530a175c7fb5c8115e9f8a2b6df8ecb libwbclient-4.2.3-12.el7_2.x86_64.rpm ef8c363fac7cb8c66b7e3182cef38a5908df1e08b881bf84446a98281bc7a785 libwbclient-devel-4.2.3-12.el7_2.i686.rpm 2f4b16c5605208be9190faf22794b777fd2845ca8a2d110e9830e45137218834 libwbclient-devel-4.2.3-12.el7_2.x86_64.rpm d24a970c53d95645c0b0be760c7f3340be4046708df4a783c3df89fe3272b1fe samba-4.2.3-12.el7_2.x86_64.rpm 910b0062eb7aa59a818eed03387f77b9cd0826c74bdbe06aa13afcd94d2f8b58 samba-client-4.2.3-12.el7_2.x86_64.rpm 1c1c8b1fb433b03971d3eaaeea010aeb432414acd9a80d103912332914115599 samba-client-libs-4.2.3-12.el7_2.i686.rpm b1a5277231a4a9d209932cffc39f7c165c092714d13c19c560932d1b715502ad samba-client-libs-4.2.3-12.el7_2.x86_64.rpm b31d2d2d04310ca74846d059935d3cfd7c54fefddb1da52063ab79363349a014 samba-common-4.2.3-12.el7_2.noarch.rpm 5c9bd9ed75d77c5d41ef8b2fdddb1e7a0f8d45771ad6234cf713fe20180017db samba-common-libs-4.2.3-12.el7_2.x86_64.rpm 3750fca4d53124ad9c5c14be1a2baf386080b8239e4c2fed22c5430f3cfeb85a samba-common-tools-4.2.3-12.el7_2.x86_64.rpm cf23f4c1ec07bea5ae87f1655577895b590298f8e9d7c79248707cd60ff911fa samba-dc-4.2.3-12.el7_2.x86_64.rpm 2a5723c3349f519871301ef344a6e8db018891edd85d9a57a50048aa6d9e8da0 samba-dc-libs-4.2.3-12.el7_2.x86_64.rpm 1d547d0b97e25374ca67357c112ee4d35a2baaabb6ea0537bcc3b57fb2d33094 samba-devel-4.2.3-12.el7_2.i686.rpm ca1b1849f43e5d90686afa2398a21c35f6cf878a55b985e9389a8e8fac61cace samba-devel-4.2.3-12.el7_2.x86_64.rpm ec3c284a1994d8cbcc3c1b0ca8c2ea74f1763dd01e5fe1619a35b752c9170055 samba-libs-4.2.3-12.el7_2.i686.rpm f165bb86f1109a069b035b75f4c7d58f82085a65326742d1811ca66a0bf38be7 samba-libs-4.2.3-12.el7_2.x86_64.rpm d91f97907deb675b33b93800574524d54d2797de5678fdff41d8e1fa6e29e923 samba-pidl-4.2.3-12.el7_2.noarch.rpm b6fdd2e97a8f9029da925a45ad09904740df77eaf32253f9e22a1e01bc5dab5b samba-python-4.2.3-12.el7_2.x86_64.rpm 5d4f8d1c876a41d883fc45a598c5d4f295462fa4ce0c2d5dd9b2851bf1fe5324 samba-test-4.2.3-12.el7_2.x86_64.rpm daa259172c1a2ec48bb9f65f306e36fd71be9a2b67bd151d4d1d64a52af24283 samba-test-devel-4.2.3-12.el7_2.x86_64.rpm 828342a64e7ea3cde25e9c4720ae5ff25a9e3aaa702c690c5083fdc0320078da samba-test-libs-4.2.3-12.el7_2.i686.rpm 1dbd87dda1bcd47c29af0779c92e65bb08aa9cd60d72ee6a4a4a74ba2a56475a samba-test-libs-4.2.3-12.el7_2.x86_64.rpm a11c25786fa48cad2a922219e4342956824800c4b2ebe719fff56692ff8823b5 samba-vfs-glusterfs-4.2.3-12.el7_2.x86_64.rpm 2ed0a1237f01e4d3a73690c498b0ad93b8dc6d4fc50b8c9728230dc793e6ab51 samba-winbind-4.2.3-12.el7_2.x86_64.rpm 7874b20308965efe35a2ee3e370a36d32a4ef2786f5669273183efa05237e4ee samba-winbind-clients-4.2.3-12.el7_2.x86_64.rpm a5efdb81a5b907e2061e7a18d552a173596babda269a739e9915ebf604b0b03b samba-winbind-krb5-locator-4.2.3-12.el7_2.x86_64.rpm 5de1cb0d6cf245075dda495d44d0af2757be8f61b8de39ea26459ca7f8f47395 samba-winbind-modules-4.2.3-12.el7_2.i686.rpm 094a45e8548000d431e3926bddec06953d96e40ee4abef7464fd05652661ee81 samba-winbind-modules-4.2.3-12.el7_2.x86_64.rpm Source: e1d5b3a179f328f8b36a9e8a57ff57720d95cbfc421f0e7194b1f15a2f75e8cf samba-4.2.3-12.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 6 ***********************************************

1 0

Centos 7: Problem with named-chroot service after last update
by Dario Lesca 15 Mar '16

15 Mar '16

After last update, the named-chroot service not start anymore with this error: > mar 15 10:26:33 s-virt.mydom.local bash[3263]: zone mydom.local/IN: > loading from master file mydom.local/master.zone failed: file not fou > mar 15 10:26:33 s-virt.mydom.local bash[3263]: zone mydom.local/IN: > not loaded due to errors. > mar 15 10:26:33 s-virt.mydom.local bash[3263]: > _default/mydom.local/IN: file not found > mar 15 10:26:33 s-virt.mydom.local bash[3263]: zone 0.168.192.in- > addr.arpa/IN: loading from master file mydom.local/reverse.zone > failed: > mar 15 10:26:33 s-virt.mydom.local bash[3263]: zone 0.168.192.in- > addr.arpa/IN: not loaded due to errors. > mar 15 10:26:33 s-virt.mydom.local bash[3263]: _default/0.168.192.in- > addr.arpa/IN: file not found All file into /var/named/chroot/var/named/ are not found After investigate I have found this error, into file: /etc/systemd/system/multi-user.target.wants/named-chroot.service the ExecStartPre named-checkconf command is wrong: the option '-t /var/named/chroot' is missing. Solution: Add '-t /var/named/chroot' option before the '-z' option into ExecStartPre command or disable zone check via /etc/sysconfig/named Hope this help -- Dario Lesca (inviato dal mio Linux Fedora 23 Workstation)

1 0

Centos and automatic update on server
by Alessandro Baggi 15 Mar '16

15 Mar '16

Hi list, I know that there are automatic update with yum-cron but never tried. In my experiences I never did automatic backup because if update was broken my installation will be broken and I wait some time before apply update. Today seems to be that automatic update are used more than before. What do you think about automatic update? It is a good practice on a server? What is your experiences? Thanks in advance. Alessandro

5 6

Perl on CentOS 6 and CentOS 7
by Boris Epstein 15 Mar '16

15 Mar '16

Hello listmates, What are the proven/tested version of Perl for CentOS 6 and 7? Is Perl 6 operational on either? Thanks. Boris.

5 6

CVE-2016-1285 & CVE-2016-1286
by Leonardo Oliveira Ortiz 14 Mar '16

14 Mar '16

Hello. I think Centos are affected, right? Some update from Centos?

4 7

C7 + UEFI + GPT + RAID1
by Alessandro Baggi 13 Mar '16

13 Mar '16

Hi list, I'm new with UEFI and GPT. For several years I've used MBR partition table. I've installed my system on software raid1 (mdadm) using md0(sda1,sdb1) for swap, md1(sda2, sdb2) for /, md2 (sda3,sdb3) for /home. From several how-to concerning raid1 installation, I must put each partition on a different md devices. I've asked times ago if it's more correct create the md device, partitioning it and create fs on each partition created on md device: mdadm create /dev/md0 ... fdisk /dev/md0: md0p1 swap md0p2 / xfs md0p3 /home xfs or create for each partition an md device and create the fs on mdX device directly: mdadm create /dev/md[012]..... mkfs.fs /dev/mdX (for each md device) md0 swap md1 / md2 /home I got as answer that the second solution is the correct solution. I'm installing C7 1511 on a skylake machine with UEFI and I'm confused. After googling, for my installation I must create gpt table, 1 partition with fat32 type of 512M, and 2 partition for swap and / (I've excluded /home), clone gpt partition table on second disk with sgdisk, create md device for swap and /. I've created gpt partition table with: 1) part1 512m fat32 EFI-part 2) part2 8gb raid swap 3) part3 ~500gb raid / then I've cloned gpt of sda to sdb without problem. Then I've created array md0 for swap and md1 for / and then rebooted the system. I've started installation process. During disk selection I get only one disk tagged as MDRAID disk and not sda and sdb. Selecting MDRAID disk I can't see sda1 sdb1 EFI-part, md0 and md1 devices. Going to console, cat /proc/mdstat give me only md1. If I try to start md0 mdadm says sda2: not such file or directory but the partition exists on /dev/sda. Coming back to Installer, it forces me to create partitions on MDRAID (md1) disk and I create: md1p1 EFI md1p2 swap md1p3 / Installation was performed an system booted. Now, on this machine with mbr partition type I get md0 (sda1, sdb1) and md1 (sda2, sdb2) on uefi machine with gpt I get md1 (sda, sdb). I've tried also installing with mbr before using gpt, and I got md0 (sda1, sdb1), md1(sdb2, sda2) and the other 2 partition for EFI as expected. But with mbr installer said me that It gpt was needed. Why using gpt, if I set two raid partition, create 2 raid, rebooting it gives me that md1 has sda and sdb instead sda2 and sdb2 and other md is dead? What is the correct method to install on RAID? 1 md device and create partition on it or N md devices for N partition? Why using gpt I get only one disk on disk selection (mdraid device), not the 2 physical disk, and not the 2 md raid created? Hope in help. Alessandro.

3 5

SELinux denies haproxy
by Tim Dunphy 13 Mar '16

13 Mar '16

Hi all, I'm load balancing 4 mysql databases using HAProxy. The setup seems to be working pretty well. Except I keep seeing these messages turning up in syslog: Mar 12 22:11:31 db1 kernel: [6058125.959624] type=1400 audit(1457820691.824:3029129): avc: denied { name_connect } for pid=801 comm="haproxy" dest=7778 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:interwise_port_t:s0 tclass=tcp_socket It looks like SELinux is denying haproxy the ability to connect to the database. I haven't seen any real problems on the site that uses the database. But I was just wondering if this message looks familiar to anyone. Or if it looks like something I should try to correct. I tried grepping through audit.log for haproxy and piping it to audit2why, but I don't get any useful response back: [root@db1:~] #grep haproxy /var/log/audit/audit.log | audit2why -M haproxy Nothing to do I'm open to your thoughts and opinions! Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

3 3

Re: [CentOS] CentOS Digest, Vol 134, Issue 12
by magesh.kuppusamy＠gmail.com 12 Mar '16

12 Mar '16

Sent from BlackBerry Passport Original Message From: centos-request(a)centos.org Sent: Saturday, March 12, 2016 5:30 PM To: centos(a)centos.org Reply To: centos(a)centos.org Subject: CentOS Digest, Vol 134, Issue 12 Send CentOS mailing list submissions to centos(a)centos.or',g To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos or, via email, send a message with subject or body 'help' to centos-request(a)centos.org You can reach the person managing the list at centos-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS digest..." Today's Topics: 1. CentOS-announce Digest, Vol 133, Issue 5 (centos-announce-request(a)centos.org) 2. Re: Openshot 2.x (beta) on C7?? (Chris Beattie) 3. Re: Openshot 2.x (beta) on C7?? (Nux!) 4. CentOS 7 and display managers (m.roth(a)5-cent.us) 5. Re: CentOS 7 and display managers (Richard) 6. Re: CentOS 7 and display managers (m.roth(a)5-cent.us) 7. Re: CentOS 7 and display managers (Valeri Galtsev) 8. Re: CentOS 7 and display managers (m.roth(a)5-cent.us) 9. Re: CentOS 7 and display managers (Frank Cox) 10. Re: CentOS 7 and display managers (Scot P. Floess) 11. Centos and automatic update on server (Alessandro Baggi) 12. Re: Centos and automatic update on server (Alice Wonder) 13. Re: Centos and automatic update on server (m.roth(a)5-cent.us) 14. Re: Centos and automatic update on server (m.roth(a)5-cent.us) 15. Re: Centos and automatic update on server (David Nelson) ---------------------------------------------------------------------- Message: 1 Date: Fri, 11 Mar 2016 12:00:02 +0000 From: centos-announce-request(a)centos.org To: centos-announce(a)centos.org Subject: [CentOS] CentOS-announce Digest, Vol 133, Issue 5 Message-ID: <mailman.5.1457697602.15401.centos-announce(a)centos.org> Content-Type: text/plain; charset="us-ascii" Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0428 Moderate CentOS 6 libssh2 Security Update (Johnny Hughes) 2. CESA-2016:0428 Moderate CentOS 7 libssh2 Security Update (Johnny Hughes) 3. CESA-2016:C001 ipa and glusterfs Update (Johnny Hughes) 4. CESA-2016:0430 Important CentOS 7 xerces-c Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 10 Mar 2016 12:05:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0428 Moderate CentOS 6 libssh2 Security Update Message-ID: <20160310120504.GA20915(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0428 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0428.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3dd5f11872a5254b65711f88a89b4400c87329ed185af7d69d1d705f94abe13d libssh2-1.4.2-2.el6_7.1.i686.rpm c00dbe2421aada7e7eb2bc87e5160014aae7673e684011783dc34cfa9dd1fcae libssh2-devel-1.4.2-2.el6_7.1.i686.rpm 4be2256b4afe177140a3e87fdc0061d76b3f142ef7264aeb0f9d7a8b5b8fe3b7 libssh2-docs-1.4.2-2.el6_7.1.i686.rpm x86_64: 3dd5f11872a5254b65711f88a89b4400c87329ed185af7d69d1d705f94abe13d libssh2-1.4.2-2.el6_7.1.i686.rpm 729dc417c94e9efbe67f10fe848ce3571945f054bd87fec428179b58dd09bef6 libssh2-1.4.2-2.el6_7.1.x86_64.rpm c00dbe2421aada7e7eb2bc87e5160014aae7673e684011783dc34cfa9dd1fcae libssh2-devel-1.4.2-2.el6_7.1.i686.rpm 2004db099a3302057dbf799c09012d8d9bc1360ddf043ecef2e485f0b3b7fc86 libssh2-devel-1.4.2-2.el6_7.1.x86_64.rpm d2faf5949f869b6b295c3241707e3f40a74f7c1862da57daaaca77aabce535aa libssh2-docs-1.4.2-2.el6_7.1.x86_64.rpm Source: 042b1f294e214d514f5b16332956e168cc168c90a416bcfe4bbc1625636581fc libssh2-1.4.2-2.el6_7.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 10 Mar 2016 12:53:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0428 Moderate CentOS 7 libssh2 Security Update Message-ID: <20160310125335.GA39205(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0428 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0428.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3a25e00b04b27ba59fa17adb97791702dcccb56e130eb5f51651d6fe4fe42f89 libssh2-1.4.3-10.el7_2.1.i686.rpm 1e1f93e449e678597bfdd99bed306c9bb8d5b513ffcaea13d32f5b7434900300 libssh2-1.4.3-10.el7_2.1.x86_64.rpm e76bdc2e93bbb6c4ac8705d50eef1f114ee8b8674e8436063359ac5518b10191 libssh2-devel-1.4.3-10.el7_2.1.i686.rpm b176ee6feaf699eb9ed7466309ab9a9e8d6a7cccaf2e38a15093c484dbd22548 libssh2-devel-1.4.3-10.el7_2.1.x86_64.rpm f76b77eed1cc006c0947abd138084a5808d97b311ebf0e13fbf3504248698f4e libssh2-docs-1.4.3-10.el7_2.1.noarch.rpm Source: 2181b44f7d4636eb0920582a519d1adabae94f34cb49c531a5a2b31e2ad4cf57 libssh2-1.4.3-10.el7_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 10 Mar 2016 17:33:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:C001 ipa and glusterfs Update Message-ID: <20160310173315.GA44278(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and BugFix Advisory 2016:C001 Upstream details at : https://bugs.centos.org/view.php?id=10538 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 96963d839797a7601ef6a4922c94e7ef82b42fcb70533f9a31c43adceee2fb19 glusterfs-3.7.1-16.0.1.el7.centos.x86_64.rpm 0edd9669023af5881cd554a25f11af30c4ad1cec2ac515355a55541ca5afd444 glusterfs-api-3.7.1-16.0.1.el7.centos.x86_64.rpm 1ff4ab3dee2755555db663d522929c45949544d023f0af862e595234eb206b1e glusterfs-api-devel-3.7.1-16.0.1.el7.centos.x86_64.rpm 310cdbc4645b1dff02f7fd1ab15ca11f3d2b65a49e684a3015de264cc9055d2d glusterfs-cli-3.7.1-16.0.1.el7.centos.x86_64.rpm 7ebb8186125e4246b0ba612961872e3a6229351d15c6849c9b4d3d57587005f0 glusterfs-client-xlators-3.7.1-16.0.1.el7.centos.x86_64.rpm fb6f197ac33e79768892ec98548521cba9dbabbaf6dd577a1b9d09c461c344bc glusterfs-devel-3.7.1-16.0.1.el7.centos.x86_64.rpm c50c59c56d305efd2caaf49f9a03a934f60d6d60b9ede5fa6f9c7c41d4d0af3e glusterfs-fuse-3.7.1-16.0.1.el7.centos.x86_64.rpm 8eb112d7a006b9edcf0a6dce79abb6018909c8d9b6baa645f623f5cc4a38a837 glusterfs-libs-3.7.1-16.0.1.el7.centos.x86_64.rpm 959d24d812bb0679000f78d9e17b13476e424bb811b159eea8632d98dd2b46a3 glusterfs-rdma-3.7.1-16.0.1.el7.centos.x86_64.rpm be195e50fcbd3c190e90ecbe5690a664e01bf953ae29be709a4a6aba662736bb ipa-admintools-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 46df2769ffc4e7439ddd6a8a140b0afcb4f45204aa717dbe4fc027dd4c5dda71 ipa-client-4.2.0-15.0.1.el7.centos.6.x86_64.rpm c64d59f138beb4fb8a8a3a200c7696213eebf5c07ac50bb43a7faaadd1b5b9c0 ipa-python-4.2.0-15.0.1.el7.centos.6.x86_64.rpm c20a31a1e4ac386e50c55839ef25b4ad1b3c261d60981da35d7c0d6a7d773ee9 ipa-server-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 9accd7c6001f0f0c02b37eae8538e3045eaaf0f04008d5202fd4007368ba0a64 ipa-server-dns-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 5a5a91ff922ba863eef85723f589d3c940d2e8e529683ca811016688f7bcc95a ipa-server-trust-ad-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 2bc01ee09379a075724d311ff883fac2564ac27826a5b4ee0d4c7c09492a75c4 python-gluster-3.7.1-16.0.1.el7.centos.x86_64.rpm Source: e2ca01712e5f0c52b16a9397597ca15597bccf692881404f695f6cec8f97d925 glusterfs-3.7.1-16.0.1.el7.centos.src.rpm febdf5cf5065c93fb4ba44c02f3ac44bfe1a02b2ff5c489e3a4ec8556c99762f ipa-4.2.0-15.0.1.el7.centos.6.src.rpm NOTE: This rebuild was done to all the packages to have a DIST tag of .el7.centos. -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ Message: 4 Date: Thu, 10 Mar 2016 17:35:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0430 Important CentOS 7 xerces-c Security Update Message-ID: <20160310173516.GA44370(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0430 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0430.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0102baca3c47fdb3a16d421d42be3c2e1944ef95cf0bad1b42d01e8fda4d5f83 xerces-c-3.1.1-8.el7_2.i686.rpm 06c92060b15956706630e2d2fd84d72ad71db65151b4435828980d869a7d4f11 xerces-c-3.1.1-8.el7_2.x86_64.rpm 9009f3e814779b14a0e0d6a75fbe555804f2a031e70b15309fe6734205c1c4d2 xerces-c-devel-3.1.1-8.el7_2.i686.rpm dad423ae642a29be177bb4825f71ad3fa5d8db98c4ee658f12094e30c3a88d04 xerces-c-devel-3.1.1-8.el7_2.x86_64.rpm 7fbb6adaf2adb7f3dbf34bf3f2c9e9ea4da1bd61660d84856189583511eec395 xerces-c-doc-3.1.1-8.el7_2.noarch.rpm Source: 95181791907cd7b8bc12c5814cf8e8182aec7dd51faa88224c6f1ec3f4a2336c xerces-c-3.1.1-8.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 5 *********************************************** ------------------------------ Message: 2 Date: Fri, 11 Mar 2016 15:53:29 +0000 From: Chris Beattie <cbeattie(a)geninfo.com> To: 'CentOS mailing list' <centos(a)centos.org> Subject: Re: [CentOS] Openshot 2.x (beta) on C7?? Message-ID: <C56CB550F3B0CC428EFC662940A0C2E6A70634F8(a)EX10MS2.geninfo.com> Content-Type: text/plain; charset="us-ascii" On 3/11/2016 2:02 AM, Sorin Srbu wrote: >>> Looks like installing openshot 2.x on C7 isn't as trivial >> >> It is not trivial at all. The best way to handle this will be to find the >> required packages in Fedora and rebuild them. > > So what's the easy way? > > Switch to Ubuntu or something? 8-O Maybe Fedora, maybe Ubuntu? It's more time-consuming than hard to build a virtual machine these days, and it's not even that time-consuming. Is there a distro that already has what you want all packaged up? Run it in a VM. Take a snapshot first if you want to try something potentially system-breaking or that's going to spew files everywhere. On a single-user machine, the performance should be within a few percent of running on the bare metal. So, if you test drive some beta software and it doesn't perform well on a VM, it's probably not going to be much better running on a same-spec physical machine. NB: I administer several hundred virtual desktops, so I chugged rather than sipped the virtualization Kool-Aid. :-) -- -Chris ------------------------------ Message: 3 Date: Fri, 11 Mar 2016 16:07:24 +0000 (GMT) From: Nux! <nux(a)li.nux.ro> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Openshot 2.x (beta) on C7?? Message-ID: <1470053539.78961.1457712444140.JavaMail.zimbra(a)li.nux.ro> Content-Type: text/plain; charset=utf-8 Ubuntu in a docker? -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message ----- > From: "Chris Beattie" <cbeattie(a)geninfo.com> > To: "CentOS mailing list" <centos(a)centos.org> > Sent: Friday, 11 March, 2016 15:53:29 > Subject: Re: [CentOS] Openshot 2.x (beta) on C7?? > On 3/11/2016 2:02 AM, Sorin Srbu wrote: >>>> Looks like installing openshot 2.x on C7 isn't as trivial >>> >>> It is not trivial at all. The best way to handle this will be to find the >>> required packages in Fedora and rebuild them. >> >> So what's the easy way? >> >> Switch to Ubuntu or something? 8-O > > Maybe Fedora, maybe Ubuntu? It's more time-consuming than hard to build a > virtual machine these days, and it's not even that time-consuming. Is there a > distro that already has what you want all packaged up? Run it in a VM. Take a > snapshot first if you want to try something potentially system-breaking or > that's going to spew files everywhere. On a single-user machine, the > performance should be within a few percent of running on the bare metal. So, > if you test drive some beta software and it doesn't perform well on a VM, it's > probably not going to be much better running on a same-spec physical machine. > > NB: I administer several hundred virtual desktops, so I chugged rather than > sipped the virtualization Kool-Aid. :-) > > -- > -Chris > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos ------------------------------ Message: 4 Date: Fri, 11 Mar 2016 11:33:57 -0500 From: m.roth(a)5-cent.us To: "CentOS" <centos(a)centos.org> Subject: [CentOS] CentOS 7 and display managers Message-ID: <19814dd6ca3be28d95ab776fd52cbb58.squirrel(a)host290.hostmonster.com> Content-Type: text/plain;charset=utf-8 <rant> Dear gnome developers - could you *possibly* be more anti-Unix? I mean, thanks *so* much for trying to turn Linux into Windows or Macs.... </rant> So, now that I've gotten that out, the KDE display manager, on the login screen, easily lets you choose window managers. Gnome utterly refuses to consider such an idea. I've just yum groupinstall "KDE Plasma Workspaces" on one of my user's new system... and I cannot figure out, not in googling, and there's nothing vaguely obvious anywhere, how to change to KDE from gnome. Anyone got a pointer? mark, frustrated ------------------------------ Message: 5 Date: Fri, 11 Mar 2016 16:42:34 +0000 From: Richard <lists-centos(a)listmail.innovate.net> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] CentOS 7 and display managers Message-ID: <D655042E52FAB736EED4FCD8(a)ritz.innovate.net> Content-Type: text/plain; charset=us-ascii > Date: Friday, March 11, 2016 11:33:57 -0500 > From: m.roth(a)5-cent.us > > So, now that I've gotten that out, the KDE display manager, on the > login screen, easily lets you choose window managers. Gnome utterly > refuses to consider such an idea. > > I've just yum groupinstall "KDE Plasma Workspaces" on one of my > user's new system... and I cannot figure out, not in googling, and > there's nothing vaguely obvious anywhere, how to change to KDE from > gnome. > With gnome there is a "gear wheel" on the password entry page -- on the right below the password box, next to the "sign in" label. If I select it I can switch between gnome and mate. Does KDE show there as an option? ------------------------------ Message: 6 Date: Fri, 11 Mar 2016 11:46:20 -0500 From: m.roth(a)5-cent.us To: "CentOS mailing list" <centos(a)centos.org> Subject: Re: [CentOS] CentOS 7 and display managers Message-ID: <8f02f00958f1b8f56d9235b4bf7a0564.squirrel(a)host290.hostmonster.com> Content-Type: text/plain;charset=utf-8 Richard wrote: > > >> Date: Friday, March 11, 2016 11:33:57 -0500 >> From: m.roth(a)5-cent.us >> >> So, now that I've gotten that out, the KDE display manager, on the >> login screen, easily lets you choose window managers. Gnome utterly >> refuses to consider such an idea. >> >> I've just yum groupinstall "KDE Plasma Workspaces" on one of my >> user's new system... and I cannot figure out, not in googling, and >> there's nothing vaguely obvious anywhere, how to change to KDE from >> gnome. > > With gnome there is a "gear wheel" on the password entry page -- on > the right below the password box, next to the "sign in" label. If I > select it I can switch between gnome and mate. Does KDE show there as > an option? Fascinating. Not in ours. It displays our issue, and in the upper left, some icons that let you deal with sound, I think, connection, maybe, and I forget what else. mark ------------------------------ Message: 7 Date: Fri, 11 Mar 2016 10:52:12 -0600 (CST) From: "Valeri Galtsev" <galtsev(a)kicp.uchicago.edu> To: "CentOS mailing list" <centos(a)centos.org> Subject: Re: [CentOS] CentOS 7 and display managers Message-ID: <13369.128.135.52.6.1457715132.squirrel(a)cosmo.uchicago.edu> Content-Type: text/plain;charset=iso-8859-1 On Fri, March 11, 2016 10:46 am, m.roth(a)5-cent.us wrote: > Richard wrote: >> >> >>> Date: Friday, March 11, 2016 11:33:57 -0500 >>> From: m.roth(a)5-cent.us >>> >>> So, now that I've gotten that out, the KDE display manager, on the >>> login screen, easily lets you choose window managers. Gnome utterly >>> refuses to consider such an idea. >>> >>> I've just yum groupinstall "KDE Plasma Workspaces" on one of my >>> user's new system... and I cannot figure out, not in googling, and >>> there's nothing vaguely obvious anywhere, how to change to KDE from >>> gnome. >> >> With gnome there is a "gear wheel" on the password entry page -- on >> the right below the password box, next to the "sign in" label. If I >> select it I can switch between gnome and mate. Does KDE show there as >> an option? > > Fascinating. Not in ours. It displays our issue, and in the upper left, > some icons that let you deal with sound, I think, connection, maybe, and I > forget what else. In my case the gear which when clicked of gives you drop down choices of Desktop Environments (DE) installed appears only after I click on particular user. In other words, when user has password field, he also has a gear to click on to choose DE. I hope, this helps. Valeri > > mark > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ ------------------------------ Message: 8 Date: Fri, 11 Mar 2016 12:05:49 -0500 From: m.roth(a)5-cent.us To: "CentOS mailing list" <centos(a)centos.org> Subject: Re: [CentOS] CentOS 7 and display managers Message-ID: <3ddbfe316694094045c2b88aa5c3f7d9.squirrel(a)host290.hostmonster.com> Content-Type: text/plain;charset=utf-8 Valeri Galtsev wrote: > On Fri, March 11, 2016 10:46 am, m.roth(a)5-cent.us wrote: >> Richard wrote: >>>> Date: Friday, March 11, 2016 11:33:57 -0500 >>>> From: m.roth(a)5-cent.us >>>> >>>> So, now that I've gotten that out, the KDE display manager, on the >>>> login screen, easily lets you choose window managers. Gnome utterly >>>> refuses to consider such an idea. >>>> >>>> I've just yum groupinstall "KDE Plasma Workspaces" on one of my >>>> user's new system... and I cannot figure out, not in googling, and >>>> there's nothing vaguely obvious anywhere, how to change to KDE from >>>> gnome. >>> >>> With gnome there is a "gear wheel" on the password entry page -- on >>> the right below the password box, next to the "sign in" label. If I >>> select it I can switch between gnome and mate. Does KDE show there as >>> an option? >> >> Fascinating. Not in ours. It displays our issue, and in the upper left, >> some icons that let you deal with sound, I think, connection, maybe, and >> I forget what else. > > In my case the gear which when clicked of gives you drop down choices of > Desktop Environments (DE) installed appears only after I click on > particular user. In other words, when user has password field, he also has > a gear to click on to choose DE. > > I hope, this helps. Ah, that was it, it's not on the screen where you put in your username, it's on the password screen. On the other hand, the easier solution was to just create /etc/sysconfig/desktop, which did not exist, and add the two lines to it. Thanks, folks. mark ------------------------------ Message: 9 Date: Fri, 11 Mar 2016 11:16:38 -0600 From: Frank Cox <theatre(a)melvilletheatre.com> To: centos(a)centos.org Subject: Re: [CentOS] CentOS 7 and display managers Message-ID: <20160311111638.bc745cc6c6aa1e38a7d26885(a)melvilletheatre.com> Content-Type: text/plain; charset=US-ASCII On Fri, 11 Mar 2016 10:52:12 -0600 (CST) Valeri Galtsev wrote: > > Fascinating. Not in ours. It displays our issue, and in the upper left, > > some icons that let you deal with sound, I think, connection, maybe, and I > > forget what else. > > In my case the gear which when clicked of gives you drop down choices of > Desktop Environments (DE) installed appears only after I click on > particular user. In other words, when user has password field, he also has > a gear to click on to choose DE. With gdm the gear only shows up if you have more than one whatever.session file in /usr/share/xsessions. gnome-classic-session and gnome-session-xsession provides this file for gnome sessions, mate-session-manager provides it for mate, and I don't know what provides it for kde. lightdm is a lot more configurable than gdm, and it's easy to use that instead: systemctl disable gdm systemctl enable lightdm systemctl isolate graphical.target Then you can easily configure /etc/lightdm/lightdm-gtk-greeter.conf to do pretty much what you want it to do. I haven't yet figured out how to get rid of the blank photo man beside the password prompt, though. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com ------------------------------ Message: 10 Date: Fri, 11 Mar 2016 18:07:29 -0500 (EST) From: "Scot P. Floess" <sfloess(a)nc.rr.com> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] CentOS 7 and display managers Message-ID: <alpine.LRH.2.20.1603111805520.2021(a)admin.flossware.com> Content-Type: text/plain; charset=US-ASCII; format=flowed I think its in /usr/share/desktop DISPLAYMANAGER=KDE or something like that On Fri, 11 Mar 2016, m.roth(a)5-cent.us wrote: > <rant> > Dear gnome developers - could you *possibly* be more anti-Unix? I mean, > thanks *so* much for trying to turn Linux into Windows or Macs.... > </rant> > > So, now that I've gotten that out, the KDE display manager, on the login > screen, easily lets you choose window managers. Gnome utterly refuses to > consider such an idea. > > I've just yum groupinstall "KDE Plasma Workspaces" on one of my user's new > system... and I cannot figure out, not in googling, and there's nothing > vaguely obvious anywhere, how to change to KDE from gnome. > > Anyone got a pointer? > > mark, frustrated > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > Scot P. Floess RHCT (Certificate Number 605010084735240) Chief Architect FlossWare http://sourceforge.net/projects/flossware http://flossware.sourceforge.net https://github.com/organizations/FlossWare ------------------------------ Message: 11 Date: Fri, 11 Mar 2016 19:41:54 +0100 From: Alessandro Baggi <alessandro.baggi(a)gmail.com> To: CentOS mailing list <centos(a)centos.org> Subject: [CentOS] Centos and automatic update on server Message-ID: <CA+1R4jQzwzFomCO-sfWeFTsjXA3XNzq3cTKZYET0UY9q8Hjn7Q(a)mail.gmail.com> Content-Type: text/plain; charset=UTF-8 Hi list, I know that there are automatic update with yum-cron but never tried. In my experiences I never did automatic backup because if update was broken my installation will be broken and I wait some time before apply update. Today seems to be that automatic update are used more than before. What do you think about automatic update? It is a good practice on a server? What is your experiences? Thanks in advance. Alessandro ------------------------------ Message: 12 Date: Fri, 11 Mar 2016 10:47:26 -0800 From: Alice Wonder <alice(a)domblogger.net> To: centos(a)centos.org Subject: Re: [CentOS] Centos and automatic update on server Message-ID: <56E312BE.40606(a)domblogger.net> Content-Type: text/plain; charset=windows-1252; format=flowed On 03/11/2016 10:41 AM, Alessandro Baggi wrote: > Hi list, I know that there are automatic update with yum-cron but never > tried. > In my experiences I never did automatic backup because if update was broken > my installation will be broken and I wait some time before apply update. > Today seems to be that automatic update are used more than before. > What do you think about automatic update? It is a good practice on a > server? What is your experiences? > > Thanks in advance. > > Alessandro For me, yum-cron only downloads the updates and e-mails me to let me know they are ready. It does not actually apply them. To apply them, I ssh in and run the command "yum update" and they install fast w/o me needing to wait for the download. That lets me test everything that is critical and make sure it works after the update. ------------------------------ Message: 13 Date: Fri, 11 Mar 2016 13:55:12 -0500 From: m.roth(a)5-cent.us To: "CentOS mailing list" <centos(a)centos.org> Subject: Re: [CentOS] Centos and automatic update on server Message-ID: <f37b628d428c3e57349bbd146e31c2f9.squirrel(a)host290.hostmonster.com> Content-Type: text/plain;charset=utf-8 Alessandro Baggi wrote: > Hi list, I know that there are automatic update with yum-cron but never > tried. > In my experiences I never did automatic backup because if update was > broken > my installation will be broken and I wait some time before apply update. > Today seems to be that automatic update are used more than before. > What do you think about automatic update? It is a good practice on a > server? What is your experiences? > 1. Under *NO* *CIRCUMSTANCES* would I *ever* have that running on a production machine. That's what test boxes are for. 2. If it was my own machine at home, thanks, but I want to wake up, or come home, to a guaranteed working system. I'll update, so I can always undo. ------------------------------ Message: 14 Date: Fri, 11 Mar 2016 13:58:32 -0500 From: m.roth(a)5-cent.us To: "CentOS mailing list" <centos(a)centos.org> Subject: Re: [CentOS] Centos and automatic update on server Message-ID: <4a4e118ea85aafda74981ea49ac92734.squirrel(a)host290.hostmonster.com> Content-Type: text/plain;charset=utf-8 Sorry, <enter> accidentally got hit before I finished. m.roth(a)5-cent.us wrote: > Alessandro Baggi wrote: >> Hi list, I know that there are automatic update with yum-cron but never >> tried. >> In my experiences I never did automatic backup because if update was >> broken >> my installation will be broken and I wait some time before apply update. >> Today seems to be that automatic update are used more than before. >> What do you think about automatic update? It is a good practice on a >> server? What is your experiences? > > 1. Under *NO* *CIRCUMSTANCES* would I *ever* have that running on > a production machine. That's what test boxes are for. > 2. If it was my own machine at home, thanks, but I want to wake up, > or come home, to a guaranteed working system. I'll update, so > I can always undo. 3. Systems like backup servers, etc, sure. They're not critical. 4. We don't do it on users' systems unless we're *sure* that it won't break something. Finally, on systems where there is a concern that something might break, like video drivers, we put excludes in /etc/yum.conf, and disable them under controlled conditions (i.e., one of us is sitting there doing it.) mark ------------------------------ Message: 15 Date: Fri, 11 Mar 2016 11:22:17 -0800 From: David Nelson <david(a)davidnelson.net> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Centos and automatic update on server Message-ID: <ED7CF038-5FCC-4F1A-A956-1510729C28EC(a)davidnelson.net> Content-Type: text/plain; charset=us-ascii Personally I enable yum-cron on relatively simple configs without much that could break, for example a LAMP server. Especially when they are public-facing and thus have greater exposure to security threats. But I don't as often on things that are internal-only and/or have a more complex setup such as running software I had to compile from source. > On Mar 11, 2016, at 10:41, Alessandro Baggi <alessandro.baggi(a)gmail.com> wrote: > > Hi list, I know that there are automatic update with yum-cron but never > tried. > In my experiences I never did automatic backup because if update was broken > my installation will be broken and I wait some time before apply update. > Today seems to be that automatic update are used more than before. > What do you think about automatic update? It is a good practice on a > server? What is your experiences? > > Thanks in advance. > > Alessandro > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos ------------------------------ _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos End of CentOS Digest, Vol 134, Issue 12 ***************************************

1 0

CentOS 7 and display managers
by m.roth＠5-cent.us 11 Mar '16

11 Mar '16

<rant> Dear gnome developers - could you *possibly* be more anti-Unix? I mean, thanks *so* much for trying to turn Linux into Windows or Macs.... </rant> So, now that I've gotten that out, the KDE display manager, on the login screen, easily lets you choose window managers. Gnome utterly refuses to consider such an idea. I've just yum groupinstall "KDE Plasma Workspaces" on one of my user's new system... and I cannot figure out, not in googling, and there's nothing vaguely obvious anywhere, how to change to KDE from gnome. Anyone got a pointer? mark, frustrated

5 6

CentOS-announce Digest, Vol 133, Issue 5
by centos-announce-request＠centos.org 11 Mar '16

11 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0428 Moderate CentOS 6 libssh2 Security Update (Johnny Hughes) 2. CESA-2016:0428 Moderate CentOS 7 libssh2 Security Update (Johnny Hughes) 3. CESA-2016:C001 ipa and glusterfs Update (Johnny Hughes) 4. CESA-2016:0430 Important CentOS 7 xerces-c Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 10 Mar 2016 12:05:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0428 Moderate CentOS 6 libssh2 Security Update Message-ID: <20160310120504.GA20915(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0428 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0428.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3dd5f11872a5254b65711f88a89b4400c87329ed185af7d69d1d705f94abe13d libssh2-1.4.2-2.el6_7.1.i686.rpm c00dbe2421aada7e7eb2bc87e5160014aae7673e684011783dc34cfa9dd1fcae libssh2-devel-1.4.2-2.el6_7.1.i686.rpm 4be2256b4afe177140a3e87fdc0061d76b3f142ef7264aeb0f9d7a8b5b8fe3b7 libssh2-docs-1.4.2-2.el6_7.1.i686.rpm x86_64: 3dd5f11872a5254b65711f88a89b4400c87329ed185af7d69d1d705f94abe13d libssh2-1.4.2-2.el6_7.1.i686.rpm 729dc417c94e9efbe67f10fe848ce3571945f054bd87fec428179b58dd09bef6 libssh2-1.4.2-2.el6_7.1.x86_64.rpm c00dbe2421aada7e7eb2bc87e5160014aae7673e684011783dc34cfa9dd1fcae libssh2-devel-1.4.2-2.el6_7.1.i686.rpm 2004db099a3302057dbf799c09012d8d9bc1360ddf043ecef2e485f0b3b7fc86 libssh2-devel-1.4.2-2.el6_7.1.x86_64.rpm d2faf5949f869b6b295c3241707e3f40a74f7c1862da57daaaca77aabce535aa libssh2-docs-1.4.2-2.el6_7.1.x86_64.rpm Source: 042b1f294e214d514f5b16332956e168cc168c90a416bcfe4bbc1625636581fc libssh2-1.4.2-2.el6_7.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 10 Mar 2016 12:53:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0428 Moderate CentOS 7 libssh2 Security Update Message-ID: <20160310125335.GA39205(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0428 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0428.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3a25e00b04b27ba59fa17adb97791702dcccb56e130eb5f51651d6fe4fe42f89 libssh2-1.4.3-10.el7_2.1.i686.rpm 1e1f93e449e678597bfdd99bed306c9bb8d5b513ffcaea13d32f5b7434900300 libssh2-1.4.3-10.el7_2.1.x86_64.rpm e76bdc2e93bbb6c4ac8705d50eef1f114ee8b8674e8436063359ac5518b10191 libssh2-devel-1.4.3-10.el7_2.1.i686.rpm b176ee6feaf699eb9ed7466309ab9a9e8d6a7cccaf2e38a15093c484dbd22548 libssh2-devel-1.4.3-10.el7_2.1.x86_64.rpm f76b77eed1cc006c0947abd138084a5808d97b311ebf0e13fbf3504248698f4e libssh2-docs-1.4.3-10.el7_2.1.noarch.rpm Source: 2181b44f7d4636eb0920582a519d1adabae94f34cb49c531a5a2b31e2ad4cf57 libssh2-1.4.3-10.el7_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 10 Mar 2016 17:33:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:C001 ipa and glusterfs Update Message-ID: <20160310173315.GA44278(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and BugFix Advisory 2016:C001 Upstream details at : https://bugs.centos.org/view.php?id=10538 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 96963d839797a7601ef6a4922c94e7ef82b42fcb70533f9a31c43adceee2fb19 glusterfs-3.7.1-16.0.1.el7.centos.x86_64.rpm 0edd9669023af5881cd554a25f11af30c4ad1cec2ac515355a55541ca5afd444 glusterfs-api-3.7.1-16.0.1.el7.centos.x86_64.rpm 1ff4ab3dee2755555db663d522929c45949544d023f0af862e595234eb206b1e glusterfs-api-devel-3.7.1-16.0.1.el7.centos.x86_64.rpm 310cdbc4645b1dff02f7fd1ab15ca11f3d2b65a49e684a3015de264cc9055d2d glusterfs-cli-3.7.1-16.0.1.el7.centos.x86_64.rpm 7ebb8186125e4246b0ba612961872e3a6229351d15c6849c9b4d3d57587005f0 glusterfs-client-xlators-3.7.1-16.0.1.el7.centos.x86_64.rpm fb6f197ac33e79768892ec98548521cba9dbabbaf6dd577a1b9d09c461c344bc glusterfs-devel-3.7.1-16.0.1.el7.centos.x86_64.rpm c50c59c56d305efd2caaf49f9a03a934f60d6d60b9ede5fa6f9c7c41d4d0af3e glusterfs-fuse-3.7.1-16.0.1.el7.centos.x86_64.rpm 8eb112d7a006b9edcf0a6dce79abb6018909c8d9b6baa645f623f5cc4a38a837 glusterfs-libs-3.7.1-16.0.1.el7.centos.x86_64.rpm 959d24d812bb0679000f78d9e17b13476e424bb811b159eea8632d98dd2b46a3 glusterfs-rdma-3.7.1-16.0.1.el7.centos.x86_64.rpm be195e50fcbd3c190e90ecbe5690a664e01bf953ae29be709a4a6aba662736bb ipa-admintools-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 46df2769ffc4e7439ddd6a8a140b0afcb4f45204aa717dbe4fc027dd4c5dda71 ipa-client-4.2.0-15.0.1.el7.centos.6.x86_64.rpm c64d59f138beb4fb8a8a3a200c7696213eebf5c07ac50bb43a7faaadd1b5b9c0 ipa-python-4.2.0-15.0.1.el7.centos.6.x86_64.rpm c20a31a1e4ac386e50c55839ef25b4ad1b3c261d60981da35d7c0d6a7d773ee9 ipa-server-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 9accd7c6001f0f0c02b37eae8538e3045eaaf0f04008d5202fd4007368ba0a64 ipa-server-dns-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 5a5a91ff922ba863eef85723f589d3c940d2e8e529683ca811016688f7bcc95a ipa-server-trust-ad-4.2.0-15.0.1.el7.centos.6.x86_64.rpm 2bc01ee09379a075724d311ff883fac2564ac27826a5b4ee0d4c7c09492a75c4 python-gluster-3.7.1-16.0.1.el7.centos.x86_64.rpm Source: e2ca01712e5f0c52b16a9397597ca15597bccf692881404f695f6cec8f97d925 glusterfs-3.7.1-16.0.1.el7.centos.src.rpm febdf5cf5065c93fb4ba44c02f3ac44bfe1a02b2ff5c489e3a4ec8556c99762f ipa-4.2.0-15.0.1.el7.centos.6.src.rpm NOTE: This rebuild was done to all the packages to have a DIST tag of .el7.centos. -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ Message: 4 Date: Thu, 10 Mar 2016 17:35:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0430 Important CentOS 7 xerces-c Security Update Message-ID: <20160310173516.GA44370(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0430 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0430.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0102baca3c47fdb3a16d421d42be3c2e1944ef95cf0bad1b42d01e8fda4d5f83 xerces-c-3.1.1-8.el7_2.i686.rpm 06c92060b15956706630e2d2fd84d72ad71db65151b4435828980d869a7d4f11 xerces-c-3.1.1-8.el7_2.x86_64.rpm 9009f3e814779b14a0e0d6a75fbe555804f2a031e70b15309fe6734205c1c4d2 xerces-c-devel-3.1.1-8.el7_2.i686.rpm dad423ae642a29be177bb4825f71ad3fa5d8db98c4ee658f12094e30c3a88d04 xerces-c-devel-3.1.1-8.el7_2.x86_64.rpm 7fbb6adaf2adb7f3dbf34bf3f2c9e9ea4da1bd61660d84856189583511eec395 xerces-c-doc-3.1.1-8.el7_2.noarch.rpm Source: 95181791907cd7b8bc12c5814cf8e8182aec7dd51faa88224c6f1ec3f4a2336c xerces-c-3.1.1-8.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 5 ***********************************************

1 0

C7 and swap
by Alessandro Baggi 10 Mar '16

10 Mar '16

Hi list, today I've noticed a strange behaviour during system startup. This is a workstation. During mounting swap, system waits at least 90 seconds before continue. When system is loaded swap seems to be not mounted. Running free -h , it reports for swap 0 total and 0 for other values. Always during booting process, when it waits for swap mounting, it reports the uuid of swap partion. This uuid is on fstab but it is not listed under /dev/disk/by-uuid. Changing fstab with /dev/device all works good. Why I can't find swap partition in /dev/disk/by-uuid? Thanks in advance. Alessandro.

1 0

CentOS-announce Digest, Vol 133, Issue 4
by centos-announce-request＠centos.org 10 Mar '16

10 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0373 Critical CentOS 6 firefox Security Update (Johnny Hughes) 2. CESA-2016:0373 Critical CentOS 5 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 9 Mar 2016 13:15:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0373 Critical CentOS 6 firefox Security Update Message-ID: <20160309131556.GA46729(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0373 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0373.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 39bee3e008d34bc7ed43045677e10a0b8bd0e934e5b3fe36428f931bf7ccf326 firefox-38.7.0-1.el6.centos.i686.rpm x86_64: 39bee3e008d34bc7ed43045677e10a0b8bd0e934e5b3fe36428f931bf7ccf326 firefox-38.7.0-1.el6.centos.i686.rpm 699e9b67280fed2d313b15584af0605f33377ded9088cc79763f78b15e3c3416 firefox-38.7.0-1.el6.centos.x86_64.rpm Source: 3d9e390243c6628a19a5eb84916545015d7aacb65a16ef2ba46f4ff9739b20d8 firefox-38.7.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 9 Mar 2016 13:26:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0373 Critical CentOS 5 firefox Security Update Message-ID: <20160309132630.GA1164(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0373 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0373.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 88132a506f10b42a599112151d6df0e1100b75816c5eac43055c2b17f4b7d68b firefox-38.7.0-1.el5.centos.i386.rpm x86_64: 88132a506f10b42a599112151d6df0e1100b75816c5eac43055c2b17f4b7d68b firefox-38.7.0-1.el5.centos.i386.rpm 7d52943353a6abe78adbdf614c3b25682989e3990e42144c962d757fa396caa5 firefox-38.7.0-1.el5.centos.x86_64.rpm Source: b1a1ece5ae0897ab851acf87a9f51eaa513246e1ea614e0ff65313ef1fb34ad5 firefox-38.7.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 4 ***********************************************

1 0

how to force outbound ssh through one network card
by Gregory P. Ennis 10 Mar '16

10 Mar '16

Everyone, I am putting together a new gateway machine that controls all of the traffic in and out of one of our offices. We we have a machine with CentOS Linux release 7.2.1511 (Core) with 3.10.0-327.10.1.el7.x86_64 kernel which is now equipped with three nic cards. We decided to change our internet providers, but unfortunately Comcast would not allow us to drop there service without some penalties so management decided to keep the line and not put up a fight. Of the three nic cards, one card serves the local network inside the office, and the other two will connect to the two different internet lines. This has resulted in providing us with two outbound internet lines that we can use. I decided to do some experimenting to see if I could use iptables or other venues to use both outside internet addresses to augment our bandwidth. Can anyone refer me to any tutorial or give me suggestions as to how to route outbound ssh traffic that is generated from one of the machines inside the network through only one of the specified nic cards on the gateway. I would like to see if I can utilize this extra band width by splitting ssh traffic and html traffic. Essentially, I would like to force outbound ssh traffic on only one of the outside nic cards. Any ideas? Greg Ennis

7 7

Re: [CentOS] [OT] security bug with firefox and add-on
by Richard 10 Mar '16

10 Mar '16

> Date: Wednesday, March 09, 2016 17:30:57 -0600 > From: g <geleem(a)bellsouth.net> > > On 03/09/16 14:28, Ned Slider wrote: >> On 09/03/16 19:11, g wrote: > <<<>>> > >> Does it affect the latest version of Firefox just released: >> >> firefox-38.7.0-1.el6_7 >> >> Is the bug in Firefox or the add-on. >> >> If the bug is in Firefox, then I would report it to Red Hat. >> CentOS will not fix bugs, security or otherwise, as the policy is >> to rebuild RHEL, bugs and all. >> > as it now stands with firefox 38.7.0, bug is still there. > > because of what is happening, it _is_ the add-on. > > checked mozilla site to see who author is. he is a mozilla program > developer. which does not surprise me. > > after giving much thought to bug and what could result, i am sending > notice to RHEL, mozilla and CVE. > > if bug is not fixed within a very few days, i just might inform some > of the computer news people and just for fun of it, Homeland > Security. > > why Homeland Security? simple, there are most likely a lot of .gov > officials using firefox on their oos computers. and we all know how > easy it is to get into oos. ((GBWG)) The CERT policy for public disclosure is 45 days after the initial report (to the vendor). <http://www.cert.org/vulnerability-analysis/vul-disclosure.cfm> Make certain you report the issue to the right person. In the case of a FF add-on, the author and probably Mozilla. RH doesn't distribute FF add-ons so they aren't primary on something like this, especially if the bug isn't OS/RHEL specific. You might want to check to see if it's still an issue with the current FF (45), which can be gotten from their release site: <http://archive.mozilla.org/pub/firefox/releases/> The linux packages can be unpacked and run from user space, so you don't impact your your system installed release.

1 0

[OT] security bug with firefox and add-on
by g 09 Mar '16

09 Mar '16

greets. tho this is off-topic for this list, it is still a bug that centos users along with all users of firefox should be aware of. due to nature of bug and what is involved, i believe it safer to not go into great details in an open list. never know which 'hats' are subscribed to support list. :-D so my question is just who should i inform of problem? mozilla.org? author of add-on? cve.mitre.org? all 3? tia. -- peace out. If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! -+- in a world with out fences, who needs gates. CentOS GNU/Linux 6.7 tc,hago. g .

3 4

32 bit programs and libraries on a 64 bit architecture
by g 09 Mar '16

09 Mar '16

greetings. today i attempted to update update for the nss-util. i selected the x86_64, clicked apply, error message popped up showing a conflict because the i686 was also installed. opened yumex to see what i686 was installed and found a bunch of i686. because system is a dual core 64 bit, i decided to remove all i686 packages, programs first, then lib files. during reboot, thought hit that there may be some i686 packages that should have been left in. maybe for wine. this is same system that due to fresh install problems, i installed via 64 bit live dvd. in "closing the gate after the horses have left the corral", i am asking is what i did good or bad. tia. -- peace out. If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! -+- in a world with out fences, who needs gates. CentOS GNU/Linux 6.7 tc,hago. g .

3 4

CentOS-announce Digest, Vol 133, Issue 3
by centos-announce-request＠centos.org 09 Mar '16

09 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0346 Important CentOS 7 postgresql Security Update (Johnny Hughes) 2. CESA-2016:0370 Critical CentOS 7 nss-util Security Update (Johnny Hughes) 3. CESA-2016:0372 Important CentOS 7 openssl098e Security Update (Johnny Hughes) 4. CESA-2016:0372 Important CentOS 6 openssl098e Security Update (Johnny Hughes) 5. CESA-2016:0370 Critical CentOS 6 nss-util Security Update (Johnny Hughes) 6. CESA-2016:0371 Critical CentOS 5 nss Security Update (Johnny Hughes) 7. CESA-2016:0373 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 2 Mar 2016 18:06:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0346 Important CentOS 7 postgresql Security Update Message-ID: <20160302180635.GA4084(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0346 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0346.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5c458f42b2ef11fcc4b62d7f69c7dc1e033957c471387d65a6d49c0d7df6f128 postgresql-9.2.15-1.el7_2.i686.rpm 2434cedad6cd2fd921d499c57864e69e8db4ec7166d0f390c055074d50ddd2a7 postgresql-9.2.15-1.el7_2.x86_64.rpm f7484385c8df8fa144de7fea6e3fb64f657a3325608e3d25dd5d6e68f32fa7ea postgresql-contrib-9.2.15-1.el7_2.x86_64.rpm 1eeabfd3110ad851ad61b68271e2594d2807241617e395427a83f89f1e662d6f postgresql-devel-9.2.15-1.el7_2.i686.rpm 62790ddfbb18ad771af372509b674b62284d8d47c390dc397269f71c9fef8df3 postgresql-devel-9.2.15-1.el7_2.x86_64.rpm 0e787b99e9fddde0900c8dbf2014025ec8ce1c578c684e5ce51c532b52f1abb4 postgresql-docs-9.2.15-1.el7_2.x86_64.rpm 51c0e1cc0983e2139d11ea212f23f1ce60b6ed25a071743f360515688898aaa5 postgresql-libs-9.2.15-1.el7_2.i686.rpm 53f4bed4816944cdfd1b896ad6933c799f3429b221d2146d91d462e5c608fae3 postgresql-libs-9.2.15-1.el7_2.x86_64.rpm 2c9e04943c318f89e8c94d8104e01cbeb1c9dcbf868dee434c3e65505384cb03 postgresql-plperl-9.2.15-1.el7_2.x86_64.rpm 36021f26db1f2addf89e15707348cc611b34f0b9fe385df77e1f50994c978fa6 postgresql-plpython-9.2.15-1.el7_2.x86_64.rpm a9d8728e1b5a7c34ce94b1c339c3017691da43458afcec07f6be207c96877795 postgresql-pltcl-9.2.15-1.el7_2.x86_64.rpm 5be958fcca92e4b44dcfcae4f50bb16c05386c06b31ddcd36b5cf6c4ffd01af4 postgresql-server-9.2.15-1.el7_2.x86_64.rpm 8afce69552067b932036be540522b0db2d4c245cedb1fad8eb4762b02586a83d postgresql-test-9.2.15-1.el7_2.x86_64.rpm 1e7aa4a53e7cee01fdd305e69bc2e7927f85d97682dd925b3adb0b12e75a9872 postgresql-upgrade-9.2.15-1.el7_2.x86_64.rpm Source: 2e7e14805236939e21dd3bb2b293c205206c7cb76c0beb42317a4073aeb9aab0 postgresql-9.2.15-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 9 Mar 2016 05:48:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0370 Critical CentOS 7 nss-util Security Update Message-ID: <20160309054805.GA38934(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0370 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0370.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0f0313279ff6dad0387f6505d1cda9096841a183240176b72be161cd79693deb nss-util-3.19.1-9.el7_2.i686.rpm 5f0014c0514627b0532cf9d1d6eb1fcc0bdd648c9f93f8582b3b24fd292316df nss-util-3.19.1-9.el7_2.x86_64.rpm f213e755dcf945a2604d44f798ebc8625905bc75c80e57cc1acf8d0c9548169c nss-util-devel-3.19.1-9.el7_2.i686.rpm 444a889281c6fd4d06e15f401cead9199490410bfb11b9718b9945ba1f1c55fc nss-util-devel-3.19.1-9.el7_2.x86_64.rpm Source: 9d23e31396ba2ab09ce6033abfddddfd7821adbd04d8130c24893c30c605dd49 nss-util-3.19.1-9.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 9 Mar 2016 05:48:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0372 Important CentOS 7 openssl098e Security Update Message-ID: <20160309054823.GA39013(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0372 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0372.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bda50ad8086ae3f1265eab271d0523c86cde3e9d1ef1fccbd4cce1abf13636e8 openssl098e-0.9.8e-29.el7.centos.3.i686.rpm 65f73db4d80916a1315f5d6b79cc6dcfbed20ccf84a3a7ab05600b287ab25fcf openssl098e-0.9.8e-29.el7.centos.3.x86_64.rpm Source: c26eecaec1161dca9a32db13cd26c70f811bdb3050b30e02b4ea483d31c67d44 openssl098e-0.9.8e-29.el7.centos.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 9 Mar 2016 05:32:33 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0372 Important CentOS 6 openssl098e Security Update Message-ID: <20160309053233.GA21134(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0372 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0372.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e87cdaa0c6d6528e4395026ed75dd8c06d1d9cd20cbfc2b88b0d6046482aaa82 openssl098e-0.9.8e-20.el6.centos.1.i686.rpm x86_64: e87cdaa0c6d6528e4395026ed75dd8c06d1d9cd20cbfc2b88b0d6046482aaa82 openssl098e-0.9.8e-20.el6.centos.1.i686.rpm 5c8881e272b9b1415d175bc1f4eecce80ea15b4090aac9725dfe67c19db53f70 openssl098e-0.9.8e-20.el6.centos.1.x86_64.rpm Source: 7fea74c0623b0c425d9ff03e2412731c99a75e86eaa87d67a66b9903bb4aca2b openssl098e-0.9.8e-20.el6.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 9 Mar 2016 05:32:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0370 Critical CentOS 6 nss-util Security Update Message-ID: <20160309053253.GA21221(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0370 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0370.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 70808df51eaef656a3ec37de84e8b1d72f88a2e1eefd2872f7daec139c90002a nss-util-3.19.1-5.el6_7.i686.rpm 9692ccf29dd88533a76cd64f8bfb894c2de09d3cc9752652c9d8700fb1fdfd79 nss-util-devel-3.19.1-5.el6_7.i686.rpm x86_64: 70808df51eaef656a3ec37de84e8b1d72f88a2e1eefd2872f7daec139c90002a nss-util-3.19.1-5.el6_7.i686.rpm 0647d08428e5ed60e2b35b2d113b90bcec3c617c61c2a7cd537e8136da27cb37 nss-util-3.19.1-5.el6_7.x86_64.rpm 9692ccf29dd88533a76cd64f8bfb894c2de09d3cc9752652c9d8700fb1fdfd79 nss-util-devel-3.19.1-5.el6_7.i686.rpm d068849494bed51503a5e487f3d08bb4afef71ffc0b7c80ccb16dfe91f36fd4b nss-util-devel-3.19.1-5.el6_7.x86_64.rpm Source: cf86d7158cd5e3fa1af15b40458728bf7507cb44089b0428492d5ac11cafa423 nss-util-3.19.1-5.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Wed, 9 Mar 2016 05:42:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0371 Critical CentOS 5 nss Security Update Message-ID: <20160309054252.GA12570(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0371 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0371.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d162fe532225c87dc2ce7ff1f3e6fc0026e6a58ed46fd908a658a8c7afda166f nss-3.19.1-4.el5_11.i386.rpm 45520755d87a52d3c8161640d6c4f018a0a5a80d873b51aaf461446604f5081f nss-devel-3.19.1-4.el5_11.i386.rpm a2a687f0bf9d3d630c22a596f1756d06bdf66fb459876be2707d73fe9949966a nss-pkcs11-devel-3.19.1-4.el5_11.i386.rpm 329ed95e37bf149c511f8452d862733bc9f5b49270eb948efe01ea2b808e3408 nss-tools-3.19.1-4.el5_11.i386.rpm x86_64: d162fe532225c87dc2ce7ff1f3e6fc0026e6a58ed46fd908a658a8c7afda166f nss-3.19.1-4.el5_11.i386.rpm 8cfa4bfb39f506be043c369163c85566264eb91646c99f78cc6e9a94a0c2898d nss-3.19.1-4.el5_11.x86_64.rpm 45520755d87a52d3c8161640d6c4f018a0a5a80d873b51aaf461446604f5081f nss-devel-3.19.1-4.el5_11.i386.rpm cfccce180e30ca0caca948726f5b3924a623af13eac15d721d884cd7ea904421 nss-devel-3.19.1-4.el5_11.x86_64.rpm a2a687f0bf9d3d630c22a596f1756d06bdf66fb459876be2707d73fe9949966a nss-pkcs11-devel-3.19.1-4.el5_11.i386.rpm 9607fa0d624d4bcfd1f5704dac66cd98ddd0953fce82ecde9545892cb8af30b2 nss-pkcs11-devel-3.19.1-4.el5_11.x86_64.rpm 0bee51b745b3ec978a25681f617645c06bb906e7e5af848f1cc2db92f652d007 nss-tools-3.19.1-4.el5_11.x86_64.rpm Source: 08c533786c410cc3c32bf2c72430b281073fe91b002197fe5f9b1ec9f8d0a257 nss-3.19.1-4.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 7 Date: Wed, 9 Mar 2016 06:42:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0373 Critical CentOS 7 firefox Security Update Message-ID: <20160309064215.GA40336(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0373 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0373.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 453d22536d760a1eb33009f8c3972459dbf91d29dd42d6d573f1b7897a15b2f0 firefox-38.7.0-1.el7.centos.i686.rpm 42805c6f4469938b7dd190f884cfff05e9036b3f3222c0a175da07ad05f740c4 firefox-38.7.0-1.el7.centos.x86_64.rpm Source: 8c19c6462ba1d76392018c709fdc9e70794fcb2de1aea11fb4e96c918daa275b firefox-38.7.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 3 ***********************************************

1 0

6.7 netinstall fails at insert cd to continue
by g 08 Mar '16

08 Mar '16

system: hp compact dc7800 dual 64 bit cd/dvd: oem sata -- recognized as atapi dvd c dh48c2s sata5 cd/dvd: lg gp60ns50 usb dvd -- recognized as hl-dt-st dvdram gp60ns50 attempting install using centos 6.7 x86_64 netinstall. after 'installation method' with 'local cd/dvd' selected, famous 'disc not found' shows. attempt eject cd with eject button fails. ejecting disc drawer with paper clip and closing drawer, selecting 'ok' fails again with 'disc not found'. iirc, there is a way to correct, but do not recall procedure. advice greatly appreciated. -- peace out. -- If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! -- in a world with out fences, who needs gates. -- CentOS GNU/Linux 6.6 tc,hago. g .

8 21

power management / tuned following external power source
by Karanbir Singh 08 Mar '16

08 Mar '16

hi, twice in the last week I've been caught out where the laptop was running tuned with 'throughput-performance' profile on the work table, and I walked away, carried on working - and had the battery run flat in just over an hour. Compare this with tuned running the 'powersave' profile - will usually take the battery through to 3hrs+ - and if i just totally turn down the cpu's in the powersave mode, I can get 5 hrs+ on the x1 carbon gen2 laptop I've got. So what I am wondering is if there is an easy way to have the tuned-adm reset profiles based on external power source. If I'm at the work table and plugged in, run with throughput-performance mode, and if the external power is disconnected, run in powersave mode ? I've had, admittedly a brief, look and found nothing obvious. Has anyone else run into this before ? Regards -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

2 1

Can anyone compile mtr source RPM on CentOS 6.7?
by Digimer 08 Mar '16

08 Mar '16

Hi all, I was trying to rebuild mtr (http://vault.centos.org/6.7/os/Source/SPackages/mtr-0.75-5.el6.src.rpm) and I keep getting: ==== Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.gu9Ds0 + umask 022 + cd /root/rpmbuild/BUILD + '[' /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64 '!=' / ']' + rm -rf /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64 ++ dirname /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64 + mkdir -p /root/rpmbuild/BUILDROOT + mkdir /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64 + cd mtr-0.75 + LANG=C + export LANG + unset DISPLAY + rm -rf /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64 + mkdir -p /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64//usr/bin + mkdir -p /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64//usr/sbin + mkdir -p /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64//usr/share/pixmaps + mkdir -p /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64//usr/share/man/man8 + install -m 0755 mtr /root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64//usr/sbin/mtr + make DESTDIR=/root/rpmbuild/BUILDROOT/mtr-0.75-5.el6.x86_64 install make: *** No rule to make target `install'. Stop. error: Bad exit status from /var/tmp/rpm-tmp.gu9Ds0 (%install) ==== I fully admit to not knowing much about Makefiles, so maybe I am missing something obvious. The Makefile is pretty sparce: ==== # # This is an attempt on simplifying the compilation of mtr to a simple "make". # firstrule: ./configure $(MAKE) clean: rm -f *.o *~ core distclean: clean rm -f mtr config.cache config.status config.log \ stamp-h stamp-h[0-9]* TAGS ID ==== Obviously the mtr package built for CentOS itself, so I have to assume I am doing something dumb. Thanks for any insight/tips! -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education?

4 16

no gnome-applets in C7.2
by ken 08 Mar '16

08 Mar '16

Weird. There seems to be quite a bit of software missing from C7.2, gnome-applets being one of them. Or has it been moved or renamed or otherwise obscured? tia

4 5

centos7+lightdm : no /almost no login screen
by johan.vermeulen7＠telenet.be 08 Mar '16

08 Mar '16

Hello All, slightly unrelated because lightdm = epel, I know. Still, maybe someone had the same issue. When using the last two kernels, some machines give me trouble when installing Centos7 and Mate One machine is basically an Asrock board, on this I get no login screen: description: Motherboard product: AD2550B-ITX vendor: ASRock *-display description: VGA compatible controller product: Atom Processor D2xxx/N2xxx Integrated Graphics Controller vendor: Intel Corporation physical id: 2 bus info: pci@0000:00:02.0 version: 0b width: 32 bits clock: 33MHz Dell Optiplex 960 workstations: scrambled login screen description: Desktop Computer product: OptiPlex 960 vendor: Dell Inc. width: 64 bits *- display:0 description: VGA compatible controller product: 4 Series Chipset Integrated Graphics Controller vendor: Intel Corporation physical id: 2 bus info: pci@0000:00:02.0 version: 03 width: 64 bits up until kernel 3.10.0-123.el7.x86_64 I had nog issues. Greetings, J. -- Johan Vermeulen IT-medewerker

2 1

SOT: Can Fedora be installed from Live images?
by reynierpm＠gmail.com 08 Mar '16

08 Mar '16

Maybe world has changed I am not aware and I am still the old fashion way where I download a DVD image and install from there like in CentOS but has Fedora changed something? I mean I am trying to find the proper image for download it put on USB flash memory and install on my PC but all that I can find are "live images" so what happen here? Did I miss something? Can any put me on the right path? Thx in advance *Reynier Perez Mira* Phone: (786) 5807572 EMail: reynierpm(a)gmail.com

5 4

Monthly spins torrents ??
by Alice Wonder 08 Mar '16

08 Mar '16

http://buildlogs.centos.org/monthly/7/ A very useful resource. Updates takes less time after install. Just curious if there are torrents for them? I could commit to running a single seed for the x86_64 "everything" ISO. I dd them onto USB sticks for people (personally recommend the 16GB Mushkin Atom - even when installing from USB2 the media verification is faster than any other USB thumb drive I've tried) so I download latest fairly often anyway, may as well share the torrent if there is one.

2 1

Fwd: dm-cache not caching data on 3.18.21-17.el6.x86_64
by Thanos Makatos 08 Mar '16

08 Mar '16

(I've already sent this to centos-devel almost a week ago but didn't get any reply.) I'm evaluating dm-cache on kernels 3.18.21-17.el6.x86_64 (Xen 4) and 2.6.32-573.7.1.el6.x86_64 (KVM). The test I do is a simple sequential read using dd(1). read_promote_adjustment and sequential_threshold have been set to 1 and 0, respectively. For the 2.6.32 kernel, all seems to be working fine, "#usedcacheblocks" correctly reflects the number of cached blocks based on what I'm reading with dd(1) performance is pretty much native SSD performance. However, the same test on the 3.18.21-17.el6.x86_64 kernel results in "#usedcacheblocks" being stuck to "2" and no performance improvement is observed. Any ideas what could be wrong? How can I further debug this? -- Thanos Makatos

1 0

IPv6 on CentOS-6 - IPTables
by James B. Byrne 08 Mar '16

08 Mar '16

It appears likely that within the next two quarters we will be moving off of our IPv4 class C's and onto a single IPv6 /40 for our sites. We have a fairly complex IPTables setup which handles our gateways and internal hosts. My question is just how much effort is involved in moving these rules from IPv4 to IPv6? Are there elements in one that are not available in the other? Are there any fundamental incompatibilites? Does anyone have a good reference to a case history of moving from one to the other? Regards, -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS 7, ctrl-alt-bksp
by m.roth＠5-cent.us 08 Mar '16

08 Mar '16

I've been googling, and looking at the CentOS wiki - which, btw, when I do a full search on "control-alt-backspace", gives me three pages... in Japanese, I think. How do I re-enable userspace restart X? mark

4 6

Strange behaviour of iptables in centos 7
by anax 08 Mar '16

08 Mar '16

Hi strange behaviour of iptables on a centos 7.0 machine: The following rule is in the iptables of said machine: [root@myserver ~]# iptables -L -v -n --line-numbers |grep 175\. 9 9 456 DROP all -- * * 175.44.0.0/16 0.0.0.0/0 [root@myserver ~]# The corresponding enty in /etc/sysconfig/iptables looks like: [root@myserver ~]# grep 175 /etc/sysconfig/iptables -A INPUT -s 175.44.0.0/16 -j DROP [root@myserver ~]# The rule must be there since ages, because it has number 9 out of 76 similar rules. Today, on the same machine (I rechecked it to make sure not to confound machines), I see the following extract of the ftplog: <snip> 175.44.4.127 2915 175.44.26.128 2021 175.44.26.138 1322 175.44.6.186 1290 175.44.24.88 1219 175.44.4.199 1212 </snip> saying that from this IP addresse there have been this many connections to the ftp server on that machine during the last two days, which means that the iptables haven't dropped the connection to the machine. As far as I know, the ftp server is behind the iptables. I also checked to see in man iptables, wheather the IP address is represented correctly. What im I missing? thanks in advance suomi

4 10

Keep the politics out, please?
by Benjamin Smith 08 Mar '16

08 Mar '16

With this post, I run the risk of causing more of the thing that I speak against. I still think it's important to say it. CentOS mailing list is a technical forum. It is not a political forum. Just reading a thread on bitcoins and the entire thread quickly turned into a political thread with people bitching about everything from Chase Bank to the Russians, and that's just crap. Wildly inappropriate. If you don't like Bitcoins, you should just not reply because you aren't going to use the Bitcoin software. This is a forum to discuss CentOS and issue about CentOS, using CentOS, building desirable software on CentOS, and the like. If you want to bitch about Chase bank, go to Reddit.com/r/politics or something where you can weigh in your heartfelt opinions in a forum where you don't just piss off everybody else there. Ben

3 3

Run Now no longer works in Messages Filters of Thunderbird 38.6
by Bernard Lheureux 07 Mar '16

07 Mar '16

Hi all, Since the last update of Thunderbird to 38.6, the button 'Run Now' of the 'Mail Filters' option is no longer effective and appears always grayed in my CentOS 7... Anybody has the same behavior ? -- (°- Bernard Lheureux //\ Linux System Administrator v_/_ MailTo:bernard@lheureux.be

5 5

OpenSSL Update - not a security update???
by Anthony K 07 Mar '16

07 Mar '16

This command output is odd: yum update --security ... No packages needed for security; 118 packages available However, this command says there's an OpenSSL update: yum update openssl ... ---> Package openssl-libs.x86_64 1:1.0.1e-51.el7_2.2 will be updated ---> Package openssl-libs.x86_64 1:1.0.1e-51.el7_2.4 will be an update Why does yum not consider this CESA a security update? Perplexed, ak.

11 20

Latest version of kate editor
by H 07 Mar '16

07 Mar '16

I have installed the kate editor on Centos 6.7 but it seems to be a very old version, 3.3.4, installed as part of kdesdk. On Centos 7 I can simply run 'yum install kate' but, alas, not on Centos 6. What is the recommended way of updating kate on Centos 6? Thank you.

11 36

Re: [CentOS] 6.7 netinstall fails at insert cd to continue
by Richard 07 Mar '16

07 Mar '16

> Date: Sunday, March 06, 2016 22:25:55 -0600 > From: g <geleem(a)bellsouth.net> > > On 03/06/16 22:15, Richard wrote: > <<>> > >> "shell" is a yum command, invoked as shown below. I don't believe >> there is any program called "yum-shell" (even though that is the >> man page reference). >> >> shell Is used to enter the 'yum shell', when a filename is >> specified the contents of that file is executed in >> yum shell mode. See yum-shell(8) for more info. >> >> SYNOPSIS >> yum shell [filename] >> >> The contents of the file need to be standard yum-acceptable lines. >> I.e., the lines of a package list would need to be edited to >> include "install " and/or input continuation characters, etc. >> > -- > > ok. so how about; > > yum shell install < pkginstalllist.file I suspect not. However, yum shell pkginstalllist.file where you have prepended "install " to each line (and I believe added "run" at the end) of that file would seem to be likely to work. A simple vi or perl search/replace edit/one-line script should get you the input file you need. Since you have an interest in this I'll let you read the man page and do the experimenting.

1 0

C-Media CM8828 [CentOS 7]
by Alice Wonder 07 Mar '16

07 Mar '16

Basically I will be needing a low profile PCIe sound card with optical out. There isn't a hell of a lot of selection, seems the assumption is if you need sound it is on the motherboard. That one has PCIe and a low profile bracket, but it uses the C-Media CM8828 chipset. My understanding that chipset is only supported in 3.17+ kernels, CentOS 7 uses 3.10.x A) By any chance, has the been back-ported in CentOS kernel? B) If not, does anyone know of a 3rd party repo that has it as a kernel module built against CentOS kernel? I suspect B is no because it looks like the patches were to ALSA driver itself and not a new module. I'd prefer not to have to run a custom kernel because of updates. Anyone know the status of that chipset in CentOS 7?

1 0

trying to get amavid to work on centos 7
by Jason Welsh 06 Mar '16

06 Mar '16

hey folks, trying to migrate my faithful old centos6 server over to centos 7 and as part of my email server, I have amavisd, clamd, postfix, etc.. The amavisd seems to be failing with some funky (systemd) error.. Mar 6 11:39:03 monster-new systemd: amavisd.service failed. Mar 6 11:39:03 monster-new systemd: amavisd.service holdoff time over, scheduling restart. Mar 6 11:39:03 monster-new systemd: Cannot add dependency job for unit firewalld.service, ignoring: Unit firewalld.service is masked. Mar 6 11:39:03 monster-new systemd: Starting Amavisd-new is an interface between MTA and content checkers.... Mar 6 11:39:03 monster-new amavisd: Error reading config file "/etc/amavisd/amavisd.conf": Permission denied at /usr/sbin/amavisd line 2163. Mar 6 11:39:03 monster-new systemd: amavisd.service: control process exited, code=exited status=13 Mar 6 11:39:03 monster-new systemd: Failed to start Amavisd-new is an interface between MTA and content checkers.. Mar 6 11:39:03 monster-new systemd: Unit amavisd.service entered failed state. yes, I did shut off the new-fangled firewalld so that I can use iptables the way I'm to.. sooo what should I do to make amavisd behave? Jason

2 2

logrotate script error
by Tim Dunphy 06 Mar '16

06 Mar '16

Hey guys, I'm trying to rotate a logstash log that can grow pretty large. 3.4GB last I saw! And that's because the logrotate script I came up with didn't work. The error I get on a syntax check is this: #logrotate -f logstash size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file And this is the logstash rotate script: #cat /etc/logrotate.d/logstash /var/log/logstash/* { daily rotate 7 copytruncate compress delaycompress missingok notifempty postrotate size 100M /bin/kill -HUP `cat /var/run/logstash.pid 2>/dev/null` 2> /dev/null || true endscript } I can't find the error there. Can I have a suggestion as to what's wrong and how to correct it? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

2 2

wpa_supplicant service script marked executable
by Luigi Rosa 05 Mar '16

05 Mar '16

I just installed a fresh CentOS 7 with "minimal" setup. Upon restart of systemd I get this warning: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway. Probably the exec bit is no longer needed. -- Ciao, luigi / +--[Luigi Rosa]-- \ Draco dormiens nunquam titillandos.

1 0

kernel parm question: MPS? pcie_bus_safe
by m.roth＠5-cent.us 04 Mar '16

04 Mar '16

I'm fighting a long-standing problem: we've got a Dell PE R720 with a BT878 card in it, running four surveillance cameras (it's a secure room). Since I put the card in, within 20-30 min, the box's little LCD screen goes orange, and complains "bus error" on the slot the card's in; I've moved it to different slot, no joy. Note that the same card in an older Penguin (rebranded Supermicro) has no issues. Where it's been serious is for the last six or so months, if we use the 2.6.32-431.20.3.el6.x86_64 kernel, it pretty much stays up; every single newer kernel, and it will start rebooting, a number of times per day. So, I'm hoping to find a runtime kernel parm I can set, or it might be something I can set using ipmitool. However, in googling, I found one or two folks setting pcie_bus_safe to resolve what I see with ipmitool sel list. What I cannot find is what MPS is an acronym off... I've seen references to metal performance shaders, and to an LSI fusion driver. Can someone set me straight on this? Any suggestions would also be very appreciated. mark

1 0

Sharing virtualizing physical Server 2008R2 experience on CentOS 7
by Emmanuel Noobadmin 04 Mar '16

04 Mar '16

Not as smooth an experience as I had assumed it would be after a test run with a clean install worked perfectly. So figured I would share the experience in case anybody else runs into similar situation since not all information are consolidated in a single place. Physical machine in question is a 4yr W2008R2 server (non-raided!) running custom app from defunct developer which is why I am virtualizing the failing server instead of doing a fresh/newer Windows setup. Too many articles online saying can't just dd/clone a Windows drives and expect it to run. So opted to go with the "new" Bare Metal Restore functionality added in 2008R2. https://blogs.technet.microsoft.com/askcore/2011/05/12/bare-metal-restore/ BMR caveats ========== - It can only restore from BIOS to BIOS and UEFI to UEFI (virt-manager in C7 doesn't appear to do UEFI, see below) - It can only restore to a disk of same or larger size. - It doesn't appear to be possible to trick it using a sparse qcow2 disk file to fit it into a smaller disk (500GB HDD to 250GB SSD in my case) UEFI ==== - current version of libvirt/virt-manager in C7 doesn't appear come with UEFI firmware/loader - got it done thanks to http://www.nbalonso.com/centos-7-uefi-boot-kvm/ - Summary: - install ovmf from https://www.kraxel.org/repos/ - using virsh edit, add to the <arch> section: <loader>/usr/share/edk2.git/ovmf-x64/OVMF_CODE-pure-efi.fd</loader> - sidenote: with the UEFI BIOS, warm reboot of the VM often ends up in an UEFI shell instead of booting directly, and sometimes the shell doesn't see attached drives. A "cold" reboot of the VM will fix this. Registry changes before booting ======================= After using the S2008R2 installation ISO to do a BMR restore, the restored S2008R2 won't boot. - need to boot into recovery mode with the CD again to run regedit to change some registry keys ( http://tech-stuff.org/migrate-windows-2008-server-from-physical-to-virtual-… ) - specifically for S2008R2 - select HKLM then open the File menu to 'Load Hive' from \restored drive\Windows\system32\config\SYSTEM. Give it a name e.g. 'restored_HLKM' - navigate through the restored HKLM tree to \ControlSet001\services and set the following for KVM - intelide > start = 0 - lsi_sas > start = 4 - msahci > start = 0 - pciide > start = 4 - the actual value in my registry are 3 instead of 4 but the changes appear to work regardless. - Note: I'm using IDE not virtio mode to avoid any added complications. Multi-core issue ============ For some reason, the restored VM won't boot if more than 1 core is assigned. There are plenty of hits on this issue but unfortunately mostly related to attempts to do PCI VGA passthrough. Trying out the various suggestions such as emulating core2duo, requiring nx and such did not really helped. What worked in the end is - single core - remove <hyperv> section in the guest xml - core2duo (might not be necessary) - require nx (might not be necessary) Resizing drives =========== In my situation, the server barely used 60GB on the old drive across two partitions. So 250GB SSDs was assumed to be enough until I hit the BMR restore issue. Ended up using a temporary 1TB spare drive to install before trying to shrink it down to fit onto a 250GB SSD. - Windows Disk Manager won't resize boot partition below 1/2 of original - Do NOT use Aomei partition assistant (thought it was easier and safer to use a Windows-based tool for this but...) - gparted livecd won't boot properly in KVM with UEFI/OVMF so better to just use it on a raw disk on the virtualization host directly. - Before repartitioning, from here https://wiki.archlinux.org/index.php/GParted (although says it's for WinXP) - Delete the registry key HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices - randomly gparted will get errors: - about unable to read data on the ntfs partition, fixed by mounting the partition before running gparted. - or abort a resize/move operation because it can't find the device in /etc/mtab. It doesn't quite make sense to me because the partition seems to appear only in /etc/mtab if I mount it in the host. But if I mount the drive, gparted will indicate it is mounted and needs to be unmounted. Fixed by rebooting the host machine everytime it happens. - Windows still won't boot after partition changes despite deleting the registry key. Fixed by manually running chkdsk /f in Windows rescue/repair command prompt. No errors found but for some reason this makes Windows happy. Transferring to smaller drive ==================== The web is full of warnings about trying to clone a bigger drive into a smaller drive using dd. Especially since GPT puts a spare table at the end of the drive. However, I figured it can't hurt to try since I will still have the working 1TB to fall back on. - did a dd if=/dev/vg/lv_temp of=/dev/vg_ssd/lv_ssd1 BS=32M conv=notrunc,sync - appears to work as Windows booted without complains. I'm still left with the unable to assign more than 1 core issue but so far the virtualized server appears to be working. Making a backup image before I mess around with it further. Hope this helps anybody else who might find themselves in a similar situation.

1 0

CentOS-announce Digest, Vol 133, Issue 2
by centos-announce-request＠centos.org 03 Mar '16

03 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0347 Important CentOS 6 postgresql Security Update (Johnny Hughes) 2. CESA-2016:0346 Important CentOS 7 postgresql Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 2 Mar 2016 17:36:01 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0347 Important CentOS 6 postgresql Security Update Message-ID: <20160302173601.GA50734(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0347 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0347.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 28887eb490932c082e1b7b1265d02162825dc1441e4a3a42bb5512b7f4640c22 postgresql-8.4.20-5.el6_7.i686.rpm 21b0002c1e9c222562e1983daa806617ef41aaac55a0c2e69fc10775b2afda04 postgresql-contrib-8.4.20-5.el6_7.i686.rpm ae7607f18010b13d047dea7824218ff37e3ffed61e613079c8f2bc5a86e7d7e2 postgresql-devel-8.4.20-5.el6_7.i686.rpm c2d3da027a5532c8776da45a58d8d3ea1cc45c62b32b852f4d025b055a60f14d postgresql-docs-8.4.20-5.el6_7.i686.rpm ab8d3a2bec35fef0477a62dc8aad01af0ce9cb4207392b402620b4a87ba55d16 postgresql-libs-8.4.20-5.el6_7.i686.rpm 3b97c7a7a81ff2e8ce6235b01337bd5267496491599f5621a8e958f77fe33aba postgresql-plperl-8.4.20-5.el6_7.i686.rpm b215251545d709136b8491aadfeebd68336d65855f68292d1ff849ddd6282f22 postgresql-plpython-8.4.20-5.el6_7.i686.rpm 4a29d7cdfcb7db337a96919a83c266e8a8f65c5b31beecbb6cb022ca66ff371f postgresql-pltcl-8.4.20-5.el6_7.i686.rpm fe69ec2c0a5be8820d4d6732a79f25011356d95e4cb8c9c3c00353b524794c20 postgresql-server-8.4.20-5.el6_7.i686.rpm ee3bcd8a1b0f602d62c3dcc66d4dfba7c1c07dfc0b0325655fdb1089e795917e postgresql-test-8.4.20-5.el6_7.i686.rpm x86_64: 28887eb490932c082e1b7b1265d02162825dc1441e4a3a42bb5512b7f4640c22 postgresql-8.4.20-5.el6_7.i686.rpm c7cd7d3d73f7881040d5e76f4602f9b3c99051eeb66bfb16d614fc0e92bb6a72 postgresql-8.4.20-5.el6_7.x86_64.rpm 0f5d90c73d67b5d75b1d18e38f55cab7a7f14634a44aa5246a8b902a08499e2a postgresql-contrib-8.4.20-5.el6_7.x86_64.rpm ae7607f18010b13d047dea7824218ff37e3ffed61e613079c8f2bc5a86e7d7e2 postgresql-devel-8.4.20-5.el6_7.i686.rpm d5138d6cf2d30936b11d07e0f6405edef3b16da393d1b10f19571dc3da67c99b postgresql-devel-8.4.20-5.el6_7.x86_64.rpm 787b50591dc468e74ccb804e5a36afc30923e3a416bd5b0711db4ff863d765f6 postgresql-docs-8.4.20-5.el6_7.x86_64.rpm ab8d3a2bec35fef0477a62dc8aad01af0ce9cb4207392b402620b4a87ba55d16 postgresql-libs-8.4.20-5.el6_7.i686.rpm fc4a053f7f71071c0559d6718e06c7f0eca8026d8df595deaa2ee15b060aa745 postgresql-libs-8.4.20-5.el6_7.x86_64.rpm 894f0de472b5ce8bac0507f5c3f9c03b1f7c2c7f365f6d78b78084924fe2d2bc postgresql-plperl-8.4.20-5.el6_7.x86_64.rpm 4a30da101c89de17815d3428a28f40a2c0abad82ab95ee2bcb5c32bfec373367 postgresql-plpython-8.4.20-5.el6_7.x86_64.rpm fef0d25e31d54df816279e46671ad715335705b12af73d63b8f3cc1420d02bb4 postgresql-pltcl-8.4.20-5.el6_7.x86_64.rpm 02b4bd3d5b2df30694e57e6e35e51437c17f4665c5b0d79abf123efdcd7b7d9f postgresql-server-8.4.20-5.el6_7.x86_64.rpm b7bd6d7f6d4fc310e6eaed09b8f0078037f4631d3c99257610d7e3ef432c3edd postgresql-test-8.4.20-5.el6_7.x86_64.rpm Source: 1d25cec7562ac152fbf1be84b28cd1ec2b57d46e031457188db1f565e02812f8 postgresql-8.4.20-5.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 2 Mar 2016 18:17:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0346 Important CentOS 7 postgresql Security Update Message-ID: <20160302181748.GA4394(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0346 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0346.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5c458f42b2ef11fcc4b62d7f69c7dc1e033957c471387d65a6d49c0d7df6f128 postgresql-9.2.15-1.el7_2.i686.rpm 2434cedad6cd2fd921d499c57864e69e8db4ec7166d0f390c055074d50ddd2a7 postgresql-9.2.15-1.el7_2.x86_64.rpm f7484385c8df8fa144de7fea6e3fb64f657a3325608e3d25dd5d6e68f32fa7ea postgresql-contrib-9.2.15-1.el7_2.x86_64.rpm 1eeabfd3110ad851ad61b68271e2594d2807241617e395427a83f89f1e662d6f postgresql-devel-9.2.15-1.el7_2.i686.rpm 62790ddfbb18ad771af372509b674b62284d8d47c390dc397269f71c9fef8df3 postgresql-devel-9.2.15-1.el7_2.x86_64.rpm 0e787b99e9fddde0900c8dbf2014025ec8ce1c578c684e5ce51c532b52f1abb4 postgresql-docs-9.2.15-1.el7_2.x86_64.rpm 51c0e1cc0983e2139d11ea212f23f1ce60b6ed25a071743f360515688898aaa5 postgresql-libs-9.2.15-1.el7_2.i686.rpm 53f4bed4816944cdfd1b896ad6933c799f3429b221d2146d91d462e5c608fae3 postgresql-libs-9.2.15-1.el7_2.x86_64.rpm 2c9e04943c318f89e8c94d8104e01cbeb1c9dcbf868dee434c3e65505384cb03 postgresql-plperl-9.2.15-1.el7_2.x86_64.rpm 36021f26db1f2addf89e15707348cc611b34f0b9fe385df77e1f50994c978fa6 postgresql-plpython-9.2.15-1.el7_2.x86_64.rpm a9d8728e1b5a7c34ce94b1c339c3017691da43458afcec07f6be207c96877795 postgresql-pltcl-9.2.15-1.el7_2.x86_64.rpm 5be958fcca92e4b44dcfcae4f50bb16c05386c06b31ddcd36b5cf6c4ffd01af4 postgresql-server-9.2.15-1.el7_2.x86_64.rpm 8afce69552067b932036be540522b0db2d4c245cedb1fad8eb4762b02586a83d postgresql-test-9.2.15-1.el7_2.x86_64.rpm 1e7aa4a53e7cee01fdd305e69bc2e7927f85d97682dd925b3adb0b12e75a9872 postgresql-upgrade-9.2.15-1.el7_2.x86_64.rpm Source: 2e7e14805236939e21dd3bb2b293c205206c7cb76c0beb42317a4073aeb9aab0 postgresql-9.2.15-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 2 ***********************************************

1 0

Problems with CentOS 7 and X w/ nvidia
by m.roth＠5-cent.us 03 Mar '16

03 Mar '16

Ok, here's a bit more on the issues: I see in Xorg.0.log that it appears to have loaded the NVidia drivers I built from proprietary. But, and this may, or may not be significant, the user's home directory is, of course, NFS mounted. And his old machine that dies was running CentOS 5. Is it possible that some of the gnome settings are breaking things with CentOS 7's default gnome? If so, what kinds of things should I be looking for? mark

2 1

Problems with ProxyPass to a local ip (using SSL)
by C. L. Martinez 03 Mar '16

03 Mar '16

Hi all, I am trying to setup an apache virtualhost under CentOS 6.7 that needs to redirects requests from port 444 to port 5100 in its local ip. But I am doing some mistakes because every time I'm receiving a loop error. My actual httpd's config for this virtualhost is: NameVirtualHost 192.168.1.5:444 <VirtualHost 192.168.1.5:444> ServerName myweb01.local.domain ErrorLog logs/ssl_error.log CustomLog logs/ssl_access.log combined CustomLog logs/ssl_request.log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" LogLevel info SSLEngine on SSLProxyEngine On SSLProtocol -ALL +SSLv3 +TLSv1 SSLCipherSuite ALL:!ADH:!EXPORT56:!EXP:!eNULL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2 SSLCertificateFile /etc/httpd/certs/server.crt SSLCertificateKeyFile /etc/httpd/certs/server.key ProxyRequests Off ProxyPreserveHost On ProxyPass / http://192.168.1.5:5100/ ProxyPassReverse / http://192.168.1.5:5100/ RequestHeader set X-Forwarded-Proto "https" RequestHeader set X-Forwarded-Port "444" RewriteEngine On RewriteRule ^/(.*) https://myweb01.local.domain:444/$1 [R,L] </VirtualHost> As you can see, I need to do a redirection to port 5100 from 444 port and protect it using ssl. I've configured iptables rules to drop connections to port 5100 directly: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 444 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT Any idea how to accomplish/resolve this? Thanks. -- Greetings, C. L. Martinez

3 6

CentOS 7.2, nouveau won't go away
by m.roth＠5-cent.us 03 Mar '16

03 Mar '16

Hi, folks, Fully updated 7.2 system. I installed the correct proprietary NVidia driver (the user's expensive proprietary visualization software won't run with nouveau), I've put nouveau.modeset=0 rd.driver.blacklist=nouveau on the kernel line for grub2, and even yum removed the nouveau driver and built a new initrd... which won't boot, it seems to start and than does nothing, with a black screen, and this is just while booting, before it goes to graphical mode. If I boot the as-built current initramfs, it loads nouveau, though one of the modules listed if I do lsmod | grep nou shows nvidia, in addition to nouveau. So, in 7, what do I have to do to make nouveau go away? Is it as simple as creating an /etc/X11/xorg.conf, or...? mark

4 6

problem restoring ssl and vlc
by g 02 Mar '16

02 Mar '16

greeting. a short while ago, i may have gone to a site i should not have. maybe. after visiting, i decided i would check for rpm updates. when yumex opened to available packages, it showed that; openssl.x86_64 0:1.0.1e-42.el6_7.4 was available, so i checked it, then clicked install button. during log display, i got error message, tried again. still got error. seems that there is a 'protected' problem. text from log is at filefactory; http://www.filefactory.com/file/6x8rzrxmx8vx/yumex-error--openssl.2016-0301… tried a couple check at cli, it failed. then i tried a few more things that maybe i should not have. http://www.filefactory.com/file/6uryf80i52ix/yum-error--ssl.2016-0301-1841 during all this, i decided to open vlc to play some relaxing music. not. icon for vlc was no longer in my desktop top panel and reason the attempt to install vlc with yumex. not aware of what all is happening, i closed yumex. mistake. now, when i try to start yumex from panel icon, nothing. starting yumex from cli, i get this; ~]$ yumex Traceback (most recent call last): File "/usr/bin/yumex", line 25, in <module> from yumexgui import YumexApplication File "/usr/lib/python2.6/site-packages/yumexgui/__init__.py", line 34, in <module> from yumexgui.gui import Notebook, PackageInfo, CompletedEntry, YumexStatusIcon File "/usr/lib/python2.6/site-packages/yumexgui/gui.py", line 30, in <module> from yumexbase.constants import * File "/usr/lib/python2.6/site-packages/yumexbase/constants.py", line 35, in <module> from yum.constants import * File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 53, in <module> import config File "/usr/lib/python2.6/site-packages/yum/config.py", line 30, in <module> from parser import ConfigPreProcessor, varReplace File "/usr/lib/python2.6/site-packages/yum/parser.py", line 4, in <module> import urlgrabber File "/usr/lib/python2.6/site-packages/urlgrabber/__init__.py", line 54, in <module> from grabber import urlgrab, urlopen, urlread File "/usr/lib/python2.6/site-packages/urlgrabber/grabber.py", line 422, in <module> import urllib2 File "/usr/lib64/python2.6/urllib2.py", line 93, in <module> import hashlib File "/usr/lib64/python2.6/hashlib.py", line 88, in <module> import _hashlib ImportError: libssl.so.10: cannot open shared object file: No such file or directory decided to try starting vlc from cli; ~]$ vlc bash: vlc: command not found presuming that vlc starts from a diff command, i tried to open kde menu, it will not open. i am now at a loss of what all has been removed and need help getting things back. thanks in advance for any and all help. -- peace out. If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! -+- in a world with out fences, who needs gates. CentOS GNU/Linux 6.7 tc,hago. g .

2 3

C7 minimal (1511) firewalld is not installed: logical?
by Patrick Bervoets 02 Mar '16

02 Mar '16

I just installed a host with CentOS-7-x86_64-Minimal-1511.iso It seems that firewalld is not included in the minimal set. I wonder why? If I recall correctly CentOS-7-x86_64-Minimal-1503-01.iso did include it. And, this could be a very stupid question, am I running without a firewall or just without a way to control my firewall? Thanks Patrick

2 2

RasPi 3.x and RH-based Distro (Slightly OT)
by Benjamin Smith 02 Mar '16

02 Mar '16

With the release of the Rasberry Pi 3.x, I think we have a platform I could jump on board with. Performance has just been lacking until now! But I really don't want to jump the "RH ship" - I'd rather stick with an environment I am comfortable in. Can anybody comment here on the best way to run RHEL/Fedora/CentOS on a RasPi, or if there's even a useful port? Thanks Ben S

6 7

CentOS-announce Digest, Vol 133, Issue 1
by centos-announce-request＠centos.org 02 Mar '16

02 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2016:0298 CentOS 6 findutils FASTTRACK BugFix Update (Johnny Hughes) 2. CESA-2016:0301 Important CentOS 6 openssl Security Update (Johnny Hughes) 3. CESA-2016:0301 Important CentOS 7 openssl Security Update (Johnny Hughes) 4. CESA-2016:0302 Important CentOS 5 openssl Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 1 Mar 2016 13:06:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0298 CentOS 6 findutils FASTTRACK BugFix Update Message-ID: <20160301130638.GA3583(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0298 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0298.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ed1a7580800b4cb68fd882f39eafe9c4a0d8b2ec9ff6d25358f2f10d9cc35555 findutils-4.4.2-9.el6.i686.rpm x86_64: fbbb4d9e91b0a7cac328167d09a3591d9ee50e990d86da45bee99f8020a03db3 findutils-4.4.2-9.el6.x86_64.rpm Source: 8f0afaba4a8461e71ea4001750df754ff6406e5a68e5276c8aae4a36a6a9632c findutils-4.4.2-9.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 1 Mar 2016 16:09:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0301 Important CentOS 6 openssl Security Update Message-ID: <20160301160929.GA26137(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0301 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0301.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 31cacdfe88b5e4b420bd2dd1fe6b491b35a2a57c7e3b4ef5b960573b095fc519 openssl-1.0.1e-42.el6_7.4.i686.rpm a57701c0598a7c91de1eac55fa5b6ffe2bc096c07f757723d6de65dd092dbc66 openssl-devel-1.0.1e-42.el6_7.4.i686.rpm 3e62aef02b5a465d587a3c3dfec494b27d55ec2a5dac0a13e6ac842188728d66 openssl-perl-1.0.1e-42.el6_7.4.i686.rpm 621cd98e6d221febb477906443a1692afd64ffcc79cb843a146ee4583e7224f7 openssl-static-1.0.1e-42.el6_7.4.i686.rpm x86_64: 31cacdfe88b5e4b420bd2dd1fe6b491b35a2a57c7e3b4ef5b960573b095fc519 openssl-1.0.1e-42.el6_7.4.i686.rpm e5fc87d5031ea23db0eb2be92743a557d8574caa583fad6a1cd16a757ed436f3 openssl-1.0.1e-42.el6_7.4.x86_64.rpm a57701c0598a7c91de1eac55fa5b6ffe2bc096c07f757723d6de65dd092dbc66 openssl-devel-1.0.1e-42.el6_7.4.i686.rpm 17b6a4dbe2f844d3944fa7c4cafe9ccf4d54a8dc23d26201a513fc86bd08d256 openssl-devel-1.0.1e-42.el6_7.4.x86_64.rpm 4b9ec40e680ad72d6134283f3ab6179d2c4c8a34433aed4f42c5117bfeb300a5 openssl-perl-1.0.1e-42.el6_7.4.x86_64.rpm aaaf4d42ef5f48f424ed9d6d04744e906a15d3ae66097bcd3ec60be226879cd6 openssl-static-1.0.1e-42.el6_7.4.x86_64.rpm Source: 152d1ec6f40854680bbad1524f2b7766c8f583de6b1a136b635ec9b257d4b088 openssl-1.0.1e-42.el6_7.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 1 Mar 2016 16:41:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0301 Important CentOS 7 openssl Security Update Message-ID: <20160301164122.GA26845(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0301 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0301.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b2aaed03ed2d01d2a6482ed97a95aec0545ffc4c00ad46c7cafc10c9554e1b58 openssl-1.0.1e-51.el7_2.4.x86_64.rpm b1aa349c2ea3a99cc65d031850d415b7feb7924f0a121593c12b439934440eb4 openssl-devel-1.0.1e-51.el7_2.4.i686.rpm 3e194452a2616702ee91e791b163b739d012da52957f6e91927de9d554e4e203 openssl-devel-1.0.1e-51.el7_2.4.x86_64.rpm 2e193ea886626e3e8b151f905920503e2e505cc2bdfef31a8d38a581c99e210f openssl-libs-1.0.1e-51.el7_2.4.i686.rpm 249cc7d68c0d8d48a26b50066ed29da2d70c7a573d23dc566ee7c99f5c5f71c9 openssl-libs-1.0.1e-51.el7_2.4.x86_64.rpm 61cfe9edcb1d521b2978fee1acda2a9cba73f2c371bc9217b44bd527569938c5 openssl-perl-1.0.1e-51.el7_2.4.x86_64.rpm a5d2395db7a0c87d069e3fc80e55deacffeea5acc5162058075a746871954ce7 openssl-static-1.0.1e-51.el7_2.4.i686.rpm e48dd73a4f9bc7d3b6617842414a1b50fc086c720795451ca4795ecd08ba3b22 openssl-static-1.0.1e-51.el7_2.4.x86_64.rpm Source: 26fa86503898fa5fcf91188aa6f56172ea1896e4d4943bd407aa54d21d330618 openssl-1.0.1e-51.el7_2.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Tue, 1 Mar 2016 16:57:33 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0302 Important CentOS 5 openssl Security Update Message-ID: <20160301165733.GA16183(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0302 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0302.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 045550a5b7552b7a9cd5ea7a1f866de367e3bf677d240925d633a1b7938cd07a openssl-0.9.8e-39.el5_11.i386.rpm 8c73a864ce991ba4e6c950cc6ca642c09a7753fc5aa793a0a23e683ba5df99e9 openssl-0.9.8e-39.el5_11.i686.rpm 230b07861835e3a65052e45b617a73cbbd3057c6db38d315dbed7b3d01f1fba6 openssl-devel-0.9.8e-39.el5_11.i386.rpm c63d611b4519928413ed611a020d7e7113ccbf6890b264b4b8399f9af7bf6140 openssl-perl-0.9.8e-39.el5_11.i386.rpm x86_64: 8c73a864ce991ba4e6c950cc6ca642c09a7753fc5aa793a0a23e683ba5df99e9 openssl-0.9.8e-39.el5_11.i686.rpm d7e159cfd9e991adf152df48cb97751c8a26601b1f3f3a70a3e137efb05e0c35 openssl-0.9.8e-39.el5_11.x86_64.rpm 230b07861835e3a65052e45b617a73cbbd3057c6db38d315dbed7b3d01f1fba6 openssl-devel-0.9.8e-39.el5_11.i386.rpm f6bc29a1ab08303174206210af09b37ec53f0c0d643f18bf98427b20f2cb4a67 openssl-devel-0.9.8e-39.el5_11.x86_64.rpm 7953dcc480ff7815f39943f62fc848b3ce7ecb66217d2829332d95be4400c13d openssl-perl-0.9.8e-39.el5_11.x86_64.rpm Source: e0dab71e400c340b8eed7770c582ce6f3768888a61b4c492411d20e81ae1a9a6 openssl-0.9.8e-39.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 1 ***********************************************

1 0

Any experiences with newer WD Red drives?
by Emmanuel Noobadmin 02 Mar '16

02 Mar '16

Might be slightly OT as it isn't necessarily a CentOS related issue. I've been using WD Reds as mdraid components which worked pretty well for non-IOPS intensive workloads. However, the latest C7 server I built, ran into problems with them on on a Intel C236 board (SuperMicro X11SSH) with tons of "ata bus error write fpdma queued". Googling on it threw up old suggestions to limit SATA link speed to 1.5Gbps using libata.force boot options and/or noncq. Lowering the link speed helped to reduce the frequency of the errors (from not getting a smartctl output to getting a complete listing within 2 tries). Tried two Reds produced in Jan 2016, two HGST, two SSDs on the same combination of cable/bay/SATA port as well as different combos. SSD maxed out at 450Mbps dd write test so doesn't appear to be lousy cables or board problem. Basically only the Reds were having problems. Strange thing is a netinstall of CentOS 7.0 "minimal" worked with one of the Reds before starting to cough. Now that I think about it, could be due to an update to 7.2 after installing. Needed to get the server out the door ASAP so didn't have time to try C6 once I confirmed it was the drive and promptly replaced it with another HGST. Since I'm likely to use Reds again, it is a bit of a concern. So wondering if I just happen to get an unlucky batch, or is there some incompatibility between the Reds and the Intel C236 chipset, or between Red / C236 / Centos 7 combo or the unlikely chance WD has decided to do something with the firmware to make them work on on NAS and not workstation/server chipsets to make people buy better stuff. Anybody has recent experiences with them recently on the same chipset with C7?

6 10

ssh issues with centos 6
by William Warren 01 Mar '16

01 Mar '16

I have a new centos 6 install. Randomly i get out of memory messages and my ssh file transfer dies. I have tried this in filezilla as well as winscp. I have disabled motd in ssh and i also had entropy problems so i enacted rngd -r /dev/urandom -o /dev/random but did not stop the out of memory errors. I am seeing the below in the logs. It only occurs during ssh file transfers. Feb 28 17:18:19 web1 t of memory [13604]

3 2

making a new initrd
by Philip Manuel 01 Mar '16

01 Mar '16

Hi, I built a new kernel for C7 that contains the required driver for a new motherboard we have here. I'd like to take this initramfs and rebuild it/modify it so that it is suitable for pxe booting. I have tried dracut -v --force --add "anaconda" initramfs.img # results in an image that is too large for tftp Or dracut --nofscks --nomdadmconf --nolvmconf --xz --no-early-microcode -m "anaconda" --force initramfs.img # kernel panics What steps should I be taking to create an initrd image suitable for pxe boot ? Thanks

1 0

Pi 2 Alternatives
by Chris Olson 01 Mar '16

01 Mar '16

We have a requirement for a new application that will be used fixed, portable, and mobile. The hardware requirements drive the need for networking as well as some general purpose and special purpose interfaces. The software requirements are quite simple in comparison to many of our much larger systems with similar hardware requirements. We are not significantly restricted in choice of storage peripherals or other devices that may be needed. We believe that a small, single board computer will meet all requirements as long as it can run Linux. We have identified the need for approximately six prototyping units to support the initial production of about 200 to 300 operational systems. Our development and deployment time frame does not drive the need for an extremely rapid product decision, and there are pre-planned upgrade cycles over the next five years. An internal group has achieved a significant head of steam in support of using the Pi 2 Model B. The support enthusiasm may be partly technical and partly the hype associated with jumping into the Pi community. The number of suppliers does appear to support our supply chain and sustainment requirements, however the Linux available for the Pi 2 does not appear to be optimal. It would be better if there were choices that include a standard Linux distribution such as CentOS. This certainly seems like one of those situations where a trade of single board computer products is appropriate and achievable. There are products similar to the Pi 2 capable of running a more standard Linux distribution that we might consider. Does anyone have an experience-based single board computer recommendation? Thanks in advance for any product recommendations.

4 3

Hung kernel task on CentOS 7.2, fprintd and libvirtd
by Warren Young 01 Mar '16

01 Mar '16

A CentOS 7 box here recently started being very slow to give the Password prompt when using sudo. (25 seconds!) I eventually tracked this down to the following complaint in the kernel message log: > Feb 26 12:55:05 badboy kernel: INFO: task fprintd:1932 blocked for more than 120 seconds. > Feb 26 12:55:05 badboy kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. > Feb 26 12:55:05 badboy kernel: fprintd D ffff88021f7300f8 0 1932 1 0x00000080 > Feb 26 12:55:05 badboy kernel: ffff88022354bdc0 0000000000000086 ffff8800c54e8000 ffff88022354bfd8 > Feb 26 12:55:05 badboy kernel: ffff88022354bfd8 ffff88022354bfd8 ffff8800c54e8000 ffff88021f7300f0 > Feb 26 12:55:05 badboy kernel: ffff88021f7300f4 ffff8800c54e8000 00000000ffffffff ffff88021f7300f8 > Feb 26 12:55:05 badboy kernel: Call Trace: > Feb 26 12:55:05 badboy kernel: [<ffffffff8163b9e9>] schedule_preempt_disabled+0x29/0x70 > Feb 26 12:55:05 badboy kernel: [<ffffffff816396e5>] __mutex_lock_slowpath+0xc5/0x1c0 > Feb 26 12:55:05 badboy kernel: [<ffffffff81638b4f>] mutex_lock+0x1f/0x2f > Feb 26 12:55:05 badboy kernel: [<ffffffff81449729>] read_descriptors+0x39/0x110 > Feb 26 12:55:05 badboy kernel: [<ffffffff8125c28b>] ? read+0x6b/0x1f0 > Feb 26 12:55:05 badboy kernel: [<ffffffff8125c2fb>] read+0xdb/0x1f0 > Feb 26 12:55:05 badboy kernel: [<ffffffff811de43c>] vfs_read+0x9c/0x170 > Feb 26 12:55:05 badboy kernel: [<ffffffff811def8f>] SyS_read+0x7f/0xe0 > Feb 26 12:55:05 badboy kernel: [<ffffffff81645909>] system_call_fastpath+0x16/0x1b Since fprintd is the fingerprint reader daemon and this server doesn’t have such a peripheral, I removed the service. Now sudo is fast again. [*] Although that solves my immediate problem, while debugging all of this I noticed substantially the same error message also appearing for libvirtd: > Feb 26 12:57:05 badboy kernel: INFO: task libvirtd:1514 blocked for more than 120 seconds. > Feb 26 12:57:05 badboy kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. > Feb 26 12:57:05 badboy kernel: libvirtd D ffff88021f7300f8 0 1514 1 0x00000080 > Feb 26 12:57:05 badboy kernel: ffff8800c08ffde0 0000000000000086 ffff8800c550e780 ffff8800c08fffd8 > Feb 26 12:57:05 badboy kernel: ffff8800c08fffd8 ffff8800c08fffd8 ffff8800c550e780 ffff88021f7300f0 > Feb 26 12:57:05 badboy kernel: ffff88021f7300f4 ffff8800c550e780 00000000ffffffff ffff88021f7300f8 > Feb 26 12:57:05 badboy kernel: Call Trace: > Feb 26 12:57:05 badboy kernel: [<ffffffff8163b9e9>] schedule_preempt_disabled+0x29/0x70 > Feb 26 12:57:05 badboy kernel: [<ffffffff816396e5>] __mutex_lock_slowpath+0xc5/0x1c0 > Feb 26 12:57:05 badboy kernel: [<ffffffff81638b4f>] mutex_lock+0x1f/0x2f > Feb 26 12:57:05 badboy kernel: [<ffffffff81449100>] manufacturer_show+0x20/0x50 > Feb 26 12:57:05 badboy kernel: [<ffffffff813f1c20>] dev_attr_show+0x20/0x60 > Feb 26 12:57:05 badboy kernel: [<ffffffff8125928a>] sysfs_read_file+0x9a/0x1a0 > Feb 26 12:57:05 badboy kernel: [<ffffffff811de43c>] vfs_read+0x9c/0x170 > Feb 26 12:57:05 badboy kernel: [<ffffffff811def8f>] SyS_read+0x7f/0xe0 > Feb 26 12:57:05 badboy kernel: [<ffffffff81645909>] system_call_fastpath+0x16/0x1b I don’t want to employ the same solution in this case — i.e. disable libvirtd — because while I don’t yet use KVM on that server, I actually had plans to do so soon. I could host those VMs elsewhere, but that feels like sweeping the problem under the rug. I want to fix this, but I’m now stuck. I’ve ruled out several possible causes already: 1. It isn’t DNS. DNS responds quickly. 2. It isn’t a flaky OS drive. Swapping the spinning rust drive out for an SSD was already on the wish list for this system, so I took the opportunity to reinstall the OS fresh on a brand new SSD. The same problem occurred shortly after booting CentOS 7.2 for the first time, and it continues to happen periodically. The only thing I’ve copied over from the old spinning drive so far is /home and /usr/local, and I can’t see how that could affect the kernel. Besides, the problem still occurs while booted into single-user mode. 3. It isn’t the RAID card. A RAID verify pass completed successfully, as did smartctl -t long tests on all of the individual drives. I even disabled the RAID card’s OPROM and blacklisted its driver at one point, just to see if the driver or RAID BIOS were the cause of the problem. I haven’t actually pulled the card yet, but that seems unlikely to solve anything, given that the array seems to be storing data reliably. 4. It isn’t the RAM. It just passed a memtest86+ run. That probably exonerates the CPU and north bridge, too. (I used v4.20 from the CentOS 7.2 install ISO.) 5. It isn’t stale packages. The OS reinstall proves that. It’s currently running the tip of CentOS 7.2 and still showing the same symptoms. 6. It isn’t high-uptime kernel space cruft, since it’s been rebooted a bunch of times during all of this, including several hard reboots. Rebooting is especially painful at the moment because the system hangs on shutdown waiting for libvirtd to respond. While I had fprintd installed, that was causing 3-minute hangs on boot, too. Very frustrating! [*] In case it isn’t clear how fprintd could affect sudo, it’s because fprintd installs a PAM module, and sudo uses PAM for authentication. If fprintd is stuck, the PAM call stalls until it gives up and moves on. I tracked this down with strace. The 25 seconds above is the timeout value passed to poll(2); that timeout is hit while sudo (via PAM) is trying to talk to dbus, since apparently fprintd communicates via dbus. Because the problem is in PAM and not sudo, it also affected su. It did not affect console or ssh user logins for some reason. I’m posting these details in case this diagnosis helps someone. While chasing this, I found a bunch of postings on the net from people who have run into such problems before, but none of the threads mentioned this particular failure mode. For all I know, I’m the first person it’s ever happened to, so this needs to be in the archives.

2 2

Discarding empty lines in rsyslog
by Anand Buddhdev 29 Feb '16

29 Feb '16

Dear CentOS folk, I've been try to solve one issue with rsyslog on CentOS 6, but can't figure it out. I've searched through rsyslog documentation, and used Google but not found anything that matches my issue. I'm sending output of a program to rsyslog using "logger -t progname". I've got the following config snippet in /etc/rsyslog.d: $FileCreateMode 0644 if $programname == 'progname' then /var/log/prog.log & ~ This works. However, the program sometimes produces blank lines its output, and they get logged by rsyslog as well. I want to make rsyslog ignore empty lines. I am trying the following, but it doesn't work: if $programname == 'progname' and $msg != '\n' then /var/log/prog.log Does anyone know how to get this to work in rsyslog? This is rsyslog 5 on CentOS 6. Regards, Anand

1 1

Odd selinux complaints on new, fully updated CentOS 7
by m.roth＠5-cent.us 29 Feb '16

29 Feb '16

Just installed 7.2, and I'm seeing this - is this a bug in the policy? ************************** SELinux is preventing systemd-readahe from add_name access on the directory .readahead.new. ***** Plugin catchall_labels (83.8 confidence) suggests ******************* If you want to allow systemd-readahe to have add_name access on the .readahead.new directory Then you need to change the label on .readahead.new Do # semanage fcontext -a -t FILE_TYPE '.readahead.new' where FILE_TYPE is one of the following: device_t, init_var_run_t, readahead_var_lib_t, readahead_var_run_t, root_t, var_run_t. Then execute: restorecon -v '.readahead.new' ***** Plugin catchall (17.1 confidence) suggests ************************** If you believe that systemd-readahe should be allowed add_name access on the .readahead.new directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep systemd-readahe /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:readahead_t:s0 Target Context system_u:object_r:mnt_t:s0 Target Objects .readahead.new [ dir ] Source systemd-readahe Source Path systemd-readahe Port <Unknown> Host <hostname> Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-60.el7_2.3.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name <hostname> Platform Linux <hostname> 3.10.0-327.10.1.el7.x86_64 #1 SMP Tue Feb 16 17:03:50 UTC 2016 x86_64 x86_64 Alert Count 4 First Seen 2016-02-29 10:06:27 EST Last Seen 2016-02-29 16:50:22 EST Local ID 0ba32e6a-e502-45be-a2dc-cda4c380a2bb Raw Audit Messages type=AVC msg=audit(1456782622.230:435): avc: denied { add_name } for pid=410 comm="systemd-readahe" name=".readahead.new" scontext=system_u:system_r:readahead_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir Hash: systemd-readahe,readahead_t,mnt_t,dir,add_name ***************************************** mark

1 0

Changing default file type in Centos 6
by H 28 Feb '16

28 Feb '16

It turns out my markdown files - extension .md - are of the "Genesis ROM" file type in Centos 6. Googling did not turn up any obvious places to change this in Gnome - neither in my local directory or in /etc/gnome. Where would I be able to change this default file type for files with the extension .md? I have already changed the default application to geany (with the markdown extension.) Thank you.

4 12

Restoring session status
by H 27 Feb '16

27 Feb '16

I am running CentOS 6.6 on both a couple of servers and on a laptop. When I let the laptop sleep, window states and positions are restored correctly when I awaken it. However, when I shut down the laptop, later turn it on and log in, none of the terminal windows and directory windows are restored correctly to e.g. minimized state, instead they are restored to when they last were in use. Naturally, this is a little bit annoying: have I missed a setting somewhere? Thanks.

2 2

CentOS-announce Digest, Vol 132, Issue 7
by centos-announce-request＠centos.org 27 Feb '16

27 Feb '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS Linux 7 Rolling media Feb 2016 (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Sat, 27 Feb 2016 00:37:51 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS Linux 7 Rolling media Feb 2016 Message-ID: <56D0EFDF.5040304(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am pleased to announce general availability of the Feb 2016 snapshot for CentOS Linux. This release includes CentOS Linux 7 iso based install media, Generic Cloud images, Atomic Host, Docker containers, Vagrant images, vendor hosted cloud images. This release set is tag'd 1602 CentOS Linux rolling builds are point in time snapshot media rebuild from original release time, to include all updates pushed to mirror.centos.org's repositories. This includes all security, bugfix, enhancement and general updates for CentOS Linux. Machines installed from this media will have all these updates pre-included and will look no different when compared with machines installed with older media that have been yum updated to the same point in time. All rpm/yum repos remain on mirror.centos.org with no changes in either layout or content. - -------- CentOS Linux 7 / x86_64 install media is available at http://buildlogs.centos.org/rolling/7/isos/x86_64/ File: CentOS-7-x86_64-Minimal-1602-01.iso Sha: 741a28e3d42c40ded2e42b83eda4d8d09137b36ceef584753b94abd298d4dfed File: CentOS-7-x86_64-Everything-1602-01.iso Sha: 6cc79d3f3183318d0089cb04dbfd97418ff009f6fb01bce4849289ede96df45d File: CentOS-7-x86_64-DVD-1602-01.iso Sha: 34120f3bc02e1edd6d5b19516876c8456a1300de4b98da79fb0a7d444d1df3d8 - -------- CentOS Linux 7 / x86_64 Cloud Images are available at : http://cloud.centos.org/centos/7/images/ File: CentOS-7-x86_64-GenericCloud-1602.qcow2 Sha: 1b777fa1ea2b2cf0be7ed6ecce54ef18ece5c6551fb291549b887e33b78d7c78 File: CentOS-7-x86_64-GenericCloud-1602.qcow2c Sha: bc0f51d9376001f8973595b71105b9d53c8c27b3e0969676aab2ab036cc4d835 File: CentOS-7-x86_64-GenericCloud-1602.qcow2.xz Sha: dd0f5e610e7c5ffacaca35ed7a78a19142a588f4543da77b61c1fb0d74400471 File: CentOS-7-x86_64-GenericCloud-1602.raw.tar.gz Sha: f4e679eef79af695bd8f2cb32d37fa93c7cb4644eb79f689bde6bd86100e4af5 - -------- CentOS Atomic Host was released earlier, details for the release are available at : https://lists.centos.org/pipermail/centos-devel/2016-February/014446.htm l - -------- CentOS Linux 6 and 7 AMIs have been updated as well, as follows: CentOS Linux 6 : https://aws.amazon.com/marketplace/pp/B00NQAYLWO/ CentOS Linux 7 : https://aws.amazon.com/marketplace/pp/B00O7WM7QW/ These images are also now enabled across all Amazon EC2 regions, and available on all HVM instance types. This includes the Amazon AWS free tier. - -------- CentOS Linux 7 / x86_64 Vagrant images are updated at https://vagrantcloud.com/centos/boxes/7 and the backing files can be downloaded for libvirt and virtualbox providers at : Libvirt: http://cloud.centos.org/centos/7/vagrant/x86_64/images/CentOS-7-x86_64-V agrant-1602_02.LibVirt.box Virtualbox: http://cloud.centos.org/centos/7/vagrant/x86_64/images/CentOS-7-x86_64-V agrant-1602_02.VirtualBox.box - -------- CentOS Linux 5 / 6 and 7 docker images are updated at http://index.docker.io/_/centos - -------- We welcome all feedback around these rolling builds and media updates at the centos-devel mailing list ( http://lists.centos.org/ ). enjoy! - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJW0O/fAAoJEI3Oi2Mx7xbt0KwH/RUBoINSas2fADErpw0HFJI+ 8QmRa5sH6X5vvBodWMT5qiulkof06IgX6psrniCzYejt88OP0XUjuA0lEh9MUq4a Ie7X5TnXIndH0eGU3UQIivXRojeSTdDjNmbdTQehxTN5WfA/tml29eppMBRt6xEi K56/Ml2FxdU/b1EkCBO68VWcZvAl6gxmtLJv38sFn2WxepDjyrHGF+A10sJqGYt6 V7E32iZqZDwkSmuWwHdf7T0NH9DE9TxcIH/IsRUnYAcwqLcGZm+WqFoD6KRafVAM e2KvLr/L9NwaU6C6rZVWJ1yHwBaYH87xNEGcr69mpR2HJQt3PrlkiTC4wXVKpRg= =015B -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 132, Issue 7 ***********************************************

1 0

Question about cleanly unmounting slave bind mounts
by likan_999.student＠sina.com 27 Feb '16

27 Feb '16

Hi, I asked the question on stackexchange (http://unix.stackexchange.com/questions/264931/centos-7-unable-to-cleanly-u…) and CentOS 7 bug report (https://bugs.centos.org/view.php?id=10414) but didn't get any useful response, so I am thinking if I can get some help here. The problem arose when I tried to rbind mount /dev and /proc to a chroot sandbox and to unmount it, I have to set the mount to slave so that unmounting submounts of <sandbox-root>/dev (e.g. /dev/pts) won't unmount submounts of /dev. This works for other distributions such as Fedora 23 and Ubuntu 14.04, but under CentOS 7, umount succeeds but the directory can't be removed. For some reason, I have to stick to CentOS 7, so I wonder if there is a work around for it. The steps to reproduce: [hidden]$ mkdir -p A B/a C/b [hidden]$ sudo mount --bind A B/a [hidden]$ sudo mount --rbind B C/b [hidden]$ sudo mount --make-rslave C/b [hidden]$ sudo umount C/b/a [hidden]$ sudo umount C/b [hidden]$ rmdir C/b rmdir: failed to remove ‘C/b’: Device or resource busy None of mount, cat /proc/mounts, cat /etc/mtab, sudo lsof, sudo fuser C/b shows any process using the directory C/b; stat C/b shows it is different inode than B, meaning it has already been unmounted successfully. The kernel version is 3.10.0-327.10.1.el7.x86_64. Any suggestion is welcomed.附件（0个）全部下载超大附件（0个）

1 0

CentOS Extras SRPMs for 7.1 / 7.2
by Pierre Riteau 26 Feb '16

26 Feb '16

Hello, I noticed that recent source repositories for CentOS Extras packages do not have SRPMs for each available RPM. In particular, I wanted to download the SRPM for cloud-init. After enabling the extras-source repository, `yumdownloader --source cloud-init` doesn't find any package. This used to work on CentOS 7.0. See the content of the following two repos: http://vault.centos.org/7.2.1511/extras/Source/SPackages/ http://vault.centos.org/7.1.1503/extras/Source/SPackages/ compared with http://vault.centos.org/7.0.1406/extras/Source/SPackages/ It looks like only packages which were updated have made it in the newer repositories. Thanks, Pierre

2 1

Internet Storm Center blogpost on rootcheck (a system auditor)
by Gilbert Sebenste 26 Feb '16

26 Feb '16

Hello everyone, If you haven't seen it: https://isc.sans.edu/forums/diary/Quick+Audit+of+NIX+Systems/20771/ I just compiled and ran it on CentOS 5 and 6. The audit came up clean for me. It's worth a run to see if you have anything blatant wrong...or to see if you have been rooted. Gilbert ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

1 0

Skylake Installs on CentOS-7
by Johnny Hughes 26 Feb '16

26 Feb '16

We were informed that many people were having issues on newer intel (Skylake) platforms installing the latest CentOS-7 and asked if we could find/fix the problem. We found that the latest kernel, kernel-3.10.0-327.10.1.el7, fixes this issue on some machines, so we rebuilt the installer for people having issues. Please see this mail for the new isos: https://lists.centos.org/pipermail/centos-devel/2016-February/014444.html If you are not having issues, you will want to continue to use the standard installers as they provide better support for 3rd party kernel modules, etc. Thanks, Johnny Hughes

1 0

CentOS install disable USB keyboard on Acer AXC 603G UW13
by Juan De Mola 26 Feb '16

26 Feb '16

Hi. I am triying to set up CentOS 5 on an Acer AXC 603G UW13. The install turn off my USB keyboard between /sbin/loader and the media check prompt screen. What I can do to get the install working with the USB keyboard? Thanks. Juan De Mola molaxp(a)aol.com

5 13

IPtables block user from outbound ICMP
by John Cenile 26 Feb '16

26 Feb '16

Hello, Is it possible at all to block all users other than root from sending outbound ICMP packets on an interface? At the moment we have the following two rules in our IPtables config: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP But this still allows ICMP for some reason (but *does* block other TCP/UDP packets, which is what we want, as well as ICMP). Thanks.

7 8

CentOS 7 SELinux issue
by Alice Wonder 25 Feb '16

25 Feb '16

Trying to add SELinux support to my bitcoin package. Keep getting this on install: SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.29, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.29: No such file or directory /sbin/load_policy: Can't load policy: No such file or directory libsemanage.semanage_reload_policy: load_policy returned error code 2. I Tried yum reinstall selinux-policy selinux-policy-targeted restorecon -R -v /etc/selinux as suggested on some mailing lists. Didn't work, same issue. How can I troubleshoot what is causing this? The policy.29 file exists. The RPM responsible for it verifies (and was reinstalled) I don't ordinarily run SELinux and do not have it enabled. Things like that are why, it always ALWAYS got in the way of productivity and when I did run it and I was never hacked without it, so... but I need to figure out what the problem is here.

4 4

Bitcoin for CentOS 7
by Alice Wonder 24 Feb '16

24 Feb '16

For those interested I have a working spec file for Bitcoin 0.12.0 https://github.com/AliceWonderMiscreations/bitcoin/blob/master/contrib/rpm/… I believe the only BuildRequires that isn't in CentOS/EPEL is miniupnpc-devel but that's trivial to build as well. With Bitcoin 0.12.0 the ECC stuff that Red Hat ripped out of OpenSSL doesn't matter anymore. -=- That spec file is somewhat based on what https://www.ringingliberty.com/bitcoin/ does for Fedora / CentOS with a couple noted differences - A) I don't have SELinux stuff (yet). His SELinux stuff is broken on CentOS 7. Only matters for the bitcoin-server package, the GUI client doesn't seem to matter. B) He uses system BerkeleyDB. I build BerkeleyDB when building bitcoin because BerkeleyDB is fragile enough that changes to it can cause a wallet that can't be read by other clients. C) He adds a patch that adds functionality needed by a very small demographic - hardware machines that sell bitcoins. I prefer to not add that patch because I prefer pristine source rather than modifying what the devs produced for a feature 99.9% of the population doesn't need. So I prefer to stick with the precise version that bitcoin.org uses in the binary builds they distribute. Happens to be same version CentOS 7 has now but that may not always be the case. It isn't with CentOS 6. Anyway if anyone one this list has interest, figured I'd share the spec file. Adding SELinux to the server package I will work on. Oh the referenced patch that is there is only needed for LibreSSL, you can comment it out to build against OpenSSL. 0.12.0 seems much faster at indexing than previous versions, and catches up faster when it is behind on blocks.

3 8

CentOS 7, odd message from nfsdcltrack
by m.roth＠5-cent.us 23 Feb '16

23 Feb '16

Is this normal, or a bug, perhaps a mismatch in two pieces (and this server was just updated late yesterday afternoon, and rebooted this morning): <timestamp> <servername> nfsdcltrack[12128]: sqlite_insert_client: insert statement prepare failed: table clients has 2 columns but 3 values were supplied mark

2 1

Substitute pdftk with other command
by Dario Lesca 22 Feb '16

22 Feb '16

Hi, I must migrate a Centos5 server on Centos7 On server Centos5 there is a shell procedure witch add to PDF a timestamp like this example: http://i.stack.imgur.com/OBsqX.png with this command: $ pdftk input.pdf stamp overlay.pdf output stamped.pdf Into Centos7 pdftk it is no longer allowed Someone knows some other command to replace it or other ways to do this? Or how I can install pdftk on Centos7. Many thanks for your help. -- Dario Lesca (inviato dal mio Linux Fedora 23 Workstation)

3 4

Network hangs after several hours (Centos 6 recently upgraded kernel/glibc)
by Ian B 22 Feb '16

22 Feb '16

Hi all, We have a development server we have just tried updating the kernel & glibc after recent recommendations. Its been stable previously for a few years with only scheduled reboots. Its running Centos 6.6(final) 2.6.32-573.18.1.el6.x86_64 GNU libc 2.12 Upgraded via YUM, rebooted, all fine for several hours, and then network seemed to hang. Not much happening as its a dev server we are testing before moving to production. Googling, I see there is some history of e100e driver having issues, and I'm wondering if it could be related. Does anyone have any thoughts on where to do with it, as I'm assuming it will hang again later. Thanks, Ian Feb 18 05:04:36 kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) Feb 18 05:04:36 kernel: Hardware name: X9SCL/X9SCM Feb 18 05:04:36 kernel: NETDEV WATCHDOG: eth0 (e1000e): transmit queue 0 timed out Feb 18 05:04:36 kernel: Modules linked in: ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables ipv6 ext4 jbd2 e1000e serio_raw i2c_i801 i2c_core sg iTCO_wdt iTCO_vendor_support shpchp ext3 jbd mbcache raid1 sd_mod crc_t10dif ahci dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan] Feb 18 05:04:36 kernel: Pid: 0, comm: swapper Not tainted 2.6.32-220.4.2.el6.x86_64 #1 Feb 18 05:04:36 kernel: Call Trace: Feb 18 05:04:36 kernel: <IRQ> [<ffffffff81069a17>] ? warn_slowpath_common+0x87/0xc0 Feb 18 05:04:36 kernel: [<ffffffff81069b06>] ? warn_slowpath_fmt+0x46/0x50 Feb 18 05:04:36 kernel: [<ffffffff8144a4fd>] ? dev_watchdog+0x26d/0x280 Feb 18 05:04:36 kernel: [<ffffffff8108b3fd>] ? insert_work+0x6d/0xb0 Feb 18 05:04:36 kernel: [<ffffffff8144a290>] ? dev_watchdog+0x0/0x280 Feb 18 05:04:36 kernel: [<ffffffff8107c7f7>] ? run_timer_softirq+0x197/0x340 Feb 18 05:04:36 kernel: [<ffffffff810a0a10>] ? tick_sched_timer+0x0/0xc0 Feb 18 05:04:36 kernel: [<ffffffff8102ad6d>] ? lapic_next_event+0x1d/0x30 Feb 18 05:04:36 kernel: [<ffffffff81072001>] ? __do_softirq+0xc1/0x1d0 Feb 18 05:04:36 kernel: [<ffffffff81095610>] ? hrtimer_interrupt+0x140/0x250 Feb 18 05:04:36 kernel: [<ffffffff8100c24c>] ? call_softirq+0x1c/0x30 Feb 18 05:04:36 kernel: [<ffffffff8100de85>] ? do_softirq+0x65/0xa0 Feb 18 05:04:36 kernel: [<ffffffff81071de5>] ? irq_exit+0x85/0x90 Feb 18 05:04:36 kernel: [<ffffffff814f4d70>] ? smp_apic_timer_interrupt+0x70/0x9b Feb 18 05:04:36 kernel: [<ffffffff8100bc13>] ? apic_timer_interrupt+0x13/0x20 Feb 18 05:04:36 kernel: <EOI> [<ffffffff812c49de>] ? intel_idle+0xde/0x170 Feb 18 05:04:36 kernel: [<ffffffff812c49c1>] ? intel_idle+0xc1/0x170 Feb 18 05:04:36 kernel: [<ffffffff813f9ef7>] ? cpuidle_idle_call+0xa7/0x140 Feb 18 05:04:36 kernel: [<ffffffff81009e06>] ? cpu_idle+0xb6/0x110 Feb 18 05:04:36 kernel: [<ffffffff814d40ca>] ? rest_init+0x7a/0x80 Feb 18 05:04:36 kernel: [<ffffffff81c1ff76>] ? start_kernel+0x424/0x430 Feb 18 05:04:36 kernel: [<ffffffff81c1f33a>] ? x86_64_start_reservations+0x125/0x129 Feb 18 05:04:36 kernel: [<ffffffff81c1f438>] ? x86_64_start_kernel+0xfa/0x109 Feb 18 05:04:36 kernel: ---[ end trace 21915186e9d87b29 ]--- modinfo e1000e | grep version version: 3.2.5-k srcversion: 8CCA78B3C15DE6229299348 vermagic: 2.6.32-573.18.1.el6.x86_64 SMP mod_unload modversions 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 Processor Family DRAM Controller (rev 09) 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #2 (rev 05) 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 1 (rev b5) 00:1c.4 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 5 (rev b5) 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #1 (rev 05) 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a5) 00:1f.0 ISA bridge: Intel Corporation C202 Chipset Family LPC Controller (rev 05) 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family SATA AHCI Controller (rev 05) 00:1f.3 SMBus: Intel Corporation 6 Series/C200 Series Chipset Family SMBus Controller (rev 05) 02:00.0 Ethernet controller: Intel Corporation 82574L Gigabit Network Connection 03:03.0 VGA compatible controller: Matrox Electronics Systems Ltd. MGA G200eW WPCM450 (rev 0a)

5 8

where did SCL go?
by jason welsh 22 Feb '16

22 Feb '16

monsterjam:/etc/letsencrypt/archive/monsterjam # yum --enablerepo=extras install centos-release-SCL Loaded plugins: fastestmirror, remove-with-leaves Setting up Install Process Loading mirror speeds from cached hostfile * base: mirror.dattobackup.com * epel: mirror.us.leaseweb.net * extras: distro.ibiblio.org * updates: mirror.netdepot.com No package centos-release-SCL available. Error: Nothing to do monsterjam.org:/etc/letsencrypt/archive/monsterjam # cat /etc/centos-release CentOS release 6.7 (Final) monsterjam:/etc/letsencrypt/archive/monsterjam # any ideas?

3 3

Kernel panic and crash, was Re: [CentOS-announce] CEBA-2016:0150 CentOS 6 kernel BugFix Update
by Max Pyziur 21 Feb '16

21 Feb '16

Greetings, I just tried upgrading one of my CentOS boxes to this kernel. It crashes; the screen looks like this: http://www.brama.com/~deckard/P1010308.JPG So, I'm continuing to run on kernel-2.6.32-504.23.4.el6.x86_64 I had previously reported this, and I was told that the reported bug was here: https://bugs.centos.org/view.php?id=9374 Looking at it now, I see that it is closed. It's odd that CentOS is releasing a production kernel that fails. fyi, Max Pyziur pyz(a)brama.com On Wed, 10 Feb 2016, Johnny Hughes wrote: > > CentOS Errata and Bugfix Advisory 2016:0150 > > Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0150.html > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > i386: > b5f33a81b28d0a89af970bc08c4a07856c13f9789fe520e90d237dc7a2e5df65 kernel-2.6.32-573.18.1.el6.i686.rpm > 8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793 kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm > cba169e9faf5ebc0ba25011f3b920de1a3a2943b7e46be6292193b31df7b8a5a kernel-debug-2.6.32-573.18.1.el6.i686.rpm > a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm > 5151ae3d0f6dde51c1ec991e14b88f0308ef7d46975ee7e9ed036f1381153901 kernel-devel-2.6.32-573.18.1.el6.i686.rpm > 74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb kernel-doc-2.6.32-573.18.1.el6.noarch.rpm > 38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm > f318d66d12c72c060e8f644aa90d0c10099f1ab8ba5e24875f2a1ace22e35a57 kernel-headers-2.6.32-573.18.1.el6.i686.rpm > 81ef77b0d7841946bf8825e599c1f6a6015082013b5ea02a836db34e19ca7fbc perf-2.6.32-573.18.1.el6.i686.rpm > a8fa3ef717f09235052dd6bd4285be52ff494ea8c242788df16eda5b9aed7fb6 python-perf-2.6.32-573.18.1.el6.i686.rpm > > x86_64: > 1cb5031871e077e7d70fec7801901a948438d10f226ffb4311540c28f9253a55 kernel-2.6.32-573.18.1.el6.x86_64.rpm > 8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793 kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm > 9f31b8f7f4db48d8ba30c16564cb6ad614d04b7d63811c274134654607cbce08 kernel-debug-2.6.32-573.18.1.el6.x86_64.rpm > a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm > 16cb431b4a01c6b3b915e646c971fa0c79e62f4feeffd57939f39df687ebc6a3 kernel-debug-devel-2.6.32-573.18.1.el6.x86_64.rpm > b81c297339078d80dda73d86a1aec61c50d7fb05728585c1ebbe81bb088851bf kernel-devel-2.6.32-573.18.1.el6.x86_64.rpm > 74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb kernel-doc-2.6.32-573.18.1.el6.noarch.rpm > 38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm > 9dd3a3533ebb6646bafafef2229b6142fa0277f34a534e7c74f3c8cacafd7296 kernel-headers-2.6.32-573.18.1.el6.x86_64.rpm > 5ff27ecbdca7013f093d697f4ba3bcaa9b14be03ef79cafb4a3ed3d0aef1bf69 perf-2.6.32-573.18.1.el6.x86_64.rpm > c5fee073bee1f19dc848a8302e07e4241e49cbff55f35a3db5ae903352f11dc4 python-perf-2.6.32-573.18.1.el6.x86_64.rpm > > Source: > ef3c944af9b7e94448e3c343da7d6f582b267aa9a5653586b8b9332351b01afc kernel-2.6.32-573.18.1.el6.src.rpm > > > >

2 1

centos7 :: ks.cfg :: customisation of sshd
by Adrian Sevcenco 19 Feb '16

19 Feb '16

Hi! I want to change the sshd port at install for centos7 but i am not sure if i am on the good track (and it is time expensive to make many try-outs).. So, i would be grateful if someone with experience can spot if i have problems with my planning.. (the actual purpose is that after installation i have access for my ansible provisioning) first make sure ssh is started services --enabled=sshd,chronyd then .. i imagine that in the %post section %post --interpreter=/usr/bin/bash --log=/root/ks-post.log 1. i could use sed to change the port sed -i 's/#Port\ 22/Port 60000/' /etc/ssh/sshd_config 2. sed -i 's/#PermitRootLogin\ yes/PermitRootLogin\ yes/' /etc/ssh/sshd_config 3. enable key access mkdir -p /root/.ssh chmod 700 /root/.ssh cat << EOF >> /root/.ssh/authorized_keys my_ssh_pubkey EOF 4. semanage port -a -t ssh_port_t -p tcp 60000 5. firewall-cmd --permanent --zone=public --add-port=60000/tcp 6. systemctl enable firewalld.service did i miss anything? Thank you! Adrian

4 4

CentOS-announce Digest, Vol 132, Issue 6
by centos-announce-request＠centos.org 19 Feb '16

19 Feb '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0258 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 2. CESA-2016:0258 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 3. CESA-2016:0258 Important CentOS 5 thunderbird Security Update (Johnny Hughes) 4. CEBA-2016:0268 CentOS 6 ptlib FASTTRACK BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 18 Feb 2016 17:19:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0258 Important CentOS 7 thunderbird Security Update Message-ID: <20160218171924.GA56122(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0258 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d97294b0f502e02f49e4d2ca9a3fb5cc368a3ad6c08162e06e509e607a00a307 thunderbird-38.6.0-1.el7.centos.x86_64.rpm Source: 2555990fee9e57f5a64ea43642860f30fe807d073e48d048665adadb1bc489f1 thunderbird-38.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 18 Feb 2016 18:42:37 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0258 Important CentOS 6 thunderbird Security Update Message-ID: <20160218184237.GA57736(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0258 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b6943f1cda53a9c502ee9839f608c29d0e75cf44673490822c93f395e3f40141 thunderbird-38.6.0-1.el6.centos.i686.rpm x86_64: 5a1261b9965569d707060f8e7ff869288d7e0361efe4e5637086bf6295afe27a thunderbird-38.6.0-1.el6.centos.x86_64.rpm Source: 4f89116b8b8bda266f2063760ceb136832e8e2d874ffd33d9e424d479d980a63 thunderbird-38.6.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 19 Feb 2016 04:09:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0258 Important CentOS 5 thunderbird Security Update Message-ID: <20160219040941.GA32077(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0258 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fc47e7fd94bd3079266b27f1307d954fd5a9f9442a91c3a2cb6172e86faa9224 thunderbird-38.6.0-1.el5.centos.i386.rpm x86_64: ec8dcb696078c89e8aa535036e750f5e4e06e40dbcd883e255287ea6b69bd61e thunderbird-38.6.0-1.el5.centos.x86_64.rpm Source: 2e6c718b8d5ce3cf2919e8c44995d1048ae923f32159b06cfc6f0dd06caa2088 thunderbird-38.6.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 4 Date: Fri, 19 Feb 2016 04:19:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0268 CentOS 6 ptlib FASTTRACK BugFix Update Message-ID: <20160219041941.GA19991(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0268 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0268.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0348146563840e96432128fce8893e5c1e052b8c7a04731580b71ef6ec88d928 ptlib-2.6.5-5.el6.i686.rpm f15fb5b00ef80df31948e084c9746c4d38af9b8f6f17f435ee35a2a420a1805b ptlib-devel-2.6.5-5.el6.i686.rpm x86_64: 0348146563840e96432128fce8893e5c1e052b8c7a04731580b71ef6ec88d928 ptlib-2.6.5-5.el6.i686.rpm 9591b407f7f281255041138bea978c25fa450d4db068cc267396eef5f47e82d4 ptlib-2.6.5-5.el6.x86_64.rpm f15fb5b00ef80df31948e084c9746c4d38af9b8f6f17f435ee35a2a420a1805b ptlib-devel-2.6.5-5.el6.i686.rpm 16d22c5bd3e7e1f8c2030c3c9cfedbb8d8163bd079d91fa284e299ec4d2f9e77 ptlib-devel-2.6.5-5.el6.x86_64.rpm Source: 77f35943cb9f218305dad4478269b10bc9b932a7376710c6a4ad147b6aeeab52 ptlib-2.6.5-5.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 132, Issue 6 ***********************************************

1 0

dhcpd frequent renewals
by david 19 Feb '16

19 Feb '16

Folks This might be the wrong place to ask, but I don't know where to turn. My internal home network, including wireless, is controlled by a Centos6 server, which provides dhcpd services, along with NAT. I have DHCPD configured with the addresses 192.168.155.200 through 192.168.155.254 as the range for dynamic allocations. The default-lease time is 1800 seconds, the maximum is 3600 seconds. My windows clients, and even an ipad-mini behave nicely, asking for DHCP renewals once ever five minutes, or at about 80% of the default lease time, a behavior I can understand. However, several of my guests, with their own iPads, I-watches, iPhones, connect to my network (via a wireless access point which does not do routing functions) and they're renewing once every 20-30 seconds. In addition, these devices also loose connectivity for brief intervals, which seems to be roughly synchronized with dhcp renewal. This last fact I deduce by doing "tail -f /etc/log/messages" and hearing them say "lost connection" at just about the same moment the DHCPREQUEST and DHCPACK statements show up. It's difficult to believe that Apple IOS devices (all of which are running apple's latest) have a dhcp client problem not shared by windows or even linux hosts. Does anyone have any clues? David Kurn San Francisco DHCPD.CONF file is excerpted below: ---------------------------------------- ddns-update-style none; subnet 192.168.155.0 netmask 255.255.255.0 { authoritative; option routers 192.168.155.2; option subnet-mask 255.255.255.0; option broadcast-address 192.168.155.255; option domain-name "daku.org"; option domain-name-servers 192.168.155.2; option netbios-name-servers 192.168.155.2; option time-offset -28800; # Pacific standard time range dynamic-bootp 192.168.155.200 192.168.155.254; default-lease-time 1800; max-lease-time 3600; } --------------------------------------------

2 3

CentOS 7, Xeon CPUs, not booting
by m.roth＠5-cent.us 18 Feb '16

18 Feb '16

This is happening on anything other than plain vanilla Dell servers. One R730, with dual Tesla cards, one R420, with a fibre card for a RAID device, it never switches root. All these systems have Xeons, not AMD CPUs. We've had this with every one of the 327 kernels. In addition, it seems to happen also with the 229.20.1; the 229.14.1 has no such problem. >From the rdsosreport: starting at line 126: /dev/disk/by-label: total 0 lrwxrwxrwx 1 root 0 10 Jan 27 19:03 SWAP -> ../../sda2 lrwxrwxrwx 1 root 0 10 Jan 27 19:03 \x2f -> ../../sda3 lrwxrwxrwx 1 root 0 10 Jan 27 19:03 \x2fboot -> ../../sda1 Then, starting at line 1283: [ 3.317027] <servername> systemd[1]: Found device ST500NM0003-9ZM172 /. [ 3.317974] <servername> systemd[1]: Starting File System Check on /dev/disk/by-label/\x2f... [ 3.320089] <servername> systemd-fsck[590]: Failed to detect device /dev/disk/by-label// [ 3.320567] <servername> systemd[1]: systemd-fsck-root.service: main process exited, code=exited, status=1/FAILURE [ 3.320972] <servername> systemd[1]: Failed to start File System Check on /dev/disk/by-label/\x2f. Does *ANYONE* have any clues as to what's going on? Meanwhile, on a plain vanilla Dell R420, I see: ll /dev/disk/by-label/ total 0 lrwxrwxrwx. 1 root root 10 Feb 17 10:06 SWAP -> ../../sda2 lrwxrwxrwx. 1 root root 10 Feb 17 10:06 boot -> ../../sda1 lrwxrwxrwx. 1 root root 10 Feb 17 10:06 root -> ../../sda3 So, what is this by-label with the x2f, and why can't it find the drives? Or do I have to file a bug report? This is a true show-stopper. mark

3 4

Can't install CentOS 7 on SuperMicro X7DB3 with Adaptec AIC-9410 Controller
by homeryan＠sina.com 18 Feb '16

18 Feb '16

I have a server with Super Micro X7DB3 motherboard and Adaptech AIC-9410 controller (http://www.supermicro.com/products/motherboard/Xeon1333/5000P/X7DB3.cfm) The hard disk is single SeaGate SAS disk (300Gb). I'd like to install CentOS 7 on the server, but unfortunately, the CentOS installer can't find any hard disk. I think the problem maybe caused by the disk controller. Can you please tell me how to fix the problem ? Thanks for your help!

2 1

Thunderbird can not import S/MIME certificate
by Timo Schoeler 18 Feb '16

18 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, in May 2015 I reported [0] that I can not import my S/MIME certificate. Issuer is GlobalSign. Jan Horak reassigned it to the nss guys ("This seems to be problem in NSS code, reassigning to nss component"), but then the ticket idled and was eventually closed by EOL of Fedora 21 (though I stated it persists with F22). I just reopened the ticket because it still doesn't work. The certificate itself is okay, it works on other platforms. Nobody else using S/MIME? Best, Timo https://bugzilla.redhat.com/show_bug.cgi?id=1218977 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlbFgGYACgkQuSPmkPhAW0r2QQD+Pn97WYQNwItYmJ4eqgMm4ufk SSWrC4Yjm7iEYNotTkEA/RbB9lLTjecLaCpkQ33zV1bVCcHdsvQfi/WLhZH5zwur =/SFq -----END PGP SIGNATURE-----

2 1

New glibc for CentOS-6 and CentOS-7 and CVE-2015-7547
by Johnny Hughes 18 Feb '16

18 Feb '16

I normally just let the daily announce post to this list show what is available for updates, but there is a CVE (CVE-2015-7547) that needs a bit more attention which will be on today's announce list of updates. We released a new glibc yesterday for CentOS-6 and CentOS-7 .. it is VERY important that all users update to these versions: This update is rated as Critical by Red Hat, meaning that it is remotely exploitable under some circumstances. Make sure this update works in your environments and update as soon as you can. CentOS-7: https://lists.centos.org/pipermail/centos-announce/2016-February/021672.html https://rhn.redhat.com/errata/RHSA-2016-0176.html CentOS-6: https://lists.centos.org/pipermail/centos-announce/2016-February/021668.html https://rhn.redhat.com/errata/RHSA-2016-0175.html These mitigate CVE-2015-7547: https://access.redhat.com/security/cve/CVE-2015-7547 https://bugzilla.redhat.com/show_bug.cgi?id=1293532 Can't stress how important this update is .. here are a couple stories: http://arstechnica.com/security/2016/02/extremely-severe-bug-leaves-dizzyin… http://www.theregister.co.uk/2016/02/16/glibc_linux_dns_vulernability/ Please note that the ONLY way this is tested to work is with ALL updates from CentOS-6 or CentOS-7 applied along with the glibc updates. So a yum update with base and updates repo enabled is the ONLY tested scenario. Did I say *ONLY* enough? Thanks, Johnny Hughes

6 16

CentOS 6.7 Drivers for Compaq Storageworks TL891 Minilibrary
by Mustafa Mohammed 18 Feb '16

18 Feb '16

Hello all I am trying to setup a backup system using Bacula on CentOS 6.7 installed on eserver x345 but cannot find the drivers Any help in finding the drivers will be much appreciated Regards Mustafa

3 3

Systemd persistent change to service file
by Michael H 18 Feb '16

18 Feb '16

Hi All, I had my database fall over earlier, Initially I thought it was due to a change in the OS but the postgresql update overwrote my systemd service file. How can I create a file for my postgresql service that will not be overwritten when updates are applied? Am I correct in thinking it will be something like vi /etc/systemd/system/postgresql.service.d/postgresql-limit-stack.conf #with the contents: .include /etc/systemd/system/multi-user.target.wants/postgresql.service [Service] LimitSTACK=17825792 thanks Michael

3 2

slightly off-topic, RAID program for on-board SAS 2308-4i ?
by Zube 17 Feb '16

17 Feb '16

Does anyone know what program can be used to query the RAID status from the OS for an on-board LSI SAS 2308-4i? On this page: http://docs.avagotech.com/docs/12351997 there is a curious note on the left that reads: "Integrated MegaRAID support available upon request" After one mostly fruitless round of chatting with LSI/Avago/Broadcom and one completely fruitless round of chatting with HP, I found confirmation under the storage section here: http://www8.hp.com/us/en/mpc/workstations/product-detail.html?oid=5225041#!… It looks like HP didn't "request" MegaRAID support, so MegaCli and StorCli don't see anything and neither does lsiutils (nor hpacucli, tried just for a laugh). Any clues appreciated. Thanks for your time. Cheers, Zube

3 4

Openswan <-> VyOS
by John Cenile 17 Feb '16

17 Feb '16

Hello, I'm having a bit of trouble connecting our current CentOS Openswan server with a Vyos server via IPSec. I've posted this on the VyOS forums, but haven't had many helpful responses, so I thought I would ask here. http://forum.vyos.net/showthread.php?tid=26504&pid=29703#pid29703 Basically our Openswan configuration is as follows: conn VYOS keyingtries=0 keylife=20m ikelifetime=2h left=<VYOS IP> right=<OPENSWAN IP> leftsubnets={ 10.1.1.0/24,10.1.2.0/24,10.1.3.0/24,10.1.4.0/24,10.1.5.0/24} rightsubnets={10.2.1.0/24,10.2.2.0/24,10.2.3.0/24,10.2.4.0/24} auto=start authby=secret dpddelay=30 dpdtimeout=120 dpdaction=hold phase2alg=aes256-sha1;modp1536 phase2=esp ike=aes256-sha1;modp1536 Our VyOS configuration is posted in the above forum post, except now I have followed their advice and created 20 tunnels (each subnet to each subnet, if that makes sense). However, when I enabled this, I got the following errors on the Openswan server: Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/3x3" #70: next payload type of ISAKMP Hash Payload has an unknown value: 243 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/3x3" #70: malformed payload in packet Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/3x3" #70: sending notification PAYLOAD_MALFORMED to <VYOS IP>:500 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/4x4" #69: next payload type of ISAKMP Hash Payload has an unknown value: 170 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/4x4" #69: malformed payload in packet Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/5x4" #68: next payload type of ISAKMP Hash Payload has an unknown value: 63 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/5x4" #68: malformed payload in packet And on our VyOS server we got the following errors: Feb 18 01:17:19 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: sending encrypted notification INVALID_ID_INFORMATION to <OPENSWAN IP>:500 Feb 18 01:17:19 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: cannot respond to IPsec SA request because no connection is known for 10.1.1.0/24===<VYOS IP>[<VYOS IP>]...<OPENSWAN IP>[<OPENSWAN IP>]=== 10.2.3.0/24 Feb 18 01:17:19 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: sending encrypted notification INVALID_ID_INFORMATION to <OPENSWAN IP>:500 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-11" #422: cannot install eroute -- it is in use for "peer-<OPENSWAN IP>-tunnel-3" #403 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-16" #421: cannot install eroute -- it is in use for "peer-<OPENSWAN IP>-tunnel-4" #395 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #420: cannot install eroute -- it is in use for "peer-<OPENSWAN IP>-tunnel-5" #417 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: Informational Exchange message must be encrypted Feb 18 01:17:24 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x14702d90 (perhaps this is a duplicated packet) Feb 18 01:17:24 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: sending encrypted notification INVALID_MESSAGE_ID to <OPENSWAN IP>:500 Does anyone have any idea what I might be doing wrong? I've tried doing only 5 tunnels, however then some subnets couldn't reach certain subnets (as I said in the VyOS forum thread), and now I've tried each subnet to each subnet. I can't find much (any) information on it, but does Openswan support VTI interfaces? Would that solve my problem? Thanks in advance.

3 2

Nearly Instant Karma
by Chris Olson 17 Feb '16

17 Feb '16

Our smallest network has just three systems permanently attached to a 100/1000 router. There is one additional port available to temporarily plug in a laptop. The largest systems are both Dells, one running Windows 7 and one running CentOS 6.7. The Windows 7 system supports three flavors of Linux as virtual machines. The CentOS system is often used for data file import from USB-attached devices such as cell phones, charging batteries in the USB-attached devices, and for access to external email accounts. The CentOS system was in power save mode when I plugged in a Samsung cell phone for charging and extraction of several photo files. I then moved to the Windows 7 system to do some "paper work" on a web site that is known to require the use of IE for browser access. While on the Windows 7 system I did a quick email check and responded to one of our contacts at a remote site. He was having "difficulty" with file from an external site downloaded on his Windows 7 system. I took the opportunity in my email reply to comment on the great safety and stability of Linux systems. After about two hours I returned to the CentOS 6.7 system to check on the charging status and move the photo files. Yellow lights were showing on both computer and monitor. The system display, and the optical mouse would not return to normal operation as they usually do with a quick push on the front power button. The power button light did turn green and I was able to log in via ssh from a Cygwin shell on the Windows 7 system. It took two reboots executed remotely to bring back full display and mouse functionality. I believe that this was the first time anyone has plugged in a USB device into the CentOS 6.7 system while it is in power save mode.We now have a warning tag hanging over the USB ports on the system. Is there some characteristic of CentOS systems that we should have known about that could have caused this problem? Does Yahoo web mail have an easy way to retract my gloating email?

1 0

Alternative IP addresses
by Timothy Murphy 17 Feb '16

17 Feb '16

My CentOS-7 home server has a static IP address. Is there a simple way of organizing the hpptd server so that it is accessible through this address at a remote host, but is accessed at its 192.168 address by a laptop on the WiFi LAN? -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

5 8

heads up: /boot space on kernel upgrade
by Devin Reade 16 Feb '16

16 Feb '16

I have a CentOS 6 machine that was initially installed as CentOS 6.4 in May of 2013. It's /boot filesystem is 200M which, IIRC, was the default /boot size at the time. The most recent kernel update (2.6.32-573.18.1.el6) fails because of lack of space in /boot. The workaround is edit /etc/yum.conf, reduce installonly_limit from 5 to something lower (I used 3), remove the oldest kernel via 'rpm -e', and then re-apply the update. In this case, it was necessary to use the 'yum update' command line vs the Update Applet due to an incomplete transaction from the failed update. Devin

14 20

nfs v3 issues on Centos 7
by Edsall, William (WJ) 16 Feb '16

16 Feb '16

Hello list, So I'm having a strange issue with Centos 7 mounting NFS V3. It starts with autofs. For example, my auto.share file: apps -nfsvers=3 some-server:/mnt/xfs1/& This will mount, but the first mount takes ~30 sec. After this, eventually the mount becomes stale but it still shows as connected in 'mount'. At this point, I can no longer mount NFS shares. Manual mounting example shown below. Any feedback would be appreciated - thank you! /etc/centos-release :::::::::::::: CentOS Linux release 7.1.1503 (Core) mount -t nfs -o vers=3 mdstor:/mnt/xfs1/apps tmpx -v mount.nfs: timeout set for Tue Feb 16 08:33:31 2016 mount.nfs: trying text-based options 'vers=3,addr=143.219.41.19' mount.nfs: prog 100003, trying vers=3, prot=6 mount.nfs: trying 143.219.41.19 prog 100003 vers 3 prot TCP port 2049 mount.nfs: prog 100005, trying vers=3, prot=17 mount.nfs: trying 143.219.41.19 prog 100005 vers 3 prot UDP port 892 mount.nfs: mount(2): Input/output error mount.nfs: mount system call failed Thanks, William

2 2

Update on Kernel panic executing gkrellm.
by Lamar Owen 16 Feb '16

16 Feb '16

For what it's worth, back in April of last year I reported that gkrellm had started generating kernel panics with 7.1503's kernel. I can now report that with the latest 7.1511 kernels (327.4.5 being the latest I have installed) gkrellm is once again behaving for me. Just wanted to close the loop and say that whatever had broken has been fixed, for my hardware.

1 0

How to install packages from git.centos.org
by Tim 16 Feb '16

16 Feb '16

Hi all, how can I install rpms from git.centos.org? I'd like to install and test the realtime-kernel. It seems to me that https://wiki.centos.org/Sources only means to build srpms. What I ned is an rt-kernel with headers for further compiling. Purpose: I'd like to build a digital audio workstation and for this I'd like to try out CentOS with the following packages first: - kernel-rt - ardour - calf-plugins BTW: Is there an audio SIG? Thanks in advance Tim

2 4

USB Serial ports (ttyACMn) CentOS 6.7 (64-bit) vs. CentOS 6.7 (64-bit)
by Robert Heller 16 Feb '16

16 Feb '16

I have two computers: both running CentOS 6.7, 64-bit, with kernel 2.6.32-573.12.1.el6.x86_64. One is a laptop with an 2 core Intel processor and the other is a desktop machine with a 4 core AMD processor. Both with selinux enabled. I have a USB serial port device (a RR-CirKits LCC-Buffer USB). On the desktop I am getting this error: sauron.deepsoft.com% sudo minicom Device /dev/ttyACM0 access failed: No such file or directory. sauron.deepsoft.com% dir -lZ /dev/ttyACM0 crw-rw----. root dialout system_u:object_r:tty_device_t:s0 /dev/ttyACM0 But it is working on the laptop! gollum.deepsoft.com% dir -lZ /dev/ttyACM1 crw-rw----. root dialout system_u:object_r:tty_device_t:s0 /dev/ttyACM1 Same kernel, same device (except it is showing up as ttyACM1 on the laptop). What is going on here? -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

5 8

rpm containing gmessage???
by ken 16 Feb '16

16 Feb '16

Maybe I haven't run the correct yum commands or looked in the right repo, but I haven't found a utility called 'gmessage'. Anyone know where to find it?

2 8

Re: [CentOS] USB Serial ports (ttyACMn) CentOS 6.7 (64-bit) vs. CentOS 6.7 (64-bit)
by Robert Heller 15 Feb '16

15 Feb '16

At Sun, 14 Feb 2016 19:20:48 -0500 Robert Heller <heller(a)deepsoft.com> wrote: > > At Mon, 15 Feb 2016 09:41:32 +1100 CentOS mailing list <centos(a)centos.org> wrote: > > > > > On 14/02/16 02:14, Robert Heller wrote: > > > I sent this out about a week or so ago, but I have heard nothing. I am > > > *thinking* it is a SELINUX problem, but I cannot figure out what. > > > > > > > If you suspect SELinux is to blame, have you tried putting SELinux into > > permissive mode to see that resolves the issues? > > > > setenforce 0 (re-enable with setenforce 1) > > I guess I can try that. > > > > > If everything works with SELinux in permissive mode, then you'll need to > > create a policy for it *[0]*. > > That would imply that somehow the policies on my laptop are *different* than > the policies on my desktop. *I* don't remember setting any such policies... OK, I just tested it: sauron.deepsoft.com% sudo /usr/sbin/setenforce permissive sauron.deepsoft.com% sudo minicom Device /dev/ttyACM0 access failed: No such file or directory. sauron.deepsoft.com% sudo /usr/sbin/setenforce enforcing Nope, that did not help. > > > > > > > ak. > > > > *[0]*: > > https://wiki.centos.org/HowTos/SELinux#head-faa96b3fdd922004cdb988c1989e561… > > > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > > > -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

2 1

safest way to mount iscsi loopback..
by lejeczek 15 Feb '16

15 Feb '16

.. what is? fellow centosians. how to you mount your loopback targets? I'm trying lvm backstore, I was hoping I would do it with uuid, but it's exposed more than once and how would kernel decide which device to use I don't know. thanks

3 4

abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected
by Michael H 15 Feb '16

15 Feb '16

Hi All, I've been tuning a server recently and just today this has started to appear in my top/htop output. [root@db1 ~]# ps -aux | grep kernel root 1011 0.0 0.0 212048 4532 ? Ss 13:34 0:00 /usr/bin/abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected ernel BUG at list_del corruption list_add corruption do_IRQ: stack overflow: ear stack overflow (cur: eneral protection fault nable to handle kernel ouble fault: RTNL: assertion failed eek! page_mapcount(page) went negative! adness at NETDEV WATCHDOG ysctl table check failed : nobody cared IRQ handler type mismatch Machine Check Exception: Machine check events logged divide error: bounds: coprocessor segment overrun: invalid TSS: segment not present: invalid opcode: alignment check: stack segment: fpu exception: simd exception: iret exception: /var/log/messages -- /usr/bin/abrt-dump-oops -xtD I had made a few changes to sysctl.conf which I have now reverted and the error still exists. my sysctl.conf contained; vm.swappiness=0 vm.overcommit_memory=2 vm.overcommit_ratio=90 - this was only added this morning because of an 'out of memory' error in postgresql. kernel.shmmax=35433480192 kernel.shmall=2214592512 which I have now removed. Can anyone shine any light on this? A little search on Google mentions faulty memory, I will install memtest today and see what the output is like. Thanks Michael

2 1

A repo with latest httpd for http2?
by SternData 13 Feb '16

13 Feb '16

Is there a well-run package repo that has httpd-2.4.17 or mod_http2 (or mod_h2)? I'd like to try out http2 without having to compile my own httpd. -- -- Steve

7 7

ananconda update.img creation fails: generated but with wrong python version in /usr/sbin/anaconda contained
by David Copperfield 11 Feb '16

11 Feb '16

Hi all, I've created an anaconda update.img file per instructions at https://fedoraproject.org/wiki/Anaconda/Updates for Centos 7.2. The problem is that the update.img file contains references to python3 (say, file /usr/sbin/anaconda), and so the all installation fails immediately. My question is: what are the steps to create an anaconda update image appropriate for a particular centos release? Thanks a lot. The steps I have performed (to create an update.img) are listed below: 1) find the version of ananconda that centos 7.2 installation media: 21.48.22.56-1. 2) follow the instructions at the above wiki page, and wiki https://fedoraproject.org/wiki/Anaconda. Run the following command (to generate update.img): 2.1 yum -y install git 2.2 git clone https://fedoraproject.org/wiki/Anaconda 2.3 cd anaconda 2.4 scripts/makeupdates -t anaconda-21.48.22.56-1 3) save the generated image to place under .../images directory. >From what I see, all PXE clients did download the new update.img file and merge the changes contained. But because the updated anaconda pointed to python3 instead of python 2.7.5 (the version comes with installation media), the installation process failed immediately. Thanks. Best,David

1 0

OpenSwan Drop Out Issue
by John Cenile 11 Feb '16

11 Feb '16

Hello, I'm cross posting this from the OpenSwan mailing list, in case someone here can help. We have two sites connected via OpenSwan 2.6.32-9 on CentOS 5, sharing 6 /24 subnets each (so 12 in total). The problem we're having is completely randomly, be it in the middle of the day, or in the middle of the night (so I don't believe it's traffic related), certain (and sometimes all) routes will drop. They usually recover after a few minutes, but it's still long enough for our monitoring to detect downtime. The configuration we have on each device is: conn site-a keyingtries=0 keylife=1h ikelifetime=8h left=1.1.1.1 right=2.2.2.2 leftsubnets={x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24} rightsubnets={x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24} pfs=yes auto=start authby=secret dpddelay=30 dpdtimeout=120 dpdaction=hold phase2alg=aes256-sha1;modp1536 phase2=esp ike=aes256-sha1;modp1536 It's mirrored exactly the same on the other side. I have tried changing the dead peer detection timeout to something high (5 minutes), and removing it completely (which I believe defaults it to 30 seconds), neither of which made any difference. I can't see any very obvious errors in the logs, however the most recent drop out produced the following message around the same time: Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #39: max number of retransmissions (2) reached STATE_QUICK_I1 Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #39: starting keying attempt 2 of an unlimited number Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #95: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW+SAREFTRACK to replace #39 {using isakmp#52 msgid:119495de proposal=AES(12)_256-SHA1(2)_160 pfsgroup=OAKLEY_GROUP_MODP1536} and also Feb 10 00:52:25 site-a-vpn pluto[2414]: "site-b/6x6" #1: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xde58eea3) not found (maybe expired) Feb 10 00:52:25 site-a-vpn pluto[2414]: "site-b/6x6" #1: received and ignored informational message Feb 10 00:52:25 site-a-vpn pluto[2414]: "site-b/6x6" #1: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xa5298d7d) not found (maybe expired) Feb 10 00:52:25 site-a-vpn pluto[2414]: "site-b/6x6" #1: received and ignored informational message Before we move to another solution, does anyone have any suggestions on what the problem might be? Running a constant ping between the two hosts doesn't drop *any* packets (even when the IPSec connection itself drops out). Thanks in advance.

3 8

CentOS 7 workstation, mutter CRITICAL...
by m.roth＠5-cent.us 11 Feb '16

11 Feb '16

A fully updated, just built last month, CentOS 7 workstation. The system has 16G of ram, and the real work is done on servers. I'm seeing a ton of complaints in the logs. Feb 10 18:06:00 <workstation> gnome-session: (gnome-shell:3248): mutter-CRITICAL **: meta_window_raise: assertion '!window->override_redirect' failed I found a bug report from last summer, but as I said, all updates are done. Also, is there a bug in the firefox package? Feb 10 17:07:51 <workstation> <user>: IcedTea-Web java error manual log: Feb 10 17:07:51 <workstation> <user>: Application title was not found in manifest. Check with application vendor mark

1 0

CentOS-announce Digest, Vol 132, Issue 4
by centos-announce-request＠centos.org 11 Feb '16

11 Feb '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2016:0134 CentOS 6 firefox BugFix Update (Johnny Hughes) 2. CEBA-2016:0140 CentOS 6 httpd BugFix Update (Johnny Hughes) 3. CEBA-2016:0136 CentOS 6 httpd BugFix Update (Johnny Hughes) 4. CEBA-2016:0135 CentOS 6 initscripts BugFix Update (Johnny Hughes) 5. CEBA-2016:0150 CentOS 6 kernel BugFix Update (Johnny Hughes) 6. CESA-2016:0152 Moderate CentOS 6 sos Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Feb 2016 18:01:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0134 CentOS 6 firefox BugFix Update Message-ID: <20160209180153.GA47439(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0134 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0134.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 732d70ca9a967fcd57ca72070966871c2962d75daf354e353ec62f277ba5e801 firefox-38.6.0-2.el6.centos.i686.rpm x86_64: 732d70ca9a967fcd57ca72070966871c2962d75daf354e353ec62f277ba5e801 firefox-38.6.0-2.el6.centos.i686.rpm 970b53958a88395b0cdf9564fddcc953669449cfac05cb377b8208718977a78a firefox-38.6.0-2.el6.centos.x86_64.rpm Source: a26f1e526805cef57139007e5fee42e8e0fa1b1aad682337a0a9c56949923598 firefox-38.6.0-2.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 9 Feb 2016 18:02:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0140 CentOS 6 httpd BugFix Update Message-ID: <20160209180224.GA47734(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0140 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0140.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5f1add7f698255f1219f6048fc929925711076c79400af243b8543ed572828cf httpd-2.2.15-47.el6.centos.2.i686.rpm 42b422488545690e24b1e35a091ac4a61f73be25babb35a8eed66fbbad22e3b0 httpd-devel-2.2.15-47.el6.centos.2.i686.rpm eca70b9bc3314c7f1b32be6779a4f13d6c8c3aee23eb9d24d9716b4736dd599f httpd-manual-2.2.15-47.el6.centos.2.noarch.rpm 35e16836eed1f15dc9edaa3bc831b78b3bdfbaf8c3a75cef83454db5eefa38b3 httpd-tools-2.2.15-47.el6.centos.2.i686.rpm 3acf2b5d65e7bee28ffac1c225f88695dedb083ce63d3fa1d41a77fa66e373b1 mod_ssl-2.2.15-47.el6.centos.2.i686.rpm x86_64: 7d2ffb2a1f1c1a48c3a9c43db10542e6345fa8cc2821f9ca075d72fc6226b0c2 httpd-2.2.15-47.el6.centos.2.x86_64.rpm 42b422488545690e24b1e35a091ac4a61f73be25babb35a8eed66fbbad22e3b0 httpd-devel-2.2.15-47.el6.centos.2.i686.rpm f279fa5f74d6fee985fd7589bc40984dba1127af4e13fd1137a7458e70d010eb httpd-devel-2.2.15-47.el6.centos.2.x86_64.rpm eca70b9bc3314c7f1b32be6779a4f13d6c8c3aee23eb9d24d9716b4736dd599f httpd-manual-2.2.15-47.el6.centos.2.noarch.rpm d9e24bf3eb5bdb4d692c8fe1707250c4efd485051a7103ec960b07b2e2f06501 httpd-tools-2.2.15-47.el6.centos.2.x86_64.rpm c3e793ddcb4f9bb9ad89b1f4d9bd182b2dfd98b2bedad6c4ce25c8feeca6f7a1 mod_ssl-2.2.15-47.el6.centos.2.x86_64.rpm Source: eff61018e9d2efbd5699d64825d4ebb8fe2e492f70dde1ea08a0416a82af629d httpd-2.2.15-47.el6.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 9 Feb 2016 18:02:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0136 CentOS 6 httpd BugFix Update Message-ID: <20160209180255.GA48037(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0136 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0136.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4eaf1cbed674c7a1da99f48f306beccc18805873a1ec19ca9d3ac4033e7a7054 httpd-2.2.15-47.el6.centos.3.i686.rpm f2870eda1af2066dccd1c885b634c165ca57fe05d839bb916c2747df0ee4c3c4 httpd-devel-2.2.15-47.el6.centos.3.i686.rpm 9c812ec8277965da7fd803631accfb765f337797ab3ffab117fa162e8db6eb61 httpd-manual-2.2.15-47.el6.centos.3.noarch.rpm 95dbc5069bbcca57a673a8df92b88a7eb65e0bfc89f495acd39b35851d74953d httpd-tools-2.2.15-47.el6.centos.3.i686.rpm ff256a68391af5ad882635860208972c630bf2b6b8ddefd044374da38e85383c mod_ssl-2.2.15-47.el6.centos.3.i686.rpm x86_64: 046d6ef58c5f35a35f14496f86462ebd7fcb1e691e846c0285159009aabb8d94 httpd-2.2.15-47.el6.centos.3.x86_64.rpm f2870eda1af2066dccd1c885b634c165ca57fe05d839bb916c2747df0ee4c3c4 httpd-devel-2.2.15-47.el6.centos.3.i686.rpm 3e92898a5b28a0c94ff84363fb7bae7b57549b1e02f1e69bc402a6f97624a0f5 httpd-devel-2.2.15-47.el6.centos.3.x86_64.rpm 9c812ec8277965da7fd803631accfb765f337797ab3ffab117fa162e8db6eb61 httpd-manual-2.2.15-47.el6.centos.3.noarch.rpm a9d5c20095989ee43b1c49e97233cf92b86692760e494ec038b3ebe86cf6ce1d httpd-tools-2.2.15-47.el6.centos.3.x86_64.rpm 9be33b33188f440f2595f4d9511e40532b98bbc8ec1fd467330e9328b00ddf23 mod_ssl-2.2.15-47.el6.centos.3.x86_64.rpm Source: b8e08c972f702205b46622a0870523199fa41865dd69ac1802fcf6fc005323ec httpd-2.2.15-47.el6.centos.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 10 Feb 2016 13:40:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0135 CentOS 6 initscripts BugFix Update Message-ID: <20160210134043.GA3564(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0135 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0135.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8b01c5a973be1847170dd540c677e764b2282c39bf7230897af64fd72a78aac6 debugmode-9.03.49-1.el6.centos.4.i686.rpm 10fd055a885c30ef304379e9a96a5541823e02527f8a7e7a09ccf03af8e38527 initscripts-9.03.49-1.el6.centos.4.i686.rpm x86_64: e5fc9a1f0b997ee675da188ece3f61891773e33ec3291385afcdee42c46f8b1b debugmode-9.03.49-1.el6.centos.4.x86_64.rpm 84c2251f9a7ee410a292ad0db3371b6b8deaae55906f18f3f269e2dafbd16d1c initscripts-9.03.49-1.el6.centos.4.x86_64.rpm Source: 93875323760b38d60f4741b8de01d33e55e074a185bb14e1bb085fe03e23e80f initscripts-9.03.49-1.el6.centos.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 10 Feb 2016 13:41:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0150 CentOS 6 kernel BugFix Update Message-ID: <20160210134102.GA3726(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0150 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0150.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b5f33a81b28d0a89af970bc08c4a07856c13f9789fe520e90d237dc7a2e5df65 kernel-2.6.32-573.18.1.el6.i686.rpm 8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793 kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm cba169e9faf5ebc0ba25011f3b920de1a3a2943b7e46be6292193b31df7b8a5a kernel-debug-2.6.32-573.18.1.el6.i686.rpm a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm 5151ae3d0f6dde51c1ec991e14b88f0308ef7d46975ee7e9ed036f1381153901 kernel-devel-2.6.32-573.18.1.el6.i686.rpm 74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb kernel-doc-2.6.32-573.18.1.el6.noarch.rpm 38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm f318d66d12c72c060e8f644aa90d0c10099f1ab8ba5e24875f2a1ace22e35a57 kernel-headers-2.6.32-573.18.1.el6.i686.rpm 81ef77b0d7841946bf8825e599c1f6a6015082013b5ea02a836db34e19ca7fbc perf-2.6.32-573.18.1.el6.i686.rpm a8fa3ef717f09235052dd6bd4285be52ff494ea8c242788df16eda5b9aed7fb6 python-perf-2.6.32-573.18.1.el6.i686.rpm x86_64: 1cb5031871e077e7d70fec7801901a948438d10f226ffb4311540c28f9253a55 kernel-2.6.32-573.18.1.el6.x86_64.rpm 8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793 kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm 9f31b8f7f4db48d8ba30c16564cb6ad614d04b7d63811c274134654607cbce08 kernel-debug-2.6.32-573.18.1.el6.x86_64.rpm a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm 16cb431b4a01c6b3b915e646c971fa0c79e62f4feeffd57939f39df687ebc6a3 kernel-debug-devel-2.6.32-573.18.1.el6.x86_64.rpm b81c297339078d80dda73d86a1aec61c50d7fb05728585c1ebbe81bb088851bf kernel-devel-2.6.32-573.18.1.el6.x86_64.rpm 74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb kernel-doc-2.6.32-573.18.1.el6.noarch.rpm 38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm 9dd3a3533ebb6646bafafef2229b6142fa0277f34a534e7c74f3c8cacafd7296 kernel-headers-2.6.32-573.18.1.el6.x86_64.rpm 5ff27ecbdca7013f093d697f4ba3bcaa9b14be03ef79cafb4a3ed3d0aef1bf69 perf-2.6.32-573.18.1.el6.x86_64.rpm c5fee073bee1f19dc848a8302e07e4241e49cbff55f35a3db5ae903352f11dc4 python-perf-2.6.32-573.18.1.el6.x86_64.rpm Source: ef3c944af9b7e94448e3c343da7d6f582b267aa9a5653586b8b9332351b01afc kernel-2.6.32-573.18.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Wed, 10 Feb 2016 13:41:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0152 Moderate CentOS 6 sos Security Update Message-ID: <20160210134155.GA3927(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0152 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0152.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 548987e4eedc2c4a63186790fa4f196525765d08460578d07ee28d7922ae12c7 sos-3.2-28.el6.centos.2.noarch.rpm x86_64: 548987e4eedc2c4a63186790fa4f196525765d08460578d07ee28d7922ae12c7 sos-3.2-28.el6.centos.2.noarch.rpm Source: 7ebe43dc6e675b49849eeafe99285a67f1718b4fc9b72fb289a038ff2f75ae9a sos-3.2-28.el6.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 132, Issue 4 ***********************************************

1 0

centos.firehosted.com / tagged as malicious
by Corey Erickson 11 Feb '16

11 Feb '16

This repository has begun triggering alerts in my enterprises trend micro solution this morning. centos.firehosted.com/7.2.1511/updates/x86_64/repodata/repomd.xml Any tips on ensuring this repository is never queried by my systems ? It seems to keep getting picked up on freshly deployed vagrants for development at this time. Thanks, Corey Erickson

2 1

Measuring memory bandwidth utilization
by Benjamin Smith 10 Feb '16

10 Feb '16

I'd like to know what the cause of a particular DB server's slowdown might be. We've ruled out IOPs for the disks (~ 20%) and raw CPU load (top shows perhaps 1/2 of cores busy, but the system slows to a crawl. We're suspecting that we're simply running out of memory bandwidth but have no way to confirm this suspicion. Is there a way to test for this? Think: iostat but for memory bandwidth instead of disk IO. So far, searching has found intel-cmt-cat-master which isn't supported on our CPU and oprofile which *sounds* like it does what I want from their website but I can't seem to get output that, in any way, tells me what the bandwidth usage is. Any idea?

7 6

Re: [CentOS] Utility to zero unused blocks on disk
by James B. Byrne 10 Feb '16

10 Feb '16

On Tue, February 9, 2016 16:05, Chris Murphy wrote: > On Mon, Feb 8, 2016 at 11:18 PM, John R Pierce <pierce(a)hogranch.com> > wrote: >> On 2/8/2016 9:54 PM, Chris Murphy wrote: >>> >>> Secure erase is really the only thing to use on SSDs. >>> Writing a pile of zeros just increases wear (minor negative) >>> but also doesn't actually set the cells to the state required >>> to accept a new write, Secure erase of an SSD, or any solid state device, is problematic. See: http://www.techrepublic.com/article/erasing-ssds-security-is-an-issue/ The CSE requires physical destruction of these devices through pulverisation or incineration. See: https://cse-cst.gc.ca/en/system/files/pdf_documents/itsg06-eng.pdf The USDOD leaves disposal protocols to the individual commands. Essentially, due to the way data is stored on SSDs, it is impossible to access every memory cell during a software driven wipe; no matter how many passes are made. The possibility of significant fragments of residual data remaining is always greater than zero. However, if you entirely encrypt an SSD, BEFORE adding any confidential material, then secure destruction is assured by 'forgetting' the key. But encrypting an SSD after the material is put on it is not sufficient. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss