- Discuss - lists.centos.org

Intermittent problem, likely disk IO related - mptscsih: ioc0: attempting task abort!
by Jason Pyeron 18 Feb '15

18 Feb '15

NOTE: this is happening on Centos 6 x86_64, 2.6.32-504.3.3.el6.x86_64 not Centos 5 Dell PowerEdge 2970, Seagate SATA drive, non-raid. I have this server which has been dying randomly, with no logs. I had a tail -f over ssh for a week, when this just happened. Feb 8 00:10:21 thirteen-230 kernel: mptscsih: ioc0: attempting task abort! (sc=ffff880057a0a080) Feb 8 00:10:21 thirteen-230 kernel: sd 4:0:0:0: [sda] CDB: Write(10): 2a 00 1a 17 a1 6f 00 00 01 00 Feb 8 00:10:51 thirteen-230 kernel: mptscsih: ioc0: WARNING - Issuing Reset from mptscsih_IssueTaskMgmt!! doorbell=0x24000000 Feb 8 00:10:51 thirteen-230 kernel: mptbase: ioc0: Initiating recovery Feb 8 00:11:13 thirteen-230 kernel: mptscsih: ioc0: task abort: SUCCESS (rv=2002) (sc=ffff880057a0a080) Write failed: Connection reset by peer After reading https://access.redhat.com/solutions/108273, I am increasing the logging (shown below) but I am not confident about this wait and see approach. sysctl -w dev.scsi.logging_level=98367 I am also going to check smartctl output once I get onsite to power cycle the system. Other posts I have read, but I can not act on yet: * http://unix.stackexchange.com/questions/34173/mptscsih-ioc0-task-abort-succ… * https://bugzilla.kernel.org/show_bug.cgi?id=18652 * https://bugzilla.redhat.com/show_bug.cgi?id=483424 * https://bugzilla.kernel.org/show_bug.cgi?id=42765 * http://sourceforge.net/p/smartmontools/mailman/message/23849184/ * http://kb.softescu.ro/category/hardware/dell/ -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

2 9

Using a *supported* web cam under CentOS 5
by Robert Heller 17 Feb '15

17 Feb '15

OK, I plugged in a web cam device (something called a 'Zoomy' -- a web cam/microscope). It is recognized by the unc driver. Now what? Does there exist a program that can use this device? Or do I have to write one from scratch? I have been searching the web, but all of the links are about getting and installing *drivers*. I don't need a driver, I need a userland program. With Ubuntu 14.04, there is a program named Cheese, but I can't find a version that works with CentOS 5. And no, don't tell me to install Ubuntu 14.04! -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

4 3

How to write RPM spec
by Jegadeesh Kumar 17 Feb '15

17 Feb '15

Hi team, I setup the RPM build server and read some doc to write the spec files. but i did get it clearly. So can you guys please help me to write a new RPM spec. or give me a scenario to write Thanks, Jegadeesh

3 2

CentOS-announce Digest, Vol 120, Issue 5
by centos-announce-request＠centos.org 17 Feb '15

17 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0224 CentOS 6 system-config-printer FASTTRACK BugFix Update (Johnny Hughes) 2. CEBA-2015:0231 CentOS 6 bind-dyndb-ldap BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 16 Feb 2015 14:55:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0224 CentOS 6 system-config-printer FASTTRACK BugFix Update Message-ID: <20150216145517.GA2848(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0224 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0224.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0b1e102e337bc6ca944887d5a86efce096e4f02b0d453259eb7def61aa100f10 system-config-printer-1.1.16-25.el6.i686.rpm d9e38068494f5baa375b4b4b2f0fafccbd5da2384e7302253540eb03880afbf7 system-config-printer-libs-1.1.16-25.el6.i686.rpm 3467770de97e623541c1e78d672f5bb60dc58b582fb7732e1375cd084203552b system-config-printer-udev-1.1.16-25.el6.i686.rpm x86_64: 4c707af2bc1752ceb64bea31b5b49421bc4510b0de09168984bdf619c83f86fc system-config-printer-1.1.16-25.el6.x86_64.rpm 9d6b1a5b04372fb7997490be1314d57865d37ee2f876403af979b8bb7c6ad021 system-config-printer-libs-1.1.16-25.el6.x86_64.rpm e10ae7473a8400abc3434a98ac765344915227f388a1f1fab953f088ab7e3af4 system-config-printer-udev-1.1.16-25.el6.x86_64.rpm Source: 30b20b371dfa2f021d329e5fa1d215595792417b07e6b18bb8d3fa77f75e2884 system-config-printer-1.1.16-25.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 16 Feb 2015 18:18:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0231 CentOS 6 bind-dyndb-ldap BugFix Update Message-ID: <20150216181853.GA7919(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0231 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0231.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ca86c5483876d2f979bff731622c5508248baecf4a61b13c77a522c153384587 bind-dyndb-ldap-2.3-6.el6_6.i686.rpm x86_64: fd444fbc66c4058cb422976051822ddbb6ba72d77e9307fe38e7ed52fc9dfddb bind-dyndb-ldap-2.3-6.el6_6.x86_64.rpm Source: 9d772df68036dd0915327569616b79ab429016b68b669ac532ae37cf3e86f826 bind-dyndb-ldap-2.3-6.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 5 ***********************************************

1 0

CentOS upgrade info
by Jegadeesh Kumar 17 Feb '15

17 Feb '15

Hello, I wan to know the details steps about how to do OS upgrade? Say for an example currently i am using CentOS 6.2 and plan to upgrade that to 7. Please detail me the steps. Thanks, Jegadeesh

5 7

libvirt
by mattias 17 Feb '15

17 Feb '15

Seems libvirt are broken in centos7? I can start it but Virsh list for example: Connection refused Kvm are installed And the kvm driver installed

5 6

network automatically connecting on boot after new service installation
by g 17 Feb '15

17 Feb '15

2 weeks ago, i had my internet service changed from copper DSL to fiber DSL. now, every time i reboot, internet connection is automatically connecting on boot. before last update to 6.6, i could configure connection, now i can not bring up configuration window to disable auto connect. because of uneasy feelings about leaving computer up when i leave home, i disconnect 'bell line' so that when i am gone and have a mains failure and ups shuts down, i will not have internet connected when mains restore. also makes for uneasy feeling when retiring for night. :-) what do i have to do to change this? any and all replies / suggestions greatly appreciated. tia. -- peace out. in a world with out fences, who needs gates. CentOS GNU/Linux 6.6 tc,hago. g .

3 4

firewalld default policy = allow = no affect.
by dE 17 Feb '15

17 Feb '15

Hi! I'm running CentOS 7. Looking at the default policies of various zones, I've come to realize that only the drop zone has an affect, that's because this's the only one which drops unmatched packets.

2 2

Centos 7.0 and mismatched swap file
by Gregory P. Ennis 16 Feb '15

16 Feb '15

Everyone, I am putting together a new mail server for our firm using a SuperMicro with Centos 7.0. When performed the install of the os, I put 16 gigs of memory in the wrong slots on the mother board which caused the SuperMicro to recognize 8 gigs instead of 16 gigs. When I installed Centos 7.0, this error made the swap file 8070 megs instead of what I would have expected to be a over 16000 megs. I am using the default xfs file system on the other partitions. Is there a way to expand the swap file? If not, then is this problem sufficiently bad enough for me to start over with a new install. I do not want to start over unless I need to. Thanks for you help !!! Greg Ennis

4 10

setting up centos 6 x86_64 to relay through gmail
by Jerry Geis 16 Feb '15

16 Feb '15

I have setup my machine to relay through smtp.gmail.com installed cyrus-sasl-md5 cyrus-sasl-plain Added to access: AuthInfo:smtp.gmail.com "U:smmsp" "I:my accont" "P:my pass" "M:PLAIN" AuthInfo:smtp.gmail.com:587 "U:smmsp" "I:my account" "P:my pass" "M:PLAIN" Added to sendmail.mc the SMART_HOST smtp.gmail.com uncommented the pki lines define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/sendmail.pem')dnl set the confAUTH_MECHANISMS restarted sendmail It seems like sendmail is trying to use port 25 as the log shows "connection timeout". I did this to two other machines and it worked. the third one is being stubborn. Any suggestions to look at ??? Jerry

3 2

OT: Extracting Subject Lines from IMAP Mailbox
by Tim Evans 16 Feb '15

16 Feb '15

Looking for a command-line way to extract only the Subject lines from my mailbox on my ISP's IMAP server, without actually downloading/modifying the contents of the mailbox. Sort of the remote equivalent of locally doing: $ grep ^Subject /var/spool/mail/mymailbox > subjectlistfile Thanks. -- Tim Evans | 5 Chestnut Court UNIX System Admin Consulting | Owings Mills, MD 21117 http://www.tkevans.com/ | 443-394-3864 tkevans(a)tkevans.com

4 4

CentOS6 box fails
by Chris 16 Feb '15

16 Feb '15

Dear All, I used to use CentOS 6 on my desktop without any issues until this morning. Booting stops after the libvirt-guests and certmonger init script. I don't start any guests at boot-time. In rc3.d is only the S99local script after certmongers. Normally, I just suspend this box, so I'm not sure when I rebooted it last time successfully. Does anyone happen to know why booting stops? I haven't found any hints in /v/l/messages. I think I have to reinstall this machine. -- Gruß, Christian

1 0

CentOS 7 on dual-monitor workstation?
by Niki Kovacs 16 Feb '15

16 Feb '15

Hi, My workstation is currently running Slackware Linux 14.1 64-bit, and I'm considering replacing that by CentOS 7, which I've already installed on my laptop. The PC has an NVidia GeForce GT 520 video card with two 19'' monitors attached to it. I'm using the proprietary 'nvidia' driver. I vaguely remember having read somewhere that RHEL/CentOS 7 with GNOME 3 had trouble with dual monitors. Now since this is my main workhorse PC, I thought I'd rather ask before migrating, just to be on the safe side. Anybody on this list running CentOS 7 on a similar hardware configuration? If I remember correctly from the time spent with CentOS 5.x, the proprietary 'nvidia' drivers are best configured using the third-party ELRepo package repository. Correct me if I'm wrong. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

Teaming on qemu.
by dE 16 Feb '15

16 Feb '15

Hi! For testing purposes, I'm trying to setup teaming on my VM which runs CentOS 7. I've 2 gigabit NICs emulated which are connected to a tun device on the host. I can ping to the tun device on the host when directly using the interface (of course when teaming is disabled), when using the team interface, I can't. The team link is made as such -- teamd -f /etc/teamd.conf Contents of teamd.conf -- { "device" : "team0", "runner" : { "name" : "roundrobin" }, "ports" : { "enp0s3" : {}, "enp0s4" : {} } }

1 0

Custom wallpaper on CentOS 7?
by Niki Kovacs 16 Feb '15

16 Feb '15

Hi, I just installed CentOS 7 + GNOME on my Asus S300 laptop. So far everything runs very nice and smoothly, and I'm quite happy with it. Curiously enough, I can't seem to be able to set a custom wallpaper. I tried various locations like /usr/share/backgrounds, /usr/share/backgrounds/gnome and /usr/share/backgrounds/images, but the images don't appear in the wallpaper selection window. Any suggestions? Cheers, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

LC_COLLATE variable?
by Niki Kovacs 16 Feb '15

16 Feb '15

Hi, I'm running my CentOS 7 desktop in french. LANG is set to fr_FR.UTF-8. In GNOME 3, the menu entries are listed in alphabetical order. Unfortunately, entries beginning with an accented character (like "Éditeur de texte") appear at the bottom of the list. I know that in order to correct this, I have to set the LC_COLLATE variable to fr_FR.UTF-8. What would be a sensible place to do this system-wide under CentOS 7? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 5

Centos 7.0 and mismatched swap file
by Gregory P. Ennis 16 Feb '15

16 Feb '15

Everyone, I am putting together a new mail server for our firm using a SuperMicro with Centos 7.0. When performed the install of the os, I put 16 gigs of memory in the wrong slots on the mother board which caused the SuperMicro to recognize 8 gigs instead of 16 gigs. When I installed Centos 7.0, this error made the swap file 8070 megs instead of what I would have expected to be a over 16000 megs. I am using the default xfs file system on the other partitions. Is there a way to expand the swap file? If not, then is this problem sufficiently bad enough for me to start over with a new install. I do not want to start over unless I need to. Thanks for you help !!! Greg Ennis

5 5

Re: [CentOS] Centos 6 Sendmail backup MX Config
by James B. Byrne 15 Feb '15

15 Feb '15

On Fri, February 13, 2015 12:52, Les Mikesell wrote: > On Fri, Feb 13, 2015 at 11:39 AM, Valeri Galtsev > <galtsev(a)kicp.uchicago.edu> wrote: >> >>> Otherwise it accept junk that your primary rejects >> >> Not exactly. If greylisting on primary is set, but on backup MX >> is not, still what is killed by greylisting by primary MX, >> almost never will come through backup MX. This is due to the >> same reason why greylisting is efficient: it trows off all that >> doesn't behave as mail server (thus never comes for re-delivery, >> and definitely doesn't try backup MX which real servers always >> do even before attempt of re-delivery). > > I'm not convinced. Spam is big business and trying a 2nd MX is cheap. > Much spam/ucem is deliberately sent directly to the lower priority MX host from the outset on the assumptions that: 1.) the secondaries will be less well configured to detect SPAM to begin with; and 2.) once mail is routed though an officially recognized secondary host then the primary is less likely to treat such traffic as SPAM. We run grey listing and amavisd (clamd/spamd) on all of our MX servers because of this practice. We also list several non-existent MX secondaries at the lowest priority to cheaply pick off the really stupid points of origin. Yes we do get rejects for real correspondents. A notable recent victim, if such is the right word to describe a self-inflicted injury, was ibm.com. Who, in contravention of rfcs 7208 and 7372, both configured eleven MX hosts for their domain AND enabled SPF. This causes an immediate permerr with anyone checking SPF as the maximum number of MX hosts allowed with an SPF enabled domain is ten. But, who am I to tell IBM how to configure a computer? On the other hand, we also have large organizations who use smtp pools and with these grey-listing simply does not work. Each subsequent attempt to connect can occur from any of the IPs in that pool and the mail either never gets through or is seriously delayed. For those cases we are constrained to use white-listing. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] Centos 6 Sendmail backup MX Config
by James B. Byrne 15 Feb '15

15 Feb '15

On Fri, February 13, 2015 10:57, Ken Smith wrote: > Hi All, > > I'm just wanting to check that my understanding of the settings is > correct as my web searches are finding a lot of dated information. > > If I want a Centos 6 sendmail system act as the secondary MX for > domain > bbbbb.co.uk do I just add a > > Connect:bbbbb.co.uk RELAY > > statement into /etc/mail/access and restart sendmail > > Obviously I have the DNS MX records for the domain are already > established. > > I've been getting "/config error/: /mail loops back to me/ " errors. > > I think I may be stumbling into a variant of cname problem where the > hostname as far as the sendmail machine is concerned is aaaaa.com but > the DNS setting for the secondary MX is smtp1.bbbbb.co.uk. > > They both resolve to the same IP but when sendmail looks up the MX > records for bbbbb.co.uk it will find smtp.bbbbb.co.uk and > smtp1.bbbbb.co.uk listed and it may relay the mail off to > smtp1.bbbbb.co.uk without recognising that aaaaa.com = > smtp1.bbbbb.co.uk. Am I on the right track here, as I then just need > to > change the secondary MX setting in DNS to aaaaa.com? When I set up secondary MX services in Sendmail (and Postfix) then I always use the direct address feature of the domain routing table and avoid looking up MX RRs altogether. After all, if the mail arrived here it is a good bet that the main MX is off-line (or this is SPAM/UCEM but that is another issue). So assuming that the primary MX host is mx10.example.com and the secondary is mx40.something.else then with Sendmail the file /etc/mail/mailertable on mx40.something.else should contain something like this: example.com. esmtp:[mx10.example.com] .example.com. esmtp:[mx10.example.com] The [] brackets prevent MX lookups and just routes the message traffic directly to mx10.example.com as soon as a connection can be made. This prevents the most common source of mail loops where the primary is off-line and so any mail is bounced back to the backup MX, which just happens to be the host that just sent it, thus causing the loop. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Updated Spam Assassin for CentOS 5...
by Robert Heller 15 Feb '15

15 Feb '15

I am wondering about updating the version of Spam Assassin on my CentOS 5 mail server. The current version, 3.3.1-4.el5 (stock RHEL version), has been 'leaking' recently. I suspect I need some newer match rules to detect some of the newer flavors of spam. I see that in rpmforge's extras repo is version 3.3.2-4.el5.rfx -- is this version worth installing? Are there even newer versions either available for CentOS 5 (or buildable under CentOS 5)? Or is there a collection of match rules available for the newer flavors of spam than can just be dropped into /etc/mail/spamassassin/local.cf? I am not ready just yet to migrate my server to CentOS 6 (but that is something I'll probably do at some point). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

3 3

C5 BASH IF
by Always Learning 15 Feb '15

15 Feb '15

Being new to some aspects of BASH, I tried to reduce the quantity of scripts by introducing a comparison test into an existing working script. The script refused to work until I placed [ ] around the actual test. The second test, in the same script, misfunctioned until I removed the [ ] around the second test. ---------------------------- NON WORKING first comparison 5 if $dir="law" 6 then 7 www="law" 8 dir=${file:0:5} 9 else 10 www="www/s" 11 fi Error message = /root/bin/.us: line 5: law=law: command not found --------------------------------- WORKING first comparison 5 if [ $dir="law" ] 6 then 7 www="law" 8 dir=${file:0:5} 9 else 10 www="www/s" 11 fi ------------------------------------ NON-WORKING second comparison 15 if [ $file='law00.css' ] 16 then 17 file=$dir/$file 18 echo "css" 19 else 20 file=$dir/$file\.php 21 echo "no css" 22 fi 23 #---------------------------- Every comparison in the second test, including wrong comparisons, satisfy the test and caused the 'css' display. When line 15 was changed to 15 if [ $file='law00css' ] everything continued to match including items with no 'css' in the file name. Baffled. Are C5 BASH scripts restricted to only 1 IF comparison ? -- Regards, Paul. England, EU. Je suis Charlie.

6 13

list moderation transparency
by Jim Perrin 14 Feb '15

14 Feb '15

I've had a few people ask me privately "Why hasn't X been told", which seems a legitimate question on the surface. Here's what has happened thus far: I've sent a few people emails off-list with examples of what I feel to be inappropriate posts to the list since the announcement. I don't see any need yet for a 'public name and shame' style posting. I prefer to handle matters with a bit of discretion in a direct, and private manner out of respect for members on the list. tl;dr, just because you don't see it publicly doesn't mean we're not taking corrective action. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

1 0

Securing SSH wiki article outdated
by Warren Young 14 Feb '15

14 Feb '15

Hi, just a quick note to whoever is maintaining this page: http://wiki.centos.org/HowTos/Network/SecuringSSH The procedure is missing the firewall-cmd calls necessary in EL7: firewall-cmd --add-port 2345/tcp firewall-cmd --add-port 2345/tcp --permanent Also, it may be worth mentioning that semanage is in the policycoreutils-python package, which isn’t installed by default in all stock configurations.

10 14

Thread moderation and list etiquette (Reference - Another Fedora Decision)
by Jim Perrin 14 Feb '15

14 Feb '15

Hi, The thread titled "Another Fedora Decision" is rapidly turning into a political and opinion driven flame fest that is unsuited for the CentOS mailing list. This list should try and remain focused on CentOS, what we have and keep the area sane for new users as well as old hands to participate in a fair and thoughtful conversation around the CentOS Linux platform and the CentOS project ecosystem. We are, from this point on, considering moderating all content posted to that thread. Furthermore, consider this to be a wider general request - specially to the list regulars - to be considerate and thoughtful in their responses. General 'me too' and 'yes' or 'no' type posts are not needed. Similarly, if you must correct someone, do it politely without making it into a personal attack. Finally, if content in a conversation changes from the original post - please change the thread and start a new one. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

7 8

Centos 6 Sendmail backup MX Config
by Ken Smith 14 Feb '15

14 Feb '15

Hi All, I'm just wanting to check that my understanding of the settings is correct as my web searches are finding a lot of dated information. If I want a Centos 6 sendmail system act as the secondary MX for domain bbbbb.co.uk do I just add a Connect:bbbbb.co.uk RELAY statement into /etc/mail/access and restart sendmail Obviously I have the DNS MX records for the domain are already established. I've been getting "/config error/: /mail loops back to me/ " errors. I think I may be stumbling into a variant of cname problem where the hostname as far as the sendmail machine is concerned is aaaaa.com but the DNS setting for the secondary MX is smtp1.bbbbb.co.uk. They both resolve to the same IP but when sendmail looks up the MX records for bbbbb.co.uk it will find smtp.bbbbb.co.uk and smtp1.bbbbb.co.uk listed and it may relay the mail off to smtp1.bbbbb.co.uk without recognising that aaaaa.com = smtp1.bbbbb.co.uk. Am I on the right track here, as I then just need to change the secondary MX setting in DNS to aaaaa.com? Many thanks Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

6 17

Getting strange message in terminal
by MOHD HOMAIDUR RAHMAN 13 Feb '15

13 Feb '15

Dear all when I am login in terminal I am getting following message. declare -x ALL_PROXY="socks://hproxy.iitm.ac.in:3128/" declare -x AMBERHOME="/sware/amber/amber12" declare -x COLORTERM="gnome-terminal" declare -x CPPFLAGS="-I/usr/local/bin/include" declare -x DBUS_SESSION_BUS_ADDRESS="unix:abstract=/tmp/dbus-adjIuc8A5l,guid=d2289573889e3cae1ac3908354de3192" declare -x DESKTOP_SESSION="gnome-classic" declare -x DISPLAY=":0" declare -x FTP_PROXY="http://hproxy.iitm.ac.in:3128/" declare -x G09BASIS="/usr/local/gaussian/g09/basis" declare -x GAUSS_ARCHDIR="/usr/local/gaussian/g09/arch" declare -x GAUSS_BSDDIR="/usr/local/gaussian/g09/bsd" declare -x GAUSS_EXEDIR="/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09" declare -x GAUSS_LEXEDIR="/usr/local/gaussian/g09/linda-exe" declare -x GAUSS_SCRDIR="/scratch" declare -x GDMSESSION="gnome-classic" declare -x GDM_LANG="en_US.utf8" declare -x GNOME_DESKTOP_SESSION_ID="this-is-deprecated" declare -x GNOME_KEYRING_CONTROL="/run/user/1000/keyring-oPxj9T" declare -x GNOME_KEYRING_PID="2515" declare -x GNOME_SHELL_SESSION_MODE="classic" declare -x GPG_AGENT_INFO="/run/user/1000/keyring-oPxj9T/gpg:0:1" declare -x GV_DIR="/usr/local/gaussian/gv" declare -x HARDWARE_PLATFORM="x86_64" declare -x HISTCONTROL="ignoredups" declare -x HISTSIZE="1000" declare -x HOME="/home/rahman" declare -x HOSTNAME="localhost.btb.igloonet" declare -x HTTPS_PROXY="http://hproxy.iitm.ac.in:3128/" declare -x HTTP_PROXY="http://hproxy.iitm.ac.in:3128" declare -x IMSETTINGS_INTEGRATE_DESKTOP="yes" declare -x IMSETTINGS_MODULE="none" declare -x KDEDIRS="/usr" declare -x LANG="en_US.utf8" declare -x LC_MEASUREMENT="en_US.utf8" declare -x LC_MONETARY="en_US.utf8" declare -x LC_NUMERIC="en_US.utf8" declare -x LC_PAPER="en_US.utf8" declare -x LC_TIME="en_US.utf8" declare -x LDFLAGS="-L/usr/local/lib" declare -x LD_LIBRARY_PATH="/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09:/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09::/lib:/usr/local/gaussian/gv/lib:/usr/local/gaussian/gv/lib" declare -x LESSOPEN="||/usr/bin/lesspipe.sh %s" declare -x LOADEDMODULES="" declare -x LOGNAME="rahman" declare -x LS_COLORS="rs=0:di=38;5;27:ln=38;5;51:mh=44;38;5;15:pi=40;38;5;11:so=38;5;13:do=38;5;5:bd=48;5;232;38;5;11:cd=48;5;232;38;5;3:or=48;5;232;38;5;9:mi=05;48;5;232;38;5;15:su=48;5;196;38;5;15:sg=48;5;11;38;5;16:ca=48;5;196;38;5;226:tw=48;5;10;38;5;16:ow=48;5;10;38;5;21:st=48;5;21;38;5;15:ex=38;5;34:*.tar=38;5;9:*.tgz=38;5;9:*.arc=38;5;9:*.arj=38;5;9:*.taz=38;5;9:*.lha=38;5;9:*.lz4=38;5;9:*.lzh=38;5;9:*.lzma=38;5;9:*.tlz=38;5;9:*.txz=38;5;9:*.tzo=38;5;9:*.t7z=38;5;9:*.zip=38;5;9:*.z=38;5;9:*.Z=38;5;9:*.dz=38;5;9:*.gz=38;5;9:*.lrz=38;5;9:*.lz=38;5;9:*.lzo=38;5;9:*.xz=38;5;9:*.bz2=38;5;9:*.bz=38;5;9:*.tbz=38;5;9:*.tbz2=38;5;9:*.tz=38;5;9:*.deb=38;5;9:*.rpm=38;5;9:*.jar=38;5;9:*.war=38;5;9:*.ear=38;5;9:*.sar=38;5;9:*.rar=38;5;9:*.alz=38;5;9:*.ace=38;5;9:*.zoo=38;5;9:*.cpio=38;5;9:*.7z=38;5;9:*.rz=38;5;9:*.cab=38;5;9:*.jpg=38;5;13:*.jpeg=38;5;13:*.gif=38;5;13:*.bmp=38;5;13:*.pbm=38;5;13:*.pgm=38;5;13:*.ppm=38;5;13:*.tga=38;5;13:*.xbm=38;5;13:*.xpm=38;5;13:*.tif=38;5;13:*.tiff=38;5;13:*.png=38;5;13:*.svg=38;5;13:*.svgz=38;5;13:*.mng=38;5;13:*.pcx=38;5;13:*.mov=38;5;13:*.mpg=38;5;13:*.mpeg=38;5;13:*.m2v=38;5;13:*.mkv=38;5;13:*.webm=38;5;13:*.ogm=38;5;13:*.mp4=38;5;13:*.m4v=38;5;13:*.mp4v=38;5;13:*.vob=38;5;13:*.qt=38;5;13:*.nuv=38;5;13:*.wmv=38;5;13:*.asf=38;5;13:*.rm=38;5;13:*.rmvb=38;5;13:*.flc=38;5;13:*.avi=38;5;13:*.fli=38;5;13:*.flv=38;5;13:*.gl=38;5;13:*.dl=38;5;13:*.xcf=38;5;13:*.xwd=38;5;13:*.yuv=38;5;13:*.cgm=38;5;13:*.emf=38;5;13:*.axv=38;5;13:*.anx=38;5;13:*.ogv=38;5;13:*.ogx=38;5;13:*.aac=38;5;45:*.au=38;5;45:*.flac=38;5;45:*.mid=38;5;45:*.midi=38;5;45:*.mka=38;5;45:*.mp3=38;5;45:*.mpc=38;5;45:*.ogg=38;5;45:*.ra=38;5;45:*.wav=38;5;45:*.axa=38;5;45:*.oga=38;5;45:*.spx=38;5;45:*.xspf=38;5;45:" declare -x MAIL="/var/spool/mail/rahman" declare -x MODULEPATH="/usr/share/Modules/modulefiles:/etc/modulefiles" declare -x MODULESHOME="/usr/share/Modules" declare -x OLDPWD declare -x PATH="/home/rahman/Gabedit64:/usr/lib64/qt-3.3/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:/sware/amber/amber12/bin::/usr/local/bin/vmd::/sware/packmol/packmol::/usr/local/gromacs/bin::/usr/bin/qmake-qt4/bin/qmake:/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09:/home/rahman/.local/bin:/home/rahman/bin:/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09" declare -x PGI_TERM="trace,abort" declare -x PWD="/home/rahman/learn4prog" declare -x QTDIR="/usr/bin/qmake-qt4" declare -x QTINC="/usr/lib64/qt-3.3/include" declare -x QTLIB="/usr/lib64/qt-3.3/lib" declare -x QT_GRAPHICSSYSTEM_CHECKED="1" declare -x QT_IM_MODULE="ibus" declare -x QT_PLUGIN_PATH="/usr/lib64/kde4/plugins:/usr/lib/kde4/plugins" declare -x SESSION_MANAGER="local/unix:@ /tmp/.ICE-unix/2517,unix/unix:/tmp/.ICE-unix/2517" declare -x SHELL="/bin/bash" declare -x SHLVL="2" declare -x SSH_AGENT_PID="2676" declare -x SSH_AUTH_SOCK="/run/user/1000/keyring-oPxj9T/ssh" declare -x TERM="xterm-256color" declare -x USER="rahman" declare -x USERNAME="rahman" declare -x VTE_VERSION="3406" declare -x WINDOWID="48234502" declare -x WINDOWPATH="1" declare -x XAUTHORITY="/run/gdm/auth-for-rahman-sjEjGp/database" declare -x XDG_MENU_PREFIX="gnome-" declare -x XDG_RUNTIME_DIR="/run/user/1000" declare -x XDG_SEAT="seat0" declare -x XDG_SESSION_ID="1" declare -x XDG_VTNR="1" declare -x XMODIFIERS="@im=ibus" declare -x _DSM_BARRIER="SHM" declare -x all_proxy="socks://hproxy.iitm.ac.in:3128/" declare -x g09root="/usr/local/gaussian" declare -x http_proxy="http://hproxy.iitm.ac.in:3128" declare -x https_proxy="http://hproxy.iitm.ac.in:3128/" declare -x no_proxy=".domain.com" This is not effecting my system performance but I want to know why this is showing this message and how to resolve this. I am using Centos 7, with version Linux version 3.10.0-123.20.1.el7.x86_64 (builder(a)kbuilder.dev.centos.org) (gcc version 4.8.2 20140120 (Red Hat 4.8.2-16) (GCC) ) #1 SMP Thu Jan 29 18:05:33 UTC 2015 Thank you in advance Regards Rahman ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' *Md Homaidur Rahman* PhD Research Scholar Computational Biophysics Lab. Department of Biotechnology Indian Institute of Technology-Madras Chennai-600 036 *Mobile No = +91- 7845991785 <%2B91-%207845991785>* '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

2 1

xfs_quotas
by m.roth＠5-cent.us 13 Feb '15

13 Feb '15

Hi, folks, (The system I'm doing this on is actually RHEL 6.6, but that list is so quiet....) We've got a new RAID box attached to the server. Large. We'd like to implement xfs quotas... but one thing I can't find is information on this: we want to export the real directory to /project, and let automount bind it under there. (/project/hisproj). All I find shows creating a permanent mount point. Is this actually do-able? Can I set the quota on the real location? (/mnt/drive/project/hisproj, say), and have them work? mark

2 1

ntptrace ***Request timed out with stock C6 ntpd
by Patrick Bervoets 13 Feb '15

13 Feb '15

Following the recent ntp posts I decided to check my setup with ntptrace. localhost: stratum 3, offset -0.000020, synch distance 0.016330 81.95.117.62: timed out, nothing received ***Request timed out service ntpd status ntpd (pid 3018) is gestart... grep server /etc/ntp.conf | grep -v "#" server 0.centos.pool.ntp.org iburst server 1.centos.pool.ntp.org iburst server 2.centos.pool.ntp.org iburst server 3.centos.pool.ntp.org iburst ntpq> peer remote refid st t when poll reach delay offset jitter ============================================================================== +85.234.199.227 193.190.230.65 2 u 135 1024 377 29.759 -0.218 48.373 *79.132.231.103 193.190.230.66 2 u 328 1024 377 41.639 1.487 12.891 +195.200.224.66 193.67.79.202 2 u 958 1024 377 13.179 1.036 87.857 +81.95.117.62 193.67.79.202 2 u 343 1024 377 23.321 -1.759 24.933 I've tested on 3 C6 hosts and everyone gives a ***Request timed out. (everytime with an other host) Is there something wrong with my setup or with my testing? Thanks Patrick

2 1

test, and H/W
by m.roth＠5-cent.us 12 Feb '15

12 Feb '15

Hi, folks, This is a test post; to make it of interest, here's an issue you might want to be aware of, those with not brand new hardware. We've got a few Dell PE R415s. A 2TB b/u drive on one was getting full, so I went to replace it with a 3TB drive (a WD Red, not that it matters.) We got the system in '11. I built the drive - a GPT, 1 3TB partition, on an R320, from '12. smartctl understood it perfectly well. Anything else, not so much. parted *crashed* When I managed to force it to see it without crashing - I think I had to create a new GPT, it only saw 2199G. Put the drive back on the other box, parted complained that the "backup block" wasn't at the end of the disk. I finally talked to Dell, and was told, and I quote, <...> three terabyte drives aren't supported the raid controller installed in this server, the SAS 6 i/r. It likely worked fine in the R320 due to the age difference and the raid controller installed in it, I don't believe firmware updates will make the drive usable or extra space visible to the controller. <snip> IMPORTANT NOTE! Only the Dell H700 and H800 currently support the 3TB drives (H200 will add support later this year) - NO earlier controllers, such as the PERC4/5/6, SAS5/6 (or ANY other Dell controller not mentioned) have this support and in some cases, even though you may be able to see the drive, this has NOT been tested or validated, so possible data loss could be experienced. ONLY use the Dell H700 and H800 with the proper firmware to ensure a tested and validated >2TB solution! For non-Dell controllers, contact the controller vendor for their support statement on >2TB drives. mark

2 2

Cronjob and sudo
by Matt 12 Feb '15

12 Feb '15

I need to remove empty files out of a directory that are over 6 hours old so I created this script and put it in cron.hourly. #!/bin/sh cd /var/list sudo -u matt find /var/list -mmin +360 -empty -user matt -exec rm {} \; I want to run it as matt rather than root for just an added bit of safety. Problem is I get this. "sudo: sorry, you must have a tty to run sudo" Is there another way to do this? As I understand the reason for this is requiretty in sudo config. If that improves security I would rather not change that setting.

6 7

Packages not available in CentOS 7
by Venkateswara Rao Dokku 12 Feb '15

12 Feb '15

HI, I would like to upgrade my customized CentOS 5.5 to CentOS 7. For this I took the latest stable CentOS 7 image and wanted to install the packages that are there in the existing customized version of CentOS 5.5. I could install some of the packages, but the following packages I couldn't install. 1. Rhpl 2.mod_perl 3. 3.notification-daemon 4. 4.vixie-cron 5.kudzu 6.redhat-lsb 7.mod_python 8.webalizer 9.pam_ccreds 10.libnotify 11.irda_utils 112.readahead 113.MkInitrd 114.Alchemist 115.Cadevar 16.system-config-network-tui 17.firstboot-tui Whwhen tried to install the packages using *YUM *command, it is complaining that no such package. W When tried to install packages from rpm's, there are too many dependencies? CaCan you please suggest the best way to install the above packages in the latest CentOs? WhAre the packages deprecated? or merged into some other package? THThanks for the help -- Thanks & Regards, Venkateswara Rao Dokku.

5 5

info/EL5: subversion / mod_dav_svn
by Leon Fauster 12 Feb '15

12 Feb '15

Just to point out that EL5 does not get this patch: https://rhn.redhat.com/errata/RHSA-2015-0165.html "A NULL pointer dereference flaw was found in the way the mod_dav_svn module handled REPORT requests. A remote, unauthenticated attacker could use a specially crafted REPORT request to crash mod_dav_svn. (CVE-2014-3580)" https://bugzilla.redhat.com/show_bug.cgi?id=1174054#c17 -- LF

1 0

Why the command 'service ntpd stop' cause the time reversed?
by David chen 12 Feb '15

12 Feb '15

A shell script is deployed to synchronize time, the script is invoked hourly by crontab, and its content is as follows: #!/bin/bash service ntpd stop ntpdate 192.168.0.191 #it's a valid ntpd server in LAN service ntpd start chkconfig ntpd on Inspected the Linux log(Centos6.4 /var/log/messages), found the following fragment: Jan 7 14:00:01 host1 ntpd[32101]: ntpd exiting on signal 15 Jan 7 13:59:59 host1 ntpd[44764]: ntpd 4.2.4p8(a)1.1612-o Fri Feb 22 11:23:27 UTC 2013 (1) Jan 7 13:59:59 host1 ntpd[44765]: precision = 0.143 usec Jan 7 13:59:59 host1 ntpd[44765]: Listening on interface #0 wildcard, 0.0.0.0#123 Disabled Jan 7 13:59:59 host1 ntpd[44765]: Listening on interface #1 wildcard, ::#123 Disabled Jan 7 13:59:59 host1 ntpd[44765]: Listening on interface #2 lo, ::1#123 Enabled Jan 7 13:59:59 host1 ntpd[44765]: Listening on interface #3 em2, fe80::ca1f:66ff:fee1:eed#123 Enabled Jan 7 13:59:59 host1 ntpd[44765]: Listening on interface #4 lo, 127.0.0.1#123 Enabled Jan 7 13:59:59 host1 ntpd[44765]: Listening on interface #5 em2, 192.168.1.151#123 Enabled Jan 7 13:59:59 host1 ntpd[44765]: Listening on routing socket on fd #22 for interface updates Jan 7 13:59:59 host1 ntpd[44765]: kernel time sync status 2040 Jan 7 13:59:59 host1 ntpd[44765]: frequency initialized 499.399 PPM from /var/lib/ntp/drift Jan 7 14:00:01 host1 ntpd_initres[32103]: parent died before we finished, exiting Jan 7 14:04:17 host1 ntpd[44765]: synchronized to 192.168.0.191, stratum 2 Jan 7 14:04:17 host1 ntpd[44765]: kernel time sync status change 2001 The script should be executed at 14:00, the first line of the fragment also should indicate that the command 'service ntpd stop' have executed successfully, but why the second line timestamp(13:59:59) is less than the first line's(14:00:01)? Inspected the Linux log, the problem has happened three times, the time point was Jan 7 14:00:00, Jan 14 14:00:00 and Feb 4 14:00:00 respectively.

6 10

Do I need these?
by Mark LaPierre 12 Feb '15

12 Feb '15

Hey Y'all, I got a package update notice this evening for package augeas-libs. As is my practice I figured I would check to see if I needed the package or if I could just delete it thus obviating the need to install the upgrade. This is what yum has to say about the package and it's sole dependency. Dependencies Resolved ================================================================================ Package Arch Version Repository Size ================================================================================ Removing: augeas-libs i686 1.0.0-7.el6 @base 934 k Removing for dependencies: netcf-libs i686 0.2.4-1.el6 @base 186 k Transaction Summary ================================================================================ Remove 2 Package(s) So just to be sure I put them both on the same command line and got this: Dependencies Resolved ================================================================================ Package Arch Version Repository Size ================================================================================ Removing: augeas-libs i686 1.0.0-7.el6 @base 934 k netcf-libs i686 0.2.4-1.el6 @base 186 k Transaction Summary ================================================================================ Remove 2 Package(s) It would appear that there are no application packages that depend on augeas-libs or netcf-libs. It doesn't look like anything is using them. Is there any good reason why I should not just erase augeas-libs and netcf-libs? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 2

[OT] Using rsync to backup / restore - when to use (or not use) the -H option switch?
by Francis Gerund 11 Feb '15

11 Feb '15

Hello. After some reading, including the rsync man page, I am still not clear on this: When using rsync to backup and restore, when should and when should one *not* include hard links (by using the -H option switch)? A simple example case would be backups for one or just a few light-duty local workstations. Is there a simple, clear rule about that, or is it too complicated for that?

5 6

VMWare server 2 disk image and QEMU
by Allart Pieters 11 Feb '15

11 Feb '15

I need to convert a VMWare Server 2 disk image to QEMU. I've read that QEMU supports VMWare disk formats. I just want to be sure it also supports the old VMWare Server 2 format. Anyone has any experience with/knowledge about this? Tnx in advance, Allart

3 2

SCL MirrorList error
by Andrew Lau 11 Feb '15

11 Feb '15

Hi, In the past my mirrorlist for SCL, http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=SCL has worked without any issues. Recently http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=SCL redirects to http://mirror.centos.org/centos/6/scl/x86_64/ which leads to 404, instead it should be http://mirror.centos.org/centos/6/SCL/x86_64/ Is this a change or bug. Thanks, Andrew

3 2

Nvidia Mod Update
by Mark LaPierre 11 Feb '15

11 Feb '15

Hey all, On my X86-64 CentOS 6.6 machine I just ran yum update. In the update was an upgrade from the 340.XX Nvidia package to the 346.XX package. Hrmmm? I'm thinking this is not a good idea but, since this is just a test system any way, I let it run. Sure enough I was right. Dmesg says that my video is supported by the 340.XX driver, not the 346.XX driver. It's not happy cause it can't find a supported GPU. 1. So, having only a command line interface, how do I tell yum to rip out the 346.XX package and reinstall the 340.XX package? 2. How do I tell yum not to do such stupid stuff again? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

7 12

Re: [CentOS] Another Fedora decision
by James B. Byrne 11 Feb '15

11 Feb '15

On Tue, February 10, 2015 18:28, Always Learning wrote: > > 3. The Russian's web site is that of a devote cyclist. Most of the > films on his web site are of cycling or about cycling. Most of the > oldish PDF files are about Linux and in Russian. I do not consider > his site presents a malicious danger to me. Most phishing sites do not resemble anything like what one might expect. That is why they work. Truly, with network security you really, really have to develop a pathological paranoia about files with unknown origins or you might as well give up on security at all. PDFs are known vectors for malware. They have been exploited in the past and no doubt will be exploited in the future. A PDF file is a postscript computer language program with embedded data. Nothing more. But nothing less either. Given the network awareness of some pdf reader software they are also potential data leaks and web beacons. That said, I readily admit that the risk posed by this particular example is low. But, it is not zero. And depending upon the platform the file is copied to any non-zero risk, no matter how small, may be too much. I might put such a file on a stand-alone laptop but I would never put it on anything that connected to my networks. I certainly would not place it on anything that did not possess a fairly robustly constructed firewall with strict limits on outgoing traffic. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

libguestfs-winsupport
by Steve Clark 11 Feb '15

11 Feb '15

Hello List, Does anyone know why this is not available in CentOS 6.6. I found it in a SL repo but not in CentOS. I found several CentOS Bugs one answered by JH http://bugs.centos.org/print_bug_page.php?bug_id=6822 saying it had been added to 6.5 2013-12-09 19:05 JohnnyHughes Resolution open => fixed But it is still not available. cat /etc/redhat-release CentOS release 6.6 (Final) yum repolist repo id repo name status base CentOS-6 - Base 6,518 cr CentOS-6 - CR 0 elrepo ELRepo.org Community Enterprise Linux Repository - el6 302 epel Extra Packages for Enterprise Linux 6 - x86_64 11,148 extras CentOS-6 - Extras 36 gf Ghettoforge packages that won't overwrite core distro packages. 149 rpmforge RHEL 6 - RPMforge.net - dag 4,718 updates CentOS-6 - Updates 725 yum list all | grep libguestfs libguestfs.x86_64 1:1.20.11-11.el6 @base libguestfs-tools.x86_64 1:1.20.11-11.el6 @base libguestfs-tools-c.x86_64 1:1.20.11-11.el6 @base libguestfs-devel.x86_64 1:1.20.11-11.el6 base libguestfs-java.x86_64 1:1.20.11-11.el6 base libguestfs-java-devel.x86_64 1:1.20.11-11.el6 base libguestfs-javadoc.x86_64 1:1.20.11-11.el6 base ocaml-libguestfs.x86_64 1:1.20.11-11.el6 base ocaml-libguestfs-devel.x86_64 1:1.20.11-11.el6 base python-libguestfs.x86_64 1:1.20.11-11.el6 base ruby-libguestfs.x86_64 1:1.20.11-11.el6 base Fri Feb 6 08:55:15 EST 2015 -- Stephen Clark *NetWolves Managed Services, LLC.* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

3 5

about repository
by TheIsmaelAzman . 11 Feb '15

11 Feb '15

i am offering my storage for the download mirror link for the centos. is there any guide? thank you.. ismael

2 1

CentOS-announce Digest, Vol 120, Issue 4
by centos-announce-request＠centos.org 11 Feb '15

11 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0162 CentOS 6 augeas BugFix Update (Johnny Hughes) 2. CESA-2015:0165 Moderate CentOS 6 subversion Security Update (Johnny Hughes) 3. CESA-2015:0166 Moderate CentOS 7 subversion Security Update (Johnny Hughes) 4. CESA-2015:0164 Moderate CentOS 5 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 10 Feb 2015 14:29:12 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0162 CentOS 6 augeas BugFix Update Message-ID: <20150210142912.GA29085(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0162 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0162.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 830e112850754e1e366d87813eeab40dca1465b08759cf1d5944d1372284fdc3 augeas-1.0.0-7.el6_6.1.i686.rpm a0a6a000351426710831fbe0f529a69cf5e9c125348b7e7b288d928d1df4609a augeas-devel-1.0.0-7.el6_6.1.i686.rpm 48980fbfc8f19e665036b8dd3cbdbce079536f361bfec7f7133130156f2f3921 augeas-libs-1.0.0-7.el6_6.1.i686.rpm x86_64: bfffb8078feca3c4509ec20529d5683562f49c223d40bb74e8ec3d2b584f1db6 augeas-1.0.0-7.el6_6.1.x86_64.rpm a0a6a000351426710831fbe0f529a69cf5e9c125348b7e7b288d928d1df4609a augeas-devel-1.0.0-7.el6_6.1.i686.rpm 97fdfb8da2056af339026d3894e288505ffd4c850726c6d53cd7187ab11e2b2d augeas-devel-1.0.0-7.el6_6.1.x86_64.rpm 48980fbfc8f19e665036b8dd3cbdbce079536f361bfec7f7133130156f2f3921 augeas-libs-1.0.0-7.el6_6.1.i686.rpm 7bece2edec3fd7439b8928bfe02d37745008e95758bbe0e72d23a1a8442595ee augeas-libs-1.0.0-7.el6_6.1.x86_64.rpm Source: e113f6d4d6f55466fcb66b7055209779f701bea3a8bdf33020d016fe7ed09a29 augeas-1.0.0-7.el6_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 10 Feb 2015 22:32:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0165 Moderate CentOS 6 subversion Security Update Message-ID: <20150210223242.GA48394(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0165 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0165.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 32a3927ae4971b23bc81f9123363306d8d9a5939b139a3c802de82e5b79644bb mod_dav_svn-1.6.11-12.el6_6.i686.rpm 6c23fef4443d27c6e82193bdfbdda82b7898093c1006615dbcc75e3cf68a815a subversion-1.6.11-12.el6_6.i686.rpm 6cc1d25aa4ac53e913242ec41159d8de42fadb871384062e45fffecb1d31e175 subversion-devel-1.6.11-12.el6_6.i686.rpm 6596246e0c441e32c50e6c90c016a714c6c6b0c6ce109c2a69992bbcdb7c00ac subversion-gnome-1.6.11-12.el6_6.i686.rpm 1ed02f11d33fd55628ff0d97f2c4b2a901431f9340c59bdb862db3aef6f4dd6a subversion-javahl-1.6.11-12.el6_6.i686.rpm e8a59903e9b33553cf4b1dffe1e191d331496a4e56afdb22dad22eca9c08b2e6 subversion-kde-1.6.11-12.el6_6.i686.rpm 32906e72f51ff99aa406438d53e538ea2cf7b5e90d84d05258a3a74e8fe329df subversion-perl-1.6.11-12.el6_6.i686.rpm 2efa70361dd48f5ebdf2cf5a85f0e58a748760483e6573c37c99e2c2ea12d5b4 subversion-ruby-1.6.11-12.el6_6.i686.rpm 768cf02d302b8469f9d3960c7bcfecc0358b67e48b389e057db5689d64d43a37 subversion-svn2cl-1.6.11-12.el6_6.noarch.rpm x86_64: cfe4ec1671cf414256ebdf9453c2395084cec939c33f2fecc78adfca6a7e2f05 mod_dav_svn-1.6.11-12.el6_6.x86_64.rpm 6c23fef4443d27c6e82193bdfbdda82b7898093c1006615dbcc75e3cf68a815a subversion-1.6.11-12.el6_6.i686.rpm 870fc0650e8d86a5e48c4628d6b67d52c20a751e51e6a232e54a4b20b1fb7efa subversion-1.6.11-12.el6_6.x86_64.rpm 6cc1d25aa4ac53e913242ec41159d8de42fadb871384062e45fffecb1d31e175 subversion-devel-1.6.11-12.el6_6.i686.rpm e431d9f4b9790c57e42e9148ffcf13ca00ce688e3c22ab61a128aff3bb73daaa subversion-devel-1.6.11-12.el6_6.x86_64.rpm 6596246e0c441e32c50e6c90c016a714c6c6b0c6ce109c2a69992bbcdb7c00ac subversion-gnome-1.6.11-12.el6_6.i686.rpm 22fe7bcc6134958b412fc10381341810a5d3a3e70c9c360aba782936c189a4d3 subversion-gnome-1.6.11-12.el6_6.x86_64.rpm 1ed02f11d33fd55628ff0d97f2c4b2a901431f9340c59bdb862db3aef6f4dd6a subversion-javahl-1.6.11-12.el6_6.i686.rpm 0e79ef2ce0f6897b4802be09c2f9f6fe9b737cfda476732cc191e615b57422bb subversion-javahl-1.6.11-12.el6_6.x86_64.rpm e8a59903e9b33553cf4b1dffe1e191d331496a4e56afdb22dad22eca9c08b2e6 subversion-kde-1.6.11-12.el6_6.i686.rpm f7bc0a34c739ccb42822099d9d137b53af5f5cd1dcf5102fb71f7966d527b82f subversion-kde-1.6.11-12.el6_6.x86_64.rpm 32906e72f51ff99aa406438d53e538ea2cf7b5e90d84d05258a3a74e8fe329df subversion-perl-1.6.11-12.el6_6.i686.rpm a4f559b9031bb7671ad0885d94c91b0aee15b7a1894a845cdd876e08540ec467 subversion-perl-1.6.11-12.el6_6.x86_64.rpm 2efa70361dd48f5ebdf2cf5a85f0e58a748760483e6573c37c99e2c2ea12d5b4 subversion-ruby-1.6.11-12.el6_6.i686.rpm db41dfd9c8b081d35e3931757813a551fe3ddbec09bfe7f2a94b6cb5b192fe9f subversion-ruby-1.6.11-12.el6_6.x86_64.rpm 768cf02d302b8469f9d3960c7bcfecc0358b67e48b389e057db5689d64d43a37 subversion-svn2cl-1.6.11-12.el6_6.noarch.rpm Source: 2044b1b915eec1cc021681fd599cbf2fd37106670883426e2e24c08d1d45095f subversion-1.6.11-12.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 11 Feb 2015 00:09:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0166 Moderate CentOS 7 subversion Security Update Message-ID: <20150211000948.GA59999(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0166 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0166.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ad1d62c0aa11709378918e05cd8f66425901af7759d8ef8119918991bc4a1dcd mod_dav_svn-1.7.14-7.el7_0.x86_64.rpm 4095d987c67eb61556befe167d0f74ad0b777f1a4fe1a94b24441c94b283e933 subversion-1.7.14-7.el7_0.i686.rpm f63835d6f425a1628c58afdb484cb89de3bd1e26869dee151b665f2472e6e48a subversion-1.7.14-7.el7_0.x86_64.rpm 51ca7f8c8a5413385f99f6dd0acddce223603f7a9f3718983bc5c99eb01ad40d subversion-devel-1.7.14-7.el7_0.i686.rpm 8f612efc6b30488c81e08597cf653f55897a6b837bf4236252e0c9afdc478975 subversion-devel-1.7.14-7.el7_0.x86_64.rpm 7ffc0bf23a85735e8444c4641c186e7c5a4d8cb57b883301c9038fac2b18f49f subversion-gnome-1.7.14-7.el7_0.i686.rpm 201a8e4b1971d99e45e705004361b0a6ba8165bd1690a5352acdc82035247d25 subversion-gnome-1.7.14-7.el7_0.x86_64.rpm ae5430e9cfcbfd5bc2655827f4cfcc7c57c7301c8402b632c1ee0a8db03bae34 subversion-javahl-1.7.14-7.el7_0.i686.rpm 26335d6ee4935df7332fd8e2160da8439a03d5ad0777f4e86edb2fa0335874be subversion-javahl-1.7.14-7.el7_0.x86_64.rpm af9c6ade8371afde8f05b7d74bae455c75065804fc3dba52e7fec1868d02ac3e subversion-kde-1.7.14-7.el7_0.i686.rpm 7ebb23191473eb503dd2a960e014406dcbc86cde1fd9a9651d83732c65049ec3 subversion-kde-1.7.14-7.el7_0.x86_64.rpm 43ad268e519c29af89eefcd9cd785189bfcb1953398ac4a4b0ae5b0ec8e51726 subversion-libs-1.7.14-7.el7_0.i686.rpm 88de3d6dde9da26988a107be00f10726b27a00f530f5529b4bc24ad924c89618 subversion-libs-1.7.14-7.el7_0.x86_64.rpm 1ea88f946da1d932fa4b1b123eae486dd0dd599e6b6368c31f701b8603538a99 subversion-perl-1.7.14-7.el7_0.i686.rpm 2855e7f06197f820ae35ed99be61fbf39b36df38cfcdd8dfe1221af0ad62b606 subversion-perl-1.7.14-7.el7_0.x86_64.rpm c912c363a08ac2cdcb7ffab146a1b20c825df729883051d8e558a7a5384ad7ac subversion-python-1.7.14-7.el7_0.x86_64.rpm 346e2e09bfd19ca048ff437999e02136ac8d58670c2df9c3ab14097dcf83c257 subversion-ruby-1.7.14-7.el7_0.i686.rpm fe1a3f846fa82245479230d0ae834ceefee70756dc41f015dd57736fadcae0f0 subversion-ruby-1.7.14-7.el7_0.x86_64.rpm b4a223ec01851dbc0add439b90e8de40597e3ea21b054903a3a2794597df960a subversion-tools-1.7.14-7.el7_0.x86_64.rpm Source: 80de3e657ce5343d61d45c3b52453a23d3ac6d069aab1186996ee3d91370b455 subversion-1.7.14-7.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 11 Feb 2015 05:47:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0164 Moderate CentOS 5 kernel Security Update Message-ID: <20150211054740.GA23002(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0164 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0164.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fbc6e365d23d3da286bf9bded550eabd318a21040f34fa096f1738ebb085767a kernel-2.6.18-402.el5.i686.rpm d477e8c147231636fb3b4ff56faba8aab779e2879e17fc04572bc8807988e472 kernel-debug-2.6.18-402.el5.i686.rpm 03fa9ae6513e5d2a707af5f4bccd8b1015c84b2bfbc7d1d10d6c80e1ad9a93f9 kernel-debug-devel-2.6.18-402.el5.i686.rpm 231997d5368ad7f96cd257cbf18cfcfbe430696d8af4f3974aa11d4016e30b60 kernel-devel-2.6.18-402.el5.i686.rpm 6acd771664c710e4ab60e2411f445346f277993525db15f67369ecf6960fc8ac kernel-doc-2.6.18-402.el5.noarch.rpm 7acf02229076c89de3aaca3d30362b37bb2d13a472031a30aaf81160489bbc0f kernel-headers-2.6.18-402.el5.i386.rpm 4b6e411599708a2fd881009b5dcbd676af58827b96cccb082cb3f5854f1871e9 kernel-PAE-2.6.18-402.el5.i686.rpm d75baea1b6c5d5027c7f9d75408ca0bf63efca74fe3f36bbd257dbe5f3fd4288 kernel-PAE-devel-2.6.18-402.el5.i686.rpm 2dd5a0cd5c2b15081026fe5ece64a9ae32d6ae306fa807f50211b871f68e58df kernel-xen-2.6.18-402.el5.i686.rpm 493f77a0af04025edbdc0350488477f39752ba59d4765efcb49f427bb6dfd761 kernel-xen-devel-2.6.18-402.el5.i686.rpm x86_64: e2d3e0ca21641dac3412c38d076ea849f5269a607be6146edad1952efa67ec5e kernel-2.6.18-402.el5.x86_64.rpm 5ab8f391d375c1fefcbc570d9bd1293fbee2140c1c6e6a8fa8ab73554b1fe24b kernel-debug-2.6.18-402.el5.x86_64.rpm cfaf3065d7e69629c50cbe3b4d9178b93f8cdfc30e85e74811fddb91d8357a25 kernel-debug-devel-2.6.18-402.el5.x86_64.rpm 1d562cbc7192f4fb46cc77d123adfbfe30e31c30ed37edcef568fd529954e888 kernel-devel-2.6.18-402.el5.x86_64.rpm 6acd771664c710e4ab60e2411f445346f277993525db15f67369ecf6960fc8ac kernel-doc-2.6.18-402.el5.noarch.rpm 2041c9eb7f889c907f34c1e04749304f69298f352f2ba7d19f2c3d726fda8726 kernel-headers-2.6.18-402.el5.x86_64.rpm 53be0ecf7943ece4f03c815af776891f8901c8faf589bf1fff0aa05684a13248 kernel-xen-2.6.18-402.el5.x86_64.rpm e416468d318e5af8228ec6e1248fb5f3b60b656827b6232f47f6918bc224c872 kernel-xen-devel-2.6.18-402.el5.x86_64.rpm Source: bf2745e93b295e13bb88c3d10304f0403cb943373110f26db204c75704df7000 kernel-2.6.18-402.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 4 ***********************************************

1 0

CentOS 7 : create RAID arrays manually using mdadm --create ?
by Niki Kovacs 11 Feb '15

11 Feb '15

Hi, When installing CentOS 7, is there a way to 1. leave the GUI installer and open up a console 2. create RAID arrays manually using mdadm --create 3. get back in the GUI installer and use the freshly created /dev/mdX arrays? I tried to do this, but the installer always exits informing me that he can't create the RAID arrays (since they're already created, duh). Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

4 8

Re: [CentOS] Another Fedora decision
by James B. Byrne 11 Feb '15

11 Feb '15

On Sat, January 31, 2015 05:14, Johnny Hughes wrote: > On 01/30/2015 06:09 PM, Scott Robbins wrote: >> On Fri, Jan 30, 2015 at 11:27:55PM +0000, Marko Vojinovic wrote: >>> On Fri, 30 Jan 2015 14:15:05 -0800 >>> Akemi Yagi <amyagi(a)gmail.com> wrote: >>>> On Fri, Jan 30, 2015 at 2:04 PM, Scott Robbins >>>> <scottro(a)nyc.rr.com> >>>> wrote: >>>>>> >>>>>> Centos 7 does that as well. >>>>> Heh, I guess I've used good passwords in my installs then. >>>> >>>> I have to tap it twice all the time. But don't tell this to >>>> anyone! ;-) >>> >>> OP's point is that probably in RHEL8 you won't be able to do even >>> that anymore. >> >> Exactly. There is some complaining going on on the Fedora testing >> list, >> not sure where else one can protest. >> > > Well, protesting here would be meaningless .. as is protesting systemd > here. CentOS-8 will have whatever is in the RHEL-8 source code, > exactly > as it is in that source code minus branding. Just like CentOS-2.1, 3, > 4, 5, and 6. Our goal is to rebuild the source code exactly, bugs and > all. We want all the behaviors and the experience to be identical in > every way. > > If you want to effect change before it gets in RHEL, then Fedora is > the place. If you want to get it changed in CentOS, then buy RHEL > and providing feedback there is the way. We are, by design, exactly > as Red Hat pushes the RHEL source code. > Reading between the lines of the Fedora list discussion leads me to the conclusions that: 1. The password strength decision is driven by RH corporate. 2. There is not going to be any back-off by the developers. 3. This is going to be in RH-8. 4. There is absolutely no rational argument that can be made to anyone alter any of this. 5. Protesting there is evidently meaningless as well. The Fedora Server WG has already asked that this be optionally enforced if it cannot be removed. Answer: No. This change was not discussed, it was announced. There has been zero support for it from the community and a large amount of criticism. All requests for information respecting the rational and evidential support driving he change are met with what can only be described as political doublethink amounting to: See the unrelated discussion on this thread over here; and when you discover that it has nothing to do whatsoever with your request then see that tangential thread over there; and when you persistently return to your original request because there is no answer in either then be told that you are a conspiracy theory nut-case. > On Fri, Jan 30, 2015 at 2:49 PM, Chris Murphy > <lists at colorremedies.com> wrote: > On Fri, Jan 30, 2015 at 1:21 PM, Adam Williamson > <adamwill at fedoraproject.org> wrote: >> On Fri, 2015-01-30 at 12:59 -0700, Chris Murphy wrote: >>> What's the actual, real world, >>> non-imaginary impetus behind the change? >> >> It's exactly what all the list posts I pointed you to say it is. > > Please go find quotes because I just went through them all and I > found: > > "Better security is always a plus." > > "Instead I propose that we increase our minimum password..." > > "In principle I don't disagree with it; But IMO it can not be > a replacement to stronger defaults." > > And that's it. No actual reasons, let alone any data to back it up. > And all three of those statements have flaws which I've already > addressed. > >> I don't know how to stop the conspiracy virus which causes >> people to leap to the conclusion that there's some shadowy >> secret motive behind every change they don't like, but there >> *isn't*. ( Odd, is it not, that Mr. Williamson professes that there is no secret motive but cannot actually provide one when asked. ) The most telling line in the entire thread, for me, is this one: On Fri, 2015-01-30 at 12:59 -0700, Chris Murphy wrote: > When you stop trusting me. I stop trusting you. And that's a > huge problem, and thus far the engineering types are looking > at this with narrow vision, it's 2 more key presses. They > aren't looking at this at all from the perspective of its > connotation. Personally, from the outside looking in, this all smells of a pointy haired boss directive that the devs are trying to cover their collective asses from. Of course, my corporate days are long behind me so perhaps things have changed. Equally it could be simple incompetence by highly strung people that do not like being criticised for an ill-considered hasty decision but who actually have no evidence to support it. I have to go off now and find a nice bone bed to lie down in; and fossilize. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

23 194

LUKS on EL6 / enable block device after reboot
by Leon Fauster 10 Feb '15

10 Feb '15

Is there an easy way (cli) to enable a luks encrypted partition after reboot (a partition that was not enabled while booting, because not in the crypttab). I can execute the necessary command stack [1] but just wondering if there is an "enterprise/easy" way to do that ... [1] cryptsetup luksOpen $(blkid -t TYPE="crypto_LUKS" -o device) \ luks-$(cryptsetup luksUUID $(blkid -t TYPE="crypto_LUKS" -o device)) -- LF

2 1

Re: [CentOS] KISS networking with CentOS 7
by Niki Kovacs 10 Feb '15

10 Feb '15

Le 10/02/2015 17:20, m.roth(a)5-cent.us a écrit : > Please explicate - offlist is fine. I really dislike the naming > convention.... I was installing on a new HP dl560 g8, and it came up with > ensf1 (which is*great* fun if you're trying to do a pxeboot build....) The CentOS FAQ explains how to restore the traditional naming scheme: http://wiki.centos.org/FAQ/CentOS7#head-31ebc6642958a0df12304d6aab9a49034a3… That being said, everything works fine now with the new interface names. I guess I'll just have to get used to it. Feels a bit like FreeBSD. :oD Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

4 4

Central hostname management?
by Niki Kovacs 10 Feb '15

10 Feb '15

Hi, Our local school has a 100 % Slackware Linux network with two servers and 14 desktop clients. The main server is running Dnsmasq, and he's providing static IP addresses to the desktop clients. Hostnames are also managed centrally. All client machines only have this in /etc/hosts: 127.0.0.1 localhost.localdomain localhost And in /etc/HOSTNAME: localhost.localdomain The hostname gets sent to each of the desktop clients by the server. The big advantage is I can manage everything centrally from the server. One line in /etc/dnsmasq.conf, and that's it. Client installs can all be cloned with Ghost4Linux. Now I'm trying to do the same thing on CentOS 7. /etc/hosts: 127.0.0.1 localhost.localdomain localhost (IPv6 is disabled) /etc/hostname: localhost I'm experimenting with all this while reading the RHEL Networking Guide. I understand CentOS 7 is using hostnamectl to manage the hostname. In that case, what do I have to do? Can hostnamectl be somewhat disabled and/or removed? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

KISS networking with CentOS 7
by Niki Kovacs 10 Feb '15

10 Feb '15

Hi, I'm currently experimenting with CentOS 7 on a couple of installations. I'm reasonably proficient with CentOS 5.x and 6.x. I'd like to manage networking using a more traditional approach (Keep It Simple Stupid). Here's what I tried so far, starting from a minimal install: Install net-tools (to be able to use ifconfig). Get rid of NetworkManager: # yum remove NetworkManager* Add 'net.ifnames=0' and 'biosdevname=0' to kernel boot options to name interfaces eth0, eth1, etc. Edit '/etc/sysconfig/network-scripts/ifcfg-eth{0,1}' like I did under previous versions. Eventually, edit '/etc/udev/rules.d/70-persistent-net.rules' to switch interfaces: # /etc/udev/rules.d/70-persistent-net.rules # # eth0 SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", \ ATTR{address}=="00:1e:c9:42:84:7b", ATTR{type}=="1", \ KERNEL=="eth*", NAME="eth0" # eth1 SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", \ ATTR{address}=="00:30:f1:6a:2f:40", ATTR{type}=="1", \ KERNEL=="eth*", NAME="eth1" So far, no way to bring either eth0 or eth1 up. What am I doing wrong here? Is NetworkManager now a mandatory part of the base system? Some other mistake somewhere else? I'm a bit puzzled here. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 1

Re: [CentOS] SELinux context for ssh host keys?
by James B. Byrne 10 Feb '15

10 Feb '15

On Tue, February 10, 2015 04:18, Andrew Holway wrote: > On 10 February 2015 at 06:32, Mark Tinberg <mark.tinberg(a)wisc.edu> > wrote: > >> >> > On Feb 9, 2015, at 12:27 PM, Robert Nichols >> <rnicholsNOSPAM(a)comcast.net> >> wrote: >> > >> > On 02/09/2015 11:14 AM, James B. Byrne wrote: >> >> So, I decided to run restorecon -v to >> >> >> ... >> >> restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context >> >> unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0 >> > > Why are you putting your SSH key in /etc/ ? > > With SELinux its normally better to go with the flow. find out which > directories have the desired label and keep your objects in there. > > I'm guessing in this case ~/.ssh/ > > -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

Gnome-3 - can't drag menu items out
by Les Mikesell 10 Feb '15

10 Feb '15

I've mostly been using MATE from epel when I use GUI access on CentOS7 because it works with x2go, but just noticed on a system with Gnome3 that I can't drag items out of the menus to the desktop or top bar for easier access. Is there some way to make the desktop space useful for more than pretty wallpaper? -- Les Mikesell lesmikesell(a)gmail.com

2 2

Packages installation in CentOs
by Venkateswara Rao Dokku 10 Feb '15

10 Feb '15

Hi, I have a customized CentOS 5.5 kernel. I want it to upgrade it to CentOS 7. The approach I have decided was to take the CentOS 7 and then install the customized packages that are there in the CentOS 5.5. While trying to install the customized packages, I could install most of the packages, but I couldn't install the below in the latest CentOS 7. 1. rhpl 2. mod_perl 3. notification-daemon 4. vixie-cron 5. kudzu 6. redhat-lsb 7. mod_pyton 8. webalizer 9. pam_ccreds 10. libnotify 11. irda_utils 12. readahead 13. Mkinitrd 14. Alchemist 15. Cadevar 16. sustem-config-network-tui 17. firstboot-tui I tried to install the above packages as other packages using *YUM*, it is complaining that no such package. So I tried installing them by rpm's. But, installing rpm's giving "failed dependencies" error. Can you please suggest best way to install the above listed packages on CentOs 7? Are the packages listed above deprecated for CentOS 7 or merged into some other packages? Thanks for the help. -- Thanks & Regards, Venkateswara Rao Dokku.

3 4

SELinux context for ssh host keys?
by James B. Byrne 10 Feb '15

10 Feb '15

I generated a new host key for one of our systems using: ssh-keygen -t rsa -b 4096 -f ssh_host_rsa_key_4096 I then ran 'ls -Z on the keys' ll -Z *key* -rw-------. root root system_u:object_r:sshd_key_t:s0 ssh_host_dsa_key -rw-r--r--. root root system_u:object_r:sshd_key_t:s0 ssh_host_dsa_key.pub -rw-------. root root system_u:object_r:sshd_key_t:s0 ssh_host_key -rw-r--r--. root root system_u:object_r:sshd_key_t:s0 ssh_host_key.pub -rw-------. root root system_u:object_r:sshd_key_t:s0 ssh_host_rsa_key -rw-------. root root unconfined_u:object_r:sshd_key_t:s0 ssh_host_rsa_key_4096 -rw-r--r--. root root unconfined_u:object_r:sshd_key_t:s0 ssh_host_rsa_key_4096.pub -rw-r--r--. root root system_u:object_r:sshd_key_t:s0 ssh_host_rsa_key.pub As it seems odd, to me, that all the other files had a system_u user while the new had unconfined_u. So, I decided to run restorecon -v to presumably set the SELinux user correctly for the new keys: But that is not what happened: restorecon -v * restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0 restorecon reset /etc/ssh/ssh_host_rsa_key_4096.pub context unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0 As you can see, not only did the user not get set to system_u but the type was changed to etc_t. Why were the new key files changed from sshd_key_t types to the generic etc_t types? Why was the user not changed in either case from unconfined_u to system_u or vice versa? There is no REQUIREMENT that a host key have a particular file name is there? The sshd_config provides for setting one explicitly and doing so seems to cause no problems with ssh connections that I have yet encountered. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Recommendations for good CentOS 7 documentation
by Niki Kovacs 09 Feb '15

09 Feb '15

Hi, I'm looking for recommendations for documentation about the specificities of RHEL/CentOS 7.x. It can be either online or in printed book format, and I'm fluent in german, french and english. I have a good books about 5.x: "RHEL 5 Unleashed" from Sams, "Foundations of CentOS Linux" and "The Definitive Guide to CentOS", both from Apress. Can anyone recommend anything similar on 7.x? Cheers from South France, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

4 5

Another Fedora decision
by Scott Robbins 09 Feb '15

09 Feb '15

So, probably some of you, at least, follow Fedora, perhaps in part to see what new desktop user oriented decision will make it into the next version of RHEL/CentOS. You may have noticed how if Fedora, by some odd scheme, deems your password unworthy, you have to click Done two times. So, the latest Ananconda takes this one step further. Passwords that the system considers weak will no longer be allowed. While this will probably only be a minor inconvenience, (add 3 bangs to the end or something equally meaningless), a few on the fedora-testing list, including myself, think it's just one more solution seeking a problem. At present, I don't know where one can lodge a protest. Hopefully, someone will care enough to file a bugzilla RFE. Others may think it's a great idea--at last, users can't install with a password of 1234. Anyway, as part of their push for it is that no one minds it, thought I'd mention it here, as many of the desktop oriented decisions get into Fedora, then into RH and it's already too late. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

12 15

reboot - is there a timeout on filesystem flush?
by Les Mikesell 09 Feb '15

09 Feb '15

I've had a few systems with a lot of RAM and very busy filesystems come up with filesystem errors that took a manual 'fsck -y' after what should have been a clean reboot. This is particularly annoying on remote systems where I have to talk someone else through the recovery. Is there some time limit on the cache write with a 'reboot' (no options) command or is ext4 that fragile? -- Les Mikesell lesmikesell(a)gmail.com

9 19

lost at 'repository' entry installing centos7
by g 08 Feb '15

08 Feb '15

greetings. while attempting to install c7, i got lost at 'repository' entry. i canceled, loaded centos.org, looked for help for installing c7, but did not find. i know, i did not look in right place. if such has been posted, i missed. so what/where is 'the right place'? much appreciate some help. -- peace out. in a world with out fences, who needs gates. CentOS GNU/Linux 6.6 tc,hago. g .

5 13

anthem details
by Chris Wensink 08 Feb '15

08 Feb '15

Hello Everyone, Does anyone have any more detail about what kind of system Anthem / Blue Cross was running and what kind of attack broke into their system? It's terrible that it happened, but I think it would benefit all Admins everywhere to learn how it happened so that we can secure our systems from a similar breach of information. Anyone know? Chris

8 9

CentOS-announce Digest, Vol 120, Issue 3
by centos-announce-request＠centos.org 07 Feb '15

07 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:0141 CentOS 5 tzdata Enhancement Update (Johnny Hughes) 2. CEEA-2015:0141 CentOS 6 tzdata Enhancement Update (Johnny Hughes) 3. CEEA-2015:0141 CentOS 7 tzdata Enhancement Update (Johnny Hughes) 4. CESA-2015:X003 kernel Xen4CentOS Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 6 Feb 2015 18:04:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0141 CentOS 5 tzdata Enhancement Update Message-ID: <20150206180427.GA5336(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0141 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0141.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 44a9932b22ec57dae5c56e3442e6e31e9190e34083358f64600b71798e5b0853 tzdata-2015a-1.el5.i386.rpm 18985fa3cc78d13ab79b081a6836c4648e898587c52e6c74dc5301f437fef77e tzdata-java-2015a-1.el5.i386.rpm x86_64: 7c23500ec921b8a55837c4cf5a3d7f4a13d0d759dd4a45b993c5660e092819ea tzdata-2015a-1.el5.x86_64.rpm c1a4dc3190482b0d204341fb34f66c40aeb37fa3f9dec0b003835faf6e139455 tzdata-java-2015a-1.el5.x86_64.rpm Source: 43cb09a77bb5d0ed7cdee1b4dc3f3048ee486d1c67c4fa3dee45dbd0db036550 tzdata-2015a-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 6 Feb 2015 18:13:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0141 CentOS 6 tzdata Enhancement Update Message-ID: <20150206181300.GA59340(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0141 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0141.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0eed49ffbfe3a3af9e29e74072531a567cb05578f3050380f04df7e28c093ff7 tzdata-2015a-1.el6.noarch.rpm 4a23515cf9b03dcde28bbf82f516cbd9609433d41d53da53778f3e3cf792c407 tzdata-java-2015a-1.el6.noarch.rpm x86_64: 0eed49ffbfe3a3af9e29e74072531a567cb05578f3050380f04df7e28c093ff7 tzdata-2015a-1.el6.noarch.rpm 4a23515cf9b03dcde28bbf82f516cbd9609433d41d53da53778f3e3cf792c407 tzdata-java-2015a-1.el6.noarch.rpm Source: dc7dc3c9fb0dc563879803d4d6bf14bb84910d12a21905e878a816849fe32ebd tzdata-2015a-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 6 Feb 2015 18:44:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0141 CentOS 7 tzdata Enhancement Update Message-ID: <20150206184454.GA4732(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0141 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0141.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 921a3e9d60400d5fff290f41d5c3a8290893efdf82916dd25ba4fedf43704d6e tzdata-2015a-1.el7_0.noarch.rpm 697a93ca1f89d37f62f8dec3148a9f6416951a13b1180838cd0a13b6273d53b8 tzdata-java-2015a-1.el7_0.noarch.rpm Source: e83a3cfd7f10e75c194ef53d63e661b9494ffa4799d494ee0b7d5aaed4e120b0 tzdata-2015a-1.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 6 Feb 2015 19:41:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:X003 kernel Xen4CentOS Security Update Message-ID: <20150206194113.GA7620(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii The following packages are updated for Xen4CentOS for CentOS 6: Source: 91e65bf3d0bd8586fbbfcac77ecc7b677ef3582acd8ac11893c71d511edb59cb e1000e-2.5.4-3.10.68.2.el6.centos.alt.src.rpm d2019ca40e3d4beb2c7a55ed8bfd7bb0295d9028726f71bf6dff1389d79ae5cd kernel-3.10.68-11.el6.centos.alt.src.rpm x86_64: be570bc1212273433fb7df1c4f1a7b5ba471db9a61c78b88756f306528847138 e1000e-2.5.4-3.10.68.2.el6.centos.alt.x86_64.rpm 0ea9ea9afa93d26f6e28635b060295d76a7b090e44ea64124f375036db055ab0 kernel-3.10.68-11.el6.centos.alt.x86_64.rpm 58a36c6314dabe487165538f508de60e57429c328263113d152cc324daf5a483 kernel-devel-3.10.68-11.el6.centos.alt.x86_64.rpm f7c24fb8439b505ca1af7c43bc6803721a055c82d5cf0d167a78e2271c610dae kernel-doc-3.10.68-11.el6.centos.alt.noarch.rpm 9c282481f31b4761e6f4b8b0091b96331cd1a5dbb2f135db110289caab4fcc1b kernel-firmware-3.10.68-11.el6.centos.alt.noarch.rpm c59984f2f5d635eec7362ee60ad63262e7dd133fbee1b7094f99f722547c983e kernel-headers-3.10.68-11.el6.centos.alt.x86_64.rpm 35a21a2eea7e4f4a8ea11bfe349068ec1b84d579cbd2c852d8d453533aa43a20 perf-3.10.68-11.el6.centos.alt.x86_64.rpm ======================================================================== These updates address the following issues: e1000e: Just a rebuild of the module for the new kernel. ======================================================================== Kernel: https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.64 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.65 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.66 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.67 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.68 Kernel CVE's: CVE-2014-8134, CVE-2014-8989, CVE-2014-9529 -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 3 ***********************************************

1 0

Re: [CentOS] anthem details OT
by Tom Bishop 06 Feb '15

06 Feb '15

On Fri, Feb 6, 2015 at 8:17 AM, Chris Wensink < cwensink(a)five-star-plastics.com> wrote: > Hello Everyone, > > Does anyone have any more detail about what kind of system Anthem / Blue > Cross was running and what kind of attack broke into their system? > > It's terrible that it happened, but I think it would benefit all Admins > everywhere to learn how it happened so that we can secure our systems from > a similar breach of information. > > Anyone know? > > Chris > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > This is pretty much off topic but I do wish we could have a infosec related mail list I think that would be a good idea. >From what I have read this morning it appears to be an APT, should know more in the coming days and weeks but most times with APT's details will be slow coming. Here are some sites that you may want to look at: http://krebsonsecurity.com/ http://securelist.com/blog/research/ http://www.csoonline.com/author/Steve-Ragan/ http://blog.crowdstrike.com/ This one will be interesting in a few weeks: http://www.csoonline.com/article/2880095/cyber-attacks-espionage/crowdstrik…

1 0

CentOS-announce Digest, Vol 120, Issue 2
by centos-announce-request＠centos.org 06 Feb '15

06 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0129 CentOS 6 device-mapper-multipath BugFix Update (Johnny Hughes) 2. CEBA-2015:0130 CentOS 6 resource-agents BugFix Update (Johnny Hughes) 3. CEBA-2015:0123 CentOS 6 xorg-x11-server BugFix Update (Johnny Hughes) 4. CESA-2015:0118 Moderate CentOS 7 mariadb Security Update (Johnny Hughes) 5. CEEA-2015:0122 CentOS 7 resource-agents Enhancement Update (Johnny Hughes) 6. CEBA-2015:0131 CentOS 7 libvirt BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 5 Feb 2015 13:59:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0129 CentOS 6 device-mapper-multipath BugFix Update Message-ID: <20150205135929.GA63487(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0129 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0129.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a50f6c4932fdf9d035576570d981131142bbadcd65741393c30897273253a0eb device-mapper-multipath-0.4.9-80.el6_6.3.i686.rpm 8c66823188be42a06e0725d1721314ccb33d09f701f006afabea0cac304523d9 device-mapper-multipath-libs-0.4.9-80.el6_6.3.i686.rpm 41db17f1ee29ecf64e69670d6b69be517bcdf74f3d4b3327e313468deb78a9fb kpartx-0.4.9-80.el6_6.3.i686.rpm x86_64: 29128315b4a8b219f9db11277fba2775033e473cb93ad37b716bad8084566279 device-mapper-multipath-0.4.9-80.el6_6.3.x86_64.rpm 8c66823188be42a06e0725d1721314ccb33d09f701f006afabea0cac304523d9 device-mapper-multipath-libs-0.4.9-80.el6_6.3.i686.rpm e441885d3aadb68fd2054ad47e5347ac382509379735036c6c70e424b96ce55f device-mapper-multipath-libs-0.4.9-80.el6_6.3.x86_64.rpm 402a73ef2ac94a4c61ea0f5078c7e6255f86d5c0d490b1341abcb63a7db1d227 kpartx-0.4.9-80.el6_6.3.x86_64.rpm Source: 8c32f972a4afea74c8362d6e75747eb147314f0e37bcb6b890c2a996ad8372a8 device-mapper-multipath-0.4.9-80.el6_6.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 5 Feb 2015 14:00:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0130 CentOS 6 resource-agents BugFix Update Message-ID: <20150205140009.GA63706(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0130 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0130.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 042e4525d919eefcb11ddd40daf3f8b36bfd36835c541d4d9d9559fb93f1ffed resource-agents-3.9.5-12.el6_6.3.i686.rpm x86_64: 2ddf1fa020816a97162c1ef712a2faa93ba927a83a8a5143447c139501afcb9f resource-agents-3.9.5-12.el6_6.3.x86_64.rpm 50d0851b848ee248cfdf075a76ad49d76e76415b3cfc59f21444c2fcc8ed2b4f resource-agents-sap-3.9.5-12.el6_6.3.x86_64.rpm Source: b6c9abc00209e828586393c24414fa391f3abe05dadbad2f6e2f3e79823f3482 resource-agents-3.9.5-12.el6_6.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 5 Feb 2015 14:00:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0123 CentOS 6 xorg-x11-server BugFix Update Message-ID: <20150205140055.GA64079(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0123 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0123.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2c2e39e0ba36026de247eedaa5a733f27403600578a6330da9f7c1180c5fec19 xorg-x11-server-common-1.15.0-25.1.el6.centos.i686.rpm 81080ae713a1acd0ea30d84be54b04dba632c231399357d935bad3d591b73957 xorg-x11-server-devel-1.15.0-25.1.el6.centos.i686.rpm b4014fd130801be327a405a7d7bcce8e2448546daa8a9244171194a40f4d1ef4 xorg-x11-server-source-1.15.0-25.1.el6.centos.noarch.rpm 8322884a868f43d2c213987a6df3f3e4437440a2602d9f1c81b34b48c94aeb9a xorg-x11-server-Xdmx-1.15.0-25.1.el6.centos.i686.rpm e5cd7b182deb9e54ac4f580ad009baa48b6959f230caa18dd78cf574c3f854be xorg-x11-server-Xephyr-1.15.0-25.1.el6.centos.i686.rpm 93148cb5b77194501ba3ea7f915c40c1e529f2c3ba391c8dd7fb4987bb17a7b6 xorg-x11-server-Xnest-1.15.0-25.1.el6.centos.i686.rpm 58c14d3273d8edc6d5c215b1fc519064750a48181c413c7e4e1cee415c4b56aa xorg-x11-server-Xorg-1.15.0-25.1.el6.centos.i686.rpm 8b1583b961d2e31f720b7674883187c602e46fa8d4429557f14eac0dc463464c xorg-x11-server-Xvfb-1.15.0-25.1.el6.centos.i686.rpm x86_64: da6cb1aadca9ac7539113bcc892011e7aec0902b4c81ab350eb6754855b354b7 xorg-x11-server-common-1.15.0-25.1.el6.centos.x86_64.rpm 81080ae713a1acd0ea30d84be54b04dba632c231399357d935bad3d591b73957 xorg-x11-server-devel-1.15.0-25.1.el6.centos.i686.rpm 6adf16b9a2cc397fc54bab110093f1591bc02586c196de8b4b7c9fbd94bcce65 xorg-x11-server-devel-1.15.0-25.1.el6.centos.x86_64.rpm b4014fd130801be327a405a7d7bcce8e2448546daa8a9244171194a40f4d1ef4 xorg-x11-server-source-1.15.0-25.1.el6.centos.noarch.rpm aac00cfabe20cadf545cc9218f97b990e175ba2ded7928b4078a0e5755f30e8b xorg-x11-server-Xdmx-1.15.0-25.1.el6.centos.x86_64.rpm c7515cf4862ca3d74df10cb2e8c63449295920f85f6d74e00d3c475ce80e7242 xorg-x11-server-Xephyr-1.15.0-25.1.el6.centos.x86_64.rpm 88efbb1cd6d3cd08c363703c46486b158e4d0046ff04eb09e622edfbb1a91bf4 xorg-x11-server-Xnest-1.15.0-25.1.el6.centos.x86_64.rpm 0651a9d480cc2a883183892165b66a06d648490fa00d29a2306239d9457b6c13 xorg-x11-server-Xorg-1.15.0-25.1.el6.centos.x86_64.rpm 9379a70a17375b21779f28036a4a138dcbf30eb652c63399a3672a65dac4080b xorg-x11-server-Xvfb-1.15.0-25.1.el6.centos.x86_64.rpm Source: 9cc1156ecd7ce73b45b49aa8c0c28a13b5f4f33ce67e3ebc1cf4d552ccc13f8d xorg-x11-server-1.15.0-25.1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 5 Feb 2015 16:54:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0118 Moderate CentOS 7 mariadb Security Update Message-ID: <20150205165420.GA22060(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0118 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0118.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bad3e25be040d04b3465b004f1bf5e6bb59ed199002d6d30518c1b37ff9a599c mariadb-5.5.41-2.el7_0.x86_64.rpm 9f358d65718915fb9fa1a3f8cd5503c0c57d3898dab104168b7ed268927afc2c mariadb-bench-5.5.41-2.el7_0.x86_64.rpm 66841b0dfafe27b0441abdbfcc0c3cf0162ed232e0b7fb866cae2e1b89fd0c73 mariadb-devel-5.5.41-2.el7_0.i686.rpm d48dfe12ff12f83b67a41aca0df648b9f1fa19fd854476c0693bac25cc6f8181 mariadb-devel-5.5.41-2.el7_0.x86_64.rpm 650af06e10952a904d7f049eebbcff503baf1a872dce7b95158a9240ceba9f93 mariadb-embedded-5.5.41-2.el7_0.i686.rpm 762eb26cad7b854c356edd88fc9b28ca2fa61dbd1848eb9e8e75d5d7ea184455 mariadb-embedded-5.5.41-2.el7_0.x86_64.rpm 5cb480c0a99d9c5711f524d9172560f1d6cdf38c6b299381fe5f5b1d11ac2109 mariadb-embedded-devel-5.5.41-2.el7_0.i686.rpm 8874ac0173ead6080d28be02101f893e358f07524f54f14a2f970f8eecb7522c mariadb-embedded-devel-5.5.41-2.el7_0.x86_64.rpm 55797074c08ac8857232db2cc91336cbac1323404a902ce7d990a5835558043e mariadb-libs-5.5.41-2.el7_0.i686.rpm d67c7aebd7066e1f896d10e3c366535c03a423ed07151890849a828edecb10dc mariadb-libs-5.5.41-2.el7_0.x86_64.rpm 9b85fe1caf5a8688cd84f41de6ffb4c10a4dc1c29b5eb58bed4ba0346a0256ee mariadb-server-5.5.41-2.el7_0.x86_64.rpm 29a9b071e5eaf820f6a8cfd8ec1442ffb395daa5a1480b8416694b9c58a0cff8 mariadb-test-5.5.41-2.el7_0.x86_64.rpm Source: bed5735782a8cd30854f7158d6c96b775d62d89c9b14cdcdba80b6fb7715addc mariadb-5.5.41-2.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 5 Feb 2015 16:54:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0122 CentOS 7 resource-agents Enhancement Update Message-ID: <20150205165438.GA22128(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0122 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0122.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 124869a5c14448855093765e68cf8193023be1b33d7180342926f15d78cae95f resource-agents-3.9.5-26.el7_0.7.x86_64.rpm Source: ea73e94698ddd5bfbd0c2bd5d46116d7b08bbdaa733ed09598d3be9ef59cb9eb resource-agents-3.9.5-26.el7_0.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Thu, 5 Feb 2015 16:54:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0131 CentOS 7 libvirt BugFix Update Message-ID: <20150205165459.GA22290(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0131 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0131.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3770a731974751dc27346b9ed4f7c494588dde884fd79969a61a8eeb84c79680 libvirt-1.1.1-29.el7_0.7.x86_64.rpm 7ae2765d426b30af80ada68da0df2c780cc0c4113b20845f0a37dbfef195be3d libvirt-client-1.1.1-29.el7_0.7.i686.rpm 4ddeb8022ccbef07a27c75ca3f688280e773a39473f42ce425629801ef1fd554 libvirt-client-1.1.1-29.el7_0.7.x86_64.rpm 288afae70fb572284bbbc88911ff2c79b3cdce0b869b5052afe0cd380313de7d libvirt-daemon-1.1.1-29.el7_0.7.x86_64.rpm 1e4e40d6d4095c9204cd17c195c35e558d5c6342bbf9fcb925e424f8bde849ea libvirt-daemon-config-network-1.1.1-29.el7_0.7.x86_64.rpm 49d44b254a0e7d97c8e5f41ce066f31c8516a9d62837f7d1b37d43ddd72419b4 libvirt-daemon-config-nwfilter-1.1.1-29.el7_0.7.x86_64.rpm 1f39b5292ef41daec4a31655a379049548e78a52f2ce4102bd90cccc504f4ef8 libvirt-daemon-driver-interface-1.1.1-29.el7_0.7.x86_64.rpm 4ac04029552b385e7f1c37e3b3a24eabf69aa67782ef5d5231180263f749786c libvirt-daemon-driver-lxc-1.1.1-29.el7_0.7.x86_64.rpm 872e6fc763daad41f532dcdeec794a63bded4a8abbf81d15993420a2c32bb46b libvirt-daemon-driver-network-1.1.1-29.el7_0.7.x86_64.rpm e3a409c3146ad32187075bdcf18effabef4533ddf65452c6e531a2ab5efec302 libvirt-daemon-driver-nodedev-1.1.1-29.el7_0.7.x86_64.rpm 61c5d1d9ff716f528780fe2bf627c8f94298bc6cc25d25af49020e2738f9bb1f libvirt-daemon-driver-nwfilter-1.1.1-29.el7_0.7.x86_64.rpm 05a3ee1682742b9da5973c4528455efd995799ba612cddb7c5750adbaaefe27d libvirt-daemon-driver-qemu-1.1.1-29.el7_0.7.x86_64.rpm 64e9577205411042eb603ac73c2217153e7023cea0e643322e6738ce31460aaa libvirt-daemon-driver-secret-1.1.1-29.el7_0.7.x86_64.rpm 9e24e5619ae8da15e66a946b3a66033258aa3a26213a8ec1379d9a2e2dfe0f95 libvirt-daemon-driver-storage-1.1.1-29.el7_0.7.x86_64.rpm 3ed24427f2e1931f9c83925063b8a969d36d8a71f705f578d41c399cd544fe9c libvirt-daemon-kvm-1.1.1-29.el7_0.7.x86_64.rpm fd3c6750e0c7440c8de31a99ddaa26ed2582ddd9263a3b60718dd428280c61ba libvirt-daemon-lxc-1.1.1-29.el7_0.7.x86_64.rpm 0a75eeabdd9f3383905b1b31f26b4f299fbf3ddc625ef065f0ff981599ecef0f libvirt-devel-1.1.1-29.el7_0.7.i686.rpm 8137bec6ba39de42836cac97799818fda7cfc6b532e17d65f892ce0e09a2f09b libvirt-devel-1.1.1-29.el7_0.7.x86_64.rpm 3b483a537b07e90ebfa32a257ebc71c04361f17ca2377a09c01db897eae00d38 libvirt-docs-1.1.1-29.el7_0.7.x86_64.rpm 0c24b88d75a072b5d9b19e8a08873ff8754dbe5c14f6942800c91726b989b471 libvirt-lock-sanlock-1.1.1-29.el7_0.7.x86_64.rpm 17e1f0bab66a3e43c7381d08de98ddbf9629ee1275e9458dd1fad6342d86bc4c libvirt-login-shell-1.1.1-29.el7_0.7.x86_64.rpm 6e730906804572cd2c08ed08b5f89b5c1f4a49209e5324317c3405059c8f76ab libvirt-python-1.1.1-29.el7_0.7.x86_64.rpm Source: 0bdc1c1589d71ee5cc681cac25646f219f8d6baa52bd5a8872117004c6feb168 libvirt-1.1.1-29.el7_0.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 2 ***********************************************

1 0

Anaconda: inst.repo doesn't work.
by dE 06 Feb '15

06 Feb '15

Although you can choose this in the installer, isnt the provided values supposed to be the default? I tired the following inst.repo=hd:/dev/sdb1:/repo Result: /dev/sdb1 is not mounted. inst.repo=nfs:[fc00::6009]:/home/auser/repo Result: NFS is not mounted even the correct ip is set by passing ip= parameters. Of course I tested the NFS share using CentOS itself. Thanks for any assistance!

2 2

Another Fedora decision
by Chris Murphy 06 Feb '15

06 Feb '15

Warren Young wyml at etr-usa.com Tue Feb 3 00:32:15 UTC 2015 > Are you telling me you cannot memorize a series of 8 characters that do > not violate those rules? Keep in mind the original context isn't for production computers, it's testing Fedora. Many testers do dozens of installs per week, some do dozens per day. The password requirement is pretty annoying, I for one haven't tested it since I worked with the first build that includes the change. Why? While ostensibly it's an 8 character minimum, pwquality is sufficiently capricious that 8 characters is frequently insufficient. I tried about a dozen times and failed, gave up, and went with an ill advised 10 character password that I forgot within 30 minutes after the installation was complete. The problem is the decision to stop innovating ways to incentivize irrational users into producing stronger passwords voluntarily, and instead bringing out boxing gloves to make everyone do it by force. It's inherently adversarial. Someone else made an analogy with the anti-immunization camp. The analogy has some fatal flaws, but one of the ways it works is the irrational reaction component. As it turns out if you call these people names, tell them it's safe, give them all the facts, they just become even more intractable because it's not even about that. Making it compulsory is likely to do the same thing and worse. The way to do it is to establish incentives. If you want your kid going to public schools of any grade, then immunization is a prerequisite. Of course it's your choice, ultimately. Good luck with private school. Here too what's going on is a lack of a mechanism to tie default services with a sufficiently acceptable password. e.g. a checkbox for sshd being enabled is grayed out, not even checkable, so long as the password is crap. Or iterate upon the basic concept which is, you get something for something, bring the user along and get them to change their behavior rather than poking them in the eyeball without any respect to the use case. Windows, OS X, iOS, Android, have much weaker password enforcement than is currently in Fedora 21 and older (and RHEL 7 and older). There's no password even required on mobile devices. I can use a 4 digit PIN to get money out of an ATM. Context, use case, and other mitigation mechanisms are relevant. And the debate is whether a stronger password requirement is really worth, e.g. having root remote login enabled by default on Fedora Server. Whereas sshd isn't enabled on Fedora Workstation. Over on Windows and OS X Servers (try not to laugh, stay on topic!), the expectation is you bring over a USB keyboard, or connect with serial or ethernet console. You opt into remote services explicitly. I’m the first to fight boneheaded “password security” schemes like a > required change every N weeks, but this is not that. Actually I put it in the category of rearranging the deck chairs. It's a debate about very weak vs weak passwords. And I think this will just cause some people to consider their less crap password to now be fair or strong. If we really want strong passwords, we're talking in the vicinity of a compulsory 20+ character password (or passphrase rather). No need to tell me how you feel about that, I'm pretty confident I can predict the response. > (Another gripe of mine: this recent trend toward using some “cloud” login > as your OS login. Apple, Microsoft, and Google are now all doing this! ) It's a good gripe, I don't like it either. However at least Apple and Microsoft have direct paths to work around this seeming requirement. I don't know about ChromeBooks, but certainly on my Android (actually cyanogen) phone I don't have to use a password at all for the phone itself, just services. > (Though, if this server will be used via SSH, it might be a good idea to > do that anyway. SSH keys — optionally with passphrases — are more secure > than even quite a long human-memorizable password. Disable password auth > and use keys.) Yes and it's under discussion to make keys compulsory by default rather than passwords for at least root remote logins. Hard to setup compared to a password. But once that's done it's actually easier to use. -- Chris Murphy

1 0

Re: [CentOS] Another Fedora decision
by Valeri Galtsev 05 Feb '15

05 Feb '15

On Thu, February 5, 2015 12:45 pm, m.roth(a)5-cent.us wrote: > Valeri Galtsev wrote: >> On Thu, February 5, 2015 10:08 am, Always Learning wrote: > <snip> >>>> I know, I know, everybody is reasonable, it is just I didn't have my >>>> coffee yet... >>> >>> Your logic is amazingly good for a coffee drinker. >>> >> No, I wasn't born here though I live here, so I don't take to my heart >> any >> jokes about people living in one of the colonies you lost ;-) Just >> stealing it from some movie I like. Still didn't have chance for my >> morning coffee yet (which I deserve: I was working hard all morning). >> Don't take me too seriously too, just get nice cup of tea (or wait till >> morning for it) ;-) > > Get in, 09:00: tea, British-strength*, w/ milk > Noon, ditto, w/ lunch. > Mid-afternoon, *strong* (not "office") coffee (Cafe Bustelo), vs. the > mid-afternoon sleepiness. Yes. Using my brother's joke, whole life is struggle: before lunch with hunger, after lunch with sleepiness... Valeri > > First full-time job, I went from 6 or so cups of office coffee to my own > mint tea in six months.... USan-born. > > mark > > * Per George Orwell's mid-forties essay: at least 4-5 min of brewing with > boiling water.** > > ** From an article in the Guardian a few months ago: "Sorry, Americans, > the teabag has to actually be *in* the mug, not merely in the room." > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

1 0

build c7 packages for i686 using mock
by Gordon Messmer 05 Feb '15

05 Feb '15

This might be an embarrassingly simple question. How are people building multi-arch library packages on CentOS 7? On older releases one could "mock -r epel-6-i386" and "mock -r epel-6-x86_64" to build a library twice. With no 32-bit release, there's no epel-7-i386 target for mock. Specifying --target=i386 or --arch-i386 both fail. Do we have to set up the environment manually and rpm --rebuild inside the mock root?

4 5

Re: [CentOS] Another Fedora decision
by James B. Byrne 05 Feb '15

05 Feb '15

On Wed, February 4, 2015 16:55, Warren Young wrote: >> On Feb 4, 2015, at 12:16 PM, Lamar Owen <lowen(a)pari.edu> wrote: >> >> Again, the real bruteforce danger is when your /etc/shadow is >> exfiltrated by a security vulnerability > > Unless you have misconfigured your system, anyone who can copy > /etc/shadow already has root privileges. They do not need to crack > your passwords now. You are already boned. > > > My thought exactly. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 5

Re: [CentOS] Another Fedora decision
by James B. Byrne 05 Feb '15

05 Feb '15

On Wed, February 4, 2015 17:55, Warren Young wrote: > > But of course the same people fighting this move to more secure > password minima are the same ones that turn off SELinux. > Ah. Sorry, NO. First, we are not talking about a more secure password minima. We are discussing an arbitrary change made to an installer program that adversely impacts usability and that only has a tenuous connection to security on a production system. A change which assumes that people installing RHEL systems lack the competence to alter system account passwords subsequent to installation. Second, while I have serious concerns with the delusions respecting security that this fascination with 'strong' passwords evidences I do not turn off SELinux on any of my production servers. Excepting one which to date I have been unable to get to run the critical (third-party) application it hosts with SELinux switched on (short of a custom module which effectively gives http access to the whole host anyway). And that server is hardened against Internet access via other means and only runs this one application. You need to paint with a finer brush I think. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] Another Fedora decision
by James B. Byrne 05 Feb '15

05 Feb '15

On Wed, February 4, 2015 17:16, Lamar Owen wrote:. > > Now, I have seen this happen, on a system in the wild, where the very > first thing the attacker did was grab a copy of /etc/shadow, even with > an interactive reverse shell and root access being had. So even when > you recover your system from the compromise you have the risk of all > those passwords being known, and unfortunately people have a habit of > using the same password on more than one system. > > Further, lists of usernames and passwords have market value. > And the arbitrary change made to Anaconda deals with this difficulty how, exactly? Look, I am neither for nor against setting arbitrary standards for user-passwords. In fact, his is what I do to generate system passwords: cat /proc/sys/kernel/random/entropy_avail 3459 openssl enc -base64 <<< $(head -c 32 /dev/random) | \ sed 's/$....$/\1:/g; s/.$//' BuRd:f8qU:yY8M:pbtO:uDlw:D53k:whW+:eJtC:z8Tc:4zlo:hiIK and discard the ':' which I provide simply to make it easier for me to read and type the damn things (once). My belief is that trust in such passwords is totally misplaced. However, if such things makes you feel comfortable (like avoiding crossing paths with a black cat or walking under ladders) then that is your affair and who am I to disagree with your choice. The change to Anaconda is not an issue because of what it is but for how it was done; arbitrarily, without community input, and without consideration of other points of view. That arrogant act was then excused under the rubric of 'increased security'. It that part which irritates me. My indulgence in raising this issue at all is to highlight the inappropriate responses that the human desire to do 'something', 'anything', no matter how pointless, so often trump considered reflective contemplation of the problems and what options are available to deal with them. I am tired of reading of so much wasteful nonsense being excused under the general heading of 'security'. And so I call people out on it now. Prove to me that any increase of cost imposed on me by your decision actually improves my security to a degree that the benefit is measurably greater than the cost. And DO NOT discount my time as having no value. If you cannot prove that then just b*gger *ff. I may have to put up with that crap for want of any viable alternative but, I am not going to nod sagely and pretend that I agree just because currently that is the socially acceptable way of receiving such professions of belief. It is BS. It has always been BS. And it will always be BS. There are no secure methods of public communication. One can only attempt to increase the expense of surveillance to the point where the value of the information received is less than the cost of getting it. If someone values it highly enough then no amount of expense is going to dissuade them and they will have it, eventually. If the cost of surveillance is cheap enough then everything will be surveyed and everyone will have access to your information. But surely, it is the choice of the parties owning the information to decide how much value it has and exactly how much expense is justified in protecting it? Access to computer systems has to considered from the point of view of eventual compromise. Is not if, it is when, you are compromised. The critical considerations are: how will you detect it; how much penetration will result from each potential point of entry before it is detected; and how much effort will it take to recover? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] Another Fedora decision
by James B. Byrne 05 Feb '15

05 Feb '15

On Tue, February 3, 2015 14:01, Valeri Galtsev wrote: > > On Tue, February 3, 2015 12:39 pm, Les Mikesell wrote: >> On Tue, Feb 3, 2015 at 12:24 PM, Valeri Galtsev >> <galtsev(a)kicp.uchicago.edu> wrote: >>> >>> Sounds so I almost have to feel shame for securing my boxes no >>> matter what job vendor did ;-) >> >> Yes, computers and the way people access them are pretty much a >> commodity now. If you are spending time building something exotic >> for a common purpose, isn't that a waste? > > Do I have to take that people who are not sysadmins themselves just > hate an existence of sysadmins? > I had a friend, now deceased, who worked as an RCA colour TV technician when he was very young. In the 1950s he would be sent to the homes of people having trouble adjusting the colour settings on their new RCA's. That was system administration then. Who needs them now? We are dinosaurs. People do not hate us. They just do not understand why we are still around. Other than lifting the display into a comfortable position for viewing the latest MacBooks cannot even be physically opened for servicing (by a user) as far as I can discover. An iPhone is a sealed unit. Both devices are orders of magnitude more powerful computers than the i486 I first installed RH on. The point Les makes is entirely correct. The systems we install should not require the degree of slavish attention to arcane details that is necessary to make them both useful and safe to use. That said, the original issue remains, making manual configuration slightly more cumbersome than it already is. That this is done solely in order to make a claim that it somehow improves security is, in my opinion, self-defeating. It is certainly a deceit. Whether it is self-delusion or overt pretence I have no idea. One might question why *nix distributions insist on providing a known point of attack to begin with. Why does user 0 have to be called root? Why not beatlebailey, cinnamon or pasdecharge? If brute forcing passwords is the problem then why not make it ever more difficult by forcing crackers to guess what the superuser name is to begin with? Oh, I know. Too much software exists that presumes that the superuser name is root. Evidently adherence to that convention is valued more highly than providing security. God forbid that one simply check for user 0. I seldom use root other than for peer-to-peer rsync via password-less login. Consequently I do not really care whether Anaconda forces me to use 32 character Base64 encoded passwords for root or none at all. I just cannot bear to stand by and read the BS about how anything of that nature improves security. It is just self-deception. Twenty years ago it might have had some validity, although I doubt it. Things that are hard to remember tend to get written down. Things that are written down tend to be read by eyes other than those that were intended. The whole matter of attending to the risk of brute force password discovery rather misses the point. Amateurs hack systems, professionals hack people. No matter how resistant your password is to brute force discovery, it only takes one careless mistake to have it revealed by an incautious or suitably deceived sysadmin. Look up 'Robin Sage' and the follow on study 'Emily Williams' and then ask yourself: How does a strong password on the root account deal with that? I really wonder sometimes if the software development people that write so much about security 'best-practice' have much of a clue about how penetrations are actually carried out. For example, how many of you have ever plugged a USB key into one of your hosts? If you have then you have permanently compromised the security of that system and nothing, short of pulling the entire USB controller, can ever undo it; and not even then I suspect. You may not, probably have not (yet), have been infected, but then you will never know for sure whether you have or not. There are so many computer control systems that are embedded in the devices we call computers that the attack surface is incomprehensibly large. And most of these embedded systems are completely open to exploitation; at the fabrication level. The Internet is not even the preferred vector. Have you ever used a USB charging station in an airport for your laptop, tablet or phone? Too bad. Have you ever plugged a personal device into one of your hosts at work via USB or Thunderbolt (not likely for the latter I admit)? Oh well. At least you can increase the strength of your root password. Is your home or business network device provided to you by your provider? Has it been changed (upgraded) recently without your request (or even with it)? I have to SSH tunnel all of my traffic on my home network now because traffic through my (recently upgraded) xxxxxx provided yyyyy router phones home to yyyyy; and I cannot stop it short of jail-breaking, which is in violation of my terms of service (AND I have to pay rent for this device). This is not paranoia, this is observed activity. (Sorry about the xxxxx yyyyy stuff, but on consideration I would rather not run the risk of being harassed by either or both of the two major corporations involved.) Sometimes I just cannot bear to think about this stuff anymore. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 11

Re: [CentOS] UC multipathd
by Rushton Martin 05 Feb '15

05 Feb '15

>-----Original Message----- >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >Behalf Of Alexander Dalloz >Sent: 04 February 2015 22:44 >To: CentOS mailing list >Subject: Re: [CentOS] multipathd > >Am 04.02.2015 um 15:02 schrieb Rushton Martin: >> Our cluster was supplied with two IBM DS3400 RAID arrays connected >> with fibre channel. Both are old and one is failing so we bought an >> IBM >> V3700 to replace it. The V3700 complained that we were using the >> IBM's RDAC driver (true) and we were advised to change to using Linux >> multipath. I've done that but the default configuration for the >> DS3400s > >So you switched from IBM's proprietary multipath driver to the native >Linux multipathing. Correct? Yes. We were told to do so by the suppliers of the V3700. > >> is: >> device { >> vendor IBM >> product 1726-4xx >> path_checker rdac >> features 1 queue_if_no_path >> hardware_handler 1 rdac >> prio_callout /sbin/mpath_prio_rdac /dev/%n >> no_path_retry 300 >> rr_min_io 1000 >> } > >The right settings are documented here: > >https://access.redhat.com/solutions/85223 Thanks, I shall investigate. The stanza I've used was the one that multipath itself supplies. >Yoi should be a little more specific about the conflict you see. The V3700 GUI reports: "Error 1624 : Controller configuration has unsupported RDAC mode" Attempting to run the fix results in two messages: ----%<------- Incorrect controller configuation It is detected that storage system ds3400-01 has been incorrectly configured. The storage system configuration has an unsupported RDAC mode. ----%<------- Incorrect configuration The storage system named ds3400-01 has been configured to use a failover mode called RDAC. This failover mode is not supported by the system, and will prevent the system from causing managed disks to fail over between controller A and controller B when required. Resolve this by setting the host type in the storage system configuration as defined in the IBMÂ® Storage ITE Software Configuration Guide. If available, the correct host type will be "IBM TS SAN VCE". Once the issue has been resolved, click Next to continue. The following additional information may help with correcting the problem: Storage system name: ds3400-01 WWNN (Worldwide Node Name): XX:XX:XX:XX:XX:XX:XX:XX WWPN (Worldwide Port Number): XX:XX:XX:XX:XX:XX:XX:XX Problem type : Unsupported RDAC Mode Set ----%<------- The fix then runs, but reports the same 1624 error. > >> The V3700 is still complaining and I note the "path checker rdac" and >> mpath_prio_rdac lines. Is this rdac the same as IBM's RDAC, and if so >> how can I get rid of it? > >The DS3400 is an OEM product, provided by NetApp. RDAC is the the name of >the hardware access type originally for LSI Corp controllers, later on >NetApp. > >mpath_prio_rdac is code from the Linux kernel. > >> OS is CentOS 5.3 (yes, I know - upgrade), filesystem is GPFS. > >Update! Not upgrade. That old piece of software is full of well known >severe security issues and bugs already fixed. There is not really an >excuse to not properly maintain a system. Off-net machine. Updates are non-trivial, download is over a slow broadband (between 500K and 1M) and takes well over 24 hours continuously. Then I've still got to burn or copy to transfer. >Alexander > >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England & Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com.

1 0

Re: [CentOS] UC multipathd
by Rushton Martin 05 Feb '15

05 Feb '15

Yep, that's what I do at home. The trouble for off-net machines is the download time - over 24 hours for CentOS 7 + epel, and then copy over. If you don't grab everything, the one package you miss is the one that stops the update. :-( >-----Original Message----- >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >Behalf Of John R Pierce >Sent: 04 February 2015 19:01 >To: centos(a)centos.org >Subject: Re: [CentOS] multipathd > >On 2/4/2015 6:02 AM, Rushton Martin wrote: >> OS is CentOS 5.3 (yes, I know - upgrade) > >at least patch CentOS 5. 5.3 is a snapshot from 6 years ago (2009), >there've been 6 years of updates to CentOS 5 since that point, both >security and bug fixes. `yum update` would bring you up to CentOS the >.11 update plus security/bug fixes since. > > > >-- >john r pierce 37N 122W >somewhere on the middle of the left coast > >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England & Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com.

1 0

Re: [CentOS] multipathd
by Alexander Dalloz 04 Feb '15

04 Feb '15

Am 04.02.2015 um 15:02 schrieb Rushton Martin: > Our cluster was supplied with two IBM DS3400 RAID arrays connected with > fibre channel. Both are old and one is failing so we bought an IBM > V3700 to replace it. The V3700 complained that we were using the IBM's > RDAC driver (true) and we were advised to change to using Linux > multipath. I've done that but the default configuration for the DS3400s So you switched from IBM's proprietary multipath driver to the native Linux multipathing. Correct? > is: > device { > vendor IBM > product 1726-4xx > path_checker rdac > features 1 queue_if_no_path > hardware_handler 1 rdac > prio_callout /sbin/mpath_prio_rdac /dev/%n > no_path_retry 300 > rr_min_io 1000 > } The right settings are documented here: https://access.redhat.com/solutions/85223 Yoi should be a little more specific about the conflict you see. > The V3700 is still complaining and I note the "path checker rdac" and > mpath_prio_rdac lines. Is this rdac the same as IBM's RDAC, and if so > how can I get rid of it? The DS3400 is an OEM product, provided by NetApp. RDAC is the the name of the hardware access type originally for LSI Corp controllers, later on NetApp. mpath_prio_rdac is code from the Linux kernel. > OS is CentOS 5.3 (yes, I know - upgrade), filesystem is GPFS. Update! Not upgrade. That old piece of software is full of well known severe security issues and bugs already fixed. There is not really an excuse to not properly maintain a system. Alexander

1 0

Re: [CentOS] multipathd
by John R Pierce 04 Feb '15

04 Feb '15

On 2/4/2015 6:02 AM, Rushton Martin wrote: > OS is CentOS 5.3 (yes, I know - upgrade) at least patch CentOS 5. 5.3 is a snapshot from 6 years ago (2009), there've been 6 years of updates to CentOS 5 since that point, both security and bug fixes. `yum update` would bring you up to CentOS the .11 update plus security/bug fixes since. -- john r pierce 37N 122W somewhere on the middle of the left coast

1 0

Re: [CentOS] Traditional network interface naming scheme vs. persistent naming
by Niki Kovacs 04 Feb '15

04 Feb '15

Le 04/02/2015 18:48, m.roth(a)5-cent.us a écrit : > That directory, and that file, exist in CentOS, also, since 6. And the new > naming... it's*so* much easier to deal with... yeah, right, I'll run the > install, and wait till it hangs, so I can see that the NIC is named, what > was it, on that HP last month, oh, yeah, I need to use ip -f inet link, > far simpler than ifconfig, yes, it's ens3f0.... > > mark "why would I*possibly* prefer a same-on-every-box eth0?"* > > * For the satire-impaired, this is satire. LOL !!! After a bit more experimenting, looks like I've found a clean solution for this. Simply create the /etc/udev/rules.d/70-persistent-net.rules file from scratch and edit it like this: # /etc/udev/rules.d/70-persistent-net.rules # # eth0 SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", \ ATTR{address}=="00:1e:c9:42:84:7b", ATTR{type}=="1", \ KERNEL=="eth*", NAME="eth0" # eth1 SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", \ ATTR{address}=="00:30:f1:6a:2f:40", ATTR{type}=="1", \ KERNEL=="eth*", NAME="eth1" Reboot, and everything's working as expected. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

Traditional network interface naming scheme vs. persistent naming
by Niki Kovacs 04 Feb '15

04 Feb '15

Hi, I'm currently experimenting with CentOS 7 in order to get a grasp of everything that's new. After having read the FAQ entry on network interface names, I decided to revert to the tradictional interface naming scheme by adding the relevant kernel options to the bootloader. This went well, I have now two interfaces names 'eth0' and 'eth1' as expected. In my office I have another server with two network interface cards, running Slackware64 14.1. On a stock Slackware installation, as soon as there is more than one NIC, the system creates a file /etc/udev/rules.d/70-persistent-net.rules, which looks like this: # PCI device 0x8086:/sys/devices/pci0000:00/0000:00:02.0/0000:02:00.0 (e1000e) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="2c:27:d7:15:54:a1", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" # PCI device 0x8086:/sys/devices/pci0000:00/0000:00:04.0/0000:03:00.0 (e1000e) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:22:64:8a:4c:c2", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" Usually I have a 50 % chance of getting the network interface right (well, according to Murphy, I have more like a 100 % chance of getting it wrong the first time :oD). In that case, I simple edit the 70-persistent-net.rules file, permutate the "eth0" and "eth1" entries and then reboot. How would I go about that under CentOS with traditional interface names? The 70-persistent-net.rules file doesn't exist. Do I have to create it from scratch? Cheers, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 2

Setting up Samba as fileserver for existing Windows domain
by Chris Adams 04 Feb '15

04 Feb '15

This is probably covered in many places, but my Google-fu is failing. I have an existing office of Windows computers, in a domain, with a couple of Windows Server 2012 AD servers. I need to add a file server, so I'd prefer to use CentOS 7 and Samba to do it (because I know very little about Windows). However, I'm not finding a good how-to on that. When I search for "samba active directory" or "samba domain", the results are mostly about setting up Samba to be the domain controller, or join an AD domain as a controller, which I don't really want to do if I don't have to. Anybody have any tips, pointers, etc.? -- Chris Adams <linux(a)cmadams.net>

3 5

multipathd
by Rushton Martin 04 Feb '15

04 Feb '15

Our cluster was supplied with two IBM DS3400 RAID arrays connected with fibre channel. Both are old and one is failing so we bought an IBM V3700 to replace it. The V3700 complained that we were using the IBM's RDAC driver (true) and we were advised to change to using Linux multipath. I've done that but the default configuration for the DS3400s is: device { vendor IBM product 1726-4xx path_checker rdac features 1 queue_if_no_path hardware_handler 1 rdac prio_callout /sbin/mpath_prio_rdac /dev/%n no_path_retry 300 rr_min_io 1000 } The V3700 is still complaining and I note the "path checker rdac" and mpath_prio_rdac lines. Is this rdac the same as IBM's RDAC, and if so how can I get rid of it? OS is CentOS 5.3 (yes, I know - upgrade), filesystem is GPFS. This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England & Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com.

1 0

user nobody can't access file
by Tim Dunphy 04 Feb '15

04 Feb '15

Hey guys, I need to give the 'nobody' user (which is what our apache runs as) no password access to a file, via sudo. This is what I've tried: nobody ALL=(ALL) NOPASSWD: /var/www/qa/launchpadnew/site/ftp_check.php But if I become the nobody user and try to access the file, it tries to prompt me for a password: -bash-3.2$ php /var/www/qa/launchpadnew/site/ftp_check.php [sudo] password for nobody: Can someone please point out for me where I'm going wrong? Cuz I don't see it!! Thanks ! :) Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

6 5

Re: [CentOS] Another Fedora decision
by James B. Byrne 03 Feb '15

03 Feb '15

I think it well to recall that the change which instigated this tempest was not to the network operations of a RHEL based system but to the 'INSTALLER' process, Anaconda. Now, I might be off base on this but really, ask yourself: Who exactly uses an installer program? And what is the threat model being addressed by requiring that the installer set a suitably strong password for root? For what purpose? Because RHEL sets the sshd on and allows root access over ssh via password by default? Then is not the correct approach to disable that access instead? But wait! Is it not true that the network services are not started by default? So, exactly where is the threat? Does it not occur much, much later in the workflow than at the installer? Would it not be more sensible to require root access to start sshd (hummmm. . . is that not a requirement now?) and to ask for the root password at that time. And then of course, you could catch those sneaky people that change the root password after the install is complete. Surly, it is when starting network services that then, and only then, one should check that one of the following conditions are true: 1.) root access over the network is disabled; 2.) root access over the network is allowed via RSA only; 3.) if root can log in via ssh using a password then the root password must be strong? That process seems like something that could be setup in a network init script, upstart system job, or systemd service file without a great deal of effort. Why does arbitrarily requiring 'strengthening' of the root password have to go into the installer program? Yes, the alternative approach would adversely impact automatic system restarts. And your point? Is not the easy answer but to disallow root access over the network entirely; or to force the use of RSA certs for root logons? Are not these far, far superior approaches to dealing with this issue than requiring a 'strong' root password everywhere, all the time, regardless of what purpose the system is used for? This change to Anaconda is not security, it is theatre. It is directly equivalent to airport passenger security checks. Totally ineffectual but so intrusive and inconvenient that we have to believe that it works. For otherwise the inescapable conclusion is that we are all fools for putting up with it; and no-one likes to think of themselves as a fool. I call this the 'Buckley's Mixture' approach to social engineering. In any case, allowing an eight character password on credentials exposed to public network access is laughable. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Kickstart setup
by Ashley M. Kirchner 03 Feb '15

03 Feb '15

Is there a way to use kickstart to boot a machine into a manual setup process? Basically what I'm getting to is this, the machine doesn't not have a CD drive in it (nor can I add one), but I can boot it via kickstart. The install media is on the network. What I'd like to do is boot this machine up and rather than have kickstart do everything for me as far as installing the OS and packages, instead present me with a manual setup (that I can get to via vnc) where I get to pick what I want or don't want on the machine. After it's all done, I'm going to go through the anaconda files and generate a base kickstart for all future installs. Does anyone have an example kickstart file I can go off of to do that?

3 4

Re: [CentOS] Another Fedora decision
by James B. Byrne 03 Feb '15

03 Feb '15

On Mon, February 2, 2015 21:34, PatrickD Garvey wrote: > OK, folks. You're doing a great job of describing the current milieu > with a rough description of some best practices. > > Now how about some specific sources you personally used to learn your > craft that we can use likewise? > > PatrickD > > Go to http://www.ccc.de/en/. Visit and view some of the videos of presentations from previous congresses and hackfests. Educate yourself on the threats. Once you see what you are up against then you will have some ideas about what questions to ask. Then you can find the material you need. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Squid3 on CentOS 6.6: IPv6 PTR endianess
by Max Grobecker 03 Feb '15

03 Feb '15

Hello, I'm running a Squid cache (Version 3.1.10) on CentOS 6.6 as a forward proxy which is reachable over a global IPv6 address. For whatever reason, Squid tries to perform PTR lookups on the client's IPv6 address. The weird thing is, that Squid seems to struggle with the "endianess" of the IPv6 address blocks. For example: My current client IP is 2003:6e:d79:2104:7163:7ecd:9333:f0be. Squid tries to resolve b.e.f.0.3.3.9.3.c.d.7.e.6.3.7.1.0.4.2.1.7.9.0.d.6.e.0.0.0.3.2.0.ip6.arpa. That means: b.e.f.0.3.3.9.3.c.d.7.e.6.3.7.1.0.4.2.1.7.9.0.d.6.e.0.0.0.3.2.0.ip6.arpa -> 0.2.3.0.0.0.e.6.d.0.9.7.1.2.4.0.1.7.3.6.e.7.d.c.3.9.3.3.0.f.e.b -> 0230 : 00e6 : d097 : 1240 : 1736 : e7dc : 3933 : 0feb For comparison: Squid: 0230:00e6:d097:1240:1736:e7dc:3933:0feb Real: 2003:006e:0d79:2104:7163:7ecd:9333:f0be It seems, that Squid just messes with the order of the Bytes on each block. I couldn't find any related bug report on this (checked Squid and CentOS bug tracker), so I'm not sure if it's a CentOS or Squid related problem. Is anyone else experiencing this? It seems to be happen on IPv6 client addresses only - with IPv4 it works just fine. And besides of these broken PTR lookups Squid is working as expected. Greetings from Wuppertal Max

2 1

Re: [CentOS] Very slow disk I/O
by Jatin Davey 03 Feb '15

03 Feb '15

On 2/2/2015 10:32 AM, John R Pierce wrote: > On 2/1/2015 8:25 PM, Jatin Davey wrote: >> >> On 2/2/2015 9:25 AM, John R Pierce wrote: >>> On 2/1/2015 7:31 PM, Jatin Davey wrote: >>>> >>>> I ran your script and here is the output for it: >>>> >>>> Start of the Output*************************** >>>> [root@localhost bin]# lsi-raidinfo >>>> sh: /opt/MegaRAID/MegaCli/MegaCli64: No such file or directory >>>> -- Controllers -- >>> >>> as I said, you need to install the MegaCli software from LSI so you >>> can manage the raid card. >> I am using a server which has a Cisco 12G SAS Modular Raid Controller >> , So wondering if software from LSI would work on it. Please correct >> me if am wrong. > > >> [root@localhost ~]# lspci | grep RAID >> 05:00.0 RAID bus controller: LSI Logic / Symbios Logic MegaRAID SAS-3 >> 3108 [Invader] (rev 02) > > thats a LSI Logic Megaraid 3108 chip. This is used on the LSI > 9361-8i and many other OEM rebranded cards. If cisco has their own > package of the megacli management software, then sure, use that. > Hi John I managed to install the software from LSI on my box and ran the script that you had provided and here is what i get from it. ************Output ****************** [root@localhost bin]# lsi-raidinfo -- Controllers -- -- ID | Model c0 | Cisco 12G SAS Modular Raid Controller -- Volumes -- -- ID | Type | Size | Status | InProgress volume c0u0 | RAID10 2x2 | 1816G | Optimal | None -- Disks -- -- Encl:Slot | vol-span-unit | Model | Status disk 252:1 | 0-0-0 | 9XG7TNQVST91000640NS CC03 | Online, Spun Up disk 252:2 | 0-0-1 | 9XG4M4X3ST91000640NS CC03 | Online, Spun Up disk 252:3 | 0-1-1 | 9XG4LY7JST91000640NS CC03 | Online, Spun Up disk 252:4 | 0-1-0 | 9XG51233ST91000640NS CC03 | Online, Spun Up End of Output ************************** Let me know if i need to change or configure anything else to make the I/O a bit faster than what it currently does. I cannot go in for using SSD's due to budget constraints. Need to make the best use of the SATA disks that i have currently. Thanks Jatin

6 9

Very slow disk I/O
by Jatin Davey 03 Feb '15

03 Feb '15

Hi Users I am using RHEL 6.5 on my server. From top command i can see that the processors in my server are spending a lot of time on wait for I/O. I can see high percentage in terms of 30-50% on "wa" time. Here is the df output about the disk space in my system: ********** [root@localhost images]# df Filesystem 1K-blocks Used Available Use% Mounted on /dev/sda1 1915071844 103227908 1714563936 6% / tmpfs 32931472 0 32931472 0% /dev/shm ********** Could someone point me on how to improve the disk I/O on my server and reduce the wait time on I/O. Thanks Jatin

8 15

NVidia on encrypted Q. RE: Intel Displayport on Centos 7
by Denniston, Todd A CIV NAVSURFWARCENDIV Crane 02 Feb '15

02 Feb '15

> -----Original Message----- > From: Lamar Owen [mailto:lowen@pari.edu] > Sent: Saturday, January 31, 2015 1:53 PM > To: CentOS mailing list > Subject: Re: [CentOS] Intel Displayport on Centos 7 > <SNIP> > the stock ATI drivers. I haven't tried with the fglrx driver; it seems > to be a bit of a problem child on C7 at the moment. For that matter, > the nVidia proprietary driver is a bit of a problem child if you have > any encrypted partitions like I do. <SNIP> I have not gotten to testing C7 (or RHEL7 for that matter) yet, but I expect to need the NVidia driver (from elrepo) on them and for the drives to be encrypted, SO ... What kinds of issues do the proprietary drivers and encrypted partitions together seem to be causing? Are your problems all related to: https://www.centos.org/forums/viewtopic.php?f=49&t=47460 http://elrepo.org/bugs/view.php?id=496 https://www.centos.org/forums/viewtopic.php?f=47&t=49304&start=10 Or are there other issues? Thanks for the feedback. Even when this disclaimer is not here: I am not a contracting officer. I do not have authority to make or modify the terms of any contract.

1 0

CentOS-announce Digest, Vol 120, Issue 1
by centos-announce-request＠centos.org 01 Feb '15

01 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0106 CentOS 6 libvirt BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 31 Jan 2015 13:42:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0106 CentOS 6 libvirt BugFix Update Message-ID: <20150131134207.GA14009(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0106 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0106.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ea5d48d18878658b540b1f263cf5c6b5275816eef56592f2ad1ea81435a0856c libvirt-0.10.2-46.el6_6.3.i686.rpm c70aef109c73e5a2ea4a1aacd8f994ce082038b7bbf68b78e7463a5295edcf46 libvirt-client-0.10.2-46.el6_6.3.i686.rpm ae2a478f26b7556fb67a280eb9609e62d30bfbb103b691a8bdaff359fa82688f libvirt-devel-0.10.2-46.el6_6.3.i686.rpm e7426898e565a6d173aac3b2f1f22eb24aebbe865923d8d509ccba7fc9391d7a libvirt-python-0.10.2-46.el6_6.3.i686.rpm x86_64: 77ccd05d7ff093dcf14d1f57628df7912754178f02a613ea87ab905114806110 libvirt-0.10.2-46.el6_6.3.x86_64.rpm c70aef109c73e5a2ea4a1aacd8f994ce082038b7bbf68b78e7463a5295edcf46 libvirt-client-0.10.2-46.el6_6.3.i686.rpm 17bfed0bfd3305f1464fa7d145ff7b000f8c720108c2857e8c7799fea0624d54 libvirt-client-0.10.2-46.el6_6.3.x86_64.rpm ae2a478f26b7556fb67a280eb9609e62d30bfbb103b691a8bdaff359fa82688f libvirt-devel-0.10.2-46.el6_6.3.i686.rpm 6c412b887b82b69bbafde5d005c9417f2d256b54aa5a32994813d25fee75473a libvirt-devel-0.10.2-46.el6_6.3.x86_64.rpm 28897e103ff2f7dc7bba07ddde217df7958906df861d8f73e8228e15538d69ac libvirt-lock-sanlock-0.10.2-46.el6_6.3.x86_64.rpm f25e4b29c8ad46f97f6ae2a07db51d5f907d550b2285d5e7bef495e594edc558 libvirt-python-0.10.2-46.el6_6.3.x86_64.rpm Source: 2012ad82ddfcda7d4989f299888e1f6c58812680bfd033130d1c246690575507 libvirt-0.10.2-46.el6_6.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 1 ***********************************************

1 0

Intel Displayport on Centos 7
by Frank Cox 31 Jan '15

31 Jan '15

Since my current monitor appears to be slowly dying, I'm looking for a replacement. I generally use hardware replacement as an excuse to get something bigger/better/faster than what I had before, so I'm currently considering something like a BenQ GW2765HT. The manual for my Intel motherboard has this to say about DisplayPort on the built-in graphics controller: QUOTE: DisplayPort’s maximum supported display resolution is 2560 x 1600 at a 60 Hz refresh rate with a 16:10 aspect ratio (WQXGA). END OF QUOTE It also states that the maximum supported resolution on the built-in DVI-I port is 1920x1200, which is the resolution of the monitor that I have right now; the one that appears to be dying. Therefore, this new monitor wouldn't work at full resolution with that output. Having never used DisplayPort before, I'm wondering if this means that if I purchase the BenQ monitor above, or something similar, I can then reasonably expect to plug it in and have it just-work with my Centos 7 setup. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

5 9

Installation of qtiplot in Centos 7
by MOHD HOMAIDUR RAHMAN 31 Jan '15

31 Jan '15

Dear all I am trying to install qtiplot in Centos 7 (qtiplot is a graph plotting software similar to Origin). I followed the same step as this mention on this. http://poolinfo.physik.hu-berlin.de/qtiplot-installer/README.html At step 8, I experience the following error. cd fitPlugins && make -f Makefile make[1]: Entering directory `/home/rahman/Downloads/qtiplot-0.9.8.9/fitPlugins' cd explin/ && make -f Makefile make[2]: Entering directory `/home/rahman/Downloads/qtiplot-0.9.8.9/fitPlugins/explin' rm -f libexplin.so.1.0.0 libexplin.so libexplin.so.1 libexplin.so.1.0 g++ -Wl,-O1 -Wl,-z,relro -shared -Wl,-soname,libexplin.so.1 -o libexplin.so.1.0.0 explin.o -L/usr/lib64 ../../3rdparty/gsl/lib/libgsl.a ../../3rdparty/gsl/lib/libgslcblas.a -L/opt/local/lib -lpthread -lQtGui -lQtCore g++: error: ../../3rdparty/gsl/lib/libgsl.a: No such file or directory g++: error: ../../3rdparty/gsl/lib/libgslcblas.a: No such file or directory make[2]: *** [../libexplin.so.1.0.0] Error 1 make[2]: Leaving directory `/home/rahman/Downloads/qtiplot-0.9.8.9/fitPlugins/explin' make[1]: *** [sub-explin-make_default] Error 2 make[1]: Leaving directory `/home/rahman/Downloads/qtiplot-0.9.8.9/fitPlugins' make: *** [sub-fitPlugins] Error 2 Please suggest me how to resolve this problem. Thank you in advanced for help Regards Rahman ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' *Md Homaidur Rahman* PhD Research Scholar Computational Biophysics Lab. Department of Biotechnology Indian Institute of Technology-Madras Chennai-600 036 *Mobile No = +91- 7845991785* '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

1 0

C6 server responding extremely slow on ssh interactive
by Patrick Bervoets 30 Jan '15

30 Jan '15

I have a C6 server acting as a kvm-host. When connecting with ssh the console is extremely slow and hangs for minutes at a time. Connecting to this server is not the problem. If I use: ssh root@host "whatever" I got immediate response even when interactive consoles opened with ssh are hanging. Linux [...] 2.6.32-504.3.3.el6.x86_64 #1 SMP Wed Dec 17 01:55:02 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux total used free shared buffers cached Mem: 47 35 11 0 0 0 -/+ buffers/cache: 35 11 Swap: 7 0 7 Filesystem Size Used Avail Use% Mounted on /dev/mapper/vg-lv_root 50G 6,4G 41G 14% / tmpfs 24G 0 24G 0% /dev/shm /dev/sda1 477M 123M 329M 28% /boot 13:33:34 up 1 day, 18:30, 2 users, load average: 3.39, 2.53, 2.36 (it's an 8-core) Nothing particular in log/messages. The vm's are running normally and they are not showing the same behaviour. Can anybody give me a pointer? Thanks Patrick

6 18

CentOS-announce Digest, Vol 119, Issue 12
by centos-announce-request＠centos.org 30 Jan '15

30 Jan '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0108 CentOS 6 tcsh BugFix Update (Johnny Hughes) 2. CEBA-2015:0097 CentOS 6 libssh2 BugFix Update (Johnny Hughes) 3. CEBA-2015:0098 CentOS 6 curl BugFix Update (Johnny Hughes) 4. CEBA-2015:0110 CentOS 6 nss-softokn BugFix Update (Johnny Hughes) 5. CESA-2015:0102 Important CentOS 7 kernel Security Update (Johnny Hughes) 6. CESA-2015:0102 Important CentOS 7 kernel Security Update (Johnny Hughes) 7. CESA-2015:0100 Moderate CentOS 7 libyaml Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 29 Jan 2015 12:45:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0108 CentOS 6 tcsh BugFix Update Message-ID: <20150129124548.GA61000(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0108 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0108.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2534940990a5957d0d18a19ca1ab803df8febda4dcdc74cdd4d1fb4ed77ac4f3 tcsh-6.17-25.el6_6.i686.rpm x86_64: 4ef1392aef0a90045b8147235bafe2faa195b49ecf3404f8f1a3468c6569e50d tcsh-6.17-25.el6_6.x86_64.rpm Source: d94793dc7e12799e65c46dd420a12c48f3b7b152d578d5b4aded7ca90faa4a77 tcsh-6.17-25.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 29 Jan 2015 12:56:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0097 CentOS 6 libssh2 BugFix Update Message-ID: <20150129125615.GA61798(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0097 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0097.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 28ab4d79c33a10d055b6eed05dc0c2051e9abb5932a69889cb2f70bb2172a7b7 libssh2-1.4.2-1.el6_6.1.i686.rpm 4650f891e63ecf6f13a1e5c1e84a5675f69188af5250a9ed8768c595fb5eb652 libssh2-devel-1.4.2-1.el6_6.1.i686.rpm 9435dc4114a3e66619562863bb5f4af4473c9f2c6bef4c503bd9767df863f6b5 libssh2-docs-1.4.2-1.el6_6.1.i686.rpm x86_64: 28ab4d79c33a10d055b6eed05dc0c2051e9abb5932a69889cb2f70bb2172a7b7 libssh2-1.4.2-1.el6_6.1.i686.rpm 2e07438d7789237523d415dd3a92d99215867b7641ad267b424880b0dca9c89c libssh2-1.4.2-1.el6_6.1.x86_64.rpm 4650f891e63ecf6f13a1e5c1e84a5675f69188af5250a9ed8768c595fb5eb652 libssh2-devel-1.4.2-1.el6_6.1.i686.rpm 7e00157f2af61f22fe18260a9f2204982d92066cf8613384168d6972643df70c libssh2-devel-1.4.2-1.el6_6.1.x86_64.rpm 57800bbe07d3f5cfe4315c9aff91145fb2463e324ef18d9a82a0f2ddf1c22fac libssh2-docs-1.4.2-1.el6_6.1.x86_64.rpm Source: 10684ae17a697ab8cce1cfca1dcd8915c0a7d2a5f4e84f568bf52dabe97c1c6c libssh2-1.4.2-1.el6_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 29 Jan 2015 12:56:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0098 CentOS 6 curl BugFix Update Message-ID: <20150129125638.GA61893(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0098 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0098.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4e4cd05361833384ad287cfb5cfcd8aed1ec0461d83bc754e51ee6c630e06c63 curl-7.19.7-40.el6_6.4.i686.rpm 1fdd61fea79c7e0f4f1c416909a54269f01f7879d2f2199e296089b52bb5f042 libcurl-7.19.7-40.el6_6.4.i686.rpm 6ff5a5059dfde80bdb33add0894bc6d89d9de5aa805d790c9b29784f79cabd41 libcurl-devel-7.19.7-40.el6_6.4.i686.rpm x86_64: 43ac2a840e3bc14b3397ab4bc094315f6e285e291739d53146d4ec9c8287d221 curl-7.19.7-40.el6_6.4.x86_64.rpm 1fdd61fea79c7e0f4f1c416909a54269f01f7879d2f2199e296089b52bb5f042 libcurl-7.19.7-40.el6_6.4.i686.rpm f05250feaea200500e271cf1bff1725bdebef29f002bb8fb80dfd9653dfc9f30 libcurl-7.19.7-40.el6_6.4.x86_64.rpm 6ff5a5059dfde80bdb33add0894bc6d89d9de5aa805d790c9b29784f79cabd41 libcurl-devel-7.19.7-40.el6_6.4.i686.rpm 3d853c62440e5ac2fdd67d2abd6fd438ba0170d6c9f2698c9654f192541fb9f3 libcurl-devel-7.19.7-40.el6_6.4.x86_64.rpm Source: 44dfa657f77c2777366f6255b71938278db86014fc407e659c228dd3665a4e6b curl-7.19.7-40.el6_6.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 29 Jan 2015 23:20:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0110 CentOS 6 nss-softokn BugFix Update Message-ID: <20150129232058.GA16550(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0110 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0110.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 77c7dfa9cdac123d789f1d1a65b8ecb22bd02cf70cf0d74cca4aedcb873be103 nss-softokn-3.14.3-22.el6_6.i686.rpm 845a74c34377474614a69035b2741c8e2e420bfd98b37676cdbed09534fd84c4 nss-softokn-devel-3.14.3-22.el6_6.i686.rpm c7de3e40ada40624174bd4aea2b3903b3f1dd71ab6ad16ed3a05e9d5574b2bc0 nss-softokn-freebl-3.14.3-22.el6_6.i686.rpm 027aeee015b2281bebdb09ff87b34933380e3bfd79a40f28d14fd3983c730458 nss-softokn-freebl-devel-3.14.3-22.el6_6.i686.rpm x86_64: 77c7dfa9cdac123d789f1d1a65b8ecb22bd02cf70cf0d74cca4aedcb873be103 nss-softokn-3.14.3-22.el6_6.i686.rpm fb22476443aa77b1ec969dc09416a9cabde6e652e4712a6a33266a9140c2b7d9 nss-softokn-3.14.3-22.el6_6.x86_64.rpm 845a74c34377474614a69035b2741c8e2e420bfd98b37676cdbed09534fd84c4 nss-softokn-devel-3.14.3-22.el6_6.i686.rpm cb9d3dbde5a336160083312dc033ded182f2f811c1c2aa9ae5fe98dd5f59f0cf nss-softokn-devel-3.14.3-22.el6_6.x86_64.rpm c7de3e40ada40624174bd4aea2b3903b3f1dd71ab6ad16ed3a05e9d5574b2bc0 nss-softokn-freebl-3.14.3-22.el6_6.i686.rpm 1078c1194369da908b57512aa6f76655b26694f00106756e290852deda12742b nss-softokn-freebl-3.14.3-22.el6_6.x86_64.rpm 027aeee015b2281bebdb09ff87b34933380e3bfd79a40f28d14fd3983c730458 nss-softokn-freebl-devel-3.14.3-22.el6_6.i686.rpm 2dae21d39a4658bc2977f6119f177ec587af385a16b193c1da012d27bcb81849 nss-softokn-freebl-devel-3.14.3-22.el6_6.x86_64.rpm Source: db139757d5d628729ad254de68e45d8595c2727159d991388a93296e221b2c81 nss-softokn-3.14.3-22.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 29 Jan 2015 23:49:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0102 Important CentOS 7 kernel Security Update Message-ID: <20150129234927.GA23654(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0102 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0102.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5953bcabb2801ceddffe79684dbef64022546b17d1cebb24a2151e0b2778a04a kernel-3.10.0-123.20.1.el7.x86_64.rpm 584521ddf9d103e9e869e22f50953f6232f9de6ea0a78ade5e9bdb081e7f17a9 kernel-abi-whitelists-3.10.0-123.20.1.el7.noarch.rpm cafb58042763975693af60cce298fd9d28aae34ba75e2d92b98d0eb94ae1ad82 kernel-debug-3.10.0-123.20.1.el7.x86_64.rpm 535b053dda66e67f163dc0dc05398d5ee0b8aecbc7192071cdf13f3f2f0075c1 kernel-debug-devel-3.10.0-123.20.1.el7.x86_64.rpm 81bc8dc435ff275160c5e3d63180924af1a96dd14307df2c6e7ea2232d86d3fe kernel-devel-3.10.0-123.20.1.el7.x86_64.rpm 39171964cd2f7baa878b6033d5b14d06d3251dd058f92b2237de3dcb3609b5a5 kernel-doc-3.10.0-123.20.1.el7.noarch.rpm a88bfde708df6f4c0e4a8f894c52812b50d4323e5e1f3912af163fc18a5245ce kernel-headers-3.10.0-123.20.1.el7.x86_64.rpm 36fe40c396d283c429e74204458da5883a5dc1047f4ed39c6395d44693c7f70a kernel-tools-3.10.0-123.20.1.el7.x86_64.rpm 05aeaf149987da5bc8e8fd927c4517f93cdb3df7519a48ada13363d944f836f1 kernel-tools-libs-3.10.0-123.20.1.el7.x86_64.rpm 755f49173741b2c38925cf6eeeae21f0aacfbe03257002af866f6114cb10a710 kernel-tools-libs-devel-3.10.0-123.20.1.el7.x86_64.rpm e4fbd51094a12cb9e44cc2c279e6415aa87bc6198eb794cb2cb18f6b586c6228 perf-3.10.0-123.20.1.el7.x86_64.rpm 98a1598f025b8c3c2029a7d30bbcfaabca3121562c5a64a5fb81c5875a910dac python-perf-3.10.0-123.20.1.el7.x86_64.rpm Source: c8c549348d11f6a676976c6a81ba1551b382f8bfd1cae8d1cd25cd2df6e754be kernel-3.10.0-123.20.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 30 Jan 2015 00:20:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0102 Important CentOS 7 kernel Security Update Message-ID: <20150130002047.GA43239(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0102 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0102.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5953bcabb2801ceddffe79684dbef64022546b17d1cebb24a2151e0b2778a04a kernel-3.10.0-123.20.1.el7.x86_64.rpm 584521ddf9d103e9e869e22f50953f6232f9de6ea0a78ade5e9bdb081e7f17a9 kernel-abi-whitelists-3.10.0-123.20.1.el7.noarch.rpm cafb58042763975693af60cce298fd9d28aae34ba75e2d92b98d0eb94ae1ad82 kernel-debug-3.10.0-123.20.1.el7.x86_64.rpm 535b053dda66e67f163dc0dc05398d5ee0b8aecbc7192071cdf13f3f2f0075c1 kernel-debug-devel-3.10.0-123.20.1.el7.x86_64.rpm 81bc8dc435ff275160c5e3d63180924af1a96dd14307df2c6e7ea2232d86d3fe kernel-devel-3.10.0-123.20.1.el7.x86_64.rpm 39171964cd2f7baa878b6033d5b14d06d3251dd058f92b2237de3dcb3609b5a5 kernel-doc-3.10.0-123.20.1.el7.noarch.rpm a88bfde708df6f4c0e4a8f894c52812b50d4323e5e1f3912af163fc18a5245ce kernel-headers-3.10.0-123.20.1.el7.x86_64.rpm 36fe40c396d283c429e74204458da5883a5dc1047f4ed39c6395d44693c7f70a kernel-tools-3.10.0-123.20.1.el7.x86_64.rpm 05aeaf149987da5bc8e8fd927c4517f93cdb3df7519a48ada13363d944f836f1 kernel-tools-libs-3.10.0-123.20.1.el7.x86_64.rpm 755f49173741b2c38925cf6eeeae21f0aacfbe03257002af866f6114cb10a710 kernel-tools-libs-devel-3.10.0-123.20.1.el7.x86_64.rpm e4fbd51094a12cb9e44cc2c279e6415aa87bc6198eb794cb2cb18f6b586c6228 perf-3.10.0-123.20.1.el7.x86_64.rpm 98a1598f025b8c3c2029a7d30bbcfaabca3121562c5a64a5fb81c5875a910dac python-perf-3.10.0-123.20.1.el7.x86_64.rpm Source: c8c549348d11f6a676976c6a81ba1551b382f8bfd1cae8d1cd25cd2df6e754be kernel-3.10.0-123.20.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 30 Jan 2015 00:21:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0100 Moderate CentOS 7 libyaml Security Update Message-ID: <20150130002121.GA43359(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0100 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0100.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 27be0d9c4fdc9d6d7b83f141e70c7fea1ede9183686f9f4fcbaf4d7708492241 libyaml-0.1.4-11.el7_0.i686.rpm 01fe6b8eb0518670dc14b3095870a96cfcc75de6bf4769cd62c7d21109b13a65 libyaml-0.1.4-11.el7_0.x86_64.rpm 2802f4a924e386b02bab904c9cd2314692ae94821ac939054b420c79a9e21476 libyaml-devel-0.1.4-11.el7_0.i686.rpm cd06f287cb9fdd77e4b3a91d576ee9912959aecb818bd24d7797d04922827c50 libyaml-devel-0.1.4-11.el7_0.x86_64.rpm Source: f87eb345fdd5adac1236e7144286c6f6ba9f7e490dc84fc1e7c1930868aae5b9 libyaml-0.1.4-11.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 119, Issue 12 ************************************************

1 0

CentOS 6.6: Webcam problem
by Ron Yorston 30 Jan '15

30 Jan '15

Last month we discussed the problems with webcams in CentOS 6 and I raised Bugzilla #1158988 with Red Hat. This bug has now been declared a duplicate of 1145805. Unfortunately I'm unable to access that report so although I know Red Hat are looking into the matter I don't know what they're doing. Ron

4 7

network copy performance is poor (rsync) - debugging suggestions?
by Götz Reinicke - IT Koordinator 29 Jan '15

29 Jan '15

Hi, I do have two centos 6.6 servers. With a "performance optimized" rsync I get an speed of 15 - 20 MB/s The options I use are: rsync -aHAXxv --numeric-ids --progress -e "ssh -T -c arcfour -o Compression=no -x" If I copy files by smb to/from the servers I do get 60 - 80 MB/s, a dd (r/w) on the storages attached gives 90 MB/s on the 1Gbit ISCSI (Source Server) and up to 600MB/s on the 10Gbit ISCSI (Destination Server) storage. Both servers have plenty of memory and cpu usage looks low. Currently we dont use jumbo frames. Network over all usage is moderate to low. There are no special sysctl tweeks yet in use. As mentioned, I'm confused that even with SMB I do get 3 to 4 times better performance. Any hint and suggestion to track that problem down is welcome! Thanks and best regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

9 12

Re: [CentOS] Kickstarting several *different* setups
by James B. Byrne 29 Jan '15

29 Jan '15

Ansible, Bcfg2, Chef, Cobbler, Puppet, and Salt; I notice that Spacewalk is not mentioned. Any particular reason that it gets no recommendations? What about CFEngine? Any comments on this one? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] Kickstarting several *different* setups
by James B. Byrne 29 Jan '15

29 Jan '15

On Tue, January 20, 2015 18:37, Les Mikesell wrote: > > There's also saltstack which is one of the newer of the bunch. It has > some chance of working reasonably across different platforms. How > you feel about it will probably depend on how you feel about python in > general - and how you expect upgrades to go in the future. > Is this what you are talking about? Available Packages salt.noarch 2014.7.0-3.el6 epel salt-api.noarch 2014.7.0-3.el6 epel salt-cloud.noarch 2014.7.0-3.el6 epel salt-master.noarch 2014.7.0-3.el6 epel salt-minion.noarch 2014.7.0-3.el6 epel salt-ssh.noarch 2014.7.0-3.el6 epel salt-syndic.noarch 2014.7.0-3.el6 epel -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

"Monitor" RPMs in Repo
by Markus "Shorty" Uckelmann 29 Jan '15

29 Jan '15

Hi all, Sorry for the bad subject. I'd like to do two things. - Know when a RPM which is currently in only one repository pops up in a different repository. E.g. RPM going from epel-testing to epel. - Get notified when a RPM pops up in a repository. E.g. waiting for an RPM to appear. I know that this is quite easy to find out manually. But did anyone build a script or something else to do this "automagically"? In my company we have a mix of self-build packages, epel-testing & rpmforge packages and some other obscure things. With something like I described above we would be sure when we could throw away the makeshift packages and transition to more or less stable packages from Base, Extra or EPEL. Cheers, Shorty

2 2

CentOS-announce Digest, Vol 119, Issue 11
by centos-announce-request＠centos.org 29 Jan '15

29 Jan '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0100 Moderate CentOS 6 libyaml Security Update (Johnny Hughes) 2. CESA-2015:0087 Important CentOS 6 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 28 Jan 2015 22:40:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0100 Moderate CentOS 6 libyaml Security Update Message-ID: <20150128224028.GA35225(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0100 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0100.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e1cbe81e3041167ffaa66311a3aa2b1844988ec2b88f6387dc1ac2b83b2a2714 libyaml-0.1.3-4.el6_6.i686.rpm fc34f6a55ec35a240bb8adc5ceceb270f5d16cfa90a3df78a2ed244850cbafb7 libyaml-devel-0.1.3-4.el6_6.i686.rpm x86_64: e1cbe81e3041167ffaa66311a3aa2b1844988ec2b88f6387dc1ac2b83b2a2714 libyaml-0.1.3-4.el6_6.i686.rpm a2edbc9cda1d710f27d09af40f3780d9b69933e21e54d61c1c7400b03281ec2a libyaml-0.1.3-4.el6_6.x86_64.rpm fc34f6a55ec35a240bb8adc5ceceb270f5d16cfa90a3df78a2ed244850cbafb7 libyaml-devel-0.1.3-4.el6_6.i686.rpm 41226a5117f6e34f6c1028615742fef8a3acf663efbefa11b664c010e32c45c5 libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Source: 80ee67196d7c279836002fc9d78667cacb09c26f87d441b02ddc1067fd7536b8 libyaml-0.1.3-4.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 28 Jan 2015 22:43:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0087 Important CentOS 6 kernel Security Update Message-ID: <20150128224351.GA35701(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0087 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0087.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 94ab95f3538737900c033c35b6cddab925c14e98c1b631fa053c8ff5f498461f kernel-2.6.32-504.8.1.el6.i686.rpm 93eec82ece225b086896b7c4f5f16af12a01f63e36584e1b6a5dbc6588a77427 kernel-abi-whitelists-2.6.32-504.8.1.el6.noarch.rpm fab5bf5c42f887a41d74ac6f9e5ce04e88c0174da5387f96d0f6ca79502ab279 kernel-debug-2.6.32-504.8.1.el6.i686.rpm bba6a3e485cb3bbe62601ea8b562dd68f1c40d7ab4817d9a48fa78467fe14127 kernel-debug-devel-2.6.32-504.8.1.el6.i686.rpm feba5bf77ba9999e8ceba3cdace5011789f287b8dc4ee13cec77f21e2b597466 kernel-devel-2.6.32-504.8.1.el6.i686.rpm 6607141df93f8942c97ec62efa6a94ef3f55f4edd1ec5170127fc6df5f6e233b kernel-doc-2.6.32-504.8.1.el6.noarch.rpm 267e47d4661ebe0d792e168ac8ab8cea13392ebc941bf4fb2555e8ba9f60d491 kernel-firmware-2.6.32-504.8.1.el6.noarch.rpm 7178d1695bb488a58dd68fe6f292bfaab89c95aaa97fc2bde172de2709cdf53c kernel-headers-2.6.32-504.8.1.el6.i686.rpm aae456c0f81e72e6e97ae801fb5a8bfd12a75eb2da64513130df451e274cc06a perf-2.6.32-504.8.1.el6.i686.rpm 4bff539dd14f78703fd024d81d7d567630a88f0669592b701c2e253f9bc3ab0b python-perf-2.6.32-504.8.1.el6.i686.rpm x86_64: b560c92df0e9bde6ca0c6f69422f68996631c48032b910e273cf29bae5975171 kernel-2.6.32-504.8.1.el6.x86_64.rpm 93eec82ece225b086896b7c4f5f16af12a01f63e36584e1b6a5dbc6588a77427 kernel-abi-whitelists-2.6.32-504.8.1.el6.noarch.rpm 999a188bf7b1bf4a2baa128ec5db0d7659bb032f88160d6f483ef40a60713d21 kernel-debug-2.6.32-504.8.1.el6.x86_64.rpm 40aad0abba0365c19f422db044285049dea4d023d8bcbdf48df26e6980e3f5ad kernel-debug-devel-2.6.32-504.8.1.el6.x86_64.rpm d569c488353082fbb24b980dcb5d9c7616203bafeee21917181a8055bb02bf54 kernel-devel-2.6.32-504.8.1.el6.x86_64.rpm 6607141df93f8942c97ec62efa6a94ef3f55f4edd1ec5170127fc6df5f6e233b kernel-doc-2.6.32-504.8.1.el6.noarch.rpm 267e47d4661ebe0d792e168ac8ab8cea13392ebc941bf4fb2555e8ba9f60d491 kernel-firmware-2.6.32-504.8.1.el6.noarch.rpm baa01c254be105e0e56b48f784813d5ec601460aa75c12b86eef96a581435b64 kernel-headers-2.6.32-504.8.1.el6.x86_64.rpm 9b9abc0f737dd4c3e15180c093395cb1a65e03c5afe94a0c8ae58852ec346284 perf-2.6.32-504.8.1.el6.x86_64.rpm 0151584f3e8196718572b4aaa4344398484cfbc6e5b4b131f0a00de99102fef6 python-perf-2.6.32-504.8.1.el6.x86_64.rpm Source: 468cf0e8fe7ed619fe4595a5139acce5fc7b62b28b3a821c9d030a38a2e2843a kernel-2.6.32-504.8.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 119, Issue 11 ************************************************

1 0

CVE-2015-0235 - glibc gethostbyname
by Always Learning 29 Jan '15

29 Jan '15

Saw this on the Exim List:- From: Tony Finch <dot--at--(a)dotat.at> Subject: [exim] CVE-2015-0235 - glibc gethostbyname remotely exploitable via exim Date: Tue, 27 Jan 2015 17:33:45 +0000 "The Exim mail server is exploitable remotely if configured to perform extra security checks on the HELO and EHLO commands ("helo_verify_hosts" or "helo_try_verify_hosts" option, or "verify = helo" ACL); we developed a reliable and fully-functional exploit that bypasses all existing protections (ASLR, PIE, NX) on 32-bit and 64-bit machines. http://www.openwall.com/lists/oss-security/2015/01/27/9 --------------------------------- "- We identified a number of factors that mitigate the impact of this bug. In particular, we discovered that it was fixed on May 21, 2013 (between the releases of glibc-2.17 and glibc-2.18). Unfortunately, it was not recognized as a security threat; as a result, most stable and long-term-support distributions were left exposed (and still are): Debian 7 (wheezy), Red Hat Enterprise Linux 6 & 7, CentOS 6 & 7, Ubuntu 12.04, for example." ------------------------------------- I use Exim on C5 and C6 - should I be worried about Exim on C6 ? -- Regards, Paul. England, EU. Je suis Charlie.

7 11

Apache and SSLv3
by Alessandro Baggi 29 Jan '15

29 Jan '15

Hi list, I'm configuring apache with https and I've a question about sslv3 deactivation. Running "openssl ciphers -v" I get a list of cypher suite of openssl like: ECDH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(128) Mac=AEAD ......... Each lines report relative protocol. Disabling sslv3 with "SSLProtocol all -SSLv3" I can use cypher like: ECDH-RSA-DES-CBC3-SHA SSLv3 Kx=ECDH/RSA Au=ECDH Enc=3DES(168) Mac=SHA1 that has protocol SSLv3? Disabling SSLv3 protocol, apache will use only TLSv1.2 cypher protocol? Thanks in advance. Alessandro.

3 3

CentOS 6.6 and webcams
by Ron Yorston 29 Jan '15

29 Jan '15

The issue of webcams not working with recent kernels on CentOS 6.6 has come up a number of times on the list. I'm happy to report that the latest kernel (2.6.32-504.8.1) appears to have fixed the problem. The relevant changelog entry is: - [usb] ehci: Fix a regression in the ISO scheduler (Gustavo Duarte) [1162072 1145805] The related CentOS bug report is here: http://bugs.centos.org/view.php?id=7815 Ron

1 0

Re: [CentOS] CentOS - Firefox and Flash
by James B. Byrne 28 Jan '15

28 Jan '15

On Thu, January 22, 2015 12:27, Frank Cox wrote: > On Thu, Jan 22, 2015 at 09:36:24AM -0500, James B. Byrne wrote: >> If one has already done all that and, following the most recent FF update, all that is displayed is a video window with the Flash >> logo/Button in the middle. And regardless of how many times one clicks on said button no video will show or sound will emit, what then? > What firefox plugins do you have installed that might be blocking flash? > I personally don't use flash stuff much, but I have noscript installed > and it makes me either allow javascript or click on the embedded flash > content to view it. But so far it always seems to work when I either > allow > javascript on the site or click on the content. I thought that was the case too. However, disabling NoScript for YouTube does not change the observed behaviour. It is decidedly odd in that the Flash video will not play until one sets the enable html5 option in YouTube. One of the artifacts of switching the html5 on in YT is that upon returning to the video page the video canvas shows an error message, with the 'Try again later' tag. But simply clicking on the video frame a second time starts the video. I am not sure what is going on. I have discovered that the same approach (switching on html5 in YouTube) has solved this issue for a least one of the impacted users. I will try it on others as the occasion permits. It seems to me likely to be a FF issue at its core. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CentOS-announce Digest, Vol 119, Issue 10
by centos-announce-request＠centos.org 28 Jan '15

28 Jan '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:X002 Xen and LibVirt Xen4CentOS Enhancement Update (Johnny Hughes) 2. CEBA-2015:0089 CentOS 6 gdbm FASTTRACK BugFix Update (Johnny Hughes) 3. CESA-2015:0090 Critical CentOS 5 glibc Security Update (Karanbir Singh) 4. CESA-2015:0092 Critical CentOS 6 glibc Security Update (Karanbir Singh) 5. CESA-2015:0092 Critical CentOS 7 glibc Security Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 27 Jan 2015 13:06:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:X002 Xen and LibVirt Xen4CentOS Enhancement Update Message-ID: <20150127130644.GA37446(a)n04.lon1.karan.org> Content-Type: text/plain; charset=iso-8859-1 CentOS Errata and Enhancement Advisory 2015:X002 (Xen4CentOS) The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) ----------------------------- x86_64 ----------------------------- cdfc144852265d5b5d5ad929bc5b31159a6ca859715ba795134e2b85fe7e3399 libvirt-1.2.10-3.el6.x86_64.rpm 5c9b50eae196a3beb710b1aa37ef212d1fb19062a3e0a0a0b1448c3e38695898 libvirt-client-1.2.10-3.el6.x86_64.rpm f75375eca3a0088aa9a537dda0cdebc047bb74fc24364b0f75a3f3315ea5fee1 libvirt-daemon-1.2.10-3.el6.x86_64.rpm 04a7c8d378aaa85aa0962afa24193df37bc884a4f0f812c82f196d9657f6faea libvirt-daemon-config-network-1.2.10-3.el6.x86_64.rpm f6b969d3c89e4f7d10b18464f5a5b7d8b4627bba8194426a4f528d572ef9b378 libvirt-daemon-config-nwfilter-1.2.10-3.el6.x86_64.rpm 89a220c0964427ec8e914d7fe01c799e1223c1a0ccbf6e9c9a8b722dbfb2e6c2 libvirt-daemon-driver-interface-1.2.10-3.el6.x86_64.rpm d52b96cd2cbb807e93a74970d4309f2ff0b8a5c5030918cfa74b070152b561ef libvirt-daemon-driver-libxl-1.2.10-3.el6.x86_64.rpm 14e49bd64281368826a4d7bff9dcebe63f7693fd6b50e681febf515b09ae098b libvirt-daemon-driver-lxc-1.2.10-3.el6.x86_64.rpm 48dbc513689a93689eb89ea514ee7fee560d66a6f8d49e61424fcfa155105308 libvirt-daemon-driver-network-1.2.10-3.el6.x86_64.rpm dfa11209f31bedf18938d85eb12456d82d46af84070fe4f47e5521a3f4fcbfea libvirt-daemon-driver-nodedev-1.2.10-3.el6.x86_64.rpm 46e6872c93140df1aa662470b4e72fe49b960412b059c32b5d2128ce6f61a10e libvirt-daemon-driver-nwfilter-1.2.10-3.el6.x86_64.rpm 23233e23f9e41d47a7f7489647e308394f94018b4789a225a6df6b49291ecbf0 libvirt-daemon-driver-qemu-1.2.10-3.el6.x86_64.rpm 9ab5624fcfed9a1401b46b458bb23aded8bc603e2ba10e267a12eec64c7ec683 libvirt-daemon-driver-secret-1.2.10-3.el6.x86_64.rpm 464f904baea4beec68fe90708c2895e697f215551d423a5dc9950c6f2df672b4 libvirt-daemon-driver-storage-1.2.10-3.el6.x86_64.rpm 1f6242a8ca12578bb7c0046e604e87caa13a3b2bfcae0e2a75d8d7d957d77837 libvirt-daemon-driver-xen-1.2.10-3.el6.x86_64.rpm 9dcf36b9708b145df230de9e4967a880620d5fbb91c874c34b0a06110b2fcb0f libvirt-daemon-kvm-1.2.10-3.el6.x86_64.rpm 521e8fd3fe56d00c3ed9b4b83fbf8d145fd0cb40ed57ca163cf4dad065d0c83e libvirt-daemon-lxc-1.2.10-3.el6.x86_64.rpm 604a476a2cb73578411d1780e915ec12ef5421c4ddd1c6501af8baedddb11b05 libvirt-daemon-xen-1.2.10-3.el6.x86_64.rpm ada1948fb39ff73b9462b3b4a88d83650768811da6cf041dfc82c8cb4440ca3c libvirt-devel-1.2.10-3.el6.x86_64.rpm 12b7d939d5bbb902d19c9f10ab1d0e09b7d6f2569d6c08d361faa7a078537580 libvirt-docs-1.2.10-3.el6.x86_64.rpm 9b5966f617704138b57c0158ffc24bd722e3c45fc163c4b57fbb78a6a46bab3f libvirt-lock-sanlock-1.2.10-3.el6.x86_64.rpm cf3c8b24dd749d3a58502153e68908ee7d7f6c935a24a42c1939d776a394ad34 libvirt-login-shell-1.2.10-3.el6.x86_64.rpm 4a6fefb92c51a8c808519c14c0f05bf4bba5d15cc6c80a9189233cea429f81f3 libvirt-python-1.2.10-2.el6.x86_64.rpm cfb51d27393b89ce9ea778c90fc78387e1bbd66ee526900f4d1d30b0ce2939f2 xen-4.4.1-5.el6.x86_64.rpm 8112529df37665282b18ac255024a5298b4a0d2c3b43047feb2411d04bb8493b xen-devel-4.4.1-5.el6.x86_64.rpm eceef9fe592a624c58321095223f1694aaeafc5188d7af2a63545169ce4c2935 xen-doc-4.4.1-5.el6.x86_64.rpm 2604e220fb3bd9dade6f032eb3688770dec07969b4000dbeda0d950fb94f647d xen-hypervisor-4.4.1-5.el6.x86_64.rpm 8645ef7f6d40c2f1374d4749dafa30e636db78650e262b9f3c7208748234be47 xen-libs-4.4.1-5.el6.x86_64.rpm d7e292c6593100328b324451bcb71ffd5aca25748826af1e67bca0950d611674 xen-licenses-4.4.1-5.el6.x86_64.rpm 81b62af7f92f6df99e85678ba7b5856006673f04b27c9d3cc9e437f702879f39 xen-ocaml-4.4.1-5.el6.x86_64.rpm 2b6fe42c4e34cc6b41a7e7ee3c7409db10a606ff4cf90dfbf6f4dcccd6adf2de xen-ocaml-devel-4.4.1-5.el6.x86_64.rpm 2a85526a06d64cd6d23b292a132f49c48bd4d446854c9834ecd816da6978da69 xen-runtime-4.4.1-5.el6.x86_64.rpm ----------------------------- Source ----------------------------- 02d6120f7bbeb61b52b1529bec526c078a2c5d13560337098f12d3755f28d926 libvirt-1.2.10-3.el6.src.rpm 550fcd79d3d32752847cc8901155b8870816b4f6bd0fee304503024962679962 libvirt-python-1.2.10-2.el6.src.rpm 17fd39507d1bbac73b0e1c60f56faf775f7cf64ba71fa1a8748159529e42fe52 xen-4.4.1-5.el6.src.rpm ===================================================== NOTE: This is an upgrade of libvirt to version 1.2.10 and xen to 4.4.1 By default version 4.4 of Xen uses libxl by default, not xm. You must convert your xm DomU virtual machines to xl or you must turn on xend manually to use your older DomU virtual machines. Please review this before upgrading and decide how to proceed: http://wiki.centos.org/HowTos/Xen/Xen4QuickStart/MigratingToXl ===================================================== These new RPMs have been produced by the new CentOS Virtualization SIG: http://wiki.centos.org/SpecialInterestGroup/Virtualization/ Utilizing the new CentOS Community Build System (CBS): http://cbs.centos.org Special thanks to the SIG for their hard work in building and testing this release, especially Lars Kurth, George Dunlap and Pasi K?rkk?inen. -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ Message: 2 Date: Tue, 27 Jan 2015 15:41:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0089 CentOS 6 gdbm FASTTRACK BugFix Update Message-ID: <20150127154147.GA40270(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0089 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0089.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ff6addf9697a57eca18c2424bc6791648caa99c105f2b8c1c9d6c136b6afd7d3 gdbm-1.8.0-38.el6.i686.rpm a5efc92ffa4f3a35f7cbb8e34dfa4e6eb52a835a8a79db96b7e44c0aa2cded13 gdbm-devel-1.8.0-38.el6.i686.rpm x86_64: ff6addf9697a57eca18c2424bc6791648caa99c105f2b8c1c9d6c136b6afd7d3 gdbm-1.8.0-38.el6.i686.rpm 8ff51f12fff5cdac53e72f0dc757d53a5aa4093b8b0fd704684df9e520639a2a gdbm-1.8.0-38.el6.x86_64.rpm a5efc92ffa4f3a35f7cbb8e34dfa4e6eb52a835a8a79db96b7e44c0aa2cded13 gdbm-devel-1.8.0-38.el6.i686.rpm eb06ba9ec5565e7c6c9971ef6a0289b89ce76461d19571af46730e1e50fd53f2 gdbm-devel-1.8.0-38.el6.x86_64.rpm Source: 161cd66d7663b9f549aee37358060dc32cff2017f62ce853ed9fa096b751a0f2 gdbm-1.8.0-38.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 27 Jan 2015 22:59:55 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0090 Critical CentOS 5 glibc Security Update Message-ID: <20150127225955.GA5172(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0090 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0090.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: de2d9fe25d7e178d02f19e05b9846218899d9fbee7954647ed7bf20bf82b932a glibc-2.5-123.el5_11.1.i386.rpm f6b6314b95cb7a1bdfe076fa2ecbc7726a78fe3861e7c4765e379e45450dd51a glibc-2.5-123.el5_11.1.i686.rpm 7f42ba356e442e9f9336f12cc3c7bc74720db4064256975ae876267bb68d1d1b glibc-common-2.5-123.el5_11.1.i386.rpm 2814251a11726dccff4d9c841e9c04ccc327000591cd5354267caf576b1e4bd1 glibc-devel-2.5-123.el5_11.1.i386.rpm e193b22ed56d39586f7161c02a5e66d0b5ef60785bef4ad00f2bee0fec0e037a glibc-headers-2.5-123.el5_11.1.i386.rpm a4ce5b65c002c59a2554df3a10416cb9db08b18a7540ef8b729d6cabb4b93ddc glibc-utils-2.5-123.el5_11.1.i386.rpm dc49612fa98f4a4ec9350994dd4e1aadaf696e3b4d3ba3d64c8d0b3d9f61e06d nscd-2.5-123.el5_11.1.i386.rpm x86_64: f6b6314b95cb7a1bdfe076fa2ecbc7726a78fe3861e7c4765e379e45450dd51a glibc-2.5-123.el5_11.1.i686.rpm 5e4038e4171fd179abb505261f3dcc4b30f5e1951c8ddedb8b0c3255e3eeac00 glibc-2.5-123.el5_11.1.x86_64.rpm c8c8c040a410d1fe55f5c31987f1e2b8acc0f5395c1fadd333dfbf13fe9eb54d glibc-common-2.5-123.el5_11.1.x86_64.rpm 2814251a11726dccff4d9c841e9c04ccc327000591cd5354267caf576b1e4bd1 glibc-devel-2.5-123.el5_11.1.i386.rpm 95bc9433ae83d6c0f1d272abf0922e67d294a6660aa31f6b32f2c049339e5c21 glibc-devel-2.5-123.el5_11.1.x86_64.rpm 381d969abd7036451949e4c7782d334865c24011d0cf4a9ebf16d3e0479dde29 glibc-headers-2.5-123.el5_11.1.x86_64.rpm 8f1f673e3dada621cf8ed943565f7bb3d3680497d918eb8dad3ae5d69176af23 glibc-utils-2.5-123.el5_11.1.x86_64.rpm 068c6219a96289c557796aee742b2728397b0bbf4398f53e3eb36e2e4f4aff7b nscd-2.5-123.el5_11.1.x86_64.rpm Source: c4830df76209da0fcd243d24f555a2c2af8345770f53553a83b7d75ad56fc201 glibc-2.5-123.el5_11.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 27 Jan 2015 23:31:01 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0092 Critical CentOS 6 glibc Security Update Message-ID: <20150127233101.GA49763(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0092 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0092.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0f0554770d7a565500adf20a0d403376de57f111118c04fed003266e2405598a glibc-2.12-1.149.el6_6.5.i686.rpm 167bd7bd46bd8cc6005397b1ea5048ee7868a8717935ee6f95e13b00d8f7499c glibc-common-2.12-1.149.el6_6.5.i686.rpm d6c144e7cd4b67ecf5eafb02671c0f6f48d27f81df97c35808d2d442c7db582e glibc-devel-2.12-1.149.el6_6.5.i686.rpm c9484d79a9aac4a8b706aa17f5edbd51b5e5731fe0afb3e9914b3e83de1e801a glibc-headers-2.12-1.149.el6_6.5.i686.rpm 250055e2980d905b82597cd8d6ef3e7b1dceec16da836b563bb781dc21d6ad1d glibc-static-2.12-1.149.el6_6.5.i686.rpm eea7f375894f8023953705e227ab82ab0fbe99915a4bab8d0e278392b43a1127 glibc-utils-2.12-1.149.el6_6.5.i686.rpm c66347ad9cf803554e12f0c259f4f67fa6d313d34a58201ea80f67f890c899f9 nscd-2.12-1.149.el6_6.5.i686.rpm x86_64: 0f0554770d7a565500adf20a0d403376de57f111118c04fed003266e2405598a glibc-2.12-1.149.el6_6.5.i686.rpm 51df53cceee0f4a7c1cbbc4cea8aecb1910eb1232592e330b6fe467eb2d7b5b5 glibc-2.12-1.149.el6_6.5.x86_64.rpm 65285684336366a98c5ac3c33982c0ccd0d5291563faea655b5fc6f47e8cfa63 glibc-common-2.12-1.149.el6_6.5.x86_64.rpm d6c144e7cd4b67ecf5eafb02671c0f6f48d27f81df97c35808d2d442c7db582e glibc-devel-2.12-1.149.el6_6.5.i686.rpm b6feecfbc9fbb10259c61ab60d7414d5a70c0cdef553fb2a4f14b7468e664160 glibc-devel-2.12-1.149.el6_6.5.x86_64.rpm 803fa33d7f62d944b019a644d1f3b0ec9f9e8aa67fde4c905cd7000939a1f872 glibc-headers-2.12-1.149.el6_6.5.x86_64.rpm 250055e2980d905b82597cd8d6ef3e7b1dceec16da836b563bb781dc21d6ad1d glibc-static-2.12-1.149.el6_6.5.i686.rpm 3668f99e7d21eea55d9b823e86c735ed946ccf8d4f7d6ca9adb8a5fd348238c8 glibc-static-2.12-1.149.el6_6.5.x86_64.rpm af41828eb52e0ae5c2d6239943f476cf186118edb4903ff884c5d6cc08665d6a glibc-utils-2.12-1.149.el6_6.5.x86_64.rpm bccce013dd1d94c1448eebb5febd25cc8abaa0bcb6b8bf744cf0eb2797b4f2bf nscd-2.12-1.149.el6_6.5.x86_64.rpm Source: 35b591c1fa712aba6b334d244374e182e0f1b7c1f85268c9bbc9dde42f4d9fb3 glibc-2.12-1.149.el6_6.5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 28 Jan 2015 00:30:01 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0092 Critical CentOS 7 glibc Security Update Message-ID: <20150128003001.GA4369(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0092 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0092.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 88b4a73933e26f68fc1d20993a76ff10a1c3d4df1ac7145f8850ef0287868bb1 glibc-2.17-55.el7_0.5.i686.rpm 6bb674826ea44a4d021fced67a4078e2f91b4afef53288be2d4757a9359bfecd glibc-2.17-55.el7_0.5.x86_64.rpm b12773c817fe1881497465aa0fc8ed279ae3bc716d8fda1f8435f07ae12a4db3 glibc-common-2.17-55.el7_0.5.x86_64.rpm 91df89963799570660ef1e7d34ce88d52e69970a4bdfb3df8352e4ce06a88fd5 glibc-devel-2.17-55.el7_0.5.i686.rpm 82405edb7d6418eca472b5976726a6ed1601e26d14e4aa712b1ffc114ac62ebc glibc-devel-2.17-55.el7_0.5.x86_64.rpm fbc16ddd14487d6b532267f9bed5efdd04bc731ab820bb27c2e983372c3685a5 glibc-headers-2.17-55.el7_0.5.x86_64.rpm 1c9bd186806e5947e0b5154c36647dbe0b4402184bdb1598ae9979fd2a77442d glibc-static-2.17-55.el7_0.5.i686.rpm 88eba00f312596074ce272a51c303989ee75e370c2326d884581b48d27939d10 glibc-static-2.17-55.el7_0.5.x86_64.rpm 9240f40f44e819baa1e76d6f8c98022aea7e337ee7e12c1391b64ce0edd20272 glibc-utils-2.17-55.el7_0.5.x86_64.rpm a96da73287ae765e5f399b54abbe89f056fddd088a1f4e2f62a3a6d749455bc3 nscd-2.17-55.el7_0.5.x86_64.rpm Source: 80325956daa24dd2b64563d642917db6c30e53d895d07a2f8de87082cacd2b4d glibc-2.17-55.el7_0.5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 119, Issue 10 ************************************************

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss