- Discuss - lists.centos.org

setting background on the command line
by Jerry Geis 24 Oct '14

24 Oct '14

I have centos 7 I am using: gsettings set org.gnome.desktop.background picture-uri file:///usr/share/backgrounds/gnome/Wood.jpg to set the background from the command line... dconf-editor shows the command worked. But the picture is not updated??? How do I get the desktop to re-draw? Thanks, Jerry

1 0

CentOS-announce Digest, Vol 116, Issue 13
by centos-announce-request＠centos.org 24 Oct '14

24 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:1679 CentOS 7 perl-Authen-SASL FASTTRACK BugFix Update (Johnny Hughes) 2. CEBA-2014:1681 CentOS 7 mgetty FASTTRACK BugFix Update (Johnny Hughes) 3. CEBA-2014:1700 CentOS 7 rsh FASTTRACK BugFix Update (Johnny Hughes) 4. CEBA-2014:1701 CentOS 7 systemd BugFix Update (Johnny Hughes) 5. CEBA-2014:1698 CentOS 7 kexec-tools BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 23 Oct 2014 12:21:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1679 CentOS 7 perl-Authen-SASL FASTTRACK BugFix Update Message-ID: <20141023122118.GA51755(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1679 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1679.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 1c0de42b7e9c425bbe61b7ebf40c18881c3d08a61d2bb02dcb9cab89c2aebc49 perl-Authen-SASL-2.15-10.el7.noarch.rpm Source: 0a45c8765d2a5b8a5c76604aab4f810c45d630b5a8406d2e51b3d5ae1b734eb1 perl-Authen-SASL-2.15-10.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 23 Oct 2014 12:21:33 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1681 CentOS 7 mgetty FASTTRACK BugFix Update Message-ID: <20141023122133.GA51836(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1681 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1681.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 332062d7298e7edaaf4d0ce1698c4bec4cc09c11dc37afdae4803a753eac7416 mgetty-1.1.36-28.el7.x86_64.rpm 018a513a4699cdebee014c191558f6cb4f98261cac829d7f6c1aa434027b90b2 mgetty-sendfax-1.1.36-28.el7.x86_64.rpm acecec45586002eec6e8385a876a79c79bd74e66c52eb4095bbca64d41640878 mgetty-viewfax-1.1.36-28.el7.x86_64.rpm 4b2673228520e9ecfbcbf8c51d260e2ad976169b6e04012e9d21b0fdee60e413 mgetty-voice-1.1.36-28.el7.x86_64.rpm Source: f3223be0272301efdc6ff4fa1b508dae5fc6c05334d83506bf9cc6b20e555dde mgetty-1.1.36-28.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 23 Oct 2014 12:21:45 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1700 CentOS 7 rsh FASTTRACK BugFix Update Message-ID: <20141023122145.GA51905(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1700 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1700.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: cfb6a5f750485d0e34be98cc3adcc5c57016ed38627af1cec13355b7553697bb rsh-0.17-76.el7.x86_64.rpm e26027244ee995280b8cf16a5d56e5bf19ac8e869fc65b50382aa46f72475722 rsh-server-0.17-76.el7.x86_64.rpm Source: b12dd8aca7997b57abb656a4c4240731f041264b5ce033cb3d6fcbe364ffe249 rsh-0.17-76.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 23 Oct 2014 12:22:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1701 CentOS 7 systemd BugFix Update Message-ID: <20141023122206.GA52015(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1701 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1701.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 47e2ae858a3ad8f46593faab1d8213d33aaa6b327acb4dc2890bade41cb151a4 libgudev1-208-11.el7_0.4.i686.rpm ae05177c20bc9cfa1e772f32550fb3164be94573f018c1c3898a6a5e68193678 libgudev1-208-11.el7_0.4.x86_64.rpm bd0ac9e271e3b926d44dae75d54c1d23668ecd3a5da70ae2130d9f09ccb7b820 libgudev1-devel-208-11.el7_0.4.i686.rpm b0b3cf5fbe41bbbfb0b68eafdccf23e4783f61893e1432f6ff3ce3fc8fc425b4 libgudev1-devel-208-11.el7_0.4.x86_64.rpm cde27c553e96c27edc123099365d12d67d66f2c2028f3b919c59f95a32eaf87b systemd-208-11.el7_0.4.x86_64.rpm 1bb2412e0b7318d14ecc0b4c5a05e1f12c7e1532cbbed1267bccc89175918b77 systemd-devel-208-11.el7_0.4.i686.rpm c3a1ccd0d2d8f917369fbeb5285f12075e6d9601cd22d86da59263eb0429b0b3 systemd-devel-208-11.el7_0.4.x86_64.rpm 368c32eb6b38e2892c2b8827be7a6992b0693a3c0b27adb8c2b2b1d5b7d328fa systemd-journal-gateway-208-11.el7_0.4.x86_64.rpm b70041d37d2e19bba37f04da50be9693a4fe535c15d6b91aa04fefce8912adad systemd-libs-208-11.el7_0.4.i686.rpm 83178f01c882d4e84e339a0b162f0bab008cb143199ab7f4d052a289a299933b systemd-libs-208-11.el7_0.4.x86_64.rpm b7205eb655a08171cb6ab1b7a2ffc3675146603734647cefd906fdb987e68336 systemd-python-208-11.el7_0.4.x86_64.rpm 1088daf08db228a9534c3f5ee4cf56b1761cc1033495b227b6606570ad0de3b5 systemd-sysv-208-11.el7_0.4.x86_64.rpm Source: fade2f982be47395fbc6d17a6aea3b036bd6306cd8844a449569d3575a22d356 systemd-208-11.el7_0.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 23 Oct 2014 12:22:37 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1698 CentOS 7 kexec-tools BugFix Update Message-ID: <20141023122237.GA52096(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1698 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1698.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fd3ba6ad69239b25013b7345f2522c584a56cefb67d308c355a40e1775e4f336 kexec-tools-2.0.4-32.el7.centos.5.x86_64.rpm f93f8c9bc1e6bd2cf552d7170db9941eebe66e0b9c28da4c30a3af3363a3b792 kexec-tools-eppic-2.0.4-32.el7.centos.5.x86_64.rpm Source: c3410cc99a649aad6c8acb5ea9cd7ac069a908151462384acf3c4423b82d987a kexec-tools-2.0.4-32.el7.centos.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 13 ************************************************

1 0

lynx only shows : FRAME: wlmframe
by Johan Vermeulen 24 Oct '14

24 Oct '14

Hello, when I log in through ssh to a remote site and open the web interface from a ( new ) printer using Lynx, it only displays : FRAME: wlmframe I suspect this is some unfriendly coding, that will cost me time in opening Firefox instead of Lynx or w3m. Does anybody know of a way around this? Greetings, Johan -- Johan Vermeulen IT-medewerker Caw De Kempen johan.vermeulen(a)cawdekempen.be 0479.82.01.41 Powered by Linux.

4 5

pidgin-sipe on Centos-6/64
by Fred Smith 24 Oct '14

24 Oct '14

Hi! Wondering if anyone here has been able to get the (3-rd party) SIPE plugin (pidgin-sipe) working on Centos-6 with the C6 version of pidgin? I've just started looking at it and after a little messing around have no joy. Before I waste more time on it I thought I'd ask. what I've done so far: --download the latest binary from the Suse build service, allegedly one built for EL-5. installs (along with libpurple-sipe) without errors, but when I attempt to create a new account for SIPE there is no listing of it in the list of protocols in the "add user" dialog. --figuring I had the wrong version (since the pidgin in C6 is now rather old) I downloaded the source and built it, again with no errors. but having installed it, I get the same symptom. I'd appreciate any helpful hints. thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- But God demonstrates his own love for us in this: While we were still sinners, Christ died for us. ------------------------------- Romans 5:8 (niv) ------------------------------

2 4

Loss of Ethernet adaptor
by James B. Byrne 24 Oct '14

24 Oct '14

This is a return to an issue I first raised back in June. We had a similar occurrence in September while I was away and so I am revisiting the entire matter. Steve Clark on 6 Jun 16:02 2014 wrote: > Hi, > > We ran into this problem also - the interface would disappear. > There is newer e1000e driver that fixes it or you could > add pcie_aspm=off to your kernel command line. > > HTH, > Steve I have run into other reports of similar occurrences and some of these refer to this bug report: https://bugzilla.redhat.com/show_bug.cgi?id=632650 However, that report is closed as being a duplicate of: https://bugzilla.redhat.com/show_bug.cgi?id=562273 Which is not available to viewing by the great unwashed. Nonetheless, following the discussion thread in the bug report that I can view it appears that this issue was supposedly resolved sometime in late 2012. >From what I can gather the fix was to disable ASPM L1 for this model adaptor in the e1000e driver module. * Upstream commit d4a4206ebbaf48b55803a7eb34e330530d83a889 - e1000e: Disable ASPM L1 on 82574 However, when I run lspci -vvv on the host that exhibited the problem I see this: . . . 03:00.0 Ethernet controller: Intel Corporation 82574L Gigabit Network Connection Subsystem: Super Micro Computer Inc Device 10d3 Physical Slot: 0-2 Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+ Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx- Latency: 0, Cache Line Size: 64 bytes Interrupt: pin A routed to IRQ 17 Region 0: Memory at feae0000 (32-bit, non-prefetchable) [size=128K] Region 2: I/O ports at ec00 [size=32] Region 3: Memory at feadc000 (32-bit, non-prefetchable) [size=16K] Capabilities: [c8] Power Management version 2 Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA PME(D0+,D1-,D2-,D3hot+,D3cold+) Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=1 PME- Capabilities: [d0] MSI: Enable- Count=1/1 Maskable- 64bit+ Address: 0000000000000000 Data: 0000 Capabilities: [e0] Express (v1) Endpoint, MSI 00 DevCap: MaxPayload 256 bytes, PhantFunc 0, Latency L0s <512ns, L1 <64us ExtTag- AttnBtn- AttnInd- PwrInd- RBE+ FLReset- DevCtl: Report errors: Correctable+ Non-Fatal+ Fatal+ Unsupported+ RlxdOrd+ ExtTag- PhantFunc- AuxPwr- NoSnoop+ MaxPayload 128 bytes, MaxReadReq 512 bytes DevSta: CorrErr+ UncorrErr- FatalErr- UnsuppReq+ AuxPwr+ TransPend- LnkCap: Port #0, Speed 2.5GT/s, Width x1, ASPM L0s L1, Latency L0 <128ns, L1 <64us ClockPM- Surprise- LLActRep- BwNot- ############ LnkCtl: ASPM L0s L1 Enabled; RCB 64 bytes Disabled- Retrain- CommClk+ ############ ExtSynch- ClockPM- AutWidDis- BWInt- AutBWInt- LnkSta: Speed 2.5GT/s, Width x1, TrErr- Train- SlotClk+ DLActive- BWMgmt- ABWMgmt- Capabilities: [a0] MSI-X: Enable+ Count=5 Masked- Vector table: BAR=3 offset=00000000 PBA: BAR=3 offset=00002000 Capabilities: [100 v1] Advanced Error Reporting UESta: DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq- ACSViol- UEMsk: DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq- ACSViol- UESvrt: DLP+ SDES- TLP- FCP+ CmpltTO- CmpltAbrt- UnxCmplt- RxOF+ MalfTLP+ ECRC- UnsupReq- ACSViol- CESta: RxErr+ BadTLP+ BadDLLP+ Rollover- Timeout+ NonFatalErr+ CEMsk: RxErr- BadTLP- BadDLLP- Rollover- Timeout- NonFatalErr+ AERCap: First Error Pointer: 00, GenCap- CGenEn- ChkCap- ChkEn- Capabilities: [140 v1] Device Serial Number 00-25-90-ff-ff-61-74-c1 Kernel driver in use: e1000e Kernel modules: e1000e . . . lsmod . . . e1000e 267701 0 . . . The host is running CentOS-6.5 with all updates applied to date. My question is: Has this issue been addressed in the official e1000e module or not? if not then does the recommendation to "add pcie_aspm=off to your kernel command line" hold? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

Re: [CentOS] Gnome 3 on centos 7
by Jerry Geis 23 Oct '14

23 Oct '14

On Thu, Oct 23, 2014 at 2:50 PM, <m.roth(a)5-cent.us> wrote: > Note that I still can't post to the list.... > > Jerry Geis wrote: > > Hi all - almost have my migration to Centos 7 done... > > > > My last piece is finding a way to keep menus away from users on Gnome 3. > > > > gsettings took me pretty far, to remap gconf-tool to gsettings. > > > > I also removed two packages > > gnome-shell-extension-places-menu > > gnome-shell-extension-app-menu > > > > This removed the Places and Apps menu options in the top panel. > > > > However - when doing this now I see the menu choice for "Activities". > > > > I am wondering if anyone knows how to remove that or make it > > non-functional... > > You can click on it and run a "terminal" which I do not desire. > > I missed the beginning of this - is this supposed to be like a kiosk? The > only things the users can do is click on icons, and those are all they're > allowed to do? If so, I think there's a kiosk setup. > > And don't forget to disable screen, or whatever it is, that lets me to > <f[2-x], and get to a text-mode login.... > > mark > > Mark - it is basically a Kiosk. I really dont want any icons on the screen - I am remotely controlling the box and what is on the screen for viewing. if someone connected a mouse I dont want them to be able to do anything. I have disable the function keys and such... thanks, Jerry

1 0

Gnome 3 on centos 7
by Jerry Geis 23 Oct '14

23 Oct '14

Hi all - almost have my migration to Centos 7 done... My last piece is finding a way to keep menus away from users on Gnome 3. gsettings took me pretty far, to remap gconf-tool to gsettings. I also removed two packages gnome-shell-extension-places-menu gnome-shell-extension-app-menu This removed the Places and Apps menu options in the top panel. However - when doing this now I see the menu choice for "Activities". I am wondering if anyone knows how to remove that or make it non-functional... You can click on it and run a "terminal" which I do not desire. Thanks, jerry

1 0

Centos 7 - How To set text console resolution to 80x24
by Dario Lesca 23 Oct '14

23 Oct '14

Like subject say ... hot to configure the resolution of text console to standard 80x24 ? Many Thanks -- Dario Lesca (inviato dal mio Linux Fedora 20 con Gnome 3.10.4)

2 6

Re: [CentOS] Q. LUKS or ecryptfs-utils ?
by James B. Byrne 23 Oct '14

23 Oct '14

On Wed, October 22, 2014 18:52, Nux! wrote: > Do you also run the hypervisor? Because if you are not, then the > host can dump your guest's memory and retrieve the luks passphrase > from there AFAIK. Who are you hiding from? The issue is backstopping a physical security breach. We run the hypervisor host and have physical control over access to the hardware. Should the storage device be removed from our premises by unauthorised means then we wish assurance that the data thereon is not readily accessible to anyone. We are also cognisant that it is conceivable that a external threat might find some way to scan/copy the data without actually removing the device physically. I am under the impression that encryption 'should' work to prevent 'drive-by' surveillance in that case as well, but I am not entirely convinced that is true. I am starting with the mail spool because that is a fairly straight-forward case. Our mail spool is mounted at /var/spool/imap and is an LVM volume. We have sufficient surplus space to easily create an equivalently sized or even larger LVM as an encrypted whatever. I am not sure of the correct terminology in this case; device/partition/something else? My thinking is that we set up an encrypted LV, take the imapd service down, copy the imap spool files and directory structure to the encrypted volume. Dismount both, remount the encrypted volume in place of the original and restart the imapd service. Is this a sound approach? We may want to have the imapd service started manually after the encrypted volume is made accessible. If so then both actions probably belong in an admin script (to be written). -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

epel repo
by Steve Clark 23 Oct '14

23 Oct '14

Hi, Has anyone else had trouble trying to reach the epel repo. I can only get to it if I change the https to http in the epel.repo file. -- Stephen Clark *NetWolves Managed Services, LLC.* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

1 1

httpd on centos 7
by Jerry Geis 23 Oct '14

23 Oct '14

I have read the info on apache 2.4... I added to the bottom of httpd.conf these lines (and restarted httpd) ------------------------- <Directory /var/www/html> # old 2.2 config # Order Allow,Deny # Allow from all AllowOverride None Require all granted </Directory> <Directory /home/silentm/public_html/gifs> AllowOverride None Require all granted </Directory> SuexecUsergroup silentm silentm ------------------ So now I have access to the index.html page in /var/www/html so that is good. However, I do not have access to the user gifs /home/silentm/public_html/gifs The user silentm exists. I get a 404 error. 127.0.0.1 - - [23/Oct/2014:08:14:21 -0400] "GET /~silentm/gifs/smlogo.jpg HTTP/1.1" 404 222 "-" "curl/7.29.0" All the files are there - all owned by silentm. What did I miss to access the gifs? Thanks Jerry

2 3

KDE C6.5+cr : heads-up screens renamed after update
by Patrick Bervoets 23 Oct '14

23 Oct '14

Just for your information: after applying the cr-updates to a C6.5 my screens on my laptop renamed from VGA1 and eDP1 to VGA-0 and eDP-0. And since X insists that my VGA is left to my eDP (and my scripted xrandr was confused by the renaming) I had to go to the left to reach my right screen. I needed some more coffee this morning. Patrick

1 0

upgrade dhcpd failover set from centos 5.x ->7.x
by Les Mikesell 23 Oct '14

23 Oct '14

Is there a less drastic way to upgrade a pair of dhcpd servers on Centos 5.x than forklifting the old boxes out and hoping the replacements work?. The failover protocol seems to be incompatible so I just upgrade one at a time.... Has anyone been through this with a clever solution - like compiling a new dhcpd on the old boxes for an easy rollback? -- Les Mikesell lesmikesell(a)gmail.com

3 2

Testing "dark" SSL sites
by lists＠benjamindsmith.com 22 Oct '14

22 Oct '14

So, with all the hubbub around POODLE and ssl, we're preparing a new load balancer using HAProxy. So we have a set of unit tests written using PHPUnit, having trouble validating certificates. How do you test/validate an SSL cert for a prototype "foo.com" server if it's not actually active at the IP address that matches DNS for foo.com? For non-ssl sites, I can specify the url like http://1.2.3.4/path and pass an explicit "host: foo.com" http header but that fails for SSL certificate validation. You can also set a hosts file entry, but that's also rather painful. Is there a better option?

5 9

Re: [CentOS] Loss of Ethernet adaptor
by James B. Byrne 22 Oct '14

22 Oct '14

On Tue, October 21, 2014 14:02, Marcelo Ricardo Leitner wrote: > On 16-10-2014 13:47, Akemi Yagi wrote: >> On Wed, Oct 15, 2014 at 8:41 AM, James B. Byrne <byrnejb(a)harte-lyne.ca> >> wrote: >>> This is a return to an issue I first raised back in June. We had a similar >>> occurrence in September while I was away and so I am revisiting the entire >>> matter. >>> >>> Steve Clark on 6 Jun 16:02 2014 wrote: >>>> Hi, >>>> >>>> We ran into this problem also - the interface would disappear. >>>> There is newer e1000e driver that fixes it or you could >>>> add pcie_aspm=off to your kernel command line. >>>> >>>> HTH, >>>> Steve >>> >>> I have run into other reports of similar occurrences and some of these >>> refer >>> to this bug report: https://bugzilla.redhat.com/show_bug.cgi?id=632650 >> >> I'm the one who did the submission. Some of my comments (which I >> thought were helpful) have been hidden by Red Hat. >> >>> However, that report is closed as being a duplicate of: >>> https://bugzilla.redhat.com/show_bug.cgi?id=562273 >>> >>> Which is not available to viewing by the great unwashed. >> >> I don't have access, either. >> >>> The host is running CentOS-6.5 with all updates applied to date. My >>> question >>> is: Has this issue been addressed in the official e1000e module or not? if >>> not then does the recommendation to "add pcie_aspm=off to your kernel >>> command >>> line" hold? >> >> My suggestion for you is to give ELRepo's kmod-e1000e a try. It has >> the latest version from Intel (3.1.0.2) as opposed to the version in >> the EL kernels (2.3.2-k). There are known cases in which a later >> version resolved issues. > > Both BZs above are RHEL 5 specific, being 562273 a "driver update" one. > Did you report this against any RHEL6 too? > > Marcelo No, I did not. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 116, Issue 12
by centos-announce-request＠centos.org 22 Oct '14

22 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1671 Moderate CentOS 5 rsyslog5 Security Update (Johnny Hughes) 2. CESA-2014:1669 Low CentOS 7 qemu-kvm Security Update (Johnny Hughes) 3. CESA-2014:1655 Moderate CentOS 7 libxml2 Security Update (Johnny Hughes) 4. CESA-2014:1676 Moderate CentOS 7 wireshark Security Update (Johnny Hughes) 5. CESA-2014:1677 Moderate CentOS 5 wireshark Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 21 Oct 2014 16:39:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1671 Moderate CentOS 5 rsyslog5 Security Update Message-ID: <20141021163904.GA7073(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1671 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1671.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dc2949c2525c1a78b1869cd2f532e935ce8660072216b291d7b412e3124c80ab rsyslog5-5.8.12-5.el5_11.i386.rpm 7d02145ccd645aff9dbb04dec8e0f493922f58ba6cb8f01b9e15c60acf9fc6df rsyslog5-gnutls-5.8.12-5.el5_11.i386.rpm 7a13dfee4c8e7fd4353e0b52be3a431ec8fdc59a1c883330538cac72dd743420 rsyslog5-gssapi-5.8.12-5.el5_11.i386.rpm 81563a2162db486b9de155424dd63ae28d42ecfe20cf99533aab17a674e21fb2 rsyslog5-mysql-5.8.12-5.el5_11.i386.rpm 3e8c7182485370bd260746b85fd258622b22dde2d9f8b91a7b0300b87728b6e9 rsyslog5-pgsql-5.8.12-5.el5_11.i386.rpm 7ed3b710754ee85623605be96cd7b60d8c311ef4b8f7a95f38c7f0ad95cce9fe rsyslog5-snmp-5.8.12-5.el5_11.i386.rpm x86_64: 8b0241bca0769484a6692ea68ddbf43f354ef0cff3469d87d5823f02a0282c0d rsyslog5-5.8.12-5.el5_11.x86_64.rpm 4863b240e157bbf930d31af230e7ba49f89c38e6aef2ccd1bdda9ada5f1ea5a0 rsyslog5-gnutls-5.8.12-5.el5_11.x86_64.rpm ad86eb442222f4ffb02ea307cb2e5c5ea2eba924622cb0c975c6f4a6d5d22045 rsyslog5-gssapi-5.8.12-5.el5_11.x86_64.rpm e0be6a0b2cb21dc7a9a92aa52d9061e0a7c7a685b1cf2193046549c9d8426422 rsyslog5-mysql-5.8.12-5.el5_11.x86_64.rpm c268b872920776a75a738d10bc8a71976cb6de501460b740e80b67bd21288e7d rsyslog5-pgsql-5.8.12-5.el5_11.x86_64.rpm 41ce2b483017cfc030c60caa0d5e2ad72997d2882aab789f81ee4ec729f6cd91 rsyslog5-snmp-5.8.12-5.el5_11.x86_64.rpm Source: aea9eb2bdad66c7385e88b973ee5d51bc86a10ed462be58d8e32690cbfae6f99 rsyslog5-5.8.12-5.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 21 Oct 2014 17:21:12 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1669 Low CentOS 7 qemu-kvm Security Update Message-ID: <20141021172112.GA19229(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1669 Low Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1669.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fb80d3eed43c292045f789a7975233d8370f81ab44ed7533c89e9285cdaaf76b libcacard-1.5.3-60.el7_0.10.i686.rpm 8a596137622c6ed6113f60a09264fea4af9163939d481faacc0446b69d7e4ccf libcacard-1.5.3-60.el7_0.10.x86_64.rpm 3652b540146a2346ddfa29b44020b35e73cf07eb7dbc34d263b3cbb0fd6d67a4 libcacard-devel-1.5.3-60.el7_0.10.i686.rpm 62812d12eaf3446b88f9d4fc28fd030794de0a4cc374ba0280ff2166ac8638f7 libcacard-devel-1.5.3-60.el7_0.10.x86_64.rpm 2ec8eafc99d8f2ec49e16ecfb2962992f215a0def44faa91438cb42045957f17 libcacard-tools-1.5.3-60.el7_0.10.x86_64.rpm a0c730b45988fa40b5757164d3a9db73a5a1b258501d400b1110ee7d2d859be0 qemu-guest-agent-1.5.3-60.el7_0.10.x86_64.rpm fdc3370f8f691de28013d749c99e500a72db65708e867016824dde55e63597d7 qemu-img-1.5.3-60.el7_0.10.x86_64.rpm ca55fa4cf9cdf4d5d45ab30afeedc4378161c9ada913f3b8d7da189a8eca7f86 qemu-kvm-1.5.3-60.el7_0.10.x86_64.rpm 7e1f62cdac4f199e8f31751ee937ace975d025556cdb3c654ea53c02e0f387d2 qemu-kvm-common-1.5.3-60.el7_0.10.x86_64.rpm e4082072fd75bb8166d954062928ab0c16439dd491535e0c8e329da6c6b7f1c9 qemu-kvm-tools-1.5.3-60.el7_0.10.x86_64.rpm Source: 6821bb25b385c0ad5e25cf715cba8244836e8ab3b969c431f0aa2f1245d74461 qemu-kvm-1.5.3-60.el7_0.10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 21 Oct 2014 17:21:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1655 Moderate CentOS 7 libxml2 Security Update Message-ID: <20141021172129.GA19311(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1655 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1655.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fc837a4e2b3b952bb6e0ec91eec3720b02fe7415a4baaddf0bcd5ff15bf6067e libxml2-2.9.1-5.el7_0.1.i686.rpm 157e1167f06c646e4a07e442523af74c8fc99252ffa1e2eadf58278be9ae89ea libxml2-2.9.1-5.el7_0.1.x86_64.rpm b436dee56e93dd9997ee55b3c4f6fe136ac69c4c515cdb68fa9db6ee51abded9 libxml2-devel-2.9.1-5.el7_0.1.i686.rpm 78aead85ea11bb764824d4a48bdc74c32792424584fec634c6c669079fa43713 libxml2-devel-2.9.1-5.el7_0.1.x86_64.rpm 26f5e7225af4df0c5be969f3946b01db741a8ae130e10cc6684609bf656faa7e libxml2-python-2.9.1-5.el7_0.1.x86_64.rpm 6ba3f9e569d8e88f3f62c9f01de9a0c03df3dcb421f5115c99b6cbde49f4c810 libxml2-static-2.9.1-5.el7_0.1.i686.rpm 9c6d6f67c5fc34a28a60fabf6813ff9355b7f8453a82399e178e06bd85cd580b libxml2-static-2.9.1-5.el7_0.1.x86_64.rpm Source: d0c32e4869401f37357010f431e2c651bdc5189095999d7d1c5d3a57d3ad4a03 libxml2-2.9.1-5.el7_0.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 21 Oct 2014 19:49:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1676 Moderate CentOS 7 wireshark Security Update Message-ID: <20141021194927.GA34083(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1676 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1676.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fad646f49ad9452ca4c3b1ddcffa641ded2e57d3380c6f740e6a4230abb1eb37 wireshark-1.10.3-12.el7_0.i686.rpm 4fa9d699585791b216e9953927a0115038b8a492b9b29260c6d956b9db157833 wireshark-1.10.3-12.el7_0.x86_64.rpm 099df5f29f923d2c476231d88960ef5284af6e7fefdf5ea492535ba54cdf8267 wireshark-devel-1.10.3-12.el7_0.i686.rpm 86c1b4bf2d6c0fa63a094410febe3e0e19633590119cbe2679b95c94723b1aed wireshark-devel-1.10.3-12.el7_0.x86_64.rpm fc7cfeef19cbe4bdd4b190b0f3f7fd41b36e23e1f4fc8530c9458ad251578b01 wireshark-gnome-1.10.3-12.el7_0.x86_64.rpm Source: 57e3b564c93d03d425fcf708c93b3270771605cb8037c6785eaf829efcf79bbc wireshark-1.10.3-12.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 21 Oct 2014 23:32:37 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1677 Moderate CentOS 5 wireshark Security Update Message-ID: <20141021233237.GA26962(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1677 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1677.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 90c9794ecc6fbc42724223acfd5b16d2d22ac6585f8981cacfd347d58ee999f4 wireshark-1.0.15-7.el5_11.i386.rpm 123eaab95ce85af02e83aa2a49802ac7c00f698b144c9840fc52c57232741eab wireshark-gnome-1.0.15-7.el5_11.i386.rpm x86_64: 0971e5b9e2371e4aa70e7e5722a304b8b1926bf1be346e2776288da1c84e2a0f wireshark-1.0.15-7.el5_11.x86_64.rpm bc7446fc9ea394869c1df985e58305a0236eee12e567b07d59c1ea4e2d787147 wireshark-gnome-1.0.15-7.el5_11.x86_64.rpm Source: d56080e1059682ffb593c36c458a82991317ba1e8114e650df32d07cddfe9a7d wireshark-1.0.15-7.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 12 ************************************************

1 0

Conduct on the CentOS List
by Karanbir Singh 21 Oct '14

21 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The recent anti-social content on the list including threats and support of harassment needs to stop immediately. The CentOS Board will work with the list admins to enforce moderation and if needed removal and bans from the list should people continue this behaviour. This is a large, diverse, and respected community and none of us should need to tolerate any form of uncivilised behaviour, such as harassment and threats. The topic of harassment and online threats has been at the top of mind lately, and in light of the conversation we would like to make it clear that the CentOS Project is not a place for abuse or hostility. There is no excuse for this behaviour, no matter what the intention. Discouraging and banning anti-social behaviour in the CentOS Project has been part of an ongoing effort for a while, and now we feel it's time to come forward with a clear statement. As with any open community, we have disagreements on technical matters. It's part of the natural exchanges needed for a vibrant community, but we must keep the discussions civil. Have consideration and respect for other people. The power of an open source project is in the community. If the community gets broken, the project loses its fundamental reason-for-being. Code alone does not make open source, and community is made through people treating each other with respect. * Do not make personal attacks * Do not threaten people * Do not harass people * Do debate ideas on the merits of the idea alone * Do help each other keep a civil tone while remaining civil * Do treat others with respect In your communication on CentOS Project forums such as IRC, mailing lists, Web forums, or any other medium, we will not tolerate personal attacks, threats, or harassment of any individual or group. We reserve the right to moderate or ban anyone who violates our guidelines without notice or discussion. Thank you for your attention to this important matter. - -- Karanbir Singh, CentOS Project Leader on behalf of the CentOS Project Board -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iQEcBAEBAgAGBQJUNxUDAAoJEI3Oi2Mx7xbtDnsH/0UqAu2xN8M6pxkkx+oS8geX 8rFJpsHt2tYB06lVrBXrXUsUx7LzGcBe78C3ZnTUBVjG9H7kLEnKjXTDk4JObiH6 e2FMTEgBc62tiLFrCZEYIFgYrfcRSg8PciZQbr4DQ9kd/Q3TbQvzcs6yAU8xZn75 yJ1tRadRbXNZzz2dwgNMVfcRpVBTWSogivRvYtYzx1mB0EPiFzCrTQ8Cw9CqFilx DADtJFiIBuuUhfhNV3iOVIgmgSBBnoaPqUsru0PSs6UZlxKLT0R37oiE/ZTPCLCY 2GHELWMJ3R9UMvL+oQvP0dhOtgLUv+sX592aCaHAruGUGIfBCI7TO2aR0At2hYQ= =3AX4 -----END PGP SIGNATURE-----

5 4

Fwd: A CentOS list favor, please: an ethtool question
by Les Mikesell 21 Oct '14

21 Oct '14

---------- Forwarded message ---------- From: <m.roth(a)5-cent.us> Date: Tue, Oct 21, 2014 at 2:33 PM Subject: A CentOS list favor, please: an ethtool question To: Les Mikesell <lesmikesell(a)gmail.com> Hi, Les, May I ask you to forward this to the list? I know I got one email from Karanbir after he modded me so that I couldn't post to the list... but in the last week, I've tried emailing Johnny, and I also sent one to Karanbir, figuring that if he was moderating me, I'd send a post to him to moderate, and got a response from neither... and I'm suspecting that any email I send to *any* address at centos.org goes to /dev/null, and he seems to have forgotten me altogether. Anyway, I'm rsyncing directories over the net, from a 6.5 box to a 6.5 box, and it's going *very* slowly, hours for < 100G. Trying to see if there was a network issue, I tried ethtool on the older box that I'm pulling from, and the relevant lines that surprised me are these: Advertised auto-negotiation: Yes Speed: Unknown! Duplex: Unknown! (255) Port: Twisted Pair PHYAD: 1 Transceiver: internal Auto-negotiation: on Note it's a tg3 driver. mark

2 1

IP aliasing on CentOS 7
by Boris Epstein 21 Oct '14

21 Oct '14

Hello all, is there a good wirte-up on how edit script files in the /etc/sysconfig/network-scripts directory on Centos & to assign multiple IP addresses to the same NIC on boot? Thanks for any and all help. Cheers, Boris.

2 2

creating a floppy image from a linux file
by Dan Hyatt 21 Oct '14

21 Oct '14

Hi, I am still trying to get kick-start centos in my vmware5 because pxe cannot find the pxe server. I do not control the dhcp or pxe server. I have both my kickstart file and my iso image for centos6.5 on my vmware datastore, but am trying to run my kickstart file from VMware guest. Can I tell the command line to run from the datastore in VMWare? Or must I convert my kickstart file to a floppy image to run from VMware console? I have the centos image on the DVD mounted from my datastore. Now I need to convert the kickstart file to a floppy image to mount on the server from my datastore This is what google and VMWare keeps telling me but it does not make sense unless I am copying off a floppy.... What I am trying to do is turn the kickstart file into a floppy image so I can kickstart off the floppy in vmware. Create a disk image from the physical drive: cat /dev/fd0 > imagefile.img Copy image to the physical drive: cat imagefile.img > /dev/fd0 Help figuring out that silly little piece that is keeping me from building a VM guest from my kickstart file is much appreciated. Dan

5 8

Samba 4.1.6
by Bowie Bailey 21 Oct '14

21 Oct '14

I just installed a CentOS 7 server and ran into a problem with Samba and the "force user" option. Apparently, there was a fix for some "force user" issues in the 4.1.6 release. Is there any likelihood of an update from upstream? If not, is there another repo that provides a more up-to-date version of Samba? -- Bowie

6 11

Re: [CentOS] rsync question: building list taking forever
by James B. Byrne 21 Oct '14

21 Oct '14

On Mon, October 20, 2014 10:49, Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote: > > [OP: `they don't allow ssh between the datacenters` ...but... they nfs between > them...??? ME: much head scratching.] We have a Value Added Network (VAN) provider who insists on a similar thing. We were given sftp access to our transaction files but not ssh. They also will not run an rsync daemon for us. We ended up locally mounting the remote host directories with fuse-ssh (sshfs) over sftp using RSA keys to bypass the interactive logins. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 116, Issue 11
by centos-announce-request＠centos.org 21 Oct '14

21 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Continuous Release (CR) Repository updates are released for CentOS-6.6 (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 21 Oct 2014 06:28:28 -0500 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Continuous Release (CR) Repository updates are released for CentOS-6.6 Message-ID: <5446435C.6080703(a)centos.org> Content-Type: text/plain; charset="utf-8" We have released the following updates into the 6.5/cr repository: http://lists.centos.org/pipermail/centos-cr-announce/2014-October/thread.ht… The updates include everything that will be on the 6.6 ISO Sets and also everything to date that will be in 6.6 Updates. We will continue to put updates into 6.5 CR until we actually release CentOS-6.6. For information on the CR repository, see this link: http://wiki.centos.org/AdditionalResources/Repositories/CR Thanks, Johnny Hughes

1 0

rsync question: building list taking forever
by Tim Dunphy 21 Oct '14

21 Oct '14

Guys, I've setup an rsync between two directories that I've mounted locally on a jump box. Long story short, the two directories are both NFS shares from two different hosts. Our security dept won't allow us to SSH between the two data centers, directly. But the jump host can contact both. So what I've done is mount the NFS shares from one host in each data center on the jump box using sshfs. The directory I'm trying to rsync from has 111GB of data in it. I don't think I've ever setup an rsync for quite so much data before. But I started the rsync at approx. 7pm last night. And as of now the rsync is still building it's file list. [root@sshproxygw ~]# rsync -avzp /mnt/db_space/timd/www1/ /mnt/db_space/timd/www2/svn2/ building file list ... So my question to you is, is this a normal amount of time to wait for the file list to be built? Considering the amount of data involved. I have it running in a screen session I can attach to to find out what's going on. Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

10 18

Change default font size in terminal
by Yawei Guo 21 Oct '14

21 Oct '14

Hello, I want to change default font size in terminal. The size is too small for a 1920x1080 screen. Thank you very much. Yawei

3 2

Continuous Release (CR) Repository updates are released for CentOS-6.6
by Johnny Hughes 20 Oct '14

20 Oct '14

We have released the following updates into the 6.5/cr repository: http://lists.centos.org/pipermail/centos-cr-announce/2014-October/thread.ht… The updates include everything that will be on the 6.6 ISO Sets and also everything to date that will be in 6.6 Updates. We will continue to put updates into 6.5 CR until we actually release CentOS-6.6. For information on the CR repository, see this link: http://wiki.centos.org/AdditionalResources/Repositories/CR Thanks, Johnny Hughes

1 0

Amazon Marketplace AMI
by Thorsten Höger 20 Oct '14

20 Oct '14

Hi, the updated Amazon Web Service AMI (ami-4ac6653d) has a serious bug. It is not possible to resize a disk after creating a new volume with a size greater than 8GB. resize2fs does nothing. The previous AMI worked perfectly but is no longer available. This bug is a show stopper for using CentOS on AWS. Regards, Thorsten PS: It would also be great to have a CentOS 6 AMI with HVM virtualisation.

3 3

how to identify build options
by kqt4at5v＠gmail.com 20 Oct '14

20 Oct '14

If using the standard CentOS packages is there a way to print the options that were specified when the package was built? For example # rpm -qi at Name : at Relocations: (not relocatable) Version : 3.1.10 Vendor: CentOS Release : 44.el6_5.2 Build Date: Tue 07 Oct 2014 03:35:22 AM CDT Install Date: Fri 17 Oct 2014 02:38:44 PM CDT Build Host: c6b9.bsys.dev.centos.org Group : System Environment/Daemons Source RPM: at-3.1.10-44.el6_5.2.src.rpm Size : 86228 License: GPLv2+ Signature : RSA/SHA1, Tue 07 Oct 2014 07:57:22 AM CDT, Key ID 0946fca2c105b9de Packager : CentOS BuildSystem <http://bugs.centos.org> URL : http://ftp.debian.org/debian/pool/main/a/at Summary : Job spooling tools Description : At and batch read commands from standard input or from a specified file. At allows you to specify that a command will be run at a particular time. Batch will execute commands when the system load levels drop to a particular level. Both commands use user's shell. You should install the at package if you need a utility for time-oriented job control. Note: If it is a recurring job that will need to be repeated at the same time every day/week, etc. you should use crontab instead. What options were used to build this package? Richard

3 2

Re: [CentOS] CPAN dependency on CentOS 7
by Luigi Rosa 20 Oct '14

20 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reindl Harald wrote on 20/10/2014 17:52: > that may be true but you need to report that *upstream* CentOS is a package > for package and bug for bug clone > > https://bugzilla.redhat.com/enter_bug.cgi Been there, done that https://bugzilla.redhat.com/show_bug.cgi?id=1154741 Ciao, luigi - -- / +--[Luigi Rosa]-- \ There is a difference between knowing the path and walking the path. --Morpheus, Matrix -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJURTeFAAoJEO5WT/qgw4yKNLcP/At99DT64R0ilYielXqECIua tP6zZcnr4PygGOSsolHbb6Mkix1kxzC2fAFTDAz1WOFFwQa2kRfWdPaED1FCzfip WyvDNBhax5yECH0fBADigLR7aU6Z/5+AepRNM28n7f12zIHz91rsRwJ+w0zPefRA /rsGImw0KvR0VWUkv2FF5KghTvJAAziYKVT0kiHpSs2X8W03ivJYrEI1Or+odP+D YgsfYUSqfhnRliO8Xs7s8dm+7QFcMwKcDgnjF8xO2R2roQnvRzJaCEqjsYNLvxgG aeQmnfu18GtX5fSL99OeL6Qsy7pPtNWlv1MOAlY//PKyNLZBcjTs3ZdU+JtDAqNd fe7EAgG1mYrdasIiWRR8TlqCiV6bYkNSuG6A7RSLEFktUOAlaLe/MYzTUiDk6MSh 1tKnZinlozAbiO31uilf7quOzJ0Ur5NZ3YC0lyhlTObFAblfpaKBgiw6epXgVxHL GsWs1Ed2Nc9ndUGkoUJmuFWQ/ivEzOANYM8fKaGNPl4b0lh1BuvP/OO675PFxcFH 6BRwSwpgtCw0+lIwJgxSIRYdILKKklWosV4RMXHkak4Pi1c+2fDJ8lYZy1e75Swj rgpNQTW7eJouCXmrzzk0mZbt6nYzq56U+rifBDz8tx2RFrk+yCv6n+OPMs56EpPh T5FFnphYrzY7cjS1PZ1R =4XbR -----END PGP SIGNATURE-----

1 0

CPAN dependency on CentOS 7
by Luigi Rosa 20 Oct '14

20 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Una a CentOS 7 with minimal install if I install perl-CPAN the first time I execute cpan to download a mduel, the automatic configuration of CPAN fails for missing Time/HiRes The package perl-Time-HiRes should be installed as a dependency of perl-CPAN The exact error is: Would you like me to automatically choose some CPAN mirror sites for you? (This means connecting to the Internet) [yes] Trying to fetch a mirror list from the Internet Fetching with HTTP::Tiny: http://www.perl.org/CPAN/MIRRORED.BY Looking for CPAN mirrors near you (please be patient) Can't locate Time/HiRes.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/sha re/perl5 /root) at /usr/share/perl5/Net/Ping.pm line 313. Ciao, luigi - -- / +--[Luigi Rosa]-- \ Naeser's Law: You can make it foolproof, but you can't make it damnfoolproof. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJURS59AAoJEO5WT/qgw4yKFEMP/1nYHUr5SC0IUQ6kiSEsQVBB MO6YWy7DQZ5zgHCgLed2A6IjPqSy1fXq6JWkM4UmnAHEJWVyx+H0x+2onUixTDnv cy+KnRMHD5A+wytPcKgWXGUzxYhYg8lmD18eTeZEPPI2qiQqdOhOOP+9UZv1f3Ku QJRBdoThbUM5SJ338DkIOz9waedqgjBk0uxn8vzxVp8+xHDffvxFYzvt2SmXjrWc RuGeltDBDgPxiTLWZfTFhA2aIyyEilUQ2zHAICZJ71sGAASQF/8+DVE2AINfP43A VW5PGBFKySJ0US1an+RQ0gVoYb2Un8/249odLJUJZ94zdess87QcPmsF0YMdEdaB 6PSJZMOcm3XZzlt3Pld/CA8TSuvhMs5gVnmgCp95mpSKbzrr0v9Gz6ErpGmWUWc9 6hNeC8Bc9myE3+JgiA4oQOFPV+TMSG+OqYuOVPj7IuKes+XnOPxCxlM8g3qH07nD rg100obawcwMUHCqCDdw+uIRO+ai/1F27SNKbrlI+ma66lbTV7CqxDE1jTA9UP3S wK1QE0W9TvptkzsrS5PTVNPOiH/wfWAhvCHpw4w9gQXideu2m9P5SWXuAxv814Ze sEYohjginoO9AdxXnlSiwz1rZqHoODXmLAULnkG6Zx+mW05KHa0r9rZJd7/MkDI9 LvQiKCQTroQOko0sPTgV =zL/I -----END PGP SIGNATURE-----

1 0

CentOS 5.11 / Firefox 31 -- totally borked...
by Robert Heller 20 Oct '14

20 Oct '14

OK, I just updated my two CentOS 5 boxes (my laptop and by desktop) and discoved that FF 31 is totally borked -- it seems not to be possible to install either Firebug (either 2.0.4 or 1.12.8) or Firefox 2, the theme reloaded (1.0.8). These two addons are critical to me. So I have snaged the FF 24.8.0 rpms from the CentOS 5 vault and downgraded to this version and blocked further updates of FF. Where is the best place to report this problem? -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

6 10

djbdns under CentOS7: startup and socket issues
by Boris Epstein 20 Oct '14

20 Oct '14

Hello all, I am trying to get djbdns ( http://en.wikipedia.org/wiki/Djbdns ) running on CentOS 7. So far I have wirtten the djbdns.service and djbdns.socket files. The sockets (TCP and UDP 53) for some reason would not start and I don't know how to debug that; the service does start but only when I start it manually by running systemctl start djbdns So, I am a real noob when it comes to systemd, hence any advice on how to proceed will be much appreciated. Cheers, Boris.

4 7

Re: [CentOS] [CentOS-announce] CESA-2014:1652 Important CentOS 6 openssl Security Update
by David Hrbáč 20 Oct '14

20 Oct '14

Hi, This announcement has different body scheme than the rest of announcement messages. Is it a new scheme? It breaks the importing scripts... Thanks, DH Dne 16.10.2014 v 22:48 Johnny Hughes napsal(a): > CentOS Errata and Security Advisory 2014:1652 > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > ----------------------------- > i386 > ----------------------------- > > 5898ac3179dfdd904c352badd79b6f5ec702315f4bc7b8989de8f114304fbd78 openssl-1.0.1e-30.el6_5.2.i686.rpm > dcc5d47340d69f53af592a92282df89ef3bd4705ce34f4a57a93d211e93cfd7d openssl-devel-1.0.1e-30.el6_5.2.i686.rpm > dc42eb136b3cfef78d590d4ab29d36e5e5951bc9433d20d5ca633033d960a00d openssl-perl-1.0.1e-30.el6_5.2.i686.rpm > 95e67f00f7d58348e5f0df6ac74d7baecb9d5fc214d58ad257a14bec353219a3 openssl-static-1.0.1e-30.el6_5.2.i686.rpm > > ----------------------------- > X86_64 > ----------------------------- > > 5898ac3179dfdd904c352badd79b6f5ec702315f4bc7b8989de8f114304fbd78 openssl-1.0.1e-30.el6_5.2.i686.rpm > 17bfdb52afcb2ebaa16875819b9d8d2f3dc84eb061ee3e194da14e286bc76029 openssl-1.0.1e-30.el6_5.2.x86_64.rpm > dcc5d47340d69f53af592a92282df89ef3bd4705ce34f4a57a93d211e93cfd7d openssl-devel-1.0.1e-30.el6_5.2.i686.rpm > 7c390aab888c07887fc783686f42216711665738e58c2b23029748292dd0f96d openssl-devel-1.0.1e-30.el6_5.2.x86_64.rpm > dfdcf88163743d5f4fda06a69cba00b822b73ba66aa5841faf8c0e9841b91bcb openssl-perl-1.0.1e-30.el6_5.2.x86_64.rpm > 0f8cc0615d96d4d7e74b5ffc109143873510406dbb6be679d4ab94bd4f731cdb openssl-static-1.0.1e-30.el6_5.2.x86_64.rpm > > ----------------------------- > Source: > ----------------------------- > > 1a1c3ed0d8eb5775d89b726e7f19ff2d8b52b7ef27f6e36260e83ffc40328460 openssl-1.0.1e-30.el6_5.2.src.rpm > > ===================================================== > > The following upstream security issues are addressed in this update: > > https://rhn.redhat.com/errata/RHSA-2014-1652.html > > ===================================================== > > NOTE: This update is released into the CentOS-6.5 tree and has a .el6_5 dist > tag, *NOT* the .el6_6 dist tag that Red Hat used for RHEL in the link above. > > This update was built against 'CentOS-6.5 + updates' and that is where it is > intended to be used. > > The CentOS team will build and release a openssl-1.0.1e-30.el6_6.2.src.rpm as > a zero day update to CentOS-6.6 when that is released as we are currently > building CentOS-6.6 from the released Red Hat Enterprise Linux sources. > > Please also note that even after installing this update, further action is > required to mitigate the POODLE issue on CentOS-6. Please see this link for > steps to take and ways to test for both the POODLE and TLS_FALLBACK_SCSV issues. > > http://wiki.centos.org/Security/POODLE > > -- > Johnny Hughes > CentOS Project { http://www.centos.org/ } > irc: hughesjr, #centos at irc.freenode.net > > _______________________________________________ > CentOS-announce mailing list > CentOS-announce(a)centos.org > http://lists.centos.org/mailman/listinfo/centos-announce

2 2

Your experience with os hardening tool - Bastille?
by Rafał Radecki 19 Oct '14

19 Oct '14

Hi All:) I would like to start using a tool for automating of os hardening. I found some informations about Bastille. One things which attracted my attention is that in http://bastille-linux.sourceforge.net/news_updates.htm the last post is from January 29th, 2012 :D Is the tool ready to use at the moment with CentOS 6/7? Are there any alternatives which you can recommend? Thanks for all info :) BR, Rafal.

3 3

CentOS-6 updates
by Johnny Hughes 19 Oct '14

19 Oct '14

We are currently building and testing our CentOS-6.6 release. It normally takes about 2-4 weeks for us to get a full point release out. We can not release updates that are based on 6.6 until we get 6.6 out. All current updates will be released on the same day as the release. We have a CR repo ( http://wiki.centos.org/AdditionalResources/Repositories/CR ) and we are likely going to release the CR repo around 7-10 days after the release of RHEL-6.6. All updates will also be released into there when it is released. Please remember, there are around 350 Source RPMs that need to be built and tested for 6.6 and it normally takes 7-10 days for CR and 14-28 days for the full release. We are going as fast as we can, but point releases take time. Thanks, Johnny Hughes

5 5

KVM does not start anymore
by Bernd Bartmann 19 Oct '14

19 Oct '14

Hi, I had a C7 virtual machine running on a C7 host for several weeks without any problems. Today I rebootet the host and now the virtual machine does not start anymore. I can see grub coming up and starting the kernel. After some seconds the last thing that is visble on the VM console is "ss perfctr msr (MSR c1 is0)" then the screen goes blank with just a blinking cursor in the upper left corner. After that nothing happens anymore. The CPU load on the host is nearly 0%. Any ideas what could be the reason and how to solve this? Best regards, Bernd

1 1

Centos 7 tmpwatch
by Frank Cox 18 Oct '14

18 Oct '14

I have noticed that tmpwatch isn't automatically installed with Centos 7, or at least it wasn't when I set up this computer. I further noticed that the Centos 7 tmpwatch rpm no longer includes /etc/cron.daily/tmpwatch I suspect that at least part of the reason for this is because the /tmp directory is now mounted as a tmpfs by default, so it's automatically cleared when the machine is rebooted. However, this does nothing to maintain /var/tmp and /var/cache Installing the Centos 7 tmpwatch rpm and copying the /etc/cron.daily/tmpwatch file from a Centos 6 installation onto a Centos 7 machine might not be particularly wise because the excluded directories listed in the Centos 6 tmpwatch script don't include such things as the systemd-private* directories that should probably not be made to disappear on a Centos 7 installation. This leads to two questions: Is tmpwatch even required on Centos 7 anymore, or has it been superseded somehow? And if it is required (or a good idea), is there an updated script to put into /etc/cron.daily that accounts for directories and files that should not be molested by tmpwatch? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

2 2

Re: [CentOS] curl: (35) Cannot communicate securely with peer:
by Aaron Siegel 18 Oct '14

18 Oct '14

Reindl Thank you for your post. I am sorry for the second post, my transition to evolution is ... I like to have a better understanding of this problem before I open a bug report. Looking at the report openssl 1.01h has the cipher which support www.kraxel.org certificate specifically the OpenSSL 1.0.1h TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) FS It appears my cipher, openssl 1.01e, accepts the certificate used by kraxel, the output of sslscan: Accepted TLS12 256 ECDHE-RSA-AES256-GCM-SHA384 So why does this not work? Why would this be a bug if I just need to upgrade openssl to 1.01h from 1.01e? Thank for your assistance, Aaron On Sat, 2014-10-18 at 18:25 +0200, Reindl Harald wrote: > Am 18.10.2014 um 18:15 schrieb Aaron Siegel: > > I am stumped. I am trying to us the kraxel qemu repository, it appears > > the repository moved to secure server since then I have not been able to > > configure this properly. https://www.kraxel.org/repos/jenkins/ > > I receive the following error when I try to use the repository > > curl: (35) Cannot communicate securely with peer: no common encryption > > algorithm(s) > > "no common encryption algorithm" should be pretty clear: > > a) the server only offers weak ciphers you no longer support > b) the server only offers modern ciphers you don't support > > in fact b) is the case here and so you should open a bugreport against > NSS/Curl and not dig around in manually compile things and ruin your setup > > https://www.ssllabs.com/ssltest/analyze.html?d=kraxel.org > that server only accepts TLS1.2 > > [harry@srv-rhsoft:~]$ sslscan www.kraxel.org:443 | grep Accept > Accepted TLS12 256 bits ECDHE-RSA-AES256-GCM-SHA384 > Accepted TLS12 256 bits ECDHE-RSA-AES256-SHA384 > Accepted TLS12 256 bits DHE-RSA-AES256-GCM-SHA384 > Accepted TLS12 256 bits DHE-RSA-AES256-SHA256 > Accepted TLS12 256 bits AES256-GCM-SHA384 > Accepted TLS12 256 bits AES256-SHA256 > Accepted TLS12 128 bits ECDHE-RSA-AES128-GCM-SHA256 > Accepted TLS12 128 bits ECDHE-RSA-AES128-SHA256 > Accepted TLS12 128 bits DHE-RSA-AES128-GCM-SHA256 > Accepted TLS12 128 bits DHE-RSA-AES128-SHA256 > Accepted TLS12 128 bits AES128-GCM-SHA256 > Accepted TLS12 128 bits AES128-SHA256 > > >

1 0

curl: (35) Cannot communicate securely with peer:
by Aaron Siegel 18 Oct '14

18 Oct '14

Hello I am stumped. I am trying to us the kraxel qemu repository, it appears the repository moved to secure server since then I have not been able to configure this properly. https://www.kraxel.org/repos/jenkins/ I receive the following error when I try to use the repository curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s). I have discovered this problem on my fedora 20 computer, the fedora mailing list will not accept my email, I am experiencing this problem with curl on both my Centos and fedora systems. I receive the same error with centos 7 minimal installation and fedora 20. What am I doing wrong, I have recently switch to the Fedora platform, I have not read all the manuals but trying. I have imported the gpg keys that Kraxel has posted on his blog using rpm --import. I can only download file through my web browser. I was going to clone his git repository and set up a local repository, bit git report the same error. Which leads me to believe the problem is with my certificates. I have even tried the firefox-db2pem.sh, I am not sure it did anything. Does curl need to be recompiled with nss support? Is there a package I need to compile? nss 3.17.2 is installed, non of the man page work. Looking deeper into the nss, # certutil -L certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format. I think there is something wrong with my nss certificates, but I have run out of time. Any suggestions. This is on a brand new installation Fedora 20 and Centos 7, I have not had time to break anything. The openssl command connect with the server, is $ openssl s_client -connect www.kraxel.org:443 The curl output is posted below in fedora system the output for the centos is the same with the exception of the curl and nss versions: $ curl -v https://www.kraxel.org/repos/jenkins/repodata/repomd.xml * Adding handle: conn: 0x6bea60 * Adding handle: send: 0 * Adding handle: recv: 0 * Curl_addHandleToPipeline: length: 1 * - Conn 0 (0x6bea60) send_pipe: 1, recv_pipe: 0 * About to connect() to www.kraxel.org port 443 (#0) * Trying 217.197.83.6... * Connected to www.kraxel.org (217.197.83.6) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) * Cannot communicate securely with peer: no common encryption algorithm(s). * Error in TLS handshake, trying SSLv3... > GET /repos/jenkins/repodata/repomd.xml HTTP/1.1 > User-Agent: curl/7.32.0 > Host: www.kraxel.org > Accept: */* > * Connection died, retrying a fresh connect * Closing connection 0 * Issue another request to this URL: 'https://www.kraxel.org/repos/jenkins/repodata/repomd.xml' * About to connect() to www.kraxel.org port 443 (#1) * Trying 217.197.83.6... * Adding handle: conn: 0x6bea60 * Adding handle: send: 0 * Adding handle: recv: 0 * Curl_addHandleToPipeline: length: 1 * - Conn 1 (0x6bea60) send_pipe: 1, recv_pipe: 0 * Connected to www.kraxel.org (217.197.83.6) port 443 (#1) * TLS disabled due to previous handshake failure * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) * Cannot communicate securely with peer: no common encryption algorithm(s). * Closing connection 1 curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s).

1 0

curl: (35) Cannot communicate securely with peer:
by Aaron Siegel 18 Oct '14

18 Oct '14

Hello I am stumped. I am trying to us the kraxel qemu repository, it appears the repository moved to secure server since then I have not been able to configure this properly. https://www.kraxel.org/repos/jenkins/ I receive the following error when I try to use the repository curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s). I have discovered this problem on my fedora 20 computer, the fedora mailing list will not accept my email, I am experiencing this problem with curl on both my Centos and fedora systems. I receive the same error with centos 7 minimal installation and fedora 20. What am I doing wrong, I have recently switch to the Fedora platform, I have not read all the manuals but trying. I have imported the gpg keys that Kraxel has posted on his blog using rpm --import. I can only download file through my web browser. I was going to clone his git repository and set up a local repository, bit git report the same error. Which leads me to believe the problem is with my certificates. I have even tried the firefox-db2pem.sh, I am not sure it did anything. Does curl need to be recompiled with nss support? Is there a package I need to compile? nss 3.17.2 is installed, non of the man page work. Looking deeper into the nss, # certutil -L certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format. I think there is something wrong with my nss certificates, but I have run out of time. Any suggestions. This is on a brand new installation Fedora 20 and Centos 7, I have not had time to break anything. The openssl command connect with the server, is $ openssl s_client -connect www.kraxel.org:443 The curl output is posted below in fedora system the output for the centos is the same with the exception of the curl and nss versions: $ curl -v https://www.kraxel.org/repos/jenkins/repodata/repomd.xml * Adding handle: conn: 0x6bea60 * Adding handle: send: 0 * Adding handle: recv: 0 * Curl_addHandleToPipeline: length: 1 * - Conn 0 (0x6bea60) send_pipe: 1, recv_pipe: 0 * About to connect() to www.kraxel.org port 443 (#0) * Trying 217.197.83.6... * Connected to www.kraxel.org (217.197.83.6) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) * Cannot communicate securely with peer: no common encryption algorithm(s). * Error in TLS handshake, trying SSLv3... > GET /repos/jenkins/repodata/repomd.xml HTTP/1.1 > User-Agent: curl/7.32.0 > Host: www.kraxel.org > Accept: */* > * Connection died, retrying a fresh connect * Closing connection 0 * Issue another request to this URL: 'https://www.kraxel.org/repos/jenkins/repodata/repomd.xml' * About to connect() to www.kraxel.org port 443 (#1) * Trying 217.197.83.6... * Adding handle: conn: 0x6bea60 * Adding handle: send: 0 * Adding handle: recv: 0 * Curl_addHandleToPipeline: length: 1 * - Conn 1 (0x6bea60) send_pipe: 1, recv_pipe: 0 * Connected to www.kraxel.org (217.197.83.6) port 443 (#1) * TLS disabled due to previous handshake failure * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP) * Cannot communicate securely with peer: no common encryption algorithm(s). * Closing connection 1 curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s).

1 0

POODLE and TLSv1
by James B. Byrne 17 Oct '14

17 Oct '14

I read this on the RHN commentary respecting cve-2014-3566: https://securityblog.redhat.com/2014/10/15/poodle-a-ssl3-vulnerability-cve-…: . . . The first aspect of POODLE, the SSL 3.0 protocol vulnerability, has already been fixed through iterative protocol improvements, leading to the current TLS version, 1.2. It is simply not possible to address this in the context of the SSL 3.0 protocol, a protocol upgrade to one of the successors is needed. Note that TLS versions before 1.1 had similar padding-related vulnerabilities, which is why we recommend to switch to TLS 1.1, at least. (SSL and TLS are still quite similar as protocols, the name change has non-technical reasons.) . . . If run nmap to view the ciphers on a host running apache-2.2.15 I see this: # nmap --script ssl-enum-ciphers -p 443 inet09 Starting Nmap 6.01 ( http://nmap.org ) at 2014-10-17 12:48 EDT Nmap scan report for for x.y.z.a Host is up (0.00034s latency). rDNS record for x.y.z.a PORT STATE SERVICE 443/tcp open https | ssl-enum-ciphers: | TLSv1.0 | Ciphers (5) | TLS_RSA_WITH_AES_128_CBC_SHA - strong | TLS_RSA_WITH_AES_256_CBC_SHA - unknown strength | TLS_RSA_WITH_CAMELLIA_128_CBC_SHA - unknown strength | TLS_RSA_WITH_CAMELLIA_256_CBC_SHA - unknown strength | TLS_RSA_WITH_RC4_128_SHA - strong | Compressors (1) | NULL | TLSv1.1 | Ciphers (5) | TLS_RSA_WITH_AES_128_CBC_SHA - strong | TLS_RSA_WITH_AES_256_CBC_SHA - unknown strength | TLS_RSA_WITH_CAMELLIA_128_CBC_SHA - unknown strength | TLS_RSA_WITH_CAMELLIA_256_CBC_SHA - unknown strength | TLS_RSA_WITH_RC4_128_SHA - strong | Compressors (1) | NULL | TLSv1.2 | Ciphers (9) | TLS_RSA_WITH_AES_128_CBC_SHA - strong | TLS_RSA_WITH_AES_128_CBC_SHA256 - strong | TLS_RSA_WITH_AES_128_GCM_SHA256 - strong | TLS_RSA_WITH_AES_256_CBC_SHA - unknown strength | TLS_RSA_WITH_AES_256_CBC_SHA256 - unknown strength | TLS_RSA_WITH_AES_256_GCM_SHA384 - unknown strength | TLS_RSA_WITH_CAMELLIA_128_CBC_SHA - unknown strength | TLS_RSA_WITH_CAMELLIA_256_CBC_SHA - unknown strength | TLS_RSA_WITH_RC4_128_SHA - strong | Compressors (1) | NULL |_ Least strength = unknown strength . . . If read the advisory aright then TLSv1.0 suffers from exactly the same flaw as SSLv3. So, how do I configure apache-2.2.15 to deny TLSv1.0 and keep service TLSv1.1+? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

What happens to in-use files when I restart samba?
by Patrick Bervoets 17 Oct '14

17 Oct '14

One of the services that has to be restarted after the openssl update is samba. And now I wonder if I can safely restart samba when there are possible files in-use (ie writes could be happening). I can't find an answer on Google (could be me asking the wrong questions) Thanks for any pointers Patrick

2 1

CentOS-announce Digest, Vol 116, Issue 10
by centos-announce-request＠centos.org 17 Oct '14

17 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1653 Moderate CentOS 5 openssl Security Update (Johnny Hughes) 2. CEEA-2014:1649 CentOS 7 kpatch Enhancement Update (Johnny Hughes) 3. CESA-2014:1652 Important CentOS 7 openssl Security Update (Johnny Hughes) 4. CESA-2014:1653 Moderate CentOS 5 openssl Security Update (Johnny Hughes) 5. CESA-2014:1652 Important CentOS 6 openssl Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 16 Oct 2014 15:21:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1653 Moderate CentOS 5 openssl Security Update Message-ID: <20141016152139.GA19436(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1653 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1653.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0c3787137a7d1a0402612833b173693910eb27f79e0c4f8cedf6185b4f7141f9 openssl-0.9.8e-31.el5_11.i386.rpm 5ef64e16dd1349a254a96e91cfdfdd6215fb9daa846360d2efff515bbb6a56b8 openssl-devel-0.9.8e-31.el5_11.i386.rpm b98e5df6d59eddee85d544ca35bf0b7ca469a4c7032138465189c4c7bc27e5e6 openssl-perl-0.9.8e-31.el5_11.i386.rpm x86_64: 85ee93123052e86fd4204694e3ac52fad6797b3f7009d8bce8e1f908bfed5352 openssl-0.9.8e-31.el5_11.x86_64.rpm 5ef64e16dd1349a254a96e91cfdfdd6215fb9daa846360d2efff515bbb6a56b8 openssl-devel-0.9.8e-31.el5_11.i386.rpm 11362d4d6755f5e33609a8adf6fbd0002f1343e72cd5e06ddbf2c8e99cf0d514 openssl-devel-0.9.8e-31.el5_11.x86_64.rpm 4aa6b35c036489a83a193ceb26fea4d1b5da93e7fddc08245fe59ffde0d7f509 openssl-perl-0.9.8e-31.el5_11.x86_64.rpm Source: 1741388be54beb7176f7b5d90a3ddd1be99e1fcd5296725f4999c446a30c35c5 openssl-0.9.8e-31.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 16 Oct 2014 16:22:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2014:1649 CentOS 7 kpatch Enhancement Update Message-ID: <20141016162222.GA58256(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2014:1649 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1649.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 51d8cfeb1a49efd3d778fcbf00537076b2d68f6ebcd0098fa174cd885c29dc6a kpatch-0.1.10-3.el7_0.noarch.rpm Source: 4d7cb8146fc0433167cd8e18f439d3b3cf7748649ce21b509b501fd46cc45c58 kpatch-0.1.10-3.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 16 Oct 2014 16:22:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1652 Important CentOS 7 openssl Security Update Message-ID: <20141016162242.GA58353(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1652 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1652.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 982ba4376041d2d99d4b84dc05fbeac6b925777aa34d631aceeedb598bb98413 openssl-1.0.1e-34.el7_0.6.x86_64.rpm 426ba8dc7ac74f8b71f7965ec2e6e6b398ab466dc892394e8d1d5bd80ca4a4e6 openssl-devel-1.0.1e-34.el7_0.6.i686.rpm 7fdf24148ed86f0abb2618d92741d5c8f0769de6136b4ed9df2a60b8c795abe3 openssl-devel-1.0.1e-34.el7_0.6.x86_64.rpm ebc0fc79108a67efd64da36669c90865b4a75a38b4c07a5316078edd98b65da9 openssl-libs-1.0.1e-34.el7_0.6.i686.rpm 5d0607c487922602ae315f62d9d3c0eb8ca76a65c288e6c8fc61f688dad59593 openssl-libs-1.0.1e-34.el7_0.6.x86_64.rpm 4b092081206a1140a5d2901c2f5513c8155ec2b57a05cafdd6c9011ccdde78f5 openssl-perl-1.0.1e-34.el7_0.6.x86_64.rpm d664f61543bb84773467300c726d870700584f5af616df7a9f29922822773dd8 openssl-static-1.0.1e-34.el7_0.6.i686.rpm c57075f8c198ec81db1936eb2dea8ff210de317f76047ffa601eefd8230d3bae openssl-static-1.0.1e-34.el7_0.6.x86_64.rpm Source: 6638e94c18b6961748e7986823b7115d852b25883ccff03ec89a16234cbca517 openssl-1.0.1e-34.el7_0.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 16 Oct 2014 17:53:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1653 Moderate CentOS 5 openssl Security Update Message-ID: <20141016175319.GA26372(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1653 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1653.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0f38fea6d167a87276c20f5a4d56c2f41faf7fc08d9c76e28329ecadbe0de51f openssl-0.9.8e-31.el5_11.i386.rpm c9660117d38961e5388d2fd72b0a68816b2047dc828a7438b0f6a4c74da4f27b openssl-0.9.8e-31.el5_11.i686.rpm 6244227177fb88cf9db43d1ffe086014c5786f8764c1d161d7ff5c0e4b4bcb78 openssl-devel-0.9.8e-31.el5_11.i386.rpm 33e546cd8897b47e2ddf836f07ad103a2ebb2f4282cd32c7b730d39ab462b67b openssl-perl-0.9.8e-31.el5_11.i386.rpm x86_64: c9660117d38961e5388d2fd72b0a68816b2047dc828a7438b0f6a4c74da4f27b openssl-0.9.8e-31.el5_11.i686.rpm 802ed9a049e7ae8c417c2bb108348cc9bd132698e805aa68795862276a320493 openssl-0.9.8e-31.el5_11.x86_64.rpm 6244227177fb88cf9db43d1ffe086014c5786f8764c1d161d7ff5c0e4b4bcb78 openssl-devel-0.9.8e-31.el5_11.i386.rpm 70cc0ab04b906816a2b8db05603c96fb709cb45473b116c73da1e5569295672b openssl-devel-0.9.8e-31.el5_11.x86_64.rpm cd7303f6689aac1013530cc766a70b6fdae56dc3b87960ecdec567ed68bfb168 openssl-perl-0.9.8e-31.el5_11.x86_64.rpm Source: 2d15a9cccc5453a329e53986061386de39e6e512af147b84354c3473b39a957b openssl-0.9.8e-31.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 16 Oct 2014 20:48:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1652 Important CentOS 6 openssl Security Update Message-ID: <20141016204809.GA19739(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1652 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) ----------------------------- i386 ----------------------------- 5898ac3179dfdd904c352badd79b6f5ec702315f4bc7b8989de8f114304fbd78 openssl-1.0.1e-30.el6_5.2.i686.rpm dcc5d47340d69f53af592a92282df89ef3bd4705ce34f4a57a93d211e93cfd7d openssl-devel-1.0.1e-30.el6_5.2.i686.rpm dc42eb136b3cfef78d590d4ab29d36e5e5951bc9433d20d5ca633033d960a00d openssl-perl-1.0.1e-30.el6_5.2.i686.rpm 95e67f00f7d58348e5f0df6ac74d7baecb9d5fc214d58ad257a14bec353219a3 openssl-static-1.0.1e-30.el6_5.2.i686.rpm ----------------------------- X86_64 ----------------------------- 5898ac3179dfdd904c352badd79b6f5ec702315f4bc7b8989de8f114304fbd78 openssl-1.0.1e-30.el6_5.2.i686.rpm 17bfdb52afcb2ebaa16875819b9d8d2f3dc84eb061ee3e194da14e286bc76029 openssl-1.0.1e-30.el6_5.2.x86_64.rpm dcc5d47340d69f53af592a92282df89ef3bd4705ce34f4a57a93d211e93cfd7d openssl-devel-1.0.1e-30.el6_5.2.i686.rpm 7c390aab888c07887fc783686f42216711665738e58c2b23029748292dd0f96d openssl-devel-1.0.1e-30.el6_5.2.x86_64.rpm dfdcf88163743d5f4fda06a69cba00b822b73ba66aa5841faf8c0e9841b91bcb openssl-perl-1.0.1e-30.el6_5.2.x86_64.rpm 0f8cc0615d96d4d7e74b5ffc109143873510406dbb6be679d4ab94bd4f731cdb openssl-static-1.0.1e-30.el6_5.2.x86_64.rpm ----------------------------- Source: ----------------------------- 1a1c3ed0d8eb5775d89b726e7f19ff2d8b52b7ef27f6e36260e83ffc40328460 openssl-1.0.1e-30.el6_5.2.src.rpm ===================================================== The following upstream security issues are addressed in this update: https://rhn.redhat.com/errata/RHSA-2014-1652.html ===================================================== NOTE: This update is released into the CentOS-6.5 tree and has a .el6_5 dist tag, *NOT* the .el6_6 dist tag that Red Hat used for RHEL in the link above. This update was built against 'CentOS-6.5 + updates' and that is where it is intended to be used. The CentOS team will build and release a openssl-1.0.1e-30.el6_6.2.src.rpm as a zero day update to CentOS-6.6 when that is released as we are currently building CentOS-6.6 from the released Red Hat Enterprise Linux sources. Please also note that even after installing this update, further action is required to mitigate the POODLE issue on CentOS-6. Please see this link for steps to take and ways to test for both the POODLE and TLS_FALLBACK_SCSV issues. http://wiki.centos.org/Security/POODLE -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 10 ************************************************

1 0

POODLE on CentOS
by Johnny Hughes 17 Oct '14

17 Oct '14

The following updates address POODLE on CentOS: CentOS-5: http://lists.centos.org/pipermail/centos-announce/2014-October/020696.html CentOS-6.5: http://lists.centos.org/pipermail/centos-announce/2014-October/020697.html CentOS-7: http://lists.centos.org/pipermail/centos-announce/2014-October/020695.html Please note that the CentOS-6.5 updates are built from: openssl-1.0.1e-30.el6_5.2.src.rpm This is the version that Red Hat released for RHEL 6.6 as openssl-1.0.1e-30.el6_6.2.src.rpm. Notice that the dist tag is different for our release. The reason is that we are currently working on CentOS-6.6 and it will not be released for several more days. Rather than wait on the POODLE issue, the CentOS team decided to build a version of this update for 6.5: (the current release, built from openssl-1.0.1e-30.el6_5.2.src.rpm) as well a version based on openssl-1.0.1e-30.el6_6.2.src.rpm as a zeroday update for CentOS-6.6 when it is released. You must also take action to disable SSLv3 as well as installing these update to mitigate POODLE on CentOS-5, CentOS-6 and/or CentOS-7, please see this link for details: http://wiki.centos.org/Security/POODLE Thanks, Johnny Hughes

2 1

needs-restarting: one server reports nothing te restart (after updating openssl) C6.5
by Patrick Bervoets 17 Oct '14

17 Oct '14

Hi, After updating openssl on most of my C6.5-servers needs-restarting reports at least sshd, ntpd and sendmail. But on 1 server needs-restarting reports nothing. And yes, sshd, ntpd and sendmail are running. All yum-utils are latest yum-utils-1.1.30-17.el6_5.noarch. openssh-clients-5.3p1-94.el6.x86_64 ntp-4.2.6p5-1.el6.centos.x86_64 sendmail-8.14.4-8.el6.x86_64 At least ssh and ntp are straight out of distro and all my sendmails have the same configuration. How reliable is needs-restarting? Or how can this be explained? Thanks Patrick

1 0

POODLE on CentOS
by James B. Byrne 17 Oct '14

17 Oct '14

According to the centos wiki: Validating Changes You can use Qualys SSL Labs to verify that your web server is no longer vulnerable to POODLE or TLS_FALLBACK_SCSV once all action is complete. You might also want to only use TLSv1.2 for httpd on CentOS-6.5 (or higher) and CentOS-7, while using TLSv1 on CentOS-5. However, on my up-to-datestock CentOS-6.5 the httpd version is 2.2.15 and attems to use SSLProtocols greater than v1 yield this error: Syntax error on line 101 of /etc/httpd/conf.d/ssl.conf: SSLProtocol: Illegal protocol 'TLSv1.1' I presume that the wiki is in error but I would like confirmation of that or instructions on how to enable TLSv1.1 and 1.2 on CentOS-6.5. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Filesystem writes unexpectedly slow (CentOS 6.4)
by Joakim Ziegler 16 Oct '14

16 Oct '14

I have a rather large box (2x8-core Xeon, 96GB RAM) where I have a couple of disk arrays connected on an Areca controller. I just added a new external array, 8 3TB drives in RAID5, and the testing I'm doing right now is on this array, but this seems to be a problem on this machine in general, on all file systems (even, possibly, NFS, but I'm not sure about that one yet). So, if I use iozone -a to test write speeds on the raw device, I get results in the 500-800MB/sec range, depending on write sizes, which is about what I'd expect. However, when I have an ext4 filesystem on this device, mounted with noatime and data=writeback, (the filesystem is completely empty) and I test with dd, the results are less encouraging: dd bs=1M if=/dev/zero of=/Volumes/data_10-2/test.bin count=40000 40000+0 records in 40000+0 records out 41943040000 bytes (42 GB) copied, 292.288 s, 143 MB/s Now, I'm not expecting to get the raw device speeds, but this seems at least to be 2-3 times slower than what I'd expect. Using conv=fsync oflag=direct makes it utterly pathetic: dd bs=1M if=/dev/zero of=/Volumes/data_10-2/test.bin oflag=direct conv=fsync count=5000 5000+0 records in 5000+0 records out 5242880000 bytes (5.2 GB) copied, 178.791 s, 29.3 MB/s Now, I'm sure there can be many reasons for this, but I wonder where I should start looking to debug this. -- Joakim Ziegler - Supervisor de postproducción - Terminal joakim(a)terminalmx.com - 044 55 2971 8514 - 5264 0864

4 6

CentOS-announce Digest, Vol 116, Issue 9
by centos-announce-request＠centos.org 16 Oct '14

16 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1633 Important CentOS 5 java-1.7.0-openjdk Security Update (Johnny Hughes) 2. CESA-2014:1634 Important CentOS 5 java-1.6.0-openjdk Security Update (Johnny Hughes) 3. CEBA-2014:1639 CentOS 5 net-snmp BugFix Update (Johnny Hughes) 4. CESA-2014:1635 Critical CentOS 5 firefox Security Update (Johnny Hughes) 5. CEBA-2014:1642 CentOS 5 rsync BugFix Update (Johnny Hughes) 6. CESA-2014:1635 Critical CentOS 7 firefox Security Update (Johnny Hughes) 7. CESA-2014:1634 Important CentOS 7 java-1.6.0-openjdk Security Update (Johnny Hughes) 8. CESA-2014:1620 Important CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) 9. CEBA-2014:1644 CentOS 7 NetworkManager BugFix Update (Johnny Hughes) 10. CESA-2014:1647 Important CentOS 5 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Oct 2014 11:42:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1633 Important CentOS 5 java-1.7.0-openjdk Security Update Message-ID: <20141015114217.GA32555(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1633 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1633.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cda53101232eb6cd5602ef8753a3e211a2009ea72e6a428d6cd5a0ac53ec4ae9 java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el5_11.i386.rpm 1f3b95aeb134a6e4bb5a4c21fab7dd29bb39045b49ec17805d3cc92f94d5e2ac java-1.7.0-openjdk-demo-1.7.0.71-2.5.3.1.el5_11.i386.rpm c36d94ab305e34ee6fbf0426b38ddfc311961469840b0e285d15c079da0f2452 java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.1.el5_11.i386.rpm 450a1b7c215204619f677b0b8f1ec34f69bee537fced59bd46b3d8b112635479 java-1.7.0-openjdk-javadoc-1.7.0.71-2.5.3.1.el5_11.i386.rpm ff09dcdba9b572eda5bd338bf5b28aed10e8c2fc558597262da814e236813ff1 java-1.7.0-openjdk-src-1.7.0.71-2.5.3.1.el5_11.i386.rpm x86_64: 6052c5e61bbec143e623c9a91c2cce72f9f7f3aadbf924fc29b4555de0992501 java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el5_11.x86_64.rpm 04537efd65f66d22657111f675d0da2597a8690a7d648a2b5e71a04d21646d79 java-1.7.0-openjdk-demo-1.7.0.71-2.5.3.1.el5_11.x86_64.rpm 52081c3a681a0bbe48c3eff1f0e38e9b40fb13ac1f4bc49209fc4e8c58faffbc java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.1.el5_11.x86_64.rpm d60ec241efd0a10052570ca64736c54d754a79f4470ffb4e6a6aa6477d545bf5 java-1.7.0-openjdk-javadoc-1.7.0.71-2.5.3.1.el5_11.x86_64.rpm 9297219ee7607057e537e1c7742f1821b61c15b8b6ec62af79cb741984eb0ab9 java-1.7.0-openjdk-src-1.7.0.71-2.5.3.1.el5_11.x86_64.rpm Source: ed1eb38a7f79e0943f24bc846766a3186ec0bb1d38e17cb5ce7bef094ea9fc62 java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 15 Oct 2014 11:48:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1634 Important CentOS 5 java-1.6.0-openjdk Security Update Message-ID: <20141015114847.GA32685(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1634 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1634.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 661ee4730f4b847a6759206f27d39ea88e796f5f75326a8e8b6a50c8534d0c50 java-1.6.0-openjdk-1.6.0.33-1.13.5.0.el5_11.i386.rpm 2e0b2410b3fb71b755e5425d8fdac9ce8cc32a16e9d5fdad7fe7de1b6fe69684 java-1.6.0-openjdk-demo-1.6.0.33-1.13.5.0.el5_11.i386.rpm 8cd100f0e593436a38106a1eb418d4015f7efda3ce22cd47bd2ff31c6dcff9b9 java-1.6.0-openjdk-devel-1.6.0.33-1.13.5.0.el5_11.i386.rpm c28a3885d6f74565bc890487d860e2ca144d9ab3480b514c49262ed5e597f54a java-1.6.0-openjdk-javadoc-1.6.0.33-1.13.5.0.el5_11.i386.rpm a631d1939042978f2aa4cf19899e35b6ff09c4decc439d471270871ef9105d1b java-1.6.0-openjdk-src-1.6.0.33-1.13.5.0.el5_11.i386.rpm x86_64: 08570abc3fa70ee0eb250bde4c3a7679b9f00acbf968c63d2308e30cb5713a83 java-1.6.0-openjdk-1.6.0.33-1.13.5.0.el5_11.x86_64.rpm af80d8b7b6e438c5a7bafab1f848c453bad845b01afbf10a83261b2707847342 java-1.6.0-openjdk-demo-1.6.0.33-1.13.5.0.el5_11.x86_64.rpm e53c299c6b906b6e126d599a88cdab2d9fd8e6209e1b5ab955c8aef42d4be1d1 java-1.6.0-openjdk-devel-1.6.0.33-1.13.5.0.el5_11.x86_64.rpm 2b0ff42033c13fe5b819463e68ee2818a5caa1ae7f73e9a15f8414bdca458980 java-1.6.0-openjdk-javadoc-1.6.0.33-1.13.5.0.el5_11.x86_64.rpm 8fb298b923222215736751045c40c818c96e25da8bd1c2db6755e1e725a9abf5 java-1.6.0-openjdk-src-1.6.0.33-1.13.5.0.el5_11.x86_64.rpm Source: ed6c6e06e2aebf5e17428ea9a88a6e64fae6c1dc92cc464daad06cca96e90c9f java-1.6.0-openjdk-1.6.0.33-1.13.5.0.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 15 Oct 2014 11:52:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1639 CentOS 5 net-snmp BugFix Update Message-ID: <20141015115220.GA349(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1639 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1639.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b70149570ae2995abb99608eed92879d7a858eb2cfca30bd1df788fac005143d net-snmp-5.3.2.2-25.el5_11.i386.rpm a309f1be7154379823dbb4dcad793a426860d57a9063a9071c6c4fc25d86f8da net-snmp-devel-5.3.2.2-25.el5_11.i386.rpm 16daccea483c63520a2665dd6b8f5b6b9e5ca7a3d990109b8389fd8a7f17b5b4 net-snmp-libs-5.3.2.2-25.el5_11.i386.rpm 011f4a8144dac538d55631f98c1a4db05f9316dc5c1bc63dbd3affc81b07e655 net-snmp-perl-5.3.2.2-25.el5_11.i386.rpm 557ebacc5f44df2073603b637603c92ff8f6576d2fa0352a644aa2f785169e2d net-snmp-utils-5.3.2.2-25.el5_11.i386.rpm x86_64: b18f5a065751910d91b014c2b57e8e4a1156eb19cf008a938640ba7f7be00b7e net-snmp-5.3.2.2-25.el5_11.x86_64.rpm a309f1be7154379823dbb4dcad793a426860d57a9063a9071c6c4fc25d86f8da net-snmp-devel-5.3.2.2-25.el5_11.i386.rpm 61850313ddb00551779bdda13504f64c1c976d19587c9a4dfb579b041d1600cf net-snmp-devel-5.3.2.2-25.el5_11.x86_64.rpm 16daccea483c63520a2665dd6b8f5b6b9e5ca7a3d990109b8389fd8a7f17b5b4 net-snmp-libs-5.3.2.2-25.el5_11.i386.rpm 96c97bea6d12840f8c5634d6310c1271778c521194d7f1341f78072f8c0a739c net-snmp-libs-5.3.2.2-25.el5_11.x86_64.rpm 075c93c0d56e59b7ed95cb8891b20517a6f0b1e35fed6ff59189345db6e31702 net-snmp-perl-5.3.2.2-25.el5_11.x86_64.rpm d82127347b7a456a59e73b896c11e557a04f55c9132ab67921e5168e65a7f902 net-snmp-utils-5.3.2.2-25.el5_11.x86_64.rpm Source: 9fa4c80c2a48f0197074d61efb65fa96a19528029ce279cf6a675a99e92a4ad7 net-snmp-5.3.2.2-25.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 15 Oct 2014 12:07:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1635 Critical CentOS 5 firefox Security Update Message-ID: <20141015120715.GA1850(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1635 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1635.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9df05ee668d515f3ece37ee2e4cf518ffef8d1c52de35a0c59743ef9cf574cd7 firefox-31.2.0-3.el5.centos.i386.rpm x86_64: 9df05ee668d515f3ece37ee2e4cf518ffef8d1c52de35a0c59743ef9cf574cd7 firefox-31.2.0-3.el5.centos.i386.rpm fbd203f1998e1dee8e25010a1d4fa29b4b5321d20db4125b985b03a8592346ff firefox-31.2.0-3.el5.centos.x86_64.rpm Source: f5201abc4f86e806a1fcb6f85333b750203339111f506ffb2641beb02c3693f4 firefox-31.2.0-3.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 15 Oct 2014 12:10:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1642 CentOS 5 rsync BugFix Update Message-ID: <20141015121016.GA1965(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1642 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1642.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1cbecc8922d43a0adcccd726e5803e76175f2fcca868baa94977f23a0882d983 rsync-3.0.6-6.el5_11.i386.rpm x86_64: aa673131601130f8ac144a0047914df78daf1296a424fd7ba9b0dbe61a4276df rsync-3.0.6-6.el5_11.x86_64.rpm Source: 12ce50da9141459819c943b7ac95dff36fb8cc9f42b50842ece6bbe0cb574b73 rsync-3.0.6-6.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 15 Oct 2014 12:21:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1635 Critical CentOS 7 firefox Security Update Message-ID: <20141015122100.GA5748(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1635 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1635.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b5bf77e58f0df4d4838bf72de18af77fc1299c64b944717b9be8023af642b2c7 firefox-31.2.0-3.el7.centos.i686.rpm f067bcd3d034b5878519cdc52befe29d493a8bbe19d64cc3ebf774f179a0b6e6 firefox-31.2.0-3.el7.centos.x86_64.rpm 5c28de4b7be9d9762646c2b99d80d2a4d42dd5b2787169cf48e919d93920d629 xulrunner-31.2.0-1.el7.centos.i686.rpm f7333789ff7a8c662e0f8e9a1f54c6ed508ee9fdd2fa98762492b076af18dd50 xulrunner-31.2.0-1.el7.centos.x86_64.rpm db657d67fc48d4a27bf50596a26cd35df82b06ec2d1f10004c94964c00ce3002 xulrunner-devel-31.2.0-1.el7.centos.i686.rpm 9045ff98c6fff3dab5a7fa9a73a3bcd05608a3723f83070e72e78fe6124c2202 xulrunner-devel-31.2.0-1.el7.centos.x86_64.rpm Source: cd172114374d6f81aae6c1dd22d1bb00cbd2a2244b0a7e726a09ed20459de604 firefox-31.2.0-3.el7.centos.src.rpm c24e3e31ba4b610cb3e291e28905b4f11f59bc10f2e55ad0a9dd9324d013b43f xulrunner-31.2.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Wed, 15 Oct 2014 12:21:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1634 Important CentOS 7 java-1.6.0-openjdk Security Update Message-ID: <20141015122140.GA5844(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1634 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1634.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 235d58e6756e5bd6c033aa98373311e4706a7bc2ce5e717e08fd09b5f1bc2e4f java-1.6.0-openjdk-1.6.0.33-1.13.5.0.el7_0.x86_64.rpm f747489a1afff1f19a0abc503ce4bd271dba6d7a501b0a9af068a34296d6ce42 java-1.6.0-openjdk-demo-1.6.0.33-1.13.5.0.el7_0.x86_64.rpm 290565d69afedfa4f198bb61702f3b09b8b1e4c976c07c060266eaf316992d79 java-1.6.0-openjdk-devel-1.6.0.33-1.13.5.0.el7_0.x86_64.rpm 2567dd401a1752ad2ec3740d87abff5a98e20ddf8c3a55eacc32b6ba08c47c12 java-1.6.0-openjdk-javadoc-1.6.0.33-1.13.5.0.el7_0.x86_64.rpm ca6278bb38d570c2cedeab68beced1a75b0818a59787e9110fd84da407d9f464 java-1.6.0-openjdk-src-1.6.0.33-1.13.5.0.el7_0.x86_64.rpm Source: 4fea1ba7337b0ba553c05103d411b1062082412e012acff2fddbb4c91d360ec9 java-1.6.0-openjdk-1.6.0.33-1.13.5.0.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Wed, 15 Oct 2014 12:22:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1620 Important CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20141015122205.GA5938(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1620 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1620.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 002dee0a0bdf11e376d99fb4ad2971f31dfe1204b1154419344244fce83238d8 java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el7_0.x86_64.rpm 19420477ed938598934e8bb3edb856e12b52a1078987ea3ae5851257e548ec0e java-1.7.0-openjdk-accessibility-1.7.0.71-2.5.3.1.el7_0.x86_64.rpm ec749fb28d1434a785046cb4ac367523ed1be0472384b2e1b8b90125188dac7a java-1.7.0-openjdk-demo-1.7.0.71-2.5.3.1.el7_0.x86_64.rpm 528cf0637d50f83eb14f14852e350dac8bc13981817d630e8ffc0c27f27f6f28 java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.1.el7_0.x86_64.rpm fd1b2a97c9b87dc283db7503bfbb2ed3f312133f864f1af4a86f1c5928c4b83e java-1.7.0-openjdk-headless-1.7.0.71-2.5.3.1.el7_0.x86_64.rpm 8de25453d7898c7ce00cefb1fc4b4ade295507b1c157848c4d826a66968fbaf2 java-1.7.0-openjdk-javadoc-1.7.0.71-2.5.3.1.el7_0.noarch.rpm b9d91f7b9e069cf942bf96d8e30e538a9ac03a8537d9182868d778e3a05aed1c java-1.7.0-openjdk-src-1.7.0.71-2.5.3.1.el7_0.x86_64.rpm Source: a2e80b7c19c2ccad896649a93ea1d97a3a722a245c34973acc0941deb1e16a83 java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Wed, 15 Oct 2014 14:53:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1644 CentOS 7 NetworkManager BugFix Update Message-ID: <20141015145310.GA16156(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1644 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1644.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0faba288ae5c4ec1456111ec15ba5d5465a306e89c09f47a4d42d4cc259a819b NetworkManager-0.9.9.1-28.git20140326.4dba720.el7_0.2.i686.rpm 01f764b740ed30440b0a1e1ce4f7725784a4c0337751680139be2ea7f10791f9 NetworkManager-0.9.9.1-28.git20140326.4dba720.el7_0.2.x86_64.rpm 2decea343a51a0c01a3f2d11b2da5ea065b2134a0584934092870548b891c0cd NetworkManager-config-server-0.9.9.1-28.git20140326.4dba720.el7_0.2.x86_64.rpm 9d85a20af75a715ca5e7cb9b413b8c37093baed8509441a7693177773d3853b8 NetworkManager-devel-0.9.9.1-28.git20140326.4dba720.el7_0.2.i686.rpm 3c82ec2e5c9a85e97f2797e2e33711c3a71f76a5383c79b64ad70fe5b45a93f6 NetworkManager-devel-0.9.9.1-28.git20140326.4dba720.el7_0.2.x86_64.rpm 67a5061a195b8b34999fc9d4b9794b93a7febfaab6244e1f6a50a44f2d361e64 NetworkManager-glib-0.9.9.1-28.git20140326.4dba720.el7_0.2.i686.rpm 9940e56de28f1a477f8ec66c5ca2449fb0c67f00fce4438c4a677f3b2c105f55 NetworkManager-glib-0.9.9.1-28.git20140326.4dba720.el7_0.2.x86_64.rpm 6bcd1bfa5901a0287d5cf6d6cab51c711738210b1dc09741a80185935abd74b2 NetworkManager-glib-devel-0.9.9.1-28.git20140326.4dba720.el7_0.2.i686.rpm aaa9bb756d63a60c4f5dd066a40de58be9f11e805319344d452227e796a6e4f8 NetworkManager-glib-devel-0.9.9.1-28.git20140326.4dba720.el7_0.2.x86_64.rpm b0c6ad674d946fea1c4a58ebffe0017202f7ba331f098b297ee51866840fc3f8 NetworkManager-tui-0.9.9.1-28.git20140326.4dba720.el7_0.2.x86_64.rpm Source: 995cd42d84588a77c6e0f976829cfe62b97d7b08e979cc7d75e8e2b2e13e006e NetworkManager-0.9.9.1-28.git20140326.4dba720.el7_0.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Wed, 15 Oct 2014 23:50:01 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1647 Important CentOS 5 thunderbird Security Update Message-ID: <20141015235001.GA8467(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1647 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1647.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bc59af1c3aa2950614736db2e2e1e1596eb77228a98ac4a83fec2735e6a58257 thunderbird-31.2.0-2.el5.centos.i386.rpm x86_64: b3065ffa9bbe359d2b810a2c7ac3eb702966e4c37cb638b69229019965584992 thunderbird-31.2.0-2.el5.centos.x86_64.rpm Source: 0c0305b9aedc7ced272157b8582dfa756f4db974dc4d5bdb394b02a0fe489cb0 thunderbird-31.2.0-2.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 9 ***********************************************

1 0

CentOS 6.4 kernel panic on boot after upgrading kernel to 2.6.32-431.29.2
by Joakim Ziegler 16 Oct '14

16 Oct '14

I'm on a Supermicro server, X9DA7 motherboard, Intel C602 chipset, 2x 2.4GHz Intel Xeon E5-2665 8-core CPU, 96GB RAM, and I'm running CentOS 6.4. I just tried to use yum to upgrade the kernel from 2.6.32-358 to 2.6.32-431.29.2. However, I get a kernel panic on boot. The first kernel panic I got included stuff about acpi, so I tried adding noacpi noapic to the kernel boot parameters, which at least changed the kernel panic message, now I get (transcribed from a photo I took, so please excuse any errors): Kernel panic - not syncing: Attempted to kill init! Pid: 1, comm: init Not tainted 2.6.32-431.29.2.el6.x86_64 #1 Call Trace: (excluding addresses, please let me know if they're good for anything) panic do_exit fput do_group sys_exit_group system_call_fastpath My grub.conf entry looks like this currently: title CentOS (2.6.32-431.29.2.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-431.29.2.el6.x86_64 ro root=UUID=ca1e1248-0a65-4b6c-9f87-0c859eab1f17 rd_NO_LUKS rd_NO_LVM LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=auto rhgb quiet nomodeset rdblacklist=nouveau KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM verbose selinux=0 enforcing=0 noacpi noapic nolapic nouveau.modeset=0 initrd /boot/initramfs-2.6.32-431.29.2.el6.x86_64.img (With all the options I added to see if it would work, including a couple from a very similar box that runs fine with that kernel, but on CentOS 6.5.) This box has a bunch of cards in it, including some NVidia GPUs in a PCI expander, another NVidia GPU for the GUI, an Areca controller, a Mellanox IB adapter, and some other stuff. But, I'm pretty sure this must be something simple I'm missing. Ideas for figuring it out? -- Joakim Ziegler - Supervisor de postproducción - Terminal joakim(a)terminalmx.com - 044 55 2971 8514 - 5264 0864

10 16

SSLv3 vunerability and Nautilus
by James B. Byrne 15 Oct '14

15 Oct '14

CentOS-6.5 Apache httpd-2.2.15 We have a webdav folder accessible only by https. In conformance with the advisory we removed SSLv3 from the SSLProtocol directive of the Apache server on that webdav host, so that it now looks like this: SSLProtocol +TLSv1 Now I cannot connect to the webdav service from my gnome desktop. When I open the webdav folder I get a window with the following error message instead of the folder: Could not display "davs://user@webdav.domain.tld/". Error: HTTP Error: Connection terminated unexpectedly Please select another viewer and try again. As I was using this folder today before the change in protocol on the server I am fairly confident that the removal of SSLv3 is the likely cause. Is there any way to configure the Nautilus browser in CentOS-6.5 to use TLSv1 instead? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS 7 for i386/32-bit?
by Boris Epstein 15 Oct '14

15 Oct '14

Hello listmates, I can't find the 32 bit version of Centos 7. Would it be because I am not looking in the right place or does it not exist at all? Thanks. Boris.

6 5

difficulties in compiling php-5.3.29 source from php.net using CentOS 7
by Kenneth Wolcott 15 Oct '14

15 Oct '14

Hello; I'm having difficulties in compiling php-5.3.29 source from php.net using CentOS 7. I need to bring my PHP development and production environment forward from PHP 5.3.3 which is using an abandoned php-template application from sourceforge. Since I need to do this in stages (it would be nice if I could just install the CentOS 7 php and apache versions with the "best" current php templates engines and make the developers change the php code to make it work, but that is not my option!) I need to get php-5.3.29 compiled on CentOS 7. I'm using the configure syntax derived from the output of "php -i" executed on the current development environment. I've had to install some additional "*-devel" packages and I make it further in the configure dance, but I've come to a point where I need additional help. My current problem: "configure: error: DBA: Could not find necessary header file(s)." I can provide the configure syntax I'm using if that will help you all help me. I've asked on one of the PHP mailing lists and have received good help up to this point, but I was wondering if there are some tips and hints that might come from those who are experts at this from the CentOS side rather than those who are experts from the PHP side. Thanks in advance, Ken Wolcott

2 1

OT: Would you purchase this hardware?
by Jason T. Slack-Moehrle 15 Oct '14

15 Oct '14

I have about $1200 to spend on 2 boxes and I'd like them to be identical. Very basic web serving, simple HTML5 video, light email serving. Looking around NewEgg, I come across: http://www.newegg.com/Product/Product.aspx?Item=9SIA65C1ZT3064 These use ECC unbuffered RAM which is expensive but I did find 8gb sticks for under $70 each: http://www.newegg.com/Product/Product.aspx?Item=N82E16820613386 I'd still have to add hard drives and more RAM and 2nd GB NICS. I also found out the power supply is non standard so if it goes in order to put in a standard power supply you need an adaptor: http://www.moddiy.com/products/IBM-Lenovo-PSU-Main-Power-24%252dPin-to-14%2… I haven't purchased hardware in 2 years. I could even use a desktop system versus this "server" class. I feel like by time I add more to each box to make it run perhaps there is a better machine to buy? Anyway if anyone has any advice I'd appreciate it. These are personal funds, I don't want to make a poor decision. Jason

3 5

Re: [CentOS] machine check exception
by Glenn Eychaner 15 Oct '14

15 Oct '14

You have (AFAIK) provided no details as to which version of CentOS you are running nor of your hardware, but I'll try to help as I can. (In fact, it is unclear whether the MCE crashed your system or not!) I had a set of systems that occasionally logged MCEs (memory partity errors, in my case), and spent a month tearing into them. First, make sure that "mcelog" is installed on your system. If you are running 64-bit CentOS 6, you should be able to "yum install mcelog". If you are running 32-bit CentOS 6 or CentOS 5, you'll have to download mcelog from the source (http://www.mcelog.org) and install it yourself, but if that is the case, let me know and I'll send further help. (I don't know about CentOS 7.) Second, make sure mcelogd is running at all times using system-config-services or chkconfig. Once you have done these two things, the next time you see an MCE, you should get an entry in /var/log/mcelog. This will tell you a LOT more about the MCE. Post the MCE here and/or Email it to me (I skim the digest and may miss a single post), and we can break it down further from there. [In my case, changing the memory had no effect on the MCEs, nor did any number of other suggested solutions; I eventually decided that since they were "corrected memory parity errors", and thus non-fatal to processes or the system, I would ignore them. And as of the last kernel update, I don't see them any more, though I have not dug more deeply to see if there was some causal connection.] -G. On Oct 15, 2014, at 9:00 AM, centos-request(a)centos.org wrote: > Unfortunately, No iLO Event Logs and IML Logs configured on the server. > > Can anybody suggest which tools on the server I can configure so next time > server will have all the log records. Its really hard to prove to the > peoples that the issue is at hardware level (When the Hardware vendor and > Application Owners are from different companies ). -- Glenn Eychaner (geychaner(a)lco.cl) Telescope Systems Programmer, Las Campanas Observatory

1 0

Firefox, Thunderbird crashing X Centos 5.11
by Negative 15 Oct '14

15 Oct '14

I cannot start Firefox or Thunderbird ever since I tried to put in a new graphics card. I had trouble with the configuration on this machine, which has two monitors. Once the new card was in I decided to change the configuration from cloned to spanning screens. I messed up and didn't save the old working configuration. Along the way, I wondered if the new card didn't have a problem and I put the old one back. At some time in all this, firefox began crashing on startup, but that wasn't the primary problem. The old card, now installed, is an nvidia Quadro fx580. I use El-Repo's kmod-nvidia and driver. It's up to date. The X error appended to the Xorg log on the last FF crash Is thus: Backtrace: 0: X(xf86SigHandler+0x71) [0x4868d1] 1: /lib64/libc.so.6 [0x39c4c30030] Fatal server error: Caught signal 11. Server aborting (II) Screen 0 shares mem & io resources (II) Screen 1 shares mem & io resources Any thoughts, suggestions? Thanks

1 0

CentOS-announce Digest, Vol 116, Issue 8
by centos-announce-request＠centos.org 15 Oct '14

15 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Koji/CBS infra and sslv3/Poodle important notification (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Oct 2014 12:32:37 +0200 From: Fabian Arrotin <arrfab(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] Koji/CBS infra and sslv3/Poodle important notification Message-ID: <543E4D45.8070708(a)centos.org> Content-Type: text/plain; charset=UTF-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, As most of you already know, there is an important SSLv3 vulnerability (CVE-2014-3566 - see https://access.redhat.com/articles/1232123) , known as Poodle. While it's easy to disable SSLv3 in the allowed Protocols at the server level (for example SSLProtocol All -SSLv2 -SSLv3 for apache), some clients are still defaulting to SSLv3, and Koji does that. We currently have disabled SSLv3 on our cbs.centos.org koji instance, so if you're a cbs/koji user, please adapt your local koji package (local fix !) At the moment, there is no available upstream package, but the following patch has been tested by Fedora people too (and credits go to https://lists.fedoraproject.org/pipermail/infrastructure/2014-October/01497…) ===================================================== - --- SSLCommon.py.orig 2014-10-15 11:42:54.747082029 +0200 +++ SSLCommon.py 2014-10-15 11:44:08.215257590 +0200 @@ -37,7 +37,8 @@ if f and not os.access(f, os.R_OK): raise StandardError, "%s does not exist or is not readable" % f - - ctx = SSL.Context(SSL.SSLv3_METHOD) # SSLv3 only + #ctx = SSL.Context(SSL.SSLv3_METHOD) # SSLv3 only + ctx = SSL.Context(SSL.TLSv1_METHOD) # TLSv1 only ctx.use_certificate_file(key_and_cert) ctx.use_privatekey_file(key_and_cert) ctx.load_client_ca(ca_cert) @@ -45,7 +46,8 @@ verify = SSL.VERIFY_PEER | SSL.VERIFY_FAIL_IF_NO_PEER_CERT ctx.set_verify(verify, our_verify) ctx.set_verify_depth(10) - - ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1) + #ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1) + ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1 | SSL.OP_NO_SSLv3) return ctx ===================================================== We'll keep you informed about possible upstream koji packages that would default to at least TLSv1 If you encounter a problem, feel free to drop into #centos-devel channel on irc.freenode.net and have a chat with us on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlQ+TUUACgkQnVkHo1a+xU4JyQCfefp2h7yRdmljBqRc+M76jPTf z7wAn3dOkaNPNfEnV0pxWDFX7BDDqKuY =lxsg -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 8 ***********************************************

1 0

[OT]] CentOS 7 docs, tutorials, etc...
by James B. Byrne 15 Oct '14

15 Oct '14

I apologize in advance for the subject and length of this reply. I debated just letting things pass without comment. But, security has many levels. And the first level is recognition of the threat. Whether we recognize it or not. Whether we agree of disagree with the politics that lie beneath this situation or not; Whether we consider this a non-technical issue or not; By virtue of our employment we are all involuntarily caught up in a global conflict between the agents of extremely powerful states versus the talents, minds and beliefs of principled individuals. For better or for worse the chosen battleground is the software we use and the hardware we run it upon. It is my belief that we as a community are not well served by individuals that decry every attempt to highlight the fundamentally terrible positions our governments have placed us in. On Fri, October 10, 2014 13:33, William Woods wrote: > So claim made, nothing to back it up. Got it. > > all I need to say isBASH , OpenSSL.. > > I am sure there are more. > > But really, if you are going to claim something, at least be willing to back > up what you claim is that asking to much ? > Of course, plausible deniably is the standard MO when a government does something that even their own subject populace would take exception to. That said one must give thought to the reality behind the following well documented controversy that goes back to 1999: https://en.wikipedia.org/wiki/NSAKEY But more recently we have: http://www.theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-us… and this: http://techcrunch.com/2014/05/13/nsa-docs-detail-efforts-to-collect-data-fr… This sort of publicity is sort of bad for business, which is really, really starting to bite the U.S. tech giants. So we now have these 'stand-up and be counted' responses like the following: http://www.cnn.com/2013/12/05/tech/web/microsoft-nsa-snooping/ http://www.wired.com/2013/12/microsoft-nsa/ Which are about as trustworthy as . . . well, I cannot think of anything off-hand that I would consider as untrustworthy as the public statements of a corporation gagged by a secret court and suffering economically from the public revelations of that fact. After, what we have in the U.S. (and the rest of the AABCNZ / 5-eyes network for that matter) at the moment is a totally out-of-control, irresponsible, and self-righteously belligerent security apparatus that is milking billions of dollars annually out of their populaces. Its leaders and employees have suborned the courts, committed perjury, and repeatedly and egregiously violated the very constitution (where such exist, the UK being a notable exception) that as public officials they are sworn to uphold. This consortium has accumulated a vast collection of private data on every present, past, and probably future elected official in the U.S.A.; and quite likely of the rest of the world as well. I am not sure that such capability in the hands of people shown to put institutional interests above the law bodes well for public oversight. Of course, maybe suggesting a tinfoil hat for everyone who ponders the implications of all in public this will make all of that unpleasant stuff just go away. When one cannot or will not address the central issue then attack the credibility of the opponent. Call for evidence and then dismiss it out of hand when confronted with it. Old news, shall we say. Never mind that dismissive response begs the question that these thing have happened and continue to happen. Personally, I am beginning to wonder just who employs "William Woods" <woods.w(a)gmail.com>. A nice nondescript name with no signature block from an anonymous email address. Maybe he is a tinfoil salesman? Anyone who attended the C3 Congress in Berlin this past December was exposed to an awful lot information and revelations from some highly respected privacy advocates. They were also made aware of the fact the various agencies actively monitor and participate in a range of online forums, including technical mailing lists and MMOGs. Given CentOS's importance to the information infrastructure of todays business and scientific communities (about twice as many servers run CentOS than RHEL http://constantmayhem.com/ty-stuff/linuxsurvey/2013.html) it would not be surprising to me to discover one or more of said individuals skulking about. And, one has to admit, casting doubt upon and disparaging lines of enquiry into things contrary to their employer's interest might be among their assigned jobs. Not that Mr. Woods is one of these mind you. He could very well be just be a mailing list troll of the everyday garden variety. Or, perhaps, he is a RedHat employee that takes any implied criticism of his employer a little too personally. Whatever the case may be it is interesting that: 1. W. Woods first posted to the mailing list (under that name) this past July. 2. He has an utter fascination with things to do with SystemD and its detractors. Indeed that was the subject of his first post. 3. He has never asked, answered or added to a question of a technical nature in such a fashion as to provide a proposed solution or elaborate on a constructive approach to a problem. 4. The vast majority of his postings can, with the most charitable interpretation, be considered as snide deprecation of people who express opinions that he evidently feels compelled to comment on. Usually having to do with security. And without actually contributing anything in the way of useful information. I am just saying, sometimes paranoia is induced by other people's behaviour, not by any internal mental defect. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Systemd Adding Its Own Console To Linux Systems
by Steve Clark 14 Oct '14

14 Oct '14

Anybody see this article on /. -- Stephen Clark

21 92

URGENT! Shellshock fix DOES NOT fix the bug on CentOS 5.4
by Jessica Blank 14 Oct '14

14 Oct '14

Good afternoon! After applying the latest bash RPM listed at http://lists.centos.org/pipermail/centos-announce/2014-September/020594.html : The fixed RPM (bash-3.2-33.el5_10.4.x86_64.rpm) DOES work just fine on CentOS 5.10. However, it DOES NOT work on CentOS 5.4. That is, bash runs fine, but IS STILL VULNERABLE TO SHELLSHOCK! Scary screenie at: http://i.imgur.com/yR7sBjV.png It looks like the released RPM somehow behaves DIFFERENTLY on 5.4 as opposed to 5.10. This has been validated by one of my coworkers; it's apparently not just me. Best, Jessica

19 36

Subject: Re: centos7 livecd yum problem (solved)
by Don Vogt 14 Oct '14

14 Oct '14

Message: 4 Date: Mon, 13 Oct 2014 12:14:52 -0600 From: Frank Cox <theatre(a)melvilletheatre.com> <To: centos(a)centos.org <Subject: Re: [CentOS] centos7 livecd yum problem <Message-ID: <n Mon, 13 Oct 2014 10:35:47 -0700 <Don Vogt wrote: >> I started to install centos7 using a livecd image. After booting the cd I >> tried a "yum install mc" which failed. I then tried "yum update" and got the > >following output. >Are you sure that your newly installed machine is actually online? >What does "ping google.com" get you? Thanks. That is the problem. I never got to the install. I was running from the liveCD. I have booted from quite a few liveCD's and this is the first (that I remember- always a caveat nowadays) that didn't handle the network setup of my ethernet. The problem is probably unique to my setup. I have a built in ethernet on the motherboard which failed about a year after I put the board in about 6 years ago. I put in an old nic I had laying around and have been happy ever since. I tried looking at /var/log/messages to see what NetworkManager had to say, but don't understand it. I know how to get the network going now and will be able to do that after I install and should be OK. So, thanks again.

1 0

centos 6.5 input lag
by Matt Garman 14 Oct '14

14 Oct '14

I have a CentOS 6.5 x86_64 system that's been running problem-free for quite a while. Recently, it's locked-up hard several times. It's a headless server, but I do have IP KVM. However, when it's locked up, all I can see are a few lines of kernel stack trace. No hints to the problem in the system logs. I even enabled remote logging of syslog, hoping to catch the errors that way. No luck. I ran memtest86+ for about 36 errors, no problems. I've tried to strip away just about all running services. It's just a home file server. I haven't had a crash in a while, but I also haven't had it running very long. But even while it's up, I have severe input lag in the shell. I'll type a few characters, and two to 10 or so seconds pass before anything echoes to the screen. I've checked top, practically zero CPU load. It's not swapping - 16 GB of RAM, 0 swap used. Most memory heavy process is java (for CrashPlan backups). iostat shows 0% disk utilization. Anyone seen anything like this? Where else can I check to try to determine the source of this lag (which I suspect might be related to the recent crashes)? Thanks, Matt

3 6

答复: turn bootable USB into bootable iso image
by 沈焕标 14 Oct '14

14 Oct '14

ctrl-d to settings，than you can see the CDROM, choose to use the ISO image file. Sent from my Windows Phone ________________________________ 发件人: Steve Clark<mailto:sclark@netwolves.com> 发送时间: ‎2014/‎10/‎10 21:42 收件人: CentOS mailing list<mailto:centos@centos.org> 主题: [CentOS] turn bootable USB into bootable iso image Hello List I have a Bootable USB stick that we use to Boot our servers and then install CentOS, PostgreSQL and our SW thru a Kickstart script. It works like a charm but now we are thinking of going Virtual and prepping Virtual CentOS servers under VMware ESXi. However, to have the same "Boot and Install" functionality I see no other solution than Booting a VMware machine from an ISO. So, what I would like to do is to take the Bootable USB and make it into an ISO. Any ideas? Thanks, -- Stephen Clark _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

4 3

machine check exception
by Shital Sakhare 14 Oct '14

14 Oct '14

Hello, Today, I got the below error server Console, Cpu 1:machine check exception Tcs c7f3d370acf17a ADDR 112d6c00040288 MISC c453176c00040200 This is not a softeware problem Run through mcelog ascii to decode and contact your hW vendor Kernel panic not syncing :machine check Can anybody please provide the meaning of this. How can I pull the logs from server ? Still not able to understand the exact cause of it. Please help. Thanks and Regards, Shital

3 4

CentOS-announce Digest, Vol 116, Issue 7
by centos-announce-request＠centos.org 14 Oct '14

14 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1255 Moderate CentOS 5 krb5 Security Update (Johnny Hughes) 2. CEBA-2014:1395 CentOS 6 ksh BugFix Update (Johnny Hughes) 3. CEEA-2014:1393 CentOS 6 be2iscsi Enhancement Update (Johnny Hughes) 4. CESA-2014:1397 Important CentOS 7 rsyslog Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Oct 2014 21:45:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1255 Moderate CentOS 5 krb5 Security Update Message-ID: <20141010214506.GA15074(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1255 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1255.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bdedf72c20131241fe22c3377a2687514bc15a1b0c8cfa0b2437d5c95ddca9f7 krb5-devel-1.6.1-80.el5_11.i386.rpm 9fffda97beadefb7c10e1db2aaf1d78e6d868a1b8fc72b2b0d985deb4b1eb0f3 krb5-libs-1.6.1-80.el5_11.i386.rpm 33edfc1b5fec4efceffc6d31eb5b049c9f325ea2e2ec5899bf72bdae8b528e32 krb5-server-1.6.1-80.el5_11.i386.rpm 92d20a98d3f3f7688b960edc2fbaec43991761dbebbd7e7a2c52ba79ba2f8a49 krb5-server-ldap-1.6.1-80.el5_11.i386.rpm b43c346face17ce142faf5be78ec3af611a9a946321720e24ef5e6b8b6d40683 krb5-workstation-1.6.1-80.el5_11.i386.rpm x86_64: bdedf72c20131241fe22c3377a2687514bc15a1b0c8cfa0b2437d5c95ddca9f7 krb5-devel-1.6.1-80.el5_11.i386.rpm 8299528ca4f6fb42a2d0eb2cf0e40d31c090af54344bc61c731bd123d0ff58d2 krb5-devel-1.6.1-80.el5_11.x86_64.rpm 9fffda97beadefb7c10e1db2aaf1d78e6d868a1b8fc72b2b0d985deb4b1eb0f3 krb5-libs-1.6.1-80.el5_11.i386.rpm fc2d06194339c7a5e1f860a4054ac4e1c18ea224464357c76a5265c5bf3af1e4 krb5-libs-1.6.1-80.el5_11.x86_64.rpm e89f87c8ad03fcdf36373d4f7bb1162abc7c551b9ed1de95721042ac2dc6dc39 krb5-server-1.6.1-80.el5_11.x86_64.rpm a868a052676af36fde1b3523696977459d012cfabe1cd5458b3b49fc7de668bd krb5-server-ldap-1.6.1-80.el5_11.x86_64.rpm 7126bc94f693ccdda6da0242d67ce2850492187155a921c3fe9892e40136f017 krb5-workstation-1.6.1-80.el5_11.x86_64.rpm Source: 1804a362842e1d343d6ec9805831cd475eee88236087d5078c2b8f85477a5f8b krb5-1.6.1-80.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 13 Oct 2014 13:15:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1395 CentOS 6 ksh BugFix Update Message-ID: <20141013131514.GA52198(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1395 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1395.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1387ed663fe471b6b1b4c7ace450886b76d8513ca399fa407f91125cf5b6c765 ksh-20120801-10.el6_5.12.i686.rpm x86_64: 1376e7817bab4dd5b14a4bd2ec56e973d05fbc6367350ceb110a5e39163a7be9 ksh-20120801-10.el6_5.12.x86_64.rpm Source: 7c1fe6ed97a97af63f4810947c747fd9ec6017ba9dcd7104b6d0c9fe007833fc ksh-20120801-10.el6_5.12.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 13 Oct 2014 13:15:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2014:1393 CentOS 6 be2iscsi Enhancement Update Message-ID: <20141013131527.GA52284(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2014:1393 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1393.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d0d7eaa262746e1760fd3d533b9fa82684ef87bb344b38422946f6b1b81c69c1 kmod-be2iscsi-10.2.273.0r-1.el6_5.i686.rpm x86_64: c066e98a14fc3db9b8237d19d3ffef9a62bcb8e063d6f996b166040f2a047bd2 kmod-be2iscsi-10.2.273.0r-1.el6_5.x86_64.rpm Source: 6d708190df4651c157dd173748290b83bb624071c37e0602540e04a72696d085 be2iscsi-10.2.273.0r-1.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 13 Oct 2014 19:45:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1397 Important CentOS 7 rsyslog Security Update Message-ID: <20141013194527.GA15291(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1397 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1397.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 948575ad1feeb02cbe239668584e1b84268e3bec81215d02d5d06cea0b8f533c rsyslog-7.4.7-7.el7_0.x86_64.rpm c7e99647faec3af85a3d174a7aeac248a1d8d2c80410b6676049fe221188265a rsyslog-crypto-7.4.7-7.el7_0.x86_64.rpm 66be2ec9a2b8d0fa79960c38866ef7562ac59cde6717853eac0e140e320ffba0 rsyslog-doc-7.4.7-7.el7_0.x86_64.rpm 9a74dfc032f6946fa9bca1a8c7af4188c2a937ce04831ace8bb12bf84bd9e32c rsyslog-elasticsearch-7.4.7-7.el7_0.x86_64.rpm 805fb5b2aebd9a88028e496d49695918b8f4b5dc6d07b23babb4619b1c09a8b0 rsyslog-gnutls-7.4.7-7.el7_0.x86_64.rpm ef6c468d97fd791b0313a0755f8403355c5437b89aacf2a23c3e8e71d64883e8 rsyslog-gssapi-7.4.7-7.el7_0.x86_64.rpm 3ea324bf1b7274030b08eaf298345e31f462879ee2379756a32f13f505a59c97 rsyslog-libdbi-7.4.7-7.el7_0.x86_64.rpm 45ddb5e5d772077101b12edaea5282a6d17bdfb2b2bfd62c2f404fcf0782cdcd rsyslog-mmaudit-7.4.7-7.el7_0.x86_64.rpm 207a69be5ab3237c5fe6eba4811b6cadf6d7cd3a91af02cac1f2153c66257c9c rsyslog-mmjsonparse-7.4.7-7.el7_0.x86_64.rpm dfcff07a291887e0666402cf33a76399270dcb8f9ea1fbbf752951425207ff20 rsyslog-mmnormalize-7.4.7-7.el7_0.x86_64.rpm eedb2881ec82be8560681310fc6a7d67b6bbd6556bf45bf3a58b53b38c681f77 rsyslog-mmsnmptrapd-7.4.7-7.el7_0.x86_64.rpm 6fabf1ceff6963dfc1fd0f9f379c25e33ca913776270e9cd067414ca92470738 rsyslog-mysql-7.4.7-7.el7_0.x86_64.rpm d1e5dceec4084daa457a39cd2e60526ae5be249b695344a21be7ed8dea0add65 rsyslog-pgsql-7.4.7-7.el7_0.x86_64.rpm 5732b9cd681a759410d93815d77c42f039bb087907be8164055a7d5680039966 rsyslog-relp-7.4.7-7.el7_0.x86_64.rpm 57411118ac2fa283b397c3be55d7f21a222292656f14d656271ceaeaee494d28 rsyslog-snmp-7.4.7-7.el7_0.x86_64.rpm 771e03bb4a37817aa4e417f47a689b0712c115b4263d7df1079dee3376080028 rsyslog-udpspoof-7.4.7-7.el7_0.x86_64.rpm Source: 250ed2cfdecd54d606fe2a8c9139c7e0f634bf4a6d3fc2f32b1a198191fe5573 rsyslog-7.4.7-7.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 7 ***********************************************

1 0

Re: [CentOS] Recommended way of handling iptables firewall in CentOS?
by Niki Kovacs 13 Oct '14

13 Oct '14

Le 13/10/2014 11:11, Reindl Harald a écrit : > just write a bash script which resets and configures iptables with the > "iptables" command and at the end of the script call "/sbin/service > iptables save" which writes the current rules to /etc/sysconfig/iptables > and so at boot the rules get loaded atomically Thanks very much! I followed your advice, and here's a first version of a firewall script for a LAN server: https://github.com/kikinovak/centos/blob/master/6.x/firewall/firewall-lan.sh Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

Hiding a network printer
by Frank Cox 13 Oct '14

13 Oct '14

I want to hide a printer that's connected to a Centos 6 printer server to prevent it showing up on some of the other computers on the local network. Using system-config-printer, putting the IP address of the computer that I want to hide the printer from into the Access Control window for that printer doesn't work since it apparently wants a user name, not an IP address. How can I specify that the printer can be seen only by certain IP addresses but not others? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

3 6

centos7 livecd yum problem
by Don Vogt 13 Oct '14

13 Oct '14

I started to install centos7 using a livecd image. After booting the cd I tried a "yum install mc" which failed. I then tried "yum update" and got the following output. "[liveuser@localhost ~]$ sudo yum update Loaded plugins: fastestmirror, langpacks Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os error was 14: curl#6 - "Could not resolve host: mirrorlist.centos.org; Unknown error" One of the configured repositories failed (Unknown), and yum doesn't have enough cached data to continue. At this point the only safe thing yum can do is fail. There are a few ways to work "fix" this: 1. Contact the upstream for the repository and get them to fix the problem. 2. Reconfigure the baseurl/etc. for the repository, to point to a working upstream. This is most often useful if you are using a newer distribution release than is supported by the repository (and the packages for the previous distribution release still work). 3. Disable the repository, so yum won't use it by default. Yum will then just ignore the repository until you permanently enable it again or use --enablerepo for temporary usage: yum-config-manager --disable <repoid> 4. Configure the failing repository to be skipped, if it is unavailable. Note that yum will try to contact the repo. when it runs most commands, so will have to try and fail each time (and thus. yum will be be much slower). If it is a very temporary problem though, this is often a nice compromise: yum-config-manager --save --setopt=<repoid>.skip_if_unavailable=true Cannot find a valid baseurl for repo: base/7/x86_64 I looked at thgeCentos-Base. repo from the live cd and it looks the same as the repo in centos6.5. I have no idea what to do next. This is my attempt to do step 1. above because I don't know how to do step 2. Any help would be appreciated on using the liveCD. Thanks

2 1

turn bootable USB into bootable iso image
by Steve Clark 13 Oct '14

13 Oct '14

Hello List I have a Bootable USB stick that we use to Boot our servers and then install CentOS, PostgreSQL and our SW thru a Kickstart script. It works like a charm but now we are thinking of going Virtual and prepping Virtual CentOS servers under VMware ESXi. However, to have the same "Boot and Install" functionality I see no other solution than Booting a VMware machine from an ISO. So, what I would like to do is to take the Bootable USB and make it into an ISO. Any ideas? Thanks, -- Stephen Clark

4 4

答复: turn bootable USB into bootable iso image
by 沈焕标 13 Oct '14

13 Oct '14

I am sorry for my misunderstanding. And I thing you should try the command "dd" to create an ISO file. For example: dd if=/dev/sdX of=/xxx/xxx/xxx.iso... I hope you will make it.. ------------------------ Best wishes ----------- ---------------Bill Shen ------------------------ ________________________________ 发件人: aravind J<mailto:aravindkumar.leo@gmail.com> 发送时间: ‎2014/‎10/‎11 17:32 收件人: CentOS mailing list<mailto:centos@centos.org> 主题: Re: [CentOS] turn bootable USB into bootable iso image On Oct 10, 2014 7:12 PM, "Steve Clark" <sclark(a)netwolves.com> wrote: > > Hello List > > I have a Bootable USB stick that we use to Boot our servers and then install CentOS, > PostgreSQL and our SW thru a Kickstart script. > > It works like a charm but now we are thinking of going Virtual and prepping Virtual CentOS servers under VMware ESXi. > > However, to have the same "Boot and Install" functionality I see no other solution than Booting a VMware machine from an ISO. > > So, what I would like to do is to take the Bootable USB and make it into an ISO. > > Any ideas? > Hi, Not sure whether the following will work, but just a thought. Create an .img file from the usb by doing a 'dd' from usb to .img file. Then attach the .img file to the vm as a disk and then boot the vm from the disk image to start regular kickstart installation. Thanks & Regards, Aravind _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Recommended way of handling iptables firewall in CentOS?
by Niki Kovacs 13 Oct '14

13 Oct '14

Hi, I'm planning to use CentOS 6.x on a handful of LAN servers. So far I've been using Slackware64 14.0 and 14.1 for the job. I wonder what's the orthodox/recommended way of configuring and iptables firewall with CentOS. I understand there's the system-config-securitylevel-tui NCurses interface which allows defining a basic set of rules. But what about the handful of more advanced rules I have to configure? Here's an example of an /etc/rc.d/rc.firewall script that I might use with Slackware. It contains mostly basic rules, and a couple of more advanced rules, one to limit SSH access, the other one to redirect HTTP traffic to Squid. If I want to copy my actual firewall configuration to CentOS, what would be the recommended way? I started from a bare bones minimal CentOS 6.5 installation, so system-config-securitylevel-tui is not even installed. Is it a good idea to try to configure /etc/sysconfig/iptables by hand? What do you suggest? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

Hi again & problem with minimal CentOS and Github
by Niki Kovacs 13 Oct '14

13 Oct '14

Hi everybody, I'm back to CentOS after a long period during which I've been using mainly Slackware. I still use Slackware for teaching and for my local clients (on servers and desktops), but right now, I'm planning to update my own documentation about CentOS, which is still based on version 5.x. First things first. For the moment I have a sandbox server in my office with a minimal installation of CentOS 6.5. It's a very stripped installation, and I want to keep it that way, installing things only as I need them. So I did *not* do a "yum groupinstall Base" after the initial installation. I installed Git and Vim and cloned my Github repository for CentOS. But when I make a modification and want to push it to Github, I get the following error: # git push error: The requested URL returned error: 403 Forbidden while accessing https://github.com/kikinovak/centos/info/refs fatal: HTTP request failed Now I think there must be some missing component in my CentOS installation, because my Slackware workstation in the same network can push things just fine. Any idea what's missing here? Cheers from the flooded South of France, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

systemd service configuration
by Igal ＠ getRailo.org 13 Oct '14

13 Oct '14

does adding a /lib/systemd/system/{unit}.service all I need in order to add a service? see example file for Tomcat that I plan to add at https://github.com/wichtounet/systemd-unit-files/blob/master/tomcat.service are any special permissions required for that file (execute)? TIA, Igal

3 2

drbd
by John R Pierce 12 Oct '14

12 Oct '14

so I've had a drbd replica running for a while of a 16TB raid thats used as a backuppc repository. when I have rebooted the backuppc server, the replica doesn't seem to auto-restart til I do it manually, and the backupc /data file system on this 16TB LUN doesn't seem to automount, either. I've rebooted this thing a few times in the 18 months or so its been running... not always cleanly... anyways, I'm started a drbd verify (from the slave) about 10 hours ago, it has 15 hours more to run, and so far it's logged... Oct 11 13:58:26 sg2 kernel: block drbd0: Starting Online Verify from sector 3534084704 Oct 11 14:00:23 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 14:00:29 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967294 Oct 11 14:00:35 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967293 Oct 11 14:00:41 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967292 Oct 11 14:01:16 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 14:02:05 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 14:02:11 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967294 Oct 11 14:02:17 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967293 Oct 11 14:33:41 sg2 kernel: block drbd0: Out of sync: start=3932979480, size=8 (sectors) Oct 11 14:34:46 sg2 kernel: block drbd0: Out of sync: start=3946056120, size=8 (sectors) Oct 11 15:37:07 sg2 kernel: block drbd0: Out of sync: start=4696809024, size=8 (sectors) Oct 11 17:08:15 sg2 kernel: block drbd0: Out of sync: start=6084949528, size=8 (sectors) Oct 11 17:30:53 sg2 kernel: block drbd0: Out of sync: start=6567543472, size=8 (sectors) Oct 11 17:59:04 sg2 kernel: block drbd0: Out of sync: start=7169767896, size=8 (sectors) Oct 11 20:00:50 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 20:01:09 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 20:01:15 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967294 Oct 11 20:01:29 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 20:29:18 sg2 kernel: block drbd0: Out of sync: start=10362907296, size=8 (sectors) Oct 11 20:29:54 sg2 kernel: block drbd0: Out of sync: start=10375790488, size=8 (sectors) Oct 11 21:01:51 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 21:42:15 sg2 kernel: block drbd0: Out of sync: start=11907921096, size=8 (sectors) Oct 11 21:43:38 sg2 kernel: block drbd0: Out of sync: start=11937086248, size=8 (sectors) Oct 11 21:44:00 sg2 kernel: block drbd0: Out of sync: start=11944705032, size=8 (sectors) Oct 11 21:49:26 sg2 kernel: block drbd0: Out of sync: start=12062270432, size=8 (sectors) Oct 11 22:07:10 sg2 kernel: block drbd0: Out of sync: start=12440235128, size=8 (sectors) Oct 11 22:58:54 sg2 kernel: block drbd0: Out of sync: start=13548501984, size=8 (sectors) Oct 11 23:23:17 sg2 kernel: block drbd0: Out of sync: start=14072873320, size=8 (sectors) $ date Sat Oct 11 23:28:11 PDT 2014 its 35% done at this point... 15 4K blocks out wrong of 1/3rd of 16TB isn't a lot, but its still more than I like to see. $ cat /proc/drbd version: 8.3.15 (api:88/proto:86-97) GIT-hash: 0ce4d235fc02b5c53c1c52c53433d11a694eab8c build by phil@Build64R6, 2012-12-20 20:09:51 0: cs:VerifyS ro:Secondary/Primary ds:UpToDate/UpToDate C r----- ns:0 nr:105707 dw:187685496 dr:654444832 al:0 bm:1 lo:107 pe:2104 ua:435 ap:0 ep:1 wo:f oos:60 [=====>..............] verified: 34.6% (9846140/15051076)M finish: 14:55:27 speed: 187,648 (155,708) want: 204,800 K/sec really, if I let this complete, then disconnect/reconnect the replica, it will repair these glitches ? I'm gathering I shoudl schedule these verifies weekly or something. -- john r pierce 37N 122W somewhere on the middle of the left coast

2 8

install mp3gain
by Chris 12 Oct '14

12 Oct '14

Dear All, what's the easiest way to install mp3gain on CentOS 6? I've found it in the rpmforge repository only. I don't want to add it since there are many obsolete packages in. Is there any other way? TIA! -- Gruß, Christian

2 3

CentOS 7 does not pick up my atheros wireless
by Martes 12 Oct '14

12 Oct '14

Greetings everyone. My recently installed CentOS 7 instance does not enable wireless via Network Manager or otherwise. I have the following output from lspci: lspci |grep AR 08:05.0 Ethernet controller: Qualcomm Atheros AR5212/AR5213 Wireless Network Adapter (rev 01) uname -a Linux imaginationland 3.10.0-123.8.1.el7.x86_64 #1 SMP Mon Sep 22 19:06:58 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux iw --version iw version 3.10 iw -l reports that nl80211 is not found, which is probably the root cause of not having access to the pci device, however, I have no idea why I am unable to access this module. I am unable to get wireless working, however, just prior to uninstalling network manager, I did see it there. I use one of the vms as backup for my personal groupware server which needs to stay active, so I removed network manager, and made sure the configuration for the network and iptables was valid, prior to re-installing network manager. However, after re-installing, Network Manager never sees the wireless device at all. Any assistance would be appreciated. I have not had this type of trouble with linux in quite a few years, and usually if anything I just needed to install the 80211 kernel modules, etc... I am unable to even pull those from repos, on this new install. Respectfully, Martes G Wigglesworth

3 10

CentOS 7 User Manager Tool
by Igal ＠ getRailo.org 11 Oct '14

11 Oct '14

I have CentOS 7 installed with GUI (Gnome 3.8.4) and I'm trying to follow the guide at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… it speaks of "System > Administration" from the GUI or "system-config-users" from the command line, but I can't find either? I don't have a "System" top menu, only "Applications" and "Places", and when I try the command line option I get "command not found". any ideas? TIA! -- Igal Sapir Railo Core Developer http://getRailo.org/

6 9

Linux on an ancient Macintosh G5?
by dan stoicheff 11 Oct '14

11 Oct '14

Has anyone experienced the conversion of the aluminum chassis Mac G5 to a Linux box? Curious in Pennsylvania. I need to obtain the power cable somewhere to try it. It is a 64-bit monster, so seems like it is worth trying if I can find the weird cable it needs. No luck to date regarding the cable. Thanks. The Bears will never win until number six leaves.

3 2

Re: [CentOS] CentOS 7 docs, tutorials, etc...
by James B. Byrne 11 Oct '14

11 Oct '14

On Thu, October 9, 2014 21:11, John R Pierce wrote: > On 10/9/2014 6:07 PM, Valeri Galtsev wrote: >> BTW, the whole idea of "antivirus" is flawed. It is based on "enumerate >> bad". You can't, as one never knows what will be invented in a future. > > I agree, but I don't know what else you can put in the hands of the > novice, unless its the iPhone world of corporate approved apps only > purchased through a monopoly 'app store'. > Which simply means: Only 'Government Approved' viruses allowed. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

8 31

答复: CentOS 7 docs, tutorials, etc...
by 沈焕标 11 Oct '14

11 Oct '14

Perhaps RHEL/CentOS 7 are something different, however, they just change a little, their base used are similar. On a gnome desktop, if you want to add a shortcut to the desktop, you can reference xxx.desktop in /usr/share/application/ , than write some similar xxx. desktop which you prefer and cp to the desktop directory ， it's really useful.. ------------------------ Best wishes ----------- ---------------Bill Shen ------------------------ ________________________________ 发件人: Igal @ getRailo.org<mailto:igal@getrailo.org> 发送时间: ‎2014/‎10/‎11 2:52 收件人: CentOS mailing list<mailto:centos@centos.org> 主题: Re: [CentOS] CentOS 7 docs, tutorials, etc... On 10/10/2014 11:44 AM, James Hogarth wrote: > Keep in mind CentOS is a rebuild of RHEL so any resources for RHEL are > applicable to CentOS. > > I'm not sure if any EL7 books have been written yet (as it's fairly new and > the Red Hat certifications have only just started being updated). > > In the meanwhile one of the best resources is access.redhat.com ... read > the documentation there. it's very difficult to find up-to-date books on the subject, but yes, the docs on https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ are so far really good. it's all just very confusing for someone without Linux experience. all the docs/tutorials/examples out there are for previous versions so they are all out of date now that RHEL/CentOS 7 uses systemd. also, the relationship between the OS, Gnome, and KDE is confusing. I installed CentOS 7 with GUI so I have Gnome 3.8.4 which I expected, but how come I have KDE stuff there as well? and... I still haven't figured out how to add shortcuts to the desktop and/or task bar which should really be a context menu option so I'm not sure why Gnome is so un-intuitive in that case. Igal _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Centos 7 and ntp
by Frank Cox 11 Oct '14

11 Oct '14

I've curious about where and how Centos 7 gets its ntp configuration from. When I installed the operating system, I went through this page and told it to use "network time", as shown: http://media.if-not-true-then-false.com/2014/07/06-centos-7-date-and-time-7… I just discovered that i don't actually have ntp installed on this computer, though the rpm does exist when I search for it with yum. I do have ntpdate installed, but can't find any configuration files that specify the timeservers that it's supposed to be using. I don't have a /etc/ntp.conf file, and a grep of /var/log/messages doesn't yield any lines containing the string ntp either. My computer's clock is not inaccurate, so I guess that ntp is working somewhere behind the scenes here, but it sure is well hidden. Where is ntp and its configuration hiding? Why isn't it logging what it's doing? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

3 3

Re: [CentOS] Systemd Adding Its Own Console To Linux Systems
by Les Mikesell 10 Oct '14

10 Oct '14

On Fri, Oct 10, 2014 at 3:56 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > > Am 10.10.2014 um 22:38 schrieb Les Mikesell: > >> On Fri, Oct 10, 2014 at 3:18 PM, Chris Adams <linux(a)cmadams.net> wrote: >>> >>> Once upon a time, Marko Vojinovic <vvmarko(a)gmail.com> said: >>>> >>>> I don't really see how systemd violates the "do one thing and do it >>>> well" philosophy. >>> >>> >>> systemd (as PID 1) is not necessarily the problem. The problem IMHO is >>> the systemd _project_ that appears to have a severe case of scope creep. >>> They have swallowed up other projects (udev, dbus), reinvented wheels >>> (logging, ntp, network configuration), and appear to still be growing >>> without bounds. When people don't like some of the decisions of systemd >>> developers, and the systemd project keeps taking over more of the core >>> OS functionality, it is frustrating to watch. >> >> >> There's probably nothing wrong with these things in the context of a >> new/different OS oriented to servicing a single user who is assumed to >> own the world as a side effect of logging into a magical console >> device and starting a GUI where things can pop into existence and chat >> with other things easily. But it doesn't have much to do with >> unix-like concepts > > > bullshit proven by running servers with systemd over 3 years *headless* with > multiple users for > > * vpn > * sftp with mysqld based users and groups > * rdp > * http > * smtp > * pop3 > * imap > * smb > * afp > * dns > * epp > * dhcp > * ftp > * ntp > * mysqld > * firewalls / gateways > * routers > > and well, worksations too > > so *just shut up* thelling abody shit about "a single user" What happens to ownership of a DVD or audio device when a different user logs in at the console - even if some other remote user wants to access them? The magic is more about ConsoleKit and PolicyKit than specifically systemd but the underlying dbus gunk seems to be merging together. -- Les Mikesell lesmikesell(a)gmail.com

2 1

Wrong file permissions in CentOS 7
by Alan Stern 10 Oct '14

10 Oct '14

Sorry if this question has been asked many times before. On a new CentOS 7 system, when I create files they end up with strange permissions. For example, as root: [root@server ~]# umask 0000 [root@server ~]# touch a [root@server ~]# ls -l a -r--r----- 1 root root 0 Oct 10 11:45 a As a regular user: [stern@server ~]$ umask 0000 [stern@server ~]$ touch b [stern@server ~]$ ls -l b -rw------- 1 stern stern 0 Oct 10 11:47 b In both cases the permsissions should have been -rw-rw-rw-. What on earth is going on, and how can I fix it? Thanks, Alan Stern

3 5

redhat-lsb
by Les Mikesell 10 Oct '14

10 Oct '14

I've noticed that some systems don't have redhat-lsb or even redhat-lsb-core installed and as a side effect, the ocsinventory agent reports them as 'linux' instead of Centos with the release version. Also, where it is installed and ocsinventory does pick up the name, it doesn't include Centos (pre-7.x) in the 'all Linux' grouping because the name is just CentOS and unlike 'Red Hat Enterprise Linux, or 'SUSE Linux Enterprise Server' which include Linux in the name. Anyway, a few questions: Is there some reason to omit redhat-lsb-core from any of the install groups? Why is there such a big list of dependencies? (glibc-devel, gdbm-devel, perl-CGI, etc., seem odd as 'standard requirements'). Even more so for the full redhat-lsb package? Why are things like qt and ghostscript pulled in by dependencies? -- Les Mikesell lesmikesell(a)gmail.com

2 1

CentOS 7 docs, tutorials, etc...
by Igal ＠ getRailo.org 10 Oct '14

10 Oct '14

hi all, after many years of working almost exclusively with Windows servers I am trying to switch to CentOS. I have a couple of books which were written for CentOS 5, but many (basic) things do not apply to CentOS 7 anymore, which is very confusing. Internet resources suffer from the same problem. for example, one of the books shows a Services configuration tool, which should be accessible from System > Administration > Server > Services, but I don't even have a System top menu anymore. the closest thing I have is Applications > System Tools but there is no Services applet there. also, I am trying to set some shortcuts to the Desktop, and preferably pin them to the Taskbar if such an option exists, but in vain. using Gnome 3.8.4 BTW. any ideas? advice? TIA!

7 16

arsh840@gmail.com has indicated you're a friend. Accept?
by arsh840＠gmail.com 10 Oct '14

10 Oct '14

Hi, arsh840(a)gmail.com wants to follow you. ****** Is arsh840(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=centos@centos.… If No please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=centos@centos.… Follow the link below to remove yourself from all such emails http://invites.infoaxe.net/uns_inviter.jsp?email=centos@centos.org&iid=…

9 11

Re: [CentOS] Systemd Adding Its Own Console To Linux Systems
by Always Learning 10 Oct '14

10 Oct '14

On Fri, 2014-10-10 at 11:51 -0400, m.roth(a)5-cent.us wrote: > Always Learning wrote: > > Systemd should be been much more widely discussed with the general > > Linux / Red Hat and clones community. I am sure beneficial improvements > > would have been proposed and, hopefully, implemented prior to Red Hat's > > adoption. > Absolutely. As a computer person of nearly 50 years experience (wish I was 20 again), I have long recognised the essential fact .... * That if one gets it Right the first time, one inevitably saves an awful lot of time and an awful lot of effort subsequently trying to get it Right or even to "improve" the less than perfect item. A little critical and constructive effort into the architecture and functionality of systemd would have brought considerable benefit. Perhaps the Fedora and RedHat persons might remember this advice when the next "wonder" is proposed. No reason not to want *genuine* perfection for all. -- Regards, Paul. England, EU.

1 0

named log entries - Are any of these a problem?
by Bill Gee 10 Oct '14

10 Oct '14

Hello everyone - I run bind version 9.8.2 on CentOS 6.5. The daily logwatch run sends me the following items. Are any of these a real problem? ============ checkhints: extra NS 'A.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'B.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'C.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'D.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'E.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'F.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'G.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'H.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'I.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'J.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'K.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'L.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: extra NS 'M.ROOT-SERVERS.NET' in hints: 170 Time(s) checkhints: unable to find root NS 'ns1.dnslibre.info' in hints: 147 Time(s) checkhints: unable to find root NS 'ns1.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns10.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns2.dnslibre.info' in hints: 147 Time(s) checkhints: unable to find root NS 'ns2.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns3.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns4.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns5.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns6.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns7.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns8.opennic.glue' in hints: 170 Time(s) checkhints: unable to find root NS 'ns9.opennic.glue' in hints: 147 Time(s) clients-per-query decreased to 10: 2 Time(s) (repeated many time with various numbers) =================== The hints file DOES contain two entries for each of the ROOT-SERVERS. One is the ipv4 address and the other is the ipv6 address. I use the hints file downloaded from http://www.internic.net/domain/named.root . The hints file does NOT contain any entries for the opennic.glue or dnslibre.info servers. However, when I run "rndc -all", the output shows that bind has entries for those servers. The names will resolve and answer ping. I searched all over trying to find information on the clients-per-query setting. My named.conf file does not contain an entry for clients-per-query. Is there some detailed documentation on this setting? What does it really do? Three more notes: 1) I see no problems in daily operation. All web browsing works as does resolution for local machines. 2) This bind server does not get queries from outside my local network. 3) I use OpenNIC as the "forwarders" servers. I used to use OpenDNS until they stopped handling Yahoo email correctly. Thanks - Bill Gee

2 4

file system replication
by Jason T. Slack-Moehrle 10 Oct '14

10 Oct '14

Hi Everyone, I need to keep 2 systems identical. Mostly e-mail directories, web directories, mysql, etc. The goal here is to have a 2nd system ready to go it the first one starts to exhibit hardware issues. What are options to have this happen? I'm going out on a limb and thinking rsync but I haven't used it past just simple use cases. Can anyone provide some insight for me? CentOS 6.5. Jason

8 15

CentOS-announce Digest, Vol 116, Issue 6
by centos-announce-request＠centos.org 10 Oct '14

10 Oct '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Infra - CentOS Wiki instance migration (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Thu, 09 Oct 2014 14:44:57 +0200 From: Fabian Arrotin <arrfab(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] Infra - CentOS Wiki instance migration Message-ID: <54368349.8020106(a)centos.org> Content-Type: text/plain; charset=UTF-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We have to do some hardware/software maintenance on the machine actually hosting the Wiki service (http://wiki.centos.org) Instead of just taking the wiki instance down during that maintenance, we've decided to relocate it to a temporary host, proceed to maintenance, and then migrate it back to the previous node. Migration is scheduled for Friday October 10th, 11:00 am UTC time. You can convert to local time with $(date -d '2014-10-10 11:00 UTC') Migration will happen in several steps: 1 - we "freeze" the wiki on the actual node, transfer data, update the A record, restore the service on the temporary node (disruption ~ 30min) 2 - we proceed to the needed maintenance on first node (no disruption in service, but no estimated time) 3 - depending on time needed for step [2], and assuming we have no hardware issue, we proceed like step [1], but in reverse (so disruption ~30 minutes again) Thanks for your comprehending and patience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlQ2g0kACgkQnVkHo1a+xU4flACfc1IjPeHelBntwt4eNTd6SBvM wXAAnAqtOg4Ko4nqd0QVUfX7ZcQevD5K =v15z -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 116, Issue 6 ***********************************************

1 0

Testing packages for Xen, Xen Kernel, and centos-release-xen
by Johnny Hughes 10 Oct '14

10 Oct '14

For those of you who use xen4centos, but are not on the centos-virt mail list (shame on you if you do that :D) .. http://lists.centos.org/pipermail/centos-virt/2014-October/004132.html If you can test the auto update functionality of the kernel as outlined in that post and report the results (hopefully to the virt mail list :D), it would be greatly appreciated. Thanks, Johnny Hughes

1 0

Fwd: CentOS list troubles
by Les Mikesell 09 Oct '14

09 Oct '14

Forwarded on Mark's behalf... ---------- Forwarded message ---------- From: <m.roth(a)5-cent.us> Date: Thu, Oct 9, 2014 at 3:04 PM Subject: CentOS list troubles To: Les Mikesell <lesmikesell(a)gmail.com> Hi, Les, Somewhere between late afternoon yesterday, and this morning, something hit me: regardless of whether I post a new topic, or reply, I get *nothing*: not a post, nor a bounce. It seems to just be going to /dev/null. I've tried emailing list-owner, but I have no idea if it ever got there. Would you mind posting this? For the list-owner, please figure out what happened. Thanks in advance. mark

3 3

Re: [CentOS] CentOS 7 docs, tutorials, etc...
by James B. Byrne 09 Oct '14

09 Oct '14

On Wed, October 8, 2014 12:50, Valeri Galtsev wrote: > > > I would say, CentOS 6 is the best of Linuxes suitable for server (IMHO). > However, I for one decided to move my servers away from Linux (as from > "Unix-like" Linux gradually becomes "Windows-like" during last 5 years or > so). Since some time ago I do not upgrade Linux systems on servers I > maintain. Instead, when the time comes, I just migrate server from Linux > to FreeBSD, which is much more suitable platform for server than Linux. > Version 7 of RedHat Enterprise or CentOS is much worse than version 6 to > build server on. Again, this is just my humble opinion. If I absolutely > have to build server on today's latest Linux, I will choose Debian, which > at least doesn't have systemd yet. But it will have it in next release... > > Again, this is just $0.02 worth of my own opinion, definitely not a > consensus (and likely not even a majority opinion) on this list. > > Valeri > Do you run bhyve virtualisation on any of your migrated FreeBSD hosts? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

Re: [CentOS] Systemd Adding Its Own Console To Linux Systems
by James B. Byrne 09 Oct '14

09 Oct '14

On Wed, October 8, 2014 13:36, Les Mikesell wrote: > On Wed, Oct 8, 2014 at 12:22 PM, Robert Arkiletian <robark(a)gmail.com> wrote: >> >> Just a heads up to those who haven't seen this yet. The main author of >> systemd publicly wrote about being basically persecuted. >> >> https://plus.google.com/u/0/+LennartPoetteringTheOneAndOnly/posts/J2TZrTvu7… > > But oddly, he didn't even mention that there would be a real simple > solution - just add backwards-compatible improvements instead of > actively wrecking the interfaces everyone else had depended on for > decades. > And see this: http://www.zdnet.com/lennart-poetterings-linus-torvalds-rant-7000034384/ -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Systemd Adding Its Own Console To Linux Systems
by James B. Byrne 09 Oct '14

09 Oct '14

On Wed, October 8, 2014 14:49, Les Mikesell wrote: > On Wed, Oct 8, 2014 at 1:33 PM, Digimer <lists(a)alteeve.ca> wrote: >> >> On Wed, Oct 8, 2014 at 1:22 PM, Digimer <lists(a)alteeve.ca> wrote: >>>>> >>>>> >>>> Airbags, ABS, Traction Control, ACE compatibility, stronger survival >>>> space, >>>> better fuel economy, more comfortable... >>> >>> >>> I think I've forgotten what user interfaces these break. Did they >>> take away the steering wheel to add them? >> >> >> You cropped out the second half of my analogy, which explained why I thought >> the analogy applied. > > Umm, no. They are pretty much backwards compatible. Otherwise you'd > have to go through new training and testing to be certified as a > driver when you buy a new car. And car vendors know better than to do > that to their customers. > Car vendors might behave differently however. Particularly if they obtained revenue from the necessary retraining and profited from the licensing procedures. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

vmstat and loadavg disagree about system load
by Mingfei Hua 09 Oct '14

09 Oct '14

1 4 499492 150392 4496 4763380 0 0 192 552 1227 1094 2 0 75 24 0 0 5 499492 150656 4500 4763528 0 0 0 160 465 263 1 0 68 30 0 0 5 499492 150468 4500 4763532 0 0 0 0 177 93 1 0 69 31 0 1 5 499492 151020 4500 4763540 0 0 0 0 160 132 0 0 69 31 0 1 5 499492 151268 4500 4763540 0 0 0 0 304 143 1 0 69 30 0 0 5 499492 151368 4500 4763540 0 0 0 344 369 192 0 0 69 31 0 0 1 499492 145020 4512 4771032 0 0 6260 1428 2013 2613 4 1 79 17 0 2 0 499492 140432 4512 4769396 0 0 31872 72 2393 2796 8 1 87 3 0 1 0 499500 137332 4512 4769432 0 8 25984 80 2052 2012 8 1 90 1 0 1 0 499508 132992 4512 4772592 0 8 24960 384 2325 2344 8 1 90 1 0 3 0 499520 135720 4400 4768792 0 12 24840 252 2491 2345 9 1 89 1 0 0 2 499520 210740 4404 4693096 0 0 15904 384 1798 1513 6 1 90 4 0 1 2 499520 210856 4404 4693636 0 0 0 0 154 119 0 0 87 12 0 0 2 499520 211328 4404 4693832 0 0 0 0 128 119 0 0 87 13 0 0 2 499520 212080 4404 4693832 0 0 0 0 128 144 0 0 87 12 0 0 2 499520 212700 4404 4693836 0 0 0 0 115 135 0 0 87 13 0 0 2 499520 213196 4404 4693836 0 0 0 336 88 102 0 0 87 12 0 2 0 499520 202552 4416 4704504 0 0 7984 17852 2036 1828 6 1 87 7 0 2 0 499520 172800 4416 4733208 0 0 25744 128 2165 2094 9 1 89 2 0 2 0 499520 153872 4416 4754468 0 0 18816 392 2000 1996 7 0 88 4 0 3 0 499520 169620 4416 4738300 0 0 27520 480 2346 2248 9 1 90 1 0 2 0 499520 140260 4416 4765328 0 0 24584 224 2247 2231 9 1 90 1 0 0 2 499520 179204 4416 4725748 0 0 17164 3564 1701 1619 5 1 87 8 0 0 2 499520 179948 4416 4725488 0 0 0 0 209 131 1 0 87 13 0 0 2 499520 180072 4416 4725492 0 0 0 0 111 117 0 0 87 12 0 0 2 499520 180436 4416 4725492 0 0 0 0 71 81 0 0 87 13 0 0 2 499520 180560 4416 4725492 0 0 0 0 182 110 0 0 87 13 0 0 1 499520 180180 4416 4725492 0 0 0 344 315 179 0 0 87 12 0 2 0 499520 182196 4428 4731300 0 0 2944 1108 1828 1935 6 0 86 8 0 1 0 499520 150180 4428 4757292 0 0 23936 88 2038 1905 7 1 88 4 0 2 0 499520 157264 4428 4751916 0 0 23568 176 2324 2139 8 1 87 5 0 1 2 499520 135936 4428 4770852 0 0 27144 120 2428 2449 9 1 85 6 0 2 1 499520 148336 4428 4761668 0 0 19072 192 2281 2420 8 1 83 8 0 0 2 499520 156408 4432 4749652 0 0 12416 436 1303 1235 3 0 86 11 0 ^C [root@idm-amst-db-12 ~]# ^C [root@idm-amst-db-12 ~]# ^C [root@idm-amst-db-12 ~]# uptime 01:47:47 up 26 days, 4:21, 1 user, load average: 26.85, 22.12, 19.38 [root@idm-amst-db-12 ~]# uptime 01:47:58 up 26 days, 4:21, 1 user, load average: 24.38, 21.74, 19.29 [root@idm-amst-db-12 ~]# cat /proc/loadavg 25.40 22.05 19.45 1/555 13911 Sincerely, Mingfei Hua

4 9

Renaming NIC name in CentOS 7
by Richer, Mark (CIV) 09 Oct '14

09 Oct '14

All, I am trying to understand better how you give an interface a more descriptive name and get it all working without a reboot, if possible. We have 1G and 10G interfaces, and I’m trying to use names like 1G-internal, 1G-external, 10G-private, etc. When I boot up, it’s all fine, but if I add one I’m not sure if there is a way to avoid the reboot? For example, I added the 10G interface names this week. Specifically, is there a way to change the network interface name you see in ifconfig and nmcli connection without rebooting CentOS 7? I changed the name in network-scripts. I tried to restart NetworkManager. I brought down the interface and tried to rename the file and bring it up again, but it still retains the previous run-time setting associated with the same UUID in the file. Also I find that on all but one of the server on which I did this, I can restart NetworkManager, but network.service is failing to restart. Do I want both active? And if yes, is this indicative of a problem related to changing the interfaces that goes away (only) by rebooting? For some reason, after doing this on several systems, on only one I can restart network.service, but it also still shows the old interface name. thanks, Mark MARK H RICHER, MS CS NPS-NCR Digital Forensics Lab IT Manager Computer Science Department Naval Postgraduate School - National Capital Region (NCR) 900 N Glebe Rd, Rm 5-182, Arlington, VA 22203 571.858.3254 (o) 571.303.9498 (m) mhricher(a)nps.edu<mailto:mhricher@nps.edu>

7 13

removing menus
by Jerry Geis 09 Oct '14

09 Oct '14

I am attempting to get no menus on the desktop... for CentOS 7. I did: rpm -e --nodeps gnome-shell-extension-apps-menu rpm -e --nodeps gnome-shell-extension-places-menu But now I get an "Activities" menu at the top... instead. Any idea how to remove that package... I cant find what it is called. I had to use --nodeps above as gnome-classic (I think) needs to be installed or nothing works. Thanks, Jerry

1 0

Bash still vulnerable
by Lars Hecking 09 Oct '14

09 Oct '14

According to the vulnerability test script from shellshocker.net, the latest bash versions on CentOS5 and CentOS6, 3.2-33.el5_11.4 and 4.1.2-15.el6_5.2, resp., are still vulnerable to CVE-2014-6277. In fact, on CentOS6, abrtd will send you a nice report about it. Does anyone know if upstream is working on a fix? [root@host ~]# bash ~/shellshock_test.sh CVE-2014-6271 (original shellshock): not vulnerable /root/shellshock_test.sh: line 16: 17229 Segmentation fault (core dumped) bash -c "f() { x() { _;}; x() { _;} <<a; }" 2> /dev/null CVE-2014-6277 (segfault): VULNERABLE CVE-2014-6278 (Florian's patch): not vulnerable CVE-2014-7169 (taviso bug): not vulnerable CVE-2014-7186 (redir_stack bug): not vulnerable CVE-2014-7187 (nested loops off by one): not vulnerable CVE-2014-//// (exploit 3 on http://shellshocker.net/) not vulnerable [root@host ~]#

4 4

Problem with WRT54GL router
by Timothy Murphy 09 Oct '14

09 Oct '14

I have a curious problem with an old WRT54GL router, which I use as a WiFi access point on my LAN: Internet->ADSL modem->CentOS-7 computer->WRT54GL router The router has always had a slight problem of losing connection every so often - it used to be every couple of days, but recently it has become much more often. My cure was always to disconnect the power from the router for 10 seconds or so, and then re-connect it. Recently I discovered that running the following script on the CentOS computer seems to solve the problem (for a while) sudo systemctl restart dhcpd sudo systemctl restart network sudo systemctl restart shorewall (I suspect the first, dhcpd, is irrelevant.) Incidentally, I am able to ping laptops on the LAN (but not the other way round) even when the router is in its "bad" state. I wonder if anyone has had a similar experience, and can offer advice? I don't like to examine the internals of the router, in case it stops working altogether. I'm planning on getting another router (N protocol), so it is not a very serious matter - I'm just puzzled by it. - Timothy Murphy e-mail: gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin 2, Ireland

9 24

DHCPv6 - requesting "other" information
by Mike Mohr 09 Oct '14

09 Oct '14

Hello; I've run into a rather interesting problem on CentOS 7. According to sysconfig.txt (part of the initscripts documentation), I can set the following variables in ifcfg-ethX: DHCPV6C="yes" DHCPV6C_OPTIONS="-S" I've done so, but nothing is populated to /etc/resolv.conf and so DNS does not work. Interestingly, if I remove the latter option, an IPv6 address is added to the relevant interface. Packet dumps indicate that the required DNS information is being sent over the wire, so this appears to be a bug in the IPv6 DHCP software. Running the following command by hand yields similar results: $ dhclient -6 -S -v -v eth1 i.e. there are informational messages printed indicating that a DHCPv6 response was received successfully. Packet dumps again confirm that DNS information is being sent over the wire, but is not being used by the DHCP client application. Is this a known issue, and is there a way to fix the problem? All the best, Michael

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss