- Discuss - lists.centos.org

virt-manager
by John R Pierce 26 Oct '15

26 Oct '15

so... I've been tinkering with KVM again. my desktop is windows, the linux server is remote, so I have a ssh X tunnel running, and XMing running locally, and launch virt-manager. opens fine, shows the VM I created some time ago. I select that VM (which is running centos 6), and 'open', a window opens for a few seconds, then blam, virt-manager exits before I can click on the 'details' lightbulb. if I run virt-manager --debug, I get the following output after clicking on 'open'... 2015-10-22 16:08:36,377 (engine:471): window counter incremented to 2 2015-10-22 16:08:36,379 (console:1150): Starting connect process for proto=vnc trans=None connhost=localhost connuser=None connport=None gaddr=127.0.0.1 gport=5900 gsocket=None 2015-10-22 16:08:36,381 (console:378): VNC connecting to localhost:5900 2015-10-22 16:08:37,009 (console:1061): Viewer connected [xcb] Extra reply data still left in queue [xcb] This is most likely caused by a broken X extension library [xcb] Aborting, sorry about that. python: xcb_io.c:576: _XReply: Assertion `!xcb_xlib_extra_reply_data_left' failed. Aborted (core dumped) -- john r pierce, recycling bits in santa cruz

5 7

Crash in gnome-terminal on New Profile
by Leonard den Ottolander 26 Oct '15

26 Oct '15

Hi, Anyone else seeing this? C7 Gnome Desktop, opened a gnome-terminal, click File -> New Profile and gnome-terminal-server gets killed. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

2 2

how to unrar
by Michael Hennebry 25 Oct '15

25 Oct '15

I'm looking for a means to unrar some files. Google keeps giving references to rmpforge which I'm told I ought not use. Any other ideas? I'm running centos 6. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

3 2

Re: PHP version not enough for developers
by Nicholas Geovanis 24 Oct '15

24 Oct '15

Yamaban wrote: >The mess we have now, is not the work of just one change. >What was the rationale to get udev into boot? -- Handling the ever >changing mess of plugable, switchable hardware. Not born and bred >for servers, but for mobiles (phones, tablets, laptops). >Who was the one that decided that "one-size-fits-all" and put that >into server environment? IMHO agreed. I believe that there is a perceived convergence of "needs" between (call it...) more-mobile personal linux and _virtualised_ server linux. If we can create a linux VM in under 5 minutes, "we" expect that it will boot-up without the sys admin's intervention. Then "we" expect that we can migrate it to newer hardware without manual reconfiguration. But returning to PHP: If apps are developed without real separation between user interface and back-end, then the back-end will be victimised by the relative and inherent instability of the front-end. The web servers then really become part of the front-end and must be handled as such. I would argue that this lack of separation between front-end and web server is a feature of the WWW and its protocols, we cannot escape it. So no surprise that most data centers leave the web servers outside or mostly-outside the network perimeter.

1 0

OpenSSL and OpenSSH on CentOS (FIPS enabled)
by Ning Liu (niliu2) 24 Oct '15

24 Oct '15

Hi experts, Current I am doing FIPS gap analysis for our product, can someone help to have a look my questions? Our product is server running under CentOS 6.x, and according to the upstream (RedHat) document, CentOS can be configured to FIPS mode: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/ht… And according to the CentOS forum, if we enabled FIPS mode on CentOS, then OpenSSL will also be in FIPS mode https://www.centos.org/forums/viewtopic.php?t=9078 Questions: (1) Is that true for OpenSSL ? (2) How about OpenSSH, since we are using SSH for administration, but there is not too much document mentioning OpenSSH Vs. FIPS. But looks like REDHAT already takes care of OpenSSH: https://www.redhat.com/en/about/press-releases/red-hat-completes-fips-1402-… Can I assume that OpenSSH is in FIPS mode when CentOS is in FIPS mode ? Regards, Ning Liu

2 1

CentOS-announce Digest, Vol 128, Issue 8
by centos-announce-request＠centos.org 24 Oct '15

24 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for qemu-kvm-ev from Virtualization SIG (Karanbir Singh) 2. Release for Software Collections SIG content (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 23 Oct 2015 16:50:25 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for qemu-kvm-ev from Virtualization SIG Message-ID: <562A5741.1050404(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am pleased to announce the immediate availability of qemu-kvm-ev stack for CentOS Linux 7/x86_64. This release is delivered by the work done in the CentOS Virtualization Special Interest Group. In order to use this qemu-kvm version, on an updated CentOS Linux 7/x86_64 machine, you should run: yum install centos-release-qemu-ev yum install qemu-kvm-ev This will bring in all the dependencies needed, including the updated qemu-img tools. This stack is curated as a part of the CentOS Virtualization SIG. You can find more details about this group, including the technologies they are bring to CentOS at their page https://wiki.centos.org/SpecialInterestGroup/Virtualization . This group meetings every alternate Tuesday in #centos-devel on irc.freenode.net, details for the meetings can be found on their SIG pag e. We welcome participation in this group from anyone interested in virtualization and technologies associated with it. Feel free to drop into our list at https://lists.centos.org/mailman/listinfo/centos-virt and say hi. Thanks to Sandro Bonazzola from the oVirt team for building and maintaining this qemu-kvm-ev stack. - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJWKldBAAoJEI3Oi2Mx7xbtb3gIAIIF7If9daApI0cZtRPCLNC+ fz6FPpWd/OyBOkyXHFtREp32voR16eq0EMowW8P+mLAB5YJ6iauMfv7vDTHJWAnw n3/x2MSHMsSiRCUUDnLAJHBqqJ4X1YUsNkbHE/f+Vb7AF9w2fuQE7BBUJsjGY5tQ 9V1SIkVSdzaYy2tps7Y6b9iHBk5zpMiWnFdMKfW/QTSoLp9wpi+0jlwx7aebHRAK y1tEIljDEgwSF85IkGkNtah1LGjhiB1J4aseewjKw2azsQ1z41fh4MFnujvPXSbj 40aJoRDcLvtXtaHB5dMMXOeMFkaki4iJxH5GV3H32sGfrLm+7ZuH3n397rfuAvk= =aU1U -----END PGP SIGNATURE----- ------------------------------ Message: 2 Date: Fri, 23 Oct 2015 16:59:11 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for Software Collections SIG content Message-ID: <562A594F.4020704(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Software Collections SIG group is pleased to announce a way of Software Collections packages availability for CentOS Linux users. The Software Collections packages have been build in CentOS Build System [1] and will be available soon on CentOS mirrors. Collections will be released in stacks, as we test and validate them. With Software Collections provided by SCLo SIG, users of CentOS Linux as well as other SIG groups in the CentOS ecosystem will be able to use the latest versions of popular application stacks, databases or other content mainly focused on developers. And they are able to do this without any impact to the system versions already installed on their machine. The SCLo SIG is not only meant to include packages rebuilt from Software Collections that have been made available in Red Hat Software Collections (RHSCL), but it is also meant to include updated content or collections that are not part of the RHSCL portfolio at all. So far, the collections rebuilt by SCLo SIG from RHSCL are devassist09, devtoolset-3, git19, httpd24, mariadb55, maven30, mongodb24, mysql55, nginx14, nginx16, nodejs010, perl516, php54, php55, postgresql92, python27, python33, rh-java-common, rh-mariadb100, rh-mongodb26, rh-mysql56, rh-passenger40, rh-perl520, rh-php56, rh-postgresql94, rh-python34, rh-ror41, rh-ruby22, ror40, ruby193, ruby200, thermostat1 and v8314. With Software Collections that are not part of RHSCL (so far sclo-vagrant1 collection), both CentOS Linux and RHEL users will be provided by content that is not available on those platforms otherwise. Getting started with Software collections: On an updated CentOS Linux 7/x86_64 machine run: yum install centos-release-scl This will enable the right repositories, and bring any metadata needed to validate the content. Learn more about Software Collections concepts at: http://softwarecollections.org/ You can find information on the SIG at https://wiki.centos.org/SpecialInterestGroup/SCLo this includes howto get involved and help with the effort. [1]: http://cbs.centos.org - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJWKllPAAoJEI3Oi2Mx7xbtRL8H/2Xt2FVKc+z+GIv8FOZmujRv ou9OqR6UxusgWBPVBaIZ3HTTaVYRkbzt7VpbGcsbxeA6q98LyAonCOn1hoZv+d1x SaItfkDIbz7e4lln7YUvrgfuKlNAZ7kzTXGY301VndZQRV/jU3sf4JuUR9upO9qx J8jkKS+/1g0QP0LRATCafHlDd9PbIirASOmHcc47GyPQRD+683ulwiE7ADFw1gbP CTVlGnXzxnFoJGGO9ZKhV9L374nWMVBqOqIF7oGddrrQ2rmSzI8P7InVjv8cMXVa 78f54x/E7/0jBJe4S0T4Wgy6uHo7y2Al8hto3DOktXnUofaOxZ6v9kGA32Svlpc= =ace6 -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 8 ***********************************************

1 0

EFI netboot to kickstart install
by Grant Street 23 Oct '15

23 Oct '15

Hello All Up until now we have been using standard PXE boot to do kick start installs of centos boxes. With recent machines however they come by default as EFI boot. We can set them to legacy but I would like to solve this before this option goes away. Just wondering if anyone has any experience setting up a net boot server that can be used to kickstart EFI machines? Thanks Grant

5 4

USB audio issues with 6.7
by John R Pierce 23 Oct '15

23 Oct '15

hmmm. my associate needs a USB sound thing in his stack... its always worked before, but when I brought him up on a new system with 6.7, the device is recognized.... usb 1-1: New USB device found, idVendor=08bb, idProduct=2704 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 usb 1-1: Product: USB Audio DAC usb 1-1: Manufacturer: Burr-Brown from TI usb 1-1: configuration #1 chosen from 1 choice usb 1-1: ctrl urb status -75 received input: Burr-Brown from TI USB Audio DAC as /devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.2/input/input3 generic-usb 0003:08BB:2704.0001: input,hidraw0: USB HID v1.00 Device [Burr-Brown from TI USB Audio DAC ] on usb-0000:00:01.2-1/input2 and it shows up as... $ aplay -l **** List of PLAYBACK Hardware Devices **** card 0: I82801AAICH [Intel 82801AA-ICH], device 0: Intel ICH [Intel 82801AA-ICH] Subdevices: 1/1 Subdevice #0: subdevice #0 card 1: DAC [USB Audio DAC], device 0: USB Audio [USB Audio] Subdevices: 1/1 Subdevice #0: subdevice #0 but when he tries to connect to it, like with this test command... $ mpg123 -a hw:1,0 /audio/36790.mp3 Playing MPEG stream 1 of 1: 36790.mp3 ... [alsa.c:118] error: initialize_device(): cannot set hw params [audio.c:643] error: failed to open audio device [mpg123.c:547] error: failed to reset audio device: Broken pipe and I noted some kernel errors in dmesg... usb 1-1: cannot submit urb 0, error -22: internal error usb 1-1: cannot submit urb 0, error -22: internal error usb 1-1: cannot submit urb 0, error -22: internal error reading a random forum thread found via googling that error suggested someone else had this problem with 6.7 and reverted. I was running $ uname -a Linux kfat.com 2.6.32-573.7.1.el6.x86_64 #1 SMP Tue Sep 22 22:00:00 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux So, reverting to a older kernel fixed this, and it works fine. $ uname -a Linux kfat.com 2.6.32-431.17.1.el6.x86_64 #1 SMP Wed May 7 23:32:49 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux (I had a 6.5 rpm handy). any clues? Linux audio has always been a big black box to me. -- john r pierce, recycling bits in santa cruz

1 0

CentOS-announce Digest, Vol 128, Issue 7
by centos-announce-request＠centos.org 23 Oct '15

23 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. RDO Liberty released in CentOS Cloud SIG (Alan Pevec) 2. CEBA-2015:1922 CentOS 5 device-mapper-multipath BugFix Update (Johnny Hughes) 3. CESA-2015:1924 Important CentOS 6 qemu-kvm Security Update (Johnny Hughes) 4. CESA-2015:1925 Important CentOS 5 kvm Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 Oct 2015 15:36:43 +0200 From: Alan Pevec <alan.pevec(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] RDO Liberty released in CentOS Cloud SIG Message-ID: <5628E66B.8040104(a)redhat.com> Content-Type: text/plain; charset=utf-8 I am pleased to announce the general availability of the RDO build for OpenStack Liberty for CentOS Linux 7 x86_64, suitable for building private, public and hybrid clouds. OpenStack Liberty is the 12th release of the open source software collaboratively built by a large number of contributors around the OpenStack.org project space. The RDO community project ( https://www.rdoproject.org/ ) curates, packages, builds, tests and maintains a complete OpenStack component set for RHEL and CentOS Linux and is a founding member of the CentOS Cloud Infrastructure SIG ( https://wiki.centos.org/SpecialInterestGroup/Cloud ). The Cloud Infrastructure SIG focus on delivering a great user experience for CentOS Linux users looking to build and maintain their own onpremise, public or hybrid clouds. In addition to the comprehensive OpenStack services, libraries and clients, this release also provides Packstack, a simple installer for proof-of-concept installations, as small as a single all-in-one box and RDO Manager ( https://www.rdoproject.org/RDO-Manager ) , an OpenStack deployment and management tool for production environments based on the OpenStack TripleO project. ------- QuickStart: Ensure you have a fully updated CentOS Linux 7/x86_64 machine, and run : sudo yum install centos-release-openstack-liberty sudo yum install openstack-packstack packstack --allinone For a more detailed quickstart please refer to the RDO Project hosted guide at https://www.rdoproject.org/QuickStart For RDO Manger consult https://www.rdoproject.org/RDO-Manager page. RDO project is closely tracking upstream OpenStack projects using the Delorean tool[1] which is producing RPM packages from upstream development branches. Since the previous OpenStack Kilo release, RDO is participating in the Cloud SIG and using CentOS provided infrastructure. Towards the end of developement cycle packages are imported into CentOS Cloud SIG buildsystem[2] and get eventually published in Cloud SIG repositories[3]. [1] http://trunk.rdoproject.org/ [2] http://wiki.centos.org/HowTos/CommunityBuildSystem [3] http://mirror.centos.org/centos/7/cloud/x86_64/ -------- Getting Help: The RDO Project provides a Q&A service at ask.openstack.org, for more developer oriented content we recommend joining the mailing list at https://www.redhat.com/mailman/listinfo/rdo-list. Remember to post a brief introduction about yourself and your RDO story. You can also find extensive documentation at https://www.rdoproject.org/Docs. We also welcome comments and requests on the CentOS Mailing lists ( https://lists.centos.org/ ) and the CentOS IRC Channels ( #centos on irc.freenode.net ), however we have a more focused audience in the RDO venues. To get involved in the OpenStack RPM packaging effort, see https://www.rdoproject.org/Get_involved and https://wiki.centos.org/SpecialInterestGroup/Cloud Join us in #rdo on the Freenode IRC network, and follow us at @RDOCommunity on Twitter. And, if you're going to be in Tokyo for the OpenStack Summit next week, join us on Wednesday at lunch for the RDO community meetup ( http://sched.co/4MYy ). I'd like to thank all RDO developers and CentOS Project for their effort and support resulting in this release, especially dmsimard - for continuously improving RDO CI jpena - for keeping Delorean service up and running jruzicka - for the rdopkg auto-magic number80 - for countless reviews and packaging wisdom social - for puppet module mastery trown - for leading RDO Manager side of the show! Special thanks to all the folks who helped with last minute testing in IRC #rdo channel ! Thanks, Alan Pevec Cloud SIG and RDO project member ------------------------------ Message: 2 Date: Thu, 22 Oct 2015 15:20:34 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1922 CentOS 5 device-mapper-multipath BugFix Update Message-ID: <20151022152034.GA21721(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1922 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1922.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3c96d4c6c99b5f3bc8f1c7f25f027f36fba0874a13df57b5b970f957d5e86e5e device-mapper-multipath-0.4.7-64.el5_11.i386.rpm 4933607a62a3cf3dc2f85f60c542c40a1c11af9190f7d755d3297a2dd74fa5f3 kpartx-0.4.7-64.el5_11.i386.rpm x86_64: 32ae417fbba831a010a7cbca765e6e0627434fb64fd6094e0f13162537bfcdc9 device-mapper-multipath-0.4.7-64.el5_11.x86_64.rpm cf028d56581bf3f069d69b304978acbf19e663ef5a8d3ed113307908a576df49 kpartx-0.4.7-64.el5_11.x86_64.rpm Source: e26389d0fabbbaebd6aa6ce297d9828f58c055d18798123bbda1387ecfd9b3d6 device-mapper-multipath-0.4.7-64.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 22 Oct 2015 19:30:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1924 Important CentOS 6 qemu-kvm Security Update Message-ID: <20151022193036.GA33852(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1924 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1924.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d32c5c64f2a0f4022a010d9404e31ef0ac6363eb3cde9b14b7e117d6672c14ec qemu-guest-agent-0.12.1.2-2.479.el6_7.2.i686.rpm x86_64: c535cec05139f127a6d26e2df47c3833524ac81678e61cc8b8958f0d7090c1a5 qemu-guest-agent-0.12.1.2-2.479.el6_7.2.x86_64.rpm cbfe2c45541f1f5b97780cbd09eb23d4543156e9730c8d09873da706d7388ffe qemu-img-0.12.1.2-2.479.el6_7.2.x86_64.rpm 4cd10f6b78f67f61f46c43f9bc0cdec759a9eae1abdd3e510627dfef04bacee6 qemu-kvm-0.12.1.2-2.479.el6_7.2.x86_64.rpm 3214261a38e162a356e7f96d45a920243f0b160925bbaf6309b5292601b90f74 qemu-kvm-tools-0.12.1.2-2.479.el6_7.2.x86_64.rpm Source: 0b2dc5f1be528fe9711582f4bae0092dfe9de8958d39f5d6bff756f838d1767f qemu-kvm-0.12.1.2-2.479.el6_7.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 22 Oct 2015 19:35:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1925 Important CentOS 5 kvm Security Update Message-ID: <20151022193505.GA14992(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1925 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1925.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b0a8d2af276b509ddfb3ef7fa12b7cbd3afba9fb5fa1ae9ae38cfbb422ae0ac7 kmod-kvm-83-274.el5.centos.x86_64.rpm 8d31e38f3292cb236f64936500a7348f72150fce7bb8f06c87d7c14741d47306 kmod-kvm-debug-83-274.el5.centos.x86_64.rpm ed8834e21ed763ebf75ac6ba8b82a17ddc282b6aa15393e2f46812460f504f50 kvm-83-274.el5.centos.x86_64.rpm a24df4e5846371f312fd22b26a76b93ab89d9349ee9b82c35273595beef80acd kvm-qemu-img-83-274.el5.centos.x86_64.rpm 2378ff35f2480ca16be825bb66df4d5ae50773f5e0028a1d4e96410555cc3e1c kvm-tools-83-274.el5.centos.x86_64.rpm Source: c97f9162acf233ce5954dbba68437dfcfc7eb7709abacddf1c25b010d9485757 kvm-83-274.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 7 ***********************************************

1 0

Centos 7, ATI/AMD video, fonts
by m.roth＠5-cent.us 22 Oct '15

22 Oct '15

A newly built CentOS 7.1 system, with an ATI/AMD video card. I installed the proprietary driver (this is a Dell, and they had their own rpm), and after I ran aticonfig --initial, init 3, then init 5, and we have a working video. Excerpt the fonts are atrocious. All the letters seem to be missing pixels, so it's as though there's no across, almost. He's running gnome. There has to be a quick fix - a link would be great. Thanks in advance. mark

3 2

PHP version not enough for developers
by Andrew Holway 22 Oct '15

22 Oct '15

Hi, So, it seems that the current version of PHP in Centos 7 is PHP 5.4.16 however this version of PHP stopped getting security support from the PHP people one month ago [1]. Now, our developers want to use the new and shiny PHP because they want to use the latest version of Zend. They are proposing using this package [2] but I never heard of this repo. Other than building the packages ourselves is there a more acceptable way to run a later version of PHP? Thoughts? Experiences? Ramblings? Ta, Andrew [1] - http://php.net/supported-versions.php [2] - https://webtatic.com/packages/php56/

10 20

CentOS7 - Serial Console and Flow Control
by Mike - st257 22 Oct '15

22 Oct '15

Hello List, I'm ironing out details to upgrade a few systems to CentOS7. My servers have BMC with Serial over LAN support. In C5 and C6, I determined how to have BIOS/POST, kernel, and serial console access. I'm reading up on the method to accomplish the pieces with C7. Presently SoL output works, so I see BIOS/POST messages and the GRUB boot list. My changes to enable serial redirection for the kernel do not appear to work. I've made the following changes to GRUB2's /etc/grub/default config file: -- removed rhgb -- added the console= settings to GRUB_CMDLINE_LINUX -- added the last two lines related to serial as detailed here [0]. * Is there an option to enable hardware flow control? I recall having to turn on flow control (agetty -h) to make it behave. No mention of flow control at [1] or [2]. Nor does RHEL7 doc [3] mention it. I've already tweaked the systemd service I generated for ttyS1 (I'm using COM2 for SoL) and added the agetty "-h" option (for hardware flow control). Despite modifying the baud rate to reflect the BMC's settings, I only get symbols (so the console settings are amiss). Would anyone be so kind as to share their experience? What has worked for your BMC/SoL configurations? [0] https://fedoraproject.org/wiki/GRUB_2#Enable_Serial_Console_in_Grub [1] http://www.gnu.org/software/grub/manual/grub.html#Serial-terminal [2] http://www.gnu.org/software/grub/manual/grub.html#serial [3] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… [4] https://lists.centos.org/pipermail/centos/2014-October/146719.html -- ---~~.~~--- Mike // SilverTip257 //

2 3

Recommendations for image malware detection?
by Kay Schenk 22 Oct '15

22 Oct '15

Hello all -- This is not a CentOS specific question, but I have a feeling some of you are involved in enterprise malware efforts, so here goes. Does anyone have recommendations for malware detection that includes detection in image files? I'm looking for something that could be integrated into a batch cron process as opposed to a client end download check. Thanks. -- ---------------------------------------------------------------------- MzK “The journey of a thousand miles begins with a single step.” --Lao Tzu

3 2

Security implications of openssl098e on CentOS 7
by Nick Bright 22 Oct '15

22 Oct '15

Greetings, I'm working with a new CentOS 7 installation, moving a system up from CentOS 5 due to OpenSSL version 0.9.8e not meeting PCI Compliance requirements. However, while setting up the CentOS 7 environment one of the closed source applications is requiring 0.9.8. The software vendor has advised installing package openssl098e from yum; but I'm hesitant to do so from a compliance and security perspective. What are the implications of this compatibility package? What does it provide/do? Thank you, -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.

8 12

CentOS-announce Digest, Vol 128, Issue 6
by centos-announce-request＠centos.org 22 Oct '15

22 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1919 Important CentOS 6 java-1.8.0-openjdk Security Update (Johnny Hughes) 2. CESA-2015:1920 Critical CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) 3. CESA-2015:1921 Important CentOS 5 java-1.7.0-openjdk Security Update (Johnny Hughes) 4. CESA-2015:1920 Critical CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) 5. CESA-2015:1919 Important CentOS 7 java-1.8.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 21 Oct 2015 23:13:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1919 Important CentOS 6 java-1.8.0-openjdk Security Update Message-ID: <20151021231349.GA4364(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1919 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1919.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b99302119be56a5d3aa457794d7aaa38b9ee29fe8fae77fec9640faeca7cf6e2 java-1.8.0-openjdk-1.8.0.65-0.b17.el6_7.i686.rpm 4632744468cfc4cd0a0c762d60904d26dd2cd04f50ba8fce1b7e7113d0afc5d4 java-1.8.0-openjdk-debug-1.8.0.65-0.b17.el6_7.i686.rpm d077161d31630c046f85c8262241fd83fe4c03e9ccbaf9e39840d2febd9aaae5 java-1.8.0-openjdk-demo-1.8.0.65-0.b17.el6_7.i686.rpm 18847ba867de45bfa567bfea751e55f18bb27ab17ae5ee377174930445bf01a6 java-1.8.0-openjdk-demo-debug-1.8.0.65-0.b17.el6_7.i686.rpm ffe9a334a661c10164ae31d16f4924d25f37cca1ea6e9a36a6bf999911f781cd java-1.8.0-openjdk-devel-1.8.0.65-0.b17.el6_7.i686.rpm 3c8cc1f2f314349289461f24afb36cfe2e9052f9ca86d0076d53ea7873e55aae java-1.8.0-openjdk-devel-debug-1.8.0.65-0.b17.el6_7.i686.rpm 06a8dc8bed67ed2c80ae641a890ed7ccc6677fbcd63515bc4132dd167a654069 java-1.8.0-openjdk-headless-1.8.0.65-0.b17.el6_7.i686.rpm b37f50f9c57c7ebfc9c85c898c4b802f6340f9cb28c4c8a26641243cea9325e2 java-1.8.0-openjdk-headless-debug-1.8.0.65-0.b17.el6_7.i686.rpm 70197b219a776a905d1aadfb92bbe29d1fe6ea6cd789ffeb19514db449019723 java-1.8.0-openjdk-javadoc-1.8.0.65-0.b17.el6_7.noarch.rpm f629d6d4b062d017209a0e6755c0ff6ae25728e3ab49c5e3579af4dc00af8033 java-1.8.0-openjdk-javadoc-debug-1.8.0.65-0.b17.el6_7.noarch.rpm ee5220348f0eb86674f3d5af721c1cb51ecccb700ac433259565c6bc81871526 java-1.8.0-openjdk-src-1.8.0.65-0.b17.el6_7.i686.rpm 590bd566ac88439d3553e5b41728b4319754b72367f528e0baf047c09779e0ce java-1.8.0-openjdk-src-debug-1.8.0.65-0.b17.el6_7.i686.rpm x86_64: 95dd49c3f59834ec1041b57e2dd691764e01b9880a8dc9c6178975448ba90a82 java-1.8.0-openjdk-1.8.0.65-0.b17.el6_7.x86_64.rpm d254057ee70868b9ba7fe29a4c8f4d757bced91db171ed24cc0f6ff558a0ae7c java-1.8.0-openjdk-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm 86d2b9d7ff06663f56d750026ce7b15561c5cbf5545a48b03595343e91c4c3c5 java-1.8.0-openjdk-demo-1.8.0.65-0.b17.el6_7.x86_64.rpm 3ada20716364d358f0a8d5f783dda6c827aa9e7350f1aba591b794e19ae904ab java-1.8.0-openjdk-demo-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm 882aa56d3e3123862a323839790f9bbb9990891ba899cb5bed966073056d8736 java-1.8.0-openjdk-devel-1.8.0.65-0.b17.el6_7.x86_64.rpm 45249f813d5b6fc8b976180f23de852ff5407c6fb67a141af17e4a97cac0dd71 java-1.8.0-openjdk-devel-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm b72bc85f3cd9d7687e5f20f8f06d96c462d81e7535f5c790ac0b4a942461b838 java-1.8.0-openjdk-headless-1.8.0.65-0.b17.el6_7.x86_64.rpm 78338011170fc1dd3fad535da45b4b6adc4b5d5f18e2cf1081174bdc0fe31433 java-1.8.0-openjdk-headless-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm 70197b219a776a905d1aadfb92bbe29d1fe6ea6cd789ffeb19514db449019723 java-1.8.0-openjdk-javadoc-1.8.0.65-0.b17.el6_7.noarch.rpm f629d6d4b062d017209a0e6755c0ff6ae25728e3ab49c5e3579af4dc00af8033 java-1.8.0-openjdk-javadoc-debug-1.8.0.65-0.b17.el6_7.noarch.rpm 39caf4bfd7f16327aebb3710462a388bf9eec72db80f4a6a3dadd265f4d4de63 java-1.8.0-openjdk-src-1.8.0.65-0.b17.el6_7.x86_64.rpm f8b2b97268ab5153a597febee053485a32b6759f5da467d9a41efc2690995df0 java-1.8.0-openjdk-src-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm Source: b32e71cdd92dcd427b30f6a34bba062cde7b06e915db2fddab39bf742ee43c0e java-1.8.0-openjdk-1.8.0.65-0.b17.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 21 Oct 2015 23:14:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1920 Critical CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20151021231414.GA4484(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1920 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1920.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d72e2661b3d3f63dd3e31e134305c90051559fed089dc7df2f11f42d647d39da java-1.7.0-openjdk-1.7.0.91-2.6.2.2.el6_7.i686.rpm d1e333fdef177c54ed4ad4da2bbaeec79150f27ca845161661689f568ff6a6a6 java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.2.el6_7.i686.rpm ba0e0cdd9252a2c4e40199868178e9c33294813a3a946fb63d6ee6b05e764296 java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.2.el6_7.i686.rpm 96005bc8eb6c0a4e9a13f0fe27aef3fe2b8f117087391c256ae4b67975e4f157 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.2.el6_7.noarch.rpm 90573960582711048b0f60e63cc8e8a220d0d59820c82dbf5e758754dfe1a66c java-1.7.0-openjdk-src-1.7.0.91-2.6.2.2.el6_7.i686.rpm x86_64: fca9faa6089825a6e753a197c1579310d03a2c023a965c0798cd36a5dcc27b8b java-1.7.0-openjdk-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm 6f8e52dff818c08a09b8498d677401205aecc486976571f58f0476d64acf97cb java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm 27adba1b3a6f4f570d4be23c87e973cfd72890aa18845dd12274d47632cfe0cc java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm 96005bc8eb6c0a4e9a13f0fe27aef3fe2b8f117087391c256ae4b67975e4f157 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.2.el6_7.noarch.rpm ded1524d436b2319d7aea5296df26ff154edb863709bbb900dd0b42e7c18a401 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm Source: 4bf598bec324eebeda3229568573df701a70d28b9e54bd30f58338b3dac7997e java-1.7.0-openjdk-1.7.0.91-2.6.2.2.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 21 Oct 2015 23:24:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1921 Important CentOS 5 java-1.7.0-openjdk Security Update Message-ID: <20151021232430.GA13185(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1921 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1921.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 728f0c0642d42864b96a7dbd7310360f8787ab90fa17bec6ee5ddb7bc0950b97 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el5_11.i386.rpm 707c41d31d5b7f03704db767124d21dd6de652d64d22a2cc0758afe6f5a68aec java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.1.el5_11.i386.rpm 4e6876cbad92bb25d26c0bd8b05c407eab7064e59d4eb58eab6b1f50ab122f9b java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.1.el5_11.i386.rpm 72055bec04fcf49a9b744866389d67dfd83bc0cb6ccd64a2c417f230e18a1431 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.1.el5_11.i386.rpm 35504f2d7eaebb7b10d3a7eb8bb918169f740a296984cf976db242947c77c1d9 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.1.el5_11.i386.rpm x86_64: 744c714a9d9dd4a4c54cedad94af99f6093dd5a41f230dba3cd1d30e989a6c80 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm e7a6d7045f53ccc49104ac40c727708d3d91c553a81896a0e08ab141e441a4d8 java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm f014c30d7aaa0935def0ec0fe8aaa46eab3a23abef79e8fedff1a071be61ddbc java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm 7a6d280dd08f2936ed2aa8c66adabab6d400d8b6bfa072fe03d020e0cca76f40 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm fe02e4316dee3cb6c77a53cb3f3de560c88b343b36e66f46870928961d7b6c53 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm Source: 5107c8d5774a3ba475574a51c986bb8af63414ca30a54ab7940bf5739da707e7 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: ------------------------------ Message: 4 Date: Thu, 22 Oct 2015 00:07:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1920 Critical CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20151022000757.GA12866(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1920 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1920.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 826d53b513a6bb5b067028561c663245b39634e764ac64008a09ffdfb26711b6 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm 43556ec3d4af6b5efae46bed907e81e3b5f69b33cd25b2e1992504685f69dda5 java-1.7.0-openjdk-accessibility-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm a9813ff0692254f9d70a49ec9cef8514706b533836619591967a03f306d146f3 java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm 138f0282b13a511bbe2cc21a1e2a61543255bc767b654f13e7c27cacdd5fdd83 java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm a34323f74e4423d38d298a06cdd26788851b6ac5d9c5787b6f6a2c4144f816bd java-1.7.0-openjdk-headless-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm f8a71a52a20f34d1d0db714c399308561280441a5dfa886fb96de692b41c2bf8 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.1.el7_1.noarch.rpm 0cd7e499729498b74f1898eef23578299a97ab004992d0f6dea78b12e4d86302 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm Source: 494032ee883593af2f18afc2992d5afd2da7bfd02f3aa9b015b441496ad8546a java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 22 Oct 2015 00:08:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1919 Important CentOS 7 java-1.8.0-openjdk Security Update Message-ID: <20151022000818.GA12970(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1919 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1919.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fc1d78f8fbdd55837a77e54915ceed26b916b85834ebfb9457ec153b1a40309a java-1.8.0-openjdk-1.8.0.65-2.b17.el7_1.x86_64.rpm 88300297b48c26c73023f0e9592202bae019244f9386e62b1fce66a8265fbba4 java-1.8.0-openjdk-accessibility-1.8.0.65-2.b17.el7_1.x86_64.rpm b4ee076fe89b4c03f9a27adc2ab09d242924ddbc52028cb473aed21b80af346d java-1.8.0-openjdk-demo-1.8.0.65-2.b17.el7_1.x86_64.rpm 0ca829e2fa8e41cc21b986052018237a264536c61e246f78f585539dc43bc465 java-1.8.0-openjdk-devel-1.8.0.65-2.b17.el7_1.x86_64.rpm adcf8842049a55bdf370857e875b42bc803f170ee594660f97581004ea143fb0 java-1.8.0-openjdk-headless-1.8.0.65-2.b17.el7_1.x86_64.rpm 3fc3d79d30601dab4335761b29a97157f9238636ecbbc77c3d8598a92b5a9bea java-1.8.0-openjdk-javadoc-1.8.0.65-2.b17.el7_1.noarch.rpm b533526fd6d3a382cd62fb5f1c983b1e7cb4c1794cece5cf10968c7aef61d1f8 java-1.8.0-openjdk-src-1.8.0.65-2.b17.el7_1.x86_64.rpm Source: 78aa5064e82314dc93f46cad65f69a89d82e70881811c19fe34bc68079056108 java-1.8.0-openjdk-1.8.0.65-2.b17.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 6 ***********************************************

1 0

Centos User Privileges.
by Alessandro Baggi 22 Oct '15

22 Oct '15

Hi list, I've installed C 7.1.1503 and I've noticed that simple user can run from bash shutdown -h now/reboot without getting special permission (sudo, su). The machine is a VM without GUI (tested also on physical machine). From reddit I've got a suggestion: removing/comment out "-session optional pam_systemd.so" in /etc/pam.d/system-auth the problem is solved. This is a bug? If not, why use this policy? There are security implication? Thanks in advance.

3 5

Re: [CentOS] CentOS7 - Serial Console and Flow Control
by m.roth＠5-cent.us 21 Oct '15

21 Oct '15

Mike - st257 wrote: > Hello List, > > I'm ironing out details to upgrade a few systems to CentOS7. > > My servers have BMC with Serial over LAN support. In C5 and C6, I determined how to have BIOS/POST, kernel, and serial console access. I'm reading up on the method to accomplish the pieces with C7. > > Presently SoL output works, so I see BIOS/POST messages and the GRUB boot list. > My changes to enable serial redirection for the kernel do not appear to work. > > I've made the following changes to GRUB2's /etc/grub/default config file: -- removed rhgb <snip> You did take out "quiet", too? mark

3 5

Centos 7 - "Device eth1 does not seem to be present, delaying initialization".
by Rafał Radecki 21 Oct '15

21 Oct '15

Hi All :) I have three servers, all with centos 7 installed 3 days ago. I need on them "old" naming scheme (ethX) for network interfaces, because of that: # grep GRUB_CMDLINE_LINUX /etc/sysconfig/grub GRUB_CMDLINE_LINUX="rd.lvm.lv=centos_node-XY/swap rd.lvm.lv=centos_node-XY/root rhgb quiet ipv6.disable=1 net.ifnames=0" net.ifnames=0 was added and afterwards I ran: grub2-mkconfig -o /boot/grub2/grub.cfg Then I created /etc/udev/rules.d/70-persistent-net.rules with content: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:98", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:99", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:9a", ATTR{type}=="1", KERNEL=="eth*", NAME="eth2" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:9b", ATTR{type}=="1", KERNEL=="eth*", NAME="eth3" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:81:37:0d", ATTR{type}=="1", KERNEL=="eth*", NAME="eth4" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:81:37:0e", ATTR{type}=="1", KERNEL=="eth*", NAME="eth5" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:46:ef:30", ATTR{type}=="1", KERNEL=="eth*", NAME="eth6" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:46:ef:31", ATTR{type}=="1", KERNEL=="eth*", NAME="eth7" After reboot it worked fine for all 3 servers, but some time later after another reboot I get: # systemctl status network network.service - LSB: Bring up/down networking Loaded: loaded (/etc/rc.d/init.d/network) Active: failed (Result: exit-code) since Tue 2015-10-20 20:37:30 CEST; 13h ago Process: 2034 ExecStart=/etc/rc.d/init.d/network start (code=exited, status=1/FAILURE) Oct 20 20:37:24 node-X systemd-sysctl[2049]: Overwriting earlier assignment of net/bridge/bridge-nf-call-ip6tables in file '/etc/sysctl.d/99-sysctl.conf'. Oct 20 20:37:25 node-X network[2034]: Bringing up loopback interface: [ OK ] Oct 20 20:37:25 node-X network[2034]: Bringing up interface eth1: ERROR : [/etc/sysconfig/network-scripts/ifup-eth] Device eth1 does not seem to be present, delaying initialization. Oct 20 20:37:25 node-X network[2034]: [FAILED] Oct 20 20:37:27 node-X network[2034]: Bringing up interface eth6: [ OK ] Oct 20 20:37:30 node-X network[2034]: Bringing up interface eth7: [ OK ] Oct 20 20:37:30 node-X systemd[1]: network.service: control process exited, code=exited status=1 Oct 20 20:37:30 node-X systemd[1]: Failed to start LSB: Bring up/down networking. Oct 20 20:37:30 node-X systemd[1]: Unit network.service entered failed state. I see now that the device for which I have an entry in udev: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:99", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" with MAC 00:1e:67:7f:9c:99 is not eth1 as it should be but 4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 00:1e:67:7f:9c:99 brd ff:ff:ff:ff:ff:ff and there is no eth1 in the system. # cat /etc/sysconfig/network-scripts/ifcfg-eth1 TYPE=Ethernet BOOTPROTO=static DEFROUTE=no PEERDNS=no PEERROUTES=no IPV4_FAILURE_FATAL=no IPV6INIT=no IPV6_AUTOCONF=no IPV6_DEFROUTE=no IPV6_PEERDNS=no IPV6_PEERROUTES=no IPV6_FAILURE_FATAL=no NAME=eth1 #UUID=e421e35f-3397-4a93-9449-0aa4e9ef9e1d DEVICE=eth1 ONBOOT=yes IPADDR=1.2.3.4 NETMASK=255.255.255.0 All pages which I found about "Device ethX does not seem to be present, delaying initialization" tell to correctly configure udev but it is correctly configured and it worked some time ago, only recently i started to get problems with this on 3 servers at once. I also noticed that on one of them when I saw the problem and rebooted the server eth1 was correctly assigned afterwards but after another reboot the message happened again. Quite strange to me :D Have you had similar problems on centos7? Any advice? Thanks :) BR, Rafal.

3 4

Libvirtd hooks in Centos 7
by Maikel van Leeuwen 21 Oct '15

21 Oct '15

I would like to create some libvirt hooks. This is so the hypervisor can execute some scripts during starting or stopping of a KVM guest. According to https://www.libvirt.org/hooks.html they must be present. However, it seems in Centos 7 these hooks are gone in /etc/libvirt/ Libvirtversion: 1.2.8-16.el7_1.4 OS version: CentOS Linux release 7.1.1503 (Core) Anyone how solved this riddle? I already asked this question on centos.org/forums, but didn't get much information apart from: "Unfortunately I suspect that CentOS libvirt packages have hooks disabled. I was looking for the same thing (needed some hooks for live migration) but it didn't work. However, after installing qemu from oVirt repository, hooks started working..." Anybody has more information then this given answer? -- Maikel van Leeuwen

2 1

dia under CentOS7
by J Martin Rushton 21 Oct '15

21 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Does anyone know if dia is going to be released into EPEL7? If it is not, is there an equivalent application for simple diagramming? Thanks -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJWJpi+AAoJEAF3yXsqtyBlXbAP/0TTWXfhec7eP8Mkv+m0awVA s/ahKMKLIL41xlf/8IU3+dT9a9OADvPPheFAy8kXlb3GndevaLqYOjtEa2fKvQKc WsuiL8bLMgAuLeCfUqRzXoEmC7wzvZyg3IlCa8ZMznkUH5xNbGwdw53RIoP711lq yWJBMFgmQ6CnLkQMsUF5LCj5/R2U25udL+R+mylRQAm/xY7lqxThyLzbS0DXPct+ dhTTgL6+1ik+GPRqC9SEehQhX4ZDDDRKqoTy3ygwwYEB5HPaITWib1GwrFF2zWfJ LQA7gH4yCBWN1th+OvlsK5LrjEX2/UylngJx+rnG38D07lCwK6pOOCN5f62nKNtd Q3ZIySMdQQf7JVCCQjifnuHsJdqzWwXx2ssakDyWGQzZ2vpLHg/mPDMd7FhI9SCS awWQ7r5DefTwFVjBGkGr4dlZ8jJz+SzXDxO6LKhy1R10bs3jVzh7rjrXSwQLK6fy cPhgf79S2Opcp10HgINvxqopQFffA2oqW03dcpLiej0hkBHUJq0pZXvRB7KXt6a9 /p5ExFWmhBF01qlxoJKjmLIkSGScjrIcmz5zHcaYjRME/uVRhdfcADmZKwia+4NR iPB0KIu4HRZqIBnFn0ONJyafODuckmT8FMNgAI0ZhvZ04wnUVernX2vPHv8/IDvM D2ou524tVxPmZe/BT698 =XBYt -----END PGP SIGNATURE-----

4 6

centos 7, nm, wifi
by m.roth＠5-cent.us 21 Oct '15

21 Oct '15

Hi, folks, Haven't found the answer to this in googling: I want wifi never to be turned up. I mean, this is on a workstation that's hardwired, and doesn't have wifi.... Obviously, I want this persistent. mark

1 0

CentOS-announce Digest, Vol 128, Issue 5
by centos-announce-request＠centos.org 21 Oct '15

21 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:1915 CentOS 7 ixgbe Enhancement Update (Johnny Hughes) 2. CESA-2015:1917 Important CentOS 6 libwmf Security Update (Johnny Hughes) 3. CESA-2015:1917 Important CentOS 7 libwmf Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 20 Oct 2015 16:45:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1915 CentOS 7 ixgbe Enhancement Update Message-ID: <20151020164527.GA31412(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1915 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1915.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 626f3f739478522b7510d177d8d9ccd5aed1c2cc60b9f4660c58c07622e35741 kmod-ixgbe-4.0.3-1.el7_1.x86_64.rpm Source: a7b25dcbfcccf7735926a3cff9980babc83d7c1b774445771891d07bb8f9ca7d ixgbe-4.0.3-1.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 20 Oct 2015 17:05:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1917 Important CentOS 6 libwmf Security Update Message-ID: <20151020170525.GA32002(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1917 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1917.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8094aac8d2a6cd87009e8c0fb44f9097b21ad843d5125fac8a3f4a9a5e8242c4 libwmf-0.2.8.4-25.el6_7.i686.rpm f4920bee03a0712ac222418ee49ffb5ed24779aec168b8efff64ce189cbdc5d0 libwmf-devel-0.2.8.4-25.el6_7.i686.rpm f216434c249f954b2066a0dfdaf67f64fa2aff5a0a2c393e7429f1f1399aca9b libwmf-lite-0.2.8.4-25.el6_7.i686.rpm x86_64: 8094aac8d2a6cd87009e8c0fb44f9097b21ad843d5125fac8a3f4a9a5e8242c4 libwmf-0.2.8.4-25.el6_7.i686.rpm 393e871409aaa5b9b605030e7cd5a31e143b5857f6bbc1b3323caf61355947b7 libwmf-0.2.8.4-25.el6_7.x86_64.rpm f4920bee03a0712ac222418ee49ffb5ed24779aec168b8efff64ce189cbdc5d0 libwmf-devel-0.2.8.4-25.el6_7.i686.rpm 1da8df05d2f2be015715c6441d86761c4ba23c46c4beceb2d8115ae66cac2da6 libwmf-devel-0.2.8.4-25.el6_7.x86_64.rpm f216434c249f954b2066a0dfdaf67f64fa2aff5a0a2c393e7429f1f1399aca9b libwmf-lite-0.2.8.4-25.el6_7.i686.rpm bbd4a2306e50b317e63f817fd09ab6ea3d059e04f0880ff0df1334b59fcfcb29 libwmf-lite-0.2.8.4-25.el6_7.x86_64.rpm Source: 78f1f72b8daca54fa0194c4ddf6c6fd4b9519697cb8ac32fdf83c2c4c33c13a1 libwmf-0.2.8.4-25.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 20 Oct 2015 19:06:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1917 Important CentOS 7 libwmf Security Update Message-ID: <20151020190655.GA41142(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1917 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1917.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5ed570d4fde8b82a8afa9e80f583c4e7b13a97082a5db055f8be2090e93715f1 libwmf-0.2.8.4-41.el7_1.i686.rpm b1c055db91f3bffa284bd70320e160b1ca033d6583fc9c7277add1320c5cbf6c libwmf-0.2.8.4-41.el7_1.x86_64.rpm 162311177b047ae561d7ad8582aeb133d495cde220d98148b845d6f95ffdccb7 libwmf-devel-0.2.8.4-41.el7_1.i686.rpm a30366fb0ea3038edbd37fbf1c5af6dbf8aa916b2a0f44c3688eb0a7483fe277 libwmf-devel-0.2.8.4-41.el7_1.x86_64.rpm 28902aad9e43c2180326989bdfdf97cce6c9e9ea6ddcd7ec8bcb199dd1af5b8f libwmf-lite-0.2.8.4-41.el7_1.i686.rpm e885f66e6535eac38beee7735af25fc953add506f2cbd11bc4d9e6c6c93b0df2 libwmf-lite-0.2.8.4-41.el7_1.x86_64.rpm Source: 13e0550e1860c4c2e933933fe633c8c9cb23c2fe8891557dbc1a0d846d08c3cd libwmf-0.2.8.4-41.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 5 ***********************************************

1 0

Google Chrome Issues on CentOS 6
by Tim Evans 21 Oct '15

21 Oct '15

I've installed Google Chrome using the Richard Lloyd 'install-chrome.sh' script (http://chrome.richardlloyd.org.uk/) and am finding a couple of nagging issues. (Current install is google-chrome-stable-46.0.2490.71-1.x86_64). First, every time I shut down Chrome and start it back up, it whines about not having been shut down "properly." Second, and worse, at start up, it complains about not finding my profile, then doesn't remember any logins/passwords. Even after re-entering such for several sites, the above repeats next time Chrome starts. Anyone seen/solved this? -- Tim Evans |5 Chestnut Court 443-394-3864 |Owings Mills, MD 21117

4 6

CentOS 6 update issues
by John Cenile 21 Oct '15

21 Oct '15

Hello all, I manage a few servers overseas that are running CentOS 6. When performing a yum update, it fails because it's trying to download from: mirror.centos.org/centos/*6.6*/extras/x86_64/repodata/repomd.xml Which fails due to the fact that the entire 6.6 directory is empty on all of the mirrors I have checked. From what I can tell it should be using: mirror.centos.org/centos/*6*/extras/x86_64/repodata/repomd.xml Does anyone have any idea why this would be happening? Obviously changing the CentOS-Base file to use 'baseurl' rather than 'mirrorlist' is a workaround, but I would prefer a more permanent solution, and would like to know why this is happening. Thanks in advance.

8 16

openssl with FIPS140-2 ??
by Fred Smith 20 Oct '15

20 Oct '15

I see that CentOS does not provide the FIPS140-2 package for openSSL. I don't know if RH provides it or not. Can someone advise me on the best way to get it onto a CentOS or RHEL system, without breaking things? I'd also appreciate ANY related wisdom that's available, having pretty much NO wisdom of my own. thanks! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------

2 2

centos wiki strangeness.
by Denniston, Todd A CIV NAVSURFWARCENDIV Crane 20 Oct '15

20 Oct '15

In preparing to answer a question about some yum undesired behavior, I wanted to reference fastest mirror info, but when I went to https://wiki.centos.org/PackageManagement/Yum/FastestMirror I find all the text has been squished to the right hand side of the page and made 1 word wide all the way down. The https://wiki.centos.org/FrontPage looks similar but perhaps it is a little better? Or is this an issue of looking at it with IE? Even when this disclaimer is not here: I am not a contracting officer. I do not have authority to make or modify the terms of any contract.

3 3

strange diskspace consuming
by Götz Reinicke - IT Koordinator 20 Oct '15

20 Oct '15

Hi, I do a tgz-backup some maildir-folders with n*1000 off files and a lot of GB in storage. The backuped maildirs are removed after the tar. My assumption was, that the free diskspace should be bigger after that, but from what I get with df, it looks like I'm loosing space. Currently the tgz is saved on the same disk/mountpoint. Any hint, why removing the maildirs dont free diskspace as expected? It is still an ext3 filesystme Regards and thanks for hints . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

4 3

Can I force yum to only use http.
by Styma, Robert E (Robert) 20 Oct '15

20 Oct '15

Our outsourced IT department has decided to use white listing on the firewalls for outbound ftp. I was given a list of sites our lab had accessed via ftp and eventually tracked them down to Linux machines running yum. They are all CentOS 5 or 6 with a smattering of 7. It is impractical to list all the possibilities since they change on a regular basis. Also any 3rd party repos we need are another ball of wax. Various Google searches and the manual page have not shown me how to avoid using ftp mirrors. I have considered taking out the ftp-proxy information so that the ftp cannot get out, but I suspect it will just hang waiting for a response. Does anyone have any suggestions on ways to tell yum not to use ftp as the download mechanism? Thank you in advance. Bob

7 8

Metadata checksum
by kotipalli venkatesh 20 Oct '15

20 Oct '15

Hi All I am successfully spin the VM with Centos 6.2 ISO. When i am trying to download the packages we are facing the issues. The error message copy paste below, *[root@localhost ~]# yum install ntp* *Loaded plugins: fastestmirror, refresh-packagekit, security* *Loading mirror speeds from cached hostfile* * * base: centos.excellmedia.net <http://centos.excellmedia.net>* * * extras: centos.excellmedia.net <http://centos.excellmedia.net>* * * updates: centos.excellmedia.net <http://centos.excellmedia.net>* *base | 3.7 kB 00:00* *base/primary_db | 4.6 MB 00:01* *http://centos.excellmedia.net/6.7/os/x86_64/repodata/11bcf3233241e37e1a0e04d2fde8a609215059b5b0319fd660f796d462bbe6a8-primary.sqlite.bz2 <http://centos.excellmedia.net/6.7/os/x86_64/repodata/11bcf3233241e37e1a0e04…>: [Errno -1] Metadata file does not match checksum* *Trying other mirror.* These are the commands run but noluck. 1. yum clean all 2. yum clean metadata 3. rpm --rebuilddb *Note: Not only Centos 6.2 iso, We are trying to 6.5 iso also but no luck.* Please guys help me. Regards, Venkatesh.k

1 0

PV AMI for CentOS 7
by Jo Rhett 20 Oct '15

20 Oct '15

Is there any chance we could get a PV AMI for CentOS 7 to match the HVM version at https://aws.amazon.com/marketplace/pp/B00O7WM7QW/ref=srh_res_product_title?… We have prepurchased reserved instances based on older PV machines (m1, c1, etc) It would be very very helpful to have a PV AMI so we could migrate to CentOS 7 on those image types. https://bugs.centos.org/view.php?id=9499 <https://bugs.centos.org/view.php?id=9499> -- Jo Rhett Net Consonance : net philanthropy to improve open source and internet projects.

2 5

Exists some problem with cronjobs under CentOS7
by C. L. Martinez 19 Oct '15

19 Oct '15

Hi all, I am having strange problems with my cron jobs in my CentOS7 kvm host. After the initial install and first boot, any cron job configured had run (including cron tasks installed by some rpm packages). Last cron's entry log is: Oct 9 17:01:01 santgraal CROND[9014]: (root) CMD (run-parts /etc/cron.hourly) Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9014]: starting 0anacron Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9023]: finished 0anacron Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9014]: starting 0yum-hourly.cron Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9029]: finished 0yum-hourly.cron cron service is running without problems: [root@coskvm01 log]# systemctl status crond crond.service - Command Scheduler Loaded: loaded (/usr/lib/systemd/system/crond.service; enabled) Active: active (running) since Sun 2015-10-11 11:49:41 UTC; 28min ago Main PID: 5124 (crond) CGroup: /system.slice/crond.service └─5124 /usr/sbin/crond -n Forcing to run cron tasks editing root's crontab with "crontab -e", it doesn't works also. Is this a bug?? Or do I need to install some package apart of: cronie-1.4.11-13.el7.x86_64 cronie-anacron-1.4.11-13.el7.x86_64 crontabs-1.11-6.20121102git.el7.noarch ???

12 34

snmpd exec issue
by Leandro 19 Oct '15

19 Oct '15

Hello guys , I was trying to get a command output from my Centos 6 server using the snmpd "exec" section. The line added to snmpd.conf id: exec get_whitelist /bin/cat /home/snmp_user/whitelist.txt Afer trying to get the resut performing the snmpwalk client form another server I always got "permission denied" After reading some forums I founded that disabling selinux It works. My question is .. What is the proper way to achieve snmpd executing some commands ? In my case it is working now but ... Im not sure if disabling selinux is the best way. Regards. Leandro.

2 1

Debugging Kernel Problems
by Tod 19 Oct '15

19 Oct '15

Not sure if this is the correct subject line but my recently installed Centos build (Linux localhost.localdomain 3.10.0-229.14.1.el7.x86_64 #1 SMP Tue Sep 15 15:05:51 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux) periodically just freezes - completely locks up, no activity, nothing in the logs, just stops dead requiring a power off and reboot. I've really looked around to try and find the _best_ way to set up debugging but there is a lot written about it from a lot of parties but I'm not sure who the definitive source is. I did try booting with the 'CentOS Linux (3.10.0-229.14.1.el7.x86_64) 7 (Core) with debugging' option but that really didn't add anything to finding a solution. Dmesg did report this however: dmesg|grep debug [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-3.10.0-229.14.1.el7.x86_64 root=UUID=1928d2da-784c-4b18-868c-f9858bceea6d ro crashkernel=auto rhgb quiet LANG=en_US.UTF-8 systemd.debug [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-3.10.0-229.14.1.el7.x86_64 root=UUID=1928d2da-784c-4b18-868c-f9858bceea6d ro crashkernel=auto rhgb quiet LANG=en_US.UTF-8 systemd.debug [ 0.940176] ehci-pci 0000:00:12.2: debug port 1 [ 0.946472] ehci-pci 0000:00:13.2: debug port 1 [ 1.238335] systemd[1]: Unknown kernel switch systemd.debug. Ignoring. [ 5.083981] SELinux: initialized (dev debugfs, type debugfs), uses genfs_contexts [ 5.206423] systemd[1]: Unknown kernel switch systemd.debug. Ignoring. Which I found interesting. So, can anyone point me to a detailed guide to debugging what's going on with my build that will help me solve my locking problem? BTW, I think it might be my wireless Atheros equipped PCI card (dmesg|grep -i atheros [ 2.231264] ath5k: phy0: Atheros AR2414 chip found (MAC: 0x79, PHY: 0x45) but can't be sure because I've not any real proof that's the issue. Thanks in advance for your patience and assistance.

4 4

Re: [CentOS] [OT] fail2ban update (epel) breaks logrotate
by tony＠softins.co.uk 18 Oct '15

18 Oct '15

In article <n009u2$85v$1(a)softins.softins.co.uk>, Tony Mountifield <tony(a)softins.co.uk> wrote: > Apologies, this is slightly off-topic being to do with an EPEL package, > although it's running on CentOS6, so I thought others here might have come > across this issue. > > I have five CentOS 6 systems running fail2ban from EPEL, and this > package was updated in the last week from 0.9.2-1.el6 to 0.9.3-1.el6. > > On all these systems, I received an error from logrotate this morning. > > [root@system ~]# /usr/bin/fail2ban-client flushlogs > logs: rolled over > Traceback (most recent call last): > File "/usr/bin/fail2ban-client", line 470, in <module> > if client.start(sys.argv): > File "/usr/bin/fail2ban-client", line 440, in start > return self.__processCommand(args) > File "/usr/bin/fail2ban-client", line 281, in __processCommand > return self.__processCmd([cmd]) > File "/usr/bin/fail2ban-client", line 185, in __processCmd > client.close() > File "/usr/lib/python2.6/site-packages/fail2ban/client/csocket.py", line 55, in close > self.__csock.sendall(CSPROTO.CLOSE + CSPROTO.END) > File "<string>", line 1, in sendall > socket.error: [Errno 32] Broken pipe > [root@system ~]# OK, on further investigation, I found that the fail2ban service had not been restarted by the update script. So I restarted it, and got the same error as it was stopping, but it started up ok. After restarting, the error no longer occurs: [root@system ~]# ps -fC fail2ban-server root 7528 1 0 Sep23 ? 00:10:06 /usr/bin/python -Es /usr/bin/fail2ban-server -s /var/run/fail2ban/fail2ban.sock -p /var/run/fail2ban/fail2ban.pid -x -b [root@system ~]# service fail2ban restart Stopping fail2ban: Traceback (most recent call last): File "/usr/bin/fail2ban-client", line 470, in <module> if client.start(sys.argv): File "/usr/bin/fail2ban-client", line 440, in start return self.__processCommand(args) File "/usr/bin/fail2ban-client", line 281, in __processCommand return self.__processCmd([cmd]) File "/usr/bin/fail2ban-client", line 185, in __processCmd client.close() File "/usr/lib/python2.6/site-packages/fail2ban/client/csocket.py", line 55, in close self.__csock.sendall(CSPROTO.CLOSE + CSPROTO.END) File "<string>", line 1, in sendall socket.error: [Errno 32] Broken pipe [FAILED] Starting fail2ban: [ OK ] [root@system ~]# ps -fC fail2ban-server root 11647 1 1 15:30 ? 00:00:00 /usr/bin/python -Es /usr/bin/fail2ban-server -s /var/run/fail2ban/fail2ban.sock -p /var/run/fail2ban/fail2ban.pid -x -b [root@system ~]# /usr/bin/fail2ban-client flushlogs logs: rolled over [root@system ~]# Hope this info is useful to others... Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

1 0

[OT] fail2ban update (epel) breaks logrotate
by tony＠softins.co.uk 18 Oct '15

18 Oct '15

Apologies, this is slightly off-topic being to do with an EPEL package, although it's running on CentOS6, so I thought others here might have come across this issue. I have five CentOS 6 systems running fail2ban from EPEL, and this package was updated in the last week from 0.9.2-1.el6 to 0.9.3-1.el6. On all these systems, I received an error from logrotate this morning. It appears that something has broken the flushlogs option in fail2ban-client: [root@system ~]# cat /etc/logrotate.d/fail2ban # # Gentoo: # http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-analyzer/fail2b… # # Debian: # https://github.com/fail2ban/fail2ban/blob/debian/debian/fail2ban.logrotate # # Fedora view: # http://pkgs.fedoraproject.org/cgit/fail2ban.git/tree/fail2ban-logrotate /var/log/fail2ban.log { rotate 7 missingok compress postrotate /usr/bin/fail2ban-client flushlogs 1>/dev/null || true endscript } [root@system ~]# /usr/bin/fail2ban-client flushlogs logs: rolled over Traceback (most recent call last): File "/usr/bin/fail2ban-client", line 470, in <module> if client.start(sys.argv): File "/usr/bin/fail2ban-client", line 440, in start return self.__processCommand(args) File "/usr/bin/fail2ban-client", line 281, in __processCommand return self.__processCmd([cmd]) File "/usr/bin/fail2ban-client", line 185, in __processCmd client.close() File "/usr/lib/python2.6/site-packages/fail2ban/client/csocket.py", line 55, in close self.__csock.sendall(CSPROTO.CLOSE + CSPROTO.END) File "<string>", line 1, in sendall socket.error: [Errno 32] Broken pipe [root@system ~]# Has anyone else found this today? And even better know how to fix it? There doesn't seem to be any current activity in epel-users, and I found the update announcement in epel-package-announce, but didn't see anything about this in the "IMPORTANT incompatible changes" section. Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

1 0

CentOS-announce Digest, Vol 128, Issue 4
by centos-announce-request＠centos.org 17 Oct '15

17 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Update for centos-release-openstack (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 16 Oct 2015 19:14:42 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Update for centos-release-openstack Message-ID: <56213E92.2050104(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The CentOS Cloud SIG ( https://wiki.centos.org/SpecialInterestGroup/Cloud ) is releasing a new OpenStack metadata package called centos-release-openstack-kilo that replaces centos-release-openstack. Metadata packages in CentOS are used to setup the repositories used by the package manager ( yum ) and the signing keys used to validate content installed from the corresponding repositories. The present metadata package, called centos-release-openstack, does not allow for us to have multiple OpenStack versions available to users, without adding many layers of complexity to the install and update process. This new OpenStack metadata package ( centos-release-openstack-kilo ) effectively sets up the mechanics required for us to deliver OpenStack Liberty as an alternative to users who might prefer the newer codebase, once it's available. However, we would like to still support the users who have a Kilo install at the moment, and would like to run that as long as updates are available for Kilo itself. Kilo to Liberty update process will require administrative actions, for details see "Upgrade Notes" in upstream release notes https://wiki.openstack.org/wiki/ReleaseNotes/Liberty The metadata rpm for OpenStack Liberty will be called centos-release-openstack-liberty and users will be able to install it once released. For more information on our progress with that effort, please join the Cloud SIG meetings that are held weekly on #centos-devel on irc.freenode.net or join us on the centos-devel mailing list ( https://lists.centos.org/ ). The updated metadata package, centos-release-openstack-kilo, is now available on all CentOS mirrors, and can be installed by running either 'yum update centos-release-openstack' or 'yum install centos-release-openstack-kilo' - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJWIT6SAAoJEI3Oi2Mx7xbt5OUH/AoA9RW3H2w2YxzRFDkZJOS9 GFuxBSxX7C1hQ+u/5XQlEYx/hj4oaJSeWEBd5bOCyCxVJRSFakUy2LjenErbaX5n QiUdYtaDh2MP72doiGTbOyMpRbJT9jnbuSrSzd4t9oEVGOWyP+gLlaU0QhL4ST3t 01m1Z6vxd0VYmXWpGYH1gK65GEymYNb5vE/MwLFq+Apm2DXELKoPgtwRkwyiT19d aV+xT4f2qLrtI5YMVKspjNxKYOX72yExzrbcaUersTbTmsJB9zCrbi3sqAy/BOv9 jnCpG677EHre6R23ipQ36rUSi401FC8dnN89kO3+joUBtqsPYZw6P8p9brKKC68= =T+80 -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 4 ***********************************************

1 0

Incoming rsync connection attempts
by Jeff Boyce 16 Oct '15

16 Oct '15

Greetings - In my logwatch report this morning I noticed reference to an attempt to connect to rsync from an external IP address. It doesn't appear that the connection was successful based on correlating information between /var/log/secure and /var/log/messages. But I am looking for some suggestions for implementing more preventative measures, if necessary. The log information from the last few attempts are shown below. /var/log/secure Oct 13 00:14:08 Bison xinetd[2232]: START: rsync pid=15306 from=180.97.106.36 Oct 13 01:55:51 Bison xinetd[2232]: START: rsync pid=15343 from=85.25.43.94 Oct 13 23:25:35 Bison xinetd[2232]: START: rsync pid=16548 from=114.119.37.86 /var/log/messages Oct 13 00:14:08 Bison rsyncd[15306]: rsync: unable to open configuration file "/etc/rsyncd.conf": No such file or directory (2) Oct 13 00:14:08 Bison rsyncd[15306]: rsync error: syntax or usage error (code 1) at clientserver.c(923) [receiver=3.0.5] Oct 13 01:55:51 Bison rsyncd[15343]: rsync: unable to open configuration file "/etc/rsyncd.conf": No such file or directory (2) Oct 13 01:55:51 Bison rsyncd[15343]: rsync error: syntax or usage error (code 1) at clientserver.c(923) [receiver=3.0.5] Oct 13 23:25:35 Bison rsyncd[16548]: rsync: unable to open configuration file "/etc/rsyncd.conf": No such file or directory (2) Oct 13 23:25:35 Bison rsyncd[16548]: rsync error: syntax or usage error (code 1) at clientserver.c(923) [receiver=3.0.5] There is no /etc/rsyncd.conf file present on the system, so I can see why the connection wasn't successful. Our backups get pushed to this one from other servers using rsync. This is on a RHEL 3.9 box (Dell PE2600, year 2004) that is primarily used as backup storage within our LAN. I will retire it when it dies, until then it runs fairly maintenance free. I do have a public IP address assigned to the WAN because we have a vsftp server running on it for transferring files back and forth to a few clients, and I occasionally access the server remotely. I am wondering if there is anything relatively simple that I can do to address these attempted connections, until I have time to move our vsftp server from it and remove the public IP address from the WAN? Thanks. Jeff -- Jeff Boyce Meridian Environmental

5 4

Semi-OT: torque, pbs_mom, cpuset, loglevel
by m.roth＠5-cent.us 16 Oct '15

16 Oct '15

We're running the current version of torque. On our small supercomputer (an SGI), no updates to torque since July, but just recently - someone may be trying something new - /var/log/messages is on-and-off being spammed with Oct 15 18:02:04 servername pbs_mom: LOG_INFO::create_job_cpuset, creating cpuset for job 1971[656].york.cit.nih.gov: 1 cpus (12), 1 mems (1) and I mean thousands of lines. I tried to adjust the loglevel of pbs_mom, but it appeared to make *no* change, and their "documentation" and "manpage" simply does not describe what message level each value of loglevel produces. Anyone have a clue? I've been googling, and not finding anything of use. mark

1 0

LSI driver and SSD status error in IPMI
by Birta Levente 16 Oct '15

16 Oct '15

Hi to all I have a supermicro server with LSI 3108 with - 2x300GB SAS spin drive in raid1 (virtual drive 0) - 2x300GB SAS spin drive in raid1 (virtual drive 1) - 2x200GB Intel SSD DC S3710 drives configured as JBOD in LSI bios In the IPMI storage health status eveything looks fine until I boot into Centos 7.1 (unfortunatelly I didn't try other OS, but also I'm not interested in other) After boot the status for the SSDs changing in ERROR The same thing happen when boot with the install CD Otherwise everything works fine. Is this hurt? Can I do something? Also I tried to install the latest LSI driver (06.809.18.00), but seems it is not loaded after restart: As the official driver install guide say, before the driver install, I installed the dkms from the epel repo. /var/log/messages: systemd-modules-load: Failed to find module 'override megaraid_sas 3.10.* weak-updates/megaraid_sas' /etc/modules-load.d/megaraid_sas.conf: override megaraid_sas 3.10.* weak-updates/megaraid_sas #modinfo megaraid_sas filename: /lib/modules/3.10.0-229.14.1.el7.x86_64/kernel/drivers/scsi/megaraid/megaraid_sas.ko description: LSI MegaRAID SAS Driver author: megaraidlinux(a)lsi.com version: 06.805.06.01-rh2 license: GPL rhelversion: 7.1 srcversion: C0124BBE9453A621D4086DB alias: pci:v00001000d0000005Fsv*sd*bc*sc*i* alias: pci:v00001000d0000005Dsv*sd*bc*sc*i* alias: pci:v00001000d0000002Fsv*sd*bc*sc*i* alias: pci:v00001000d0000005Bsv*sd*bc*sc*i* alias: pci:v00001028d00000015sv*sd*bc*sc*i* alias: pci:v00001000d00000413sv*sd*bc*sc*i* alias: pci:v00001000d00000071sv*sd*bc*sc*i* alias: pci:v00001000d00000073sv*sd*bc*sc*i* alias: pci:v00001000d00000079sv*sd*bc*sc*i* alias: pci:v00001000d00000078sv*sd*bc*sc*i* alias: pci:v00001000d0000007Csv*sd*bc*sc*i* alias: pci:v00001000d00000060sv*sd*bc*sc*i* alias: pci:v00001000d00000411sv*sd*bc*sc*i* depends: intree: Y vermagic: 3.10.0-229.14.1.el7.x86_64 SMP mod_unload modversions signer: CentOS Linux kernel signing key sig_key: E9:9F:C4:37:BD:9C:BF:B4:F1:B1:DA:87:C1:57:FF:66:56:9B:EE:66 sig_hashalgo: sha256 parm: lb_pending_cmds:Change raid-1 load balancing outstanding threshold. Valid Values are 1-128. Default: 4 (int) parm: max_sectors:Maximum number of sectors per IO command (int) parm: msix_disable:Disable MSI-X interrupt handling. Default: 0 (int) parm: msix_vectors:MSI-X max vector count. Default: Set by FW (int) parm: allow_vf_ioctls:Allow ioctls in SR-IOV VF mode. Default: 0 (int) parm: throttlequeuedepth:Adapter queue depth when throttled due to I/O timeout. Default: 16 (int) parm: resetwaittime:Wait time in seconds after I/O timeout before resetting adapter. Default: 180 (int) parm: smp_affinity_enable:SMP affinity feature enable/disbale Default: enable(1) (int) Can somebody tell me how to get the driver to work? Thanks, -- Levi

1 0

Re: [CentOS] Firefox Flash Update = No Flash
by pro alias 16 Oct '15

16 Oct '15

On Tue, Oct 13, 2015 at 2:48 PM, pro alias <proalia(a)gmail.com> wrote: > None of my Centos 5 boxen can show flash since the update this morning. > Am I alone or do other people have this issue ?? > Centos 7 boxes work properly. I haven't looked at RHEL 6 boxes yet. > > Although I miss using flash on these boxes, it IS a great security > upgrade.... > > Installing the previous version of flash-plugin restores the functionality. It appears to be a Glib2 problem, this version was apparently compiled against another glib2. It wants libgio-2.0.so. Copying the so from /usr/lib/vmware to /usr/lib64/ stopped it's complaining but flash still didn't work. Another good reason to upgrade the remaining Centos 5.11 boxes to rhel/centos 7.1.

1 0

cant reattach to screen session since upgrade of screen rpm?
by Jason Welsh 15 Oct '15

15 Oct '15

hey folks, running CentOS release 6.6 (Final) and I was upgrading some rpms and now since screen (and probably some others) were upgraded, I can no longer reattach to my screen session I had running. monsterjam:~ $ rpm -qi screen Name : screen Relocations: (not relocatable) Version : 4.0.3 Vendor: CentOS Release : 18.el6 Build Date: Thu 23 Jul 2015 01:41:46 PM EDT Install Date: Thu 15 Oct 2015 01:15:28 PM EDT Build Host: c6b8.bsys.dev.centos.org Group : Applications/System Source RPM: screen-4.0.3-18.el6.src.rpm monsterjam:~ $ screen -ls There is a screen on: 13262.stuff (Detached) 1 Socket in /var/run/screen/S-jason. when I try to reattach, it just hangs.. monsterjam:~ $ screen -dr 13262.stuff ive found the following and tried them all.. Try detaching it first with screen -d. If that doesn't work, you can try, in increasing order of emphasis, -d|-D [pid.tty.host] does not start screen, but detaches the elsewhere running screen session. It has the same effect as typing "C-a d" from screen's controlling terminal. -D is the equivalent to the power detach key. If no session can be detached, this option is ignored. In combination with the -r/-R option more powerful effects can be achieved: -d -r Reattach a session and if necessary detach it first. -d -R Reattach a session and if necessary detach or even create it first. -d -RR Reattach a session and if necessary detach or create it. Use the first session if more than one session is available. -D -r Reattach a session. If necessary detach and logout remotely first. -D -R Attach here and now. In detail this means: If a session is running, then reattach. If necessary detach and logout remotely first. If it was not running create it and notify the user. This is the author's favorite. -D -RR Attach here and now. Whatever that means, just do it. but none of them seem to work.. any ideas? Jason

3 3

selinux commands fail on low memory box
by Tim Dunphy 15 Oct '15

15 Oct '15

Hey all, I have 3 web servers hosted at Digital Ocean that all have the same amount of memory at 512MB. They're all running CentOS 7. They are low powered apache servers and don't really need more than that. All they're doing is serving the web, no database on those hosts at all. On the first two hosts I seem to have no trouble running SELinux related commands. It's only on the 3rd web server where I seem to have any trouble at all running the SELinux commands I want to keep the box secure. On box #3 all SElinux commands end up the same way. For example: [root@ops3:~] #semodule -i newrelic.pp Killed And that happened when I had about 280MB free: [root@ops3:~] #free -m total used free shared buff/cache available Mem: 490 96 286 28 107 285 Swap: 0 0 0 Typically what I'll do is stop all the main services on this machine to free up some memory to run the command I want. But to no avail! The commands die with the same errors every time. Whereas on the other two hosts I can run the same commands with only as little as 30 or 40MB free! So would this be some inherent flaw with this box? That the only way to get around it is to scrap it and build a replacement? Not that hard to do. But before I took that measure I was wondering if there was any hocus-pocus I could try that I might not be aware of that could alleviate this scenario. Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

3 3

copying to a local mirror / repository
by Richer, Mark (CIV) 15 Oct '15

15 Oct '15

I am using CentOS on a private network which can’t access the Internet so I want to create a local repository of packages on one or more DVDs, and get it installed on the private network. Someone had done this for CentOS 7, but not for CentOS 6. I have a VM running 6 so I am trying to create it for the previous major version. I thought there would be some obvious instructions on the preferred/recommended method for doing this, but I have failed to find them. Can anyone respond with any useful links on how best to do this or provide the recommended set of steps. I have seen various postings on this topic, but not anything official from the CentOS community. thanks much, Mark MARK H RICHER, MS CS Faculty Research Associate Computer Science Department Naval Postgraduate School - National Capital Region (NCR) 703-275-8533 (o) 571.303.9498 (m) mhricher(a)nps.edu<mailto:mhricher@nps.edu>

3 3

abrt-auto-reporting
by Günther J. Niederwimmer 15 Oct '15

15 Oct '15

Hello, centos 7(1) I have a question about abrt-auto-reporting? should this work normal ? I have on my System Problems to report the Errors. Thanks for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

2 1

CentOS 6 + Updates (HVM) AMI Breaks on attached instance storage
by Robert Bush 14 Oct '15

14 Oct '15

Where do i file a bug report for a centOS 6 ami on aws? Thanks, Robert

1 0

tcp wrappers Question..
by Jason Welsh 14 Oct '15

14 Oct '15

hey folks, I keep seeing this on the internet "The user name lookup feature of TCP Wrappers uses identd to identify the username of the remote host. By default, this feature is disabled, as identd may appear hung when there are a large number of TCP connections." but I cant seem to find out how/where to enable said feature. Jason

3 3

redistribution of isolinux binaries
by Brian Reichert 14 Oct '15

14 Oct '15

I've been making my own custom RHEL / CentOS boot CDs for years, and all of the instructions for such work call out to take a distro's CD, and copy key files from it. Among those files are those that I think are associated with the the SYSLINUX/ISOLINUX project; e.g.: http://mirror.centos.org/centos/6/os/x86_64/images/ http://mirror.centos.org/centos/6/os/x86_64/isolinux/ Two questions: - As the SYSLINUX project is GPLed, to hand out binaries implies the sources are available somewhere, but I can't find an official point of reference on where the corresponding sources are. - Further, near as I can tell, the SYSLINUX project makes no reference to Kickstart, but I do see Fedora refer to Kickstart: https://fedoraproject.org/wiki/Features/SyslinuxOption This has me wondering if Fedora maintains local changes to the SYSLINUX project. If it does, that further lends to my interest in tracking down the utilized sources. Does anyone have any insight on these topics, or, at the very least, a better forum to pursue them? -- Brian Reichert <reichert(a)numachi.com> BSD admin/developer at large

5 12

Help needed in CentOS 6.7 installation
by Amar 14 Oct '15

14 Oct '15

Hi, I have a high-end (32 GB RAM, 2 TB hard-disk) machine where I wanted to install CentOS 6.7 operating system. I am also using a nvidia 1 GB GPU from ASUS. With all this, I am not able to instal CentOS 6.7, The last message that shows on my screen, when I try installing, is "[drm] Initialized i915 1.6.0 20140905 for 0000:00:02.0 on mirror 1". Any suggestions? Regards

2 1

Firefox Flash Update = No Flash
by pro alias 13 Oct '15

13 Oct '15

None of my Centos 5 boxen can show flash since the update this morning. Am I alone or do other people have this issue ?? Centos 7 boxes work properly. I haven't looked at RHEL 6 boxes yet. Although I miss using flash on these boxes, it IS a great security upgrade....

4 3

Firewalld
by Emmett Culley 13 Oct '15

13 Oct '15

I just noticed that when rebooting a CentOS 7 server the firewall comes back up with both interfaces set to REJECT, instead of the eth1 interface set to ACCEPT as defined in 'permanent' firewalld configuration files. All servers are up to date. By "just noticed" I mean that I finally investigated why a newly rebooted VM failed to allow NFS connections. Prior to doing that. I'd been stopping the firewall to get access, then restarting the firewall after setting the eth1 interface to ACCEPT. This time I took a look at iptables and found that eth1 was set to REJECT, before I stopped the firewall. Because it was obvious that firewalld had been started by systemd by noticing the output of iptabled -nvL had the same set of rules you can see when firewalld is restarted, except that after restart interface eth1 is set to ACCEPT. I assume there must be a different set of configuration files that are accessed upon reboot than those accessed upon firewalld restart. Note that all CentoOS 7 machines (VM and hardware) in our data center have this same issue. Anyone know where and what those files are? Emmett

4 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss