- Discuss - lists.centos.org

CentOS-announce Digest, Vol 107, Issue 6
by centos-announce-request＠centos.org 10 Jan '14

10 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:0018 Important CentOS 5 libXfont Update (Johnny Hughes) 2. CESA-2014:0018 Important CentOS 6 libXfont Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Jan 2014 10:35:58 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0018 Important CentOS 5 libXfont Update To: centos-announce(a)centos.org Message-ID: <20140110103558.GA18473(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0018 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0018.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5d177ebe7d19a7515f179bf06b534b16be5c3017b51dc32cef13f1ef45c94676 libXfont-1.2.2-1.0.5.el5_10.i386.rpm 886882bec7855542d19dc9d23dff86809c6227e489be81ee8e428927e182201b libXfont-devel-1.2.2-1.0.5.el5_10.i386.rpm x86_64: 5d177ebe7d19a7515f179bf06b534b16be5c3017b51dc32cef13f1ef45c94676 libXfont-1.2.2-1.0.5.el5_10.i386.rpm 5ebf2a472661f5af2c720370b0847c1141df925545734ed9ae34a7cac275a1f7 libXfont-1.2.2-1.0.5.el5_10.x86_64.rpm 886882bec7855542d19dc9d23dff86809c6227e489be81ee8e428927e182201b libXfont-devel-1.2.2-1.0.5.el5_10.i386.rpm 59e82118a3ada995a44556fa572406d940585c1d7eadc0ff5b490f641024d4ab libXfont-devel-1.2.2-1.0.5.el5_10.x86_64.rpm Source: b77f78e870fc6f349b6a4d311aa6358abad773837bfcf95394797043a91ae036 libXfont-1.2.2-1.0.5.el5_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 10 Jan 2014 10:51:23 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0018 Important CentOS 6 libXfont Update To: centos-announce(a)centos.org Message-ID: <20140110105123.GA5239(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0018 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0018.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e197f6ba7f88663d651ff7fece36f0ab4439063d7267738c9bbdc86d0c39ae5e libXfont-1.4.5-3.el6_5.i686.rpm 4838c266aa9e6d61b1d3fe78e8f25c02e7756f10eb06cf353d69fd1cb0478f9f libXfont-devel-1.4.5-3.el6_5.i686.rpm x86_64: e197f6ba7f88663d651ff7fece36f0ab4439063d7267738c9bbdc86d0c39ae5e libXfont-1.4.5-3.el6_5.i686.rpm b1073ecac121832b57872541d0d97e959ba7b6bc93891287aec9abc51ccf7ab1 libXfont-1.4.5-3.el6_5.x86_64.rpm 4838c266aa9e6d61b1d3fe78e8f25c02e7756f10eb06cf353d69fd1cb0478f9f libXfont-devel-1.4.5-3.el6_5.i686.rpm 3cbb119e041bf283f131ba94b139c60eea701127384778219e7347c71255a0e0 libXfont-devel-1.4.5-3.el6_5.x86_64.rpm Source: 70cc14ededa4d1187f2f7245fddb63b72e0b26f49e908987984de2d4b2af71e4 libXfont-1.4.5-3.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 6 ***********************************************

1 0

CentOS-announce Digest, Vol 107, Issue 5
by centos-announce-request＠centos.org 09 Jan '14

09 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:0016 Moderate CentOS 5 gnupg Update (Johnny Hughes) 2. CESA-2014:0015 Important CentOS 6 openssl Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Jan 2014 22:53:33 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0016 Moderate CentOS 5 gnupg Update To: centos-announce(a)centos.org Message-ID: <20140108225333.GA12978(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0016 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0016.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b437a73ead41717600b76842fd0da7de391dccf5b9551bfc237b0cc3939dd2c3 gnupg-1.4.5-18.el5_10.1.i386.rpm x86_64: dee49e4148424a1f17167cfa19a5b94d8ff6c1f86c32cd09f760b003bdcc3efa gnupg-1.4.5-18.el5_10.1.x86_64.rpm Source: 4e87d564f1537f4cd195ad5b8ba4e433e538d3b1c91af7d843439de1acefb65f gnupg-1.4.5-18.el5_10.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 8 Jan 2014 22:59:22 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0015 Important CentOS 6 openssl Update To: centos-announce(a)centos.org Message-ID: <20140108225922.GA45394(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0015 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0015.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dade1d156bd3ea872b6622e0c8f2eab5453424cbaadd475a49e6d77455169752 openssl-1.0.1e-16.el6_5.4.i686.rpm 912c2d239dddafcb49255b27a0cbbb2aedde20ebe3bc606230c5c135a005ae5f openssl-devel-1.0.1e-16.el6_5.4.i686.rpm 4f8ba92ca400d35e3a559194d74b826b4492c931f23ee194ccd9fcebe326c55c openssl-perl-1.0.1e-16.el6_5.4.i686.rpm dc0b3e752f6f08c0961dec57cc42435b1eefe0330c91192fb1ea339a3bfffab7 openssl-static-1.0.1e-16.el6_5.4.i686.rpm x86_64: dade1d156bd3ea872b6622e0c8f2eab5453424cbaadd475a49e6d77455169752 openssl-1.0.1e-16.el6_5.4.i686.rpm 4bc35140201b7e0c4dff6ec71ceafbe745167b1bcd22223a92048777068c2f5c openssl-1.0.1e-16.el6_5.4.x86_64.rpm 912c2d239dddafcb49255b27a0cbbb2aedde20ebe3bc606230c5c135a005ae5f openssl-devel-1.0.1e-16.el6_5.4.i686.rpm cfbf11165d15b23cd9afc03777d78b635d6cb6fce2379f0841ff637c427ae2fb openssl-devel-1.0.1e-16.el6_5.4.x86_64.rpm f10d64a8469aa74af9115df8cb48b07821e09976a42c182558ddf8ef7612582a openssl-perl-1.0.1e-16.el6_5.4.x86_64.rpm 20be3d7839df3f8358d8f7c52eb4f3cef2ba8663bb70e604bd52a538a37de2b7 openssl-static-1.0.1e-16.el6_5.4.x86_64.rpm Source: 14b9dccbc10c333bff4c90ae99b7d381cc3e6f187bc884def31e3ec5ba105d9d openssl-1.0.1e-16.el6_5.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 5 ***********************************************

1 0

Hash rounds in /etc/libuser.conf won't work
by george.shaffer＠comcast.net 09 Jan '14

09 Jan '14

Two weeks ago I reported a problem I was having in the CentOS 5 Security Support forum. I could not get hash rounds, configured in /etc/libuser.conf, to work on CentOS release 5.10 (Final), 2.6.18-371.3.1.el5 x86_64. The details are here: https://www.centos.org/forums/viewtopic.php?f=24&t=44245&sid=975951a5a0eb26… I read all the documentation and looked for more off the CentOS site. I searched the entire CentOS site for hash_rounds_min and hash_rounds_max, the parameters changed in libuser.conf to configure the desired changes, without a single hit in any area on either. Over 800 people have seen my post and not a single reply; not unusual in that forum for what may be an infrequent situation. I'm guessing very few people have tried these options. At the same time I changed the hashing algorithm. Hash rounds only works with sha256 or sha512. The algorithm change worked the first time. The concept of configurable hash rounds is that the administrator can adapt the the hashing process to the specific hardware on which this is being configured and on faster hardware when a system is installed late in a OSs life cycle, up the rounds to make cracking harder. If an admin is willing to make users wait 2 seconds on every login and su, then a cracker on similar hardware could only get 0.5 cracks per second. This would make even 3 character passwords that did not fall to dictionary attacks tedious, and "good" 6 character passwords would be uncrackable. Even with a fast cracking network, with multiple GPGPU enabled PCs and a mixture of compromised systems working 10,000 times faster than a single PC, good 6 character passwords would be a serious obstacle and 8 uncrackable. I need this for a paper I'm writing which maintains "After 20 Years, Windows Passwords Still Broken". I want to compare Windows' poor MD4 with no salts (this is about NT hashes, not the notoriously broken LM hashes), to Unix like with salts, choice of algorithms, and hashing cycle control. The comparison is much weaker if I have no working example for one of the 3 key pieces on the Unix side. If anyone has successfully used hash rounds controls, I'd very much like to know what you did that I missed in my detailed forum report. It's possible there is no bug. I'm basing this on the belief that 900 million to 1 billion hashing rounds with SHA512 should produce a substantial delay and not complete in a small fraction of a second. Either my knowledge is way of or my PC MUCH faster than I thought it was, or there is a bug, if I've done everything correctly according to the documentation. I looked up how to report a bug and this said to submit the report to the CentOS-qa mailing list but I cannot find such a list. Is there such a list or any bug reporting procedure? If this is a duplicate post I apologize. I sent one yesterday and never got it and it's not in the archives when messages sent latter are.

1 0

Forward http traffic
by Nikolaos Milas 09 Jan '14

09 Jan '14

Hello, On CentOS 6.5 x86_64 I have (/etc/sysconfig/iptables): *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -s 10.10.10.0/24 -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -s 10.10.10.0/24 -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT Now, I want to forward all http traffic coming in from 10.250.250.0/24, at local port 8080, to 2 particular IP Addresses (port 80). Is it enough to prepend (to the above) the following: *nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A PREROUTING -s 10.250.250.0/24 -p tcp --dport 8080 -j DNAT --to-destination xxx.xxx.xxx.xxx:80 -A PREROUTING -s 10.250.250.0/24 -p tcp --dport 8080 -j DNAT --to-destination yyy.yyy.yyy.yyy:80 COMMIT ...? Please advise! Thanks in advance, Nick

11 16

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Michael Weiner 08 Jan '14

08 Jan '14

This is great news!! Congrats and thanks to everyone that has put in all the hard work to make this a great environment. Michael Weiner On Tue, Jan 7, 2014 at 4:09 PM, Karanbir Singh <kbsingh(a)centos.org> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. > > We are also launching the new CentOS.org website ( > http://www.centos.org ). > > - ------------- > The new initiative is going to be overseen by the new CentOS Governing > Board. The initial Board comprises of the existing CentOS Core team > members : > > - - Ralph Angenent > - - Tru Hyunh > - - Johnny Hughes JR > - - Jim Perrin > - - Karanbir Singh > > and also sees new members: > - - Fabian Arrotin, who comes to the board nominated from the community > - - Carl Trieloff, Karsten Wade, and Mike McLean join us, nominated by > Red Hat. > > Please join me in welcoming the new members to the Board. > > The key operating points of the Board are going to be: Public, Open, > and Inclusive. You can find more information about the governance > model, the board, and the operating policies we are proposing at > http://www.centos.org/about/governance/ > > Furthermore, some of the existing CentOS Core members are moving to > take up roles at Red Hat, as a part of their sponsorship of the CentOS > Project, allowing these people to work on the Project as their primary > job function. This includes Johnny Hughes Jr, Jim Perrin, Fabian > Arrotin, and myself. We will be working with and operating out of the > Red Hat Open Source and Standards team in the CTO's Office. > > - ------------- > Some of the things that are not changing: > - - The CentOS Linux platform isn't changing. The process and methods > built up around the platform however are going to become more open, > more inclusive and transparent. > - - The sponsor driven content network that has been central to the > success of the CentOS efforts over the years stays intact. > - - The bugs, issues, and incident handling process stays as it has been > with more opportunities for community members to get involved at > various stages of the process. > - - The Red Hat Enterprise Linux to CentOS firewall will also remain. > Members and contributors to the CentOS efforts are still isolated from > the RHEL Groups inside Red Hat, with the only interface being srpm / > source path tracking, no sooner than is considered released. In > summary: we retain an upstream. > > Feel free to reach out if you have specific concerns about how this > change impacts your CentOS story. URLs mentioned at the bottom of this > email should be a good starting point. > > - ------------- > Some of the key things that are changing: > - - Some of us now work for Red Hat, but not RHEL. This should not have > any impact to our ability to do what we have done in the past, it > should facilitate a more rapid pace of development and evolution for > our work on the community platform. > > - - Red Hat is offering to sponsor some of the buildsystem and initial > content delivery resources - how we are able to consume these and when > we are able to make use of this is to be decided. > > - - Sources that we consume, in the platform, in the addons, or the > parallel stacks such as Xen4CentOS will become easier to consume with > a git.centos.org being setup, with the scripts and rpm metadata needed > to create binaries being published there. The Board also aims to put > together a plan to allow groups to come together within the CentOS > ecosystem as a Special Interest Group (SIG) and build CentOS Variants > on our resources, as officially endorsed. You can read about the > proposal at http://www.centos.org/variants/ > > - - Because we are now able to work with the Red Hat legal teams, some > of the contraints that resulted in efforts like CentOS-QA being behind > closed doors, now go away and we hope to have the entire build, test, > and delivery chain open to anyone who wishes to come and join the effort. > > The changes we make are going to be community inclusive, and promoted, > proposed, formalised, and actioned in an open community centric manner > on the centos-devel mailing list. And I highly encourage everyone to > come along and participate. > > - ------------- > Contacting us works best via the established community mechanisms. > - - Real time chats via IRC ( http://wiki.centos.org/irc ) ; To keep > conversation sanity intact, I recommend using the #centos-devel > channel to discuss project related activity while #centos is best used > for end user conversations. > > - - The Mailing lists are a great way to interface with the developers, > contributors and the community at large ( http://lists.centos.org ). > As with IRC, we recommend using the centos-devel list to talk about > project related issues while the general centos list is best used for > end user conversations. > > - - The CentOS Forums are another great way to engage in conversation > with other users ( http://www.centos.org/forums ), if you prefer that > mechanism. > > All the above mentioned venues are public and open to the community, > should you wish to discuss something privately, you can email us at > centosdev(a)centos.org. Press requests should be sent to > press(a)centos.org. Please note that it will take us much longer to > reply to private requests as compared to content on the public venues. > > - ------------- > In the coming days we are going to create opportunities for people to > come and get involved in more face to face interactions. Starting with > a regular scheduled office-hours format hangouts ( > http://wiki.centos.org/OfficeHours ) that start early next week. We > are trying to split the sessions into two different timezones so as to > maximise the number of people who are able to join. The sessions will > run live, with #centos-devel on irc.freenode.net being used for > conversations alongside. > > We are also running a CentOS Dojo on the 31st Jan 2014 at Belgium ( > http://wiki.centos.org/Events/Dojo/Brussels2014 ); The event will run > two tracks, with lots of opportunities for social interaction between > the talks; followed by CentOS in the Clouds Hack sessions. We are > limited in the number of people we can accomodate, so I encourage > everyone to register early. > > - ------------- > I want to take this opportunity to thank all the sponsors, the > contributors and the CentOS team members for all their help over the > years, the project is built completely upon those contributions - and > I look forward to seeing even more involvement from everyone as we > move forward. > > - ------------- > A Request: > > We are still sorting out content in various places and it might take a > day or two to get everything in place. In the mean time if you find > something stale and perhaps misleading in the new context ( or the old > one! ) please drop in on #centos-devel at irc.centos.org and let us know. > > - ------------- > Some URLS: > - - http://www.centos.org/ The CentOS Project > - - http://wiki.centos.org/ CentOS Community wiki > - - http://community.redhat.com/ RedHat OSAS > - - > > http://www.redhat.com/about/news/press-archive/2014/1/red-hat-and-centos-jo… > - - Red Hat Press Release > - - http://community.redhat.com/centos-faq - Red Hat FAQ's about the > initiative > - - http://wiki.centos.org/FAQ - CentOS FAQ's about the initiative > > > Enjoy! and regards, > > Karanbir Singh and everyone from the CentOS team, > > > - -- > Karanbir Singh, Project Chair, The CentOS Project > +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS > GnuPG Key : http://www.karan.org/publickey.asc > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.14 (GNU/Linux) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iEYEARECAAYFAlLMbQcACgkQMA29nj4Tz1sTnQCgj2fYxYpTjA0KwH7TpCWjE4gg > w2cAniQWb/nh6Zn/8daSQ3EAfLIzGNKg > =KJOk > -----END PGP SIGNATURE----- > _______________________________________________ > CentOS-announce mailing list > CentOS-announce(a)centos.org > http://lists.centos.org/mailman/listinfo/centos-announce > -- "A patriot must always be ready to defend his country against his government." E. Abbey

1 0

freenx vs KVM Virtual Machine Manager - mouse poiner
by Les Mikesell 08 Jan '14

08 Jan '14

When I run the GUI Virtual Machine Manager in an NX/freenx session and open a console to a windows guest VM (haven't tried Linux w/X as a guest yet), the mouse point location does not track correctly. Is there some setting to improve this? X2go seems better in this respect but I'm not sure I want to switch yet. Normally I'd use vnc or remote-desktop connections directly to the guest anyway, but there are times you need to use the virtual consoles. -- Les Mikesell lesmikesell(a)gmail.com

1 0

Hash rounds in /etc/libuser.conf won't work - how to report a bug
by george.shaffer＠comcast.net 08 Jan '14

08 Jan '14

Two weeks ago I reported a problem I was having in the CentOS 5 Security Support forum. I could not get hash rounds, configured in /etc/libuser.conf, to work on CentOS release 5.10 (Final), 2.6.18-371.3.1.el5 x86_64. The details are here: https:// www.centos.org/forums/viewforum.php?f=24&sid=44859638070165ed5d8d9c35cdbe03… I read all the documentation and looked for more off the CentOS site. I searched the entire CentOS site for hash_rounds_min and hash_rounds_max, the parameters changed in libuser.conf to configure the desired changes, without a single hit in any area on either. Nearly 800 people have seen my post and not a single reply; not unusual in that forum for what may be an infrequent situation. I'm guessing very few people have tried these options. At the same time I changed the hashing algorithm. Hash rounds only works with sha256 or sha512. This worked the first time. The concept of configurable hash rounds is the administrator can adapt the the hashing process to the specific hardware on which this is being configured and on faster hardware when a system is installed late in a OSs life cycle, up the rounds to make cracking harder. If an admin is willing to make users wait 2 seconds on every login and su, then a cracker on similar hardware could only get 0.5 cracks per second. This would make even 3 character passwords that did not fall to dictionary attacks tedious, and "good" 6 character passwords would be uncrackable. Even with a fast cracking network, with multiple GPGPU enabled PCs and a mixture of compromised systems working 10,000 times faster than the single PC, good 6 character passwords would be a serious obstacle and 8 quite uncrackable. I need this for a paper I'm writing which maintains "After 20 Years, Windows Passwords Still Broken". I want to compare Windows' poor MD4 with no salts (this is about NT hashes, not the notoriously broken LM hashes), to Unix like with salts, choice of algorithms, and hashing cycle control. The comparison is much weaker if I have no working example for one of the 3 key pieces on the Unix side. If anyone has successfully used hash rounds controls, I'd very much like to know what you did that I missed in my detailed forum report. It's possible there is no bug. I'm basing this on the belief that 900 million to 1 billion hashing rounds should produce a substantial delay and not complete in a small fraction of a second. Either my knowledge is way of or my PC MUCH faster than I thought it was, or there is a bug, if I've done everything correctly according to the documentation. I looked up how to report a bug and this said to submit the report to the CentOS-qa mailing list but I cannot find such a list.

1 0

FF 24 is borked: One must have tabs, like it or not!
by Robert Heller 08 Jan '14

08 Jan '14

I just did a yum update on my CentOS 5.10 desktop machine and it installed FF 24. And tabs have appeared and cannot be [really] removed! Arg!!! *I HATE TABS!* (Yes I did installed the "hide tabs when there is only one tab" plugin, but that is not really a complete solution.) In the Mozilla support forum thread relating to this (https://support.mozilla.org/en-US/questions/968331) there is mention of SeaMonkey which has better control of tabs and I was wondering: is there a supported version of SeaMonkey that will install under RHEL5 / CentOS5? Specificly, I am looking for RPMs for SeaMonkey, rather than the tarball install. -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

4 3

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Alain Péan 08 Jan '14

08 Jan '14

Le 08/01/2014 14:54, Reindl Harald a écrit : > *which independence*?????? > > CentOS is a*bug for bug* indentical rebuild of RHEL > you will never face*any* change or bugfix in CentOS > which is not done in the same RHEL package > > so about*what* independance are you talking about? For example to build a 100% bug for bug release of RHEL, and not : "better able to serve the needs of open source community members who require different or faster-moving components" From : http://community.redhat.com/centos-faq/ This is a kind of Fedora ? Will it supported 10 years, by recompiling the RHEL source updates too ? Alain -- Administrateur Système/Réseau Laboratoire de Photonique et Nanostructures (LPN/CNRS - UPR20) Centre de Recherche Alcatel Data IV - Marcoussis route de Nozay - 91460 Marcoussis Tel : 01-69-63-61-34

5 6

CentOS-announce Digest, Vol 107, Issue 4
by centos-announce-request＠centos.org 08 Jan '14

08 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS Project joins forces with Red Hat (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 07 Jan 2014 21:09:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CentOS Project joins forces with Red Hat To: CentOS Announcements List <centos-announce(a)centos.org> Message-ID: <52CC6D07.5050909(a)centos.org> Content-Type: text/plain; charset=ISO-8859-1 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 With great excitement I'd like to announce that we are joining the Red Hat family. The CentOS Project ( http://www.centos.org ) is joining forces with Red Hat. Working as part of the Open Source and Standards team ( http://community.redhat.com/ ) to foster rapid innovation beyond the platform into the next generation of emerging technologies. Working alongside the Fedora and RHEL ecosystems, we hope to further expand on the community offerings by providing a platform that is easily consumed, by other projects to promote their code while we maintain the established base. We are also launching the new CentOS.org website ( http://www.centos.org ). - ------------- The new initiative is going to be overseen by the new CentOS Governing Board. The initial Board comprises of the existing CentOS Core team members : - - Ralph Angenent - - Tru Hyunh - - Johnny Hughes JR - - Jim Perrin - - Karanbir Singh and also sees new members: - - Fabian Arrotin, who comes to the board nominated from the community - - Carl Trieloff, Karsten Wade, and Mike McLean join us, nominated by Red Hat. Please join me in welcoming the new members to the Board. The key operating points of the Board are going to be: Public, Open, and Inclusive. You can find more information about the governance model, the board, and the operating policies we are proposing at http://www.centos.org/about/governance/ Furthermore, some of the existing CentOS Core members are moving to take up roles at Red Hat, as a part of their sponsorship of the CentOS Project, allowing these people to work on the Project as their primary job function. This includes Johnny Hughes Jr, Jim Perrin, Fabian Arrotin, and myself. We will be working with and operating out of the Red Hat Open Source and Standards team in the CTO's Office. - ------------- Some of the things that are not changing: - - The CentOS Linux platform isn't changing. The process and methods built up around the platform however are going to become more open, more inclusive and transparent. - - The sponsor driven content network that has been central to the success of the CentOS efforts over the years stays intact. - - The bugs, issues, and incident handling process stays as it has been with more opportunities for community members to get involved at various stages of the process. - - The Red Hat Enterprise Linux to CentOS firewall will also remain. Members and contributors to the CentOS efforts are still isolated from the RHEL Groups inside Red Hat, with the only interface being srpm / source path tracking, no sooner than is considered released. In summary: we retain an upstream. Feel free to reach out if you have specific concerns about how this change impacts your CentOS story. URLs mentioned at the bottom of this email should be a good starting point. - ------------- Some of the key things that are changing: - - Some of us now work for Red Hat, but not RHEL. This should not have any impact to our ability to do what we have done in the past, it should facilitate a more rapid pace of development and evolution for our work on the community platform. - - Red Hat is offering to sponsor some of the buildsystem and initial content delivery resources - how we are able to consume these and when we are able to make use of this is to be decided. - - Sources that we consume, in the platform, in the addons, or the parallel stacks such as Xen4CentOS will become easier to consume with a git.centos.org being setup, with the scripts and rpm metadata needed to create binaries being published there. The Board also aims to put together a plan to allow groups to come together within the CentOS ecosystem as a Special Interest Group (SIG) and build CentOS Variants on our resources, as officially endorsed. You can read about the proposal at http://www.centos.org/variants/ - - Because we are now able to work with the Red Hat legal teams, some of the contraints that resulted in efforts like CentOS-QA being behind closed doors, now go away and we hope to have the entire build, test, and delivery chain open to anyone who wishes to come and join the effort. The changes we make are going to be community inclusive, and promoted, proposed, formalised, and actioned in an open community centric manner on the centos-devel mailing list. And I highly encourage everyone to come along and participate. - ------------- Contacting us works best via the established community mechanisms. - - Real time chats via IRC ( http://wiki.centos.org/irc ) ; To keep conversation sanity intact, I recommend using the #centos-devel channel to discuss project related activity while #centos is best used for end user conversations. - - The Mailing lists are a great way to interface with the developers, contributors and the community at large ( http://lists.centos.org ). As with IRC, we recommend using the centos-devel list to talk about project related issues while the general centos list is best used for end user conversations. - - The CentOS Forums are another great way to engage in conversation with other users ( http://www.centos.org/forums ), if you prefer that mechanism. All the above mentioned venues are public and open to the community, should you wish to discuss something privately, you can email us at centosdev(a)centos.org. Press requests should be sent to press(a)centos.org. Please note that it will take us much longer to reply to private requests as compared to content on the public venues. - ------------- In the coming days we are going to create opportunities for people to come and get involved in more face to face interactions. Starting with a regular scheduled office-hours format hangouts ( http://wiki.centos.org/OfficeHours ) that start early next week. We are trying to split the sessions into two different timezones so as to maximise the number of people who are able to join. The sessions will run live, with #centos-devel on irc.freenode.net being used for conversations alongside. We are also running a CentOS Dojo on the 31st Jan 2014 at Belgium ( http://wiki.centos.org/Events/Dojo/Brussels2014 ); The event will run two tracks, with lots of opportunities for social interaction between the talks; followed by CentOS in the Clouds Hack sessions. We are limited in the number of people we can accomodate, so I encourage everyone to register early. - ------------- I want to take this opportunity to thank all the sponsors, the contributors and the CentOS team members for all their help over the years, the project is built completely upon those contributions - and I look forward to seeing even more involvement from everyone as we move forward. - ------------- A Request: We are still sorting out content in various places and it might take a day or two to get everything in place. In the mean time if you find something stale and perhaps misleading in the new context ( or the old one! ) please drop in on #centos-devel at irc.centos.org and let us know. - ------------- Some URLS: - - http://www.centos.org/ The CentOS Project - - http://wiki.centos.org/ CentOS Community wiki - - http://community.redhat.com/ RedHat OSAS - - http://www.redhat.com/about/news/press-archive/2014/1/red-hat-and-centos-jo… - - Red Hat Press Release - - http://community.redhat.com/centos-faq - Red Hat FAQ's about the initiative - - http://wiki.centos.org/FAQ - CentOS FAQ's about the initiative Enjoy! and regards, Karanbir Singh and everyone from the CentOS team, - -- Karanbir Singh, Project Chair, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlLMbQcACgkQMA29nj4Tz1sTnQCgj2fYxYpTjA0KwH7TpCWjE4gg w2cAniQWb/nh6Zn/8daSQ3EAfLIzGNKg =KJOk -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 4 ***********************************************

1 0

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Michael Simpson 08 Jan '14

08 Jan '14

On Tuesday, January 7, 2014, Karanbir Singh wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Great news guys, well done. Regards Mike

1 0

Extract PDF portfolio
by Nicole Hähnel 08 Jan '14

08 Jan '14

Hi, I am searching for a command line tool to extract files from a pdf portfolio? Are there any capabilities to do this? Thanks in advance! Kind regards, Nicole

2 2

grub color on C6 (not)
by Ted Miller 08 Jan '14

08 Jan '14

I have tried more than half a dozen different combinations of the "color" command in my grub.conf file, and see nothing but black and white. Is there * a problem with the Centos grub command? * a problem with grub figuring out how to do color on my hardware? * a true-false day, when everything is either true or false, no in between grays, and no color? scratching my head, Ted Miller Elkhart, IN, USA

2 2

Odd problems with CR updates
by Scott Robbins 08 Jan '14

08 Jan '14

As I've seen no mention of this anywhere, I've got to assume it's just me. Doing some of the CR updates last night, google-chrome and firefox suddenly stopped working with https pages, including google itself. I was able to downgrade, but wasn't sure exactly what had caused the problem. Tonight, trying again, package by package, it seems that it's nss-softokn that's causing the problem. Has anyone run into something similar? For example, if I upgrade to the CR version, then open chromium and type a search phrase, I'll get message that this web page not available. Firefox is somewhat more informative, ---------- An error occurred during a connection to www.google.com. security library: invalid algorithm. (Error code: sec_error_invalid_algorithm) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site. -------- This happens when I upgrade to nss-softokn.3.14.3-9.el6 When I downgrade to 3.14.3-3.el6_4 it's fine. Has anyone else run into this? -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

4 6

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by aly.khimji＠gmail.com 08 Jan '14

08 Jan '14

That is amazing news, I hope this proves to be a great relationship. Congratulations, looking forward to the future. Aly Sent from my BlackBerry device on the Rogers Wireless Network -----Original Message----- From: Karanbir Singh <kbsingh(a)centos.org> Sender: centos-announce-bounces(a)centos.org Date: Tue, 07 Jan 2014 21:09:27 To: CentOS Announcements List<centos-announce(a)centos.org> Reply-To: centos(a)centos.org Subject: [CentOS-announce] CentOS Project joins forces with Red Hat -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 With great excitement I'd like to announce that we are joining the Red Hat family. The CentOS Project ( http://www.centos.org ) is joining forces with Red Hat. Working as part of the Open Source and Standards team ( http://community.redhat.com/ ) to foster rapid innovation beyond the platform into the next generation of emerging technologies. Working alongside the Fedora and RHEL ecosystems, we hope to further expand on the community offerings by providing a platform that is easily consumed, by other projects to promote their code while we maintain the established base. We are also launching the new CentOS.org website ( http://www.centos.org ). - ------------- The new initiative is going to be overseen by the new CentOS Governing Board. The initial Board comprises of the existing CentOS Core team members : - - Ralph Angenent - - Tru Hyunh - - Johnny Hughes JR - - Jim Perrin - - Karanbir Singh and also sees new members: - - Fabian Arrotin, who comes to the board nominated from the community - - Carl Trieloff, Karsten Wade, and Mike McLean join us, nominated by Red Hat. Please join me in welcoming the new members to the Board. The key operating points of the Board are going to be: Public, Open, and Inclusive. You can find more information about the governance model, the board, and the operating policies we are proposing at http://www.centos.org/about/governance/ Furthermore, some of the existing CentOS Core members are moving to take up roles at Red Hat, as a part of their sponsorship of the CentOS Project, allowing these people to work on the Project as their primary job function. This includes Johnny Hughes Jr, Jim Perrin, Fabian Arrotin, and myself. We will be working with and operating out of the Red Hat Open Source and Standards team in the CTO's Office. - ------------- Some of the things that are not changing: - - The CentOS Linux platform isn't changing. The process and methods built up around the platform however are going to become more open, more inclusive and transparent. - - The sponsor driven content network that has been central to the success of the CentOS efforts over the years stays intact. - - The bugs, issues, and incident handling process stays as it has been with more opportunities for community members to get involved at various stages of the process. - - The Red Hat Enterprise Linux to CentOS firewall will also remain. Members and contributors to the CentOS efforts are still isolated from the RHEL Groups inside Red Hat, with the only interface being srpm / source path tracking, no sooner than is considered released. In summary: we retain an upstream. Feel free to reach out if you have specific concerns about how this change impacts your CentOS story. URLs mentioned at the bottom of this email should be a good starting point. - ------------- Some of the key things that are changing: - - Some of us now work for Red Hat, but not RHEL. This should not have any impact to our ability to do what we have done in the past, it should facilitate a more rapid pace of development and evolution for our work on the community platform. - - Red Hat is offering to sponsor some of the buildsystem and initial content delivery resources - how we are able to consume these and when we are able to make use of this is to be decided. - - Sources that we consume, in the platform, in the addons, or the parallel stacks such as Xen4CentOS will become easier to consume with a git.centos.org being setup, with the scripts and rpm metadata needed to create binaries being published there. The Board also aims to put together a plan to allow groups to come together within the CentOS ecosystem as a Special Interest Group (SIG) and build CentOS Variants on our resources, as officially endorsed. You can read about the proposal at http://www.centos.org/variants/ - - Because we are now able to work with the Red Hat legal teams, some of the contraints that resulted in efforts like CentOS-QA being behind closed doors, now go away and we hope to have the entire build, test, and delivery chain open to anyone who wishes to come and join the effort. The changes we make are going to be community inclusive, and promoted, proposed, formalised, and actioned in an open community centric manner on the centos-devel mailing list. And I highly encourage everyone to come along and participate. - ------------- Contacting us works best via the established community mechanisms. - - Real time chats via IRC ( http://wiki.centos.org/irc ) ; To keep conversation sanity intact, I recommend using the #centos-devel channel to discuss project related activity while #centos is best used for end user conversations. - - The Mailing lists are a great way to interface with the developers, contributors and the community at large ( http://lists.centos.org ). As with IRC, we recommend using the centos-devel list to talk about project related issues while the general centos list is best used for end user conversations. - - The CentOS Forums are another great way to engage in conversation with other users ( http://www.centos.org/forums ), if you prefer that mechanism. All the above mentioned venues are public and open to the community, should you wish to discuss something privately, you can email us at centosdev(a)centos.org. Press requests should be sent to press(a)centos.org. Please note that it will take us much longer to reply to private requests as compared to content on the public venues. - ------------- In the coming days we are going to create opportunities for people to come and get involved in more face to face interactions. Starting with a regular scheduled office-hours format hangouts ( http://wiki.centos.org/OfficeHours ) that start early next week. We are trying to split the sessions into two different timezones so as to maximise the number of people who are able to join. The sessions will run live, with #centos-devel on irc.freenode.net being used for conversations alongside. We are also running a CentOS Dojo on the 31st Jan 2014 at Belgium ( http://wiki.centos.org/Events/Dojo/Brussels2014 ); The event will run two tracks, with lots of opportunities for social interaction between the talks; followed by CentOS in the Clouds Hack sessions. We are limited in the number of people we can accomodate, so I encourage everyone to register early. - ------------- I want to take this opportunity to thank all the sponsors, the contributors and the CentOS team members for all their help over the years, the project is built completely upon those contributions - and I look forward to seeing even more involvement from everyone as we move forward. - ------------- A Request: We are still sorting out content in various places and it might take a day or two to get everything in place. In the mean time if you find something stale and perhaps misleading in the new context ( or the old one! ) please drop in on #centos-devel at irc.centos.org and let us know. - ------------- Some URLS: - - http://www.centos.org/ The CentOS Project - - http://wiki.centos.org/ CentOS Community wiki - - http://community.redhat.com/ RedHat OSAS - - http://www.redhat.com/about/news/press-archive/2014/1/red-hat-and-centos-jo… - - Red Hat Press Release - - http://community.redhat.com/centos-faq - Red Hat FAQ's about the initiative - - http://wiki.centos.org/FAQ - CentOS FAQ's about the initiative Enjoy! and regards, Karanbir Singh and everyone from the CentOS team, - -- Karanbir Singh, Project Chair, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlLMbQcACgkQMA29nj4Tz1sTnQCgj2fYxYpTjA0KwH7TpCWjE4gg w2cAniQWb/nh6Zn/8daSQ3EAfLIzGNKg =KJOk -----END PGP SIGNATURE----- _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce

1 0

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by David Hrbáč 07 Jan '14

07 Jan '14

Dne 7.1.2014 22:09, Karanbir Singh napsal(a): > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. Something I have dreamt of. Good news. Congratulations. Regards, David Hrbáč

1 0

Simple question on USB flash drive naming
by James B. Byrne 07 Jan '14

07 Jan '14

I have a USB key that when inserted into a port on my CentOS-6.5 system maounts as this: /dev/sdb1 /media/22d773e3-8502-4196-b45f-388380dcee48 ext2 rw,nosuid,nodev,uhelper=udisks 0 0 What is the mechanism to give this thing a more human usable mount name / volume name? Mounting this USB key with what I guess is a UUID in place of a name was not always the case. My sense is that the change in behaviour started when I moved the system from CentOS-5.7 to 6.0 but I cannot be sure that this is actually the case. The key has not changed since 2006 (CentOS-4) but the name that CentOS assigns to its mount point has. It used to be something like "kingston_blahblah" I looked at /dev/disk/ on the host and noted that the by-label sub-directory is gone. Is this something that should be there and is not or has CentOS-6 gotten rid of it? TIA -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] Can we trust RedHat encryption tools?
by James B. Byrne 07 Jan '14

07 Jan '14

On Mon, January 6, 2014 16:51, m.roth(a)5-cent.us wrote: > > Looks like it's rtrying to install it, not just build it. In the first > example, you're trying to replace the existing /usr/bin/strip, which only > root can do. Are you doing make, or make install? > I started out by using the openssl.spec file for openssl-1.0.1f directly from openssl.org. The contents of that file are provided at http://git.openssl.org/gitweb/?p=openssl.git;a=blob_plain;f=openssl.spec;hb…. What I then do download the source from openssl.org and put that into ~/rpmbuild/SOURCES and extract it. I then copy ~/rpmbuild/SOURCES/openssl-1.0.1f/openssl.spec into ~/rpmbuild/SPECS and run the following commands: mock --buildsrpm --sources=./rpmbuild/SOURCES --spec=./rpmbuild/SPECS/openssl.spec mock --no-clean --rebuild --root=default /var/lib/mock/epel-6-x86_64/result/openssl-1.0.1f-1.src.rpm This gives the error reported above. I realize that this is a naive approach but I after looking at the Redhat openssl.spec file I thought it best to start with the base files provided by the origin and work out any build problems one by one making the absolute minimum number of changes possible. The nearest equivalent Redhat openssl.spec file that I found is that used by Fedora 20 for openssl-1.0.1e and its contents are displayed here: http://pkgs.fedoraproject.org/cgit/openssl.git/tree/openssl.spec?h=f20 >From what I have read elsewhere, Fedora/Redhat openssl begins with a set of modified source files. The spec file additionally applies about 43 patch files of which 27 alter the functionality of the package. It is not within my ability to determine what effect of the modifications to the source and these additional patches have on the integrity of the openssl provided with RHEL. Is there any third party in our community which does? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Disappearing directory
by Ken Smith 07 Jan '14

07 Jan '14

Hi All and happy new year, Via a cron job a USB disk is mounted on a Centos 6.4 machine for backup and dismounted after. I've noticed this failing. See below, the backup directory that was in /mnt had disappeared, so creating it again as follows... # cd /mnt # mkdir backup # mount /dev/sdb1 /mnt/backup/ # ls backup # cd backup/ # ls boot.tar.gz etc etc.tar.gz home home.tar.gz ident.txt lost+found named.tar.gz root.tar.gz usr.tar.gz var var.tar.gz # cd .. # ls backup # umount /dev/sdb1 # ls # cat /etc/redhat-release CentOS release 6.4 (Final) After the umount the directory vanishes. What gives or have I lost the plot in 2014. (This works as I'd expect on an old fc14 system I have) :-) Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

7 15

CentOS-announce Digest, Vol 107, Issue 3
by centos-announce-request＠centos.org 07 Jan '14

07 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0005 CentOS 6 sssd Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Jan 2014 16:08:49 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0005 CentOS 6 sssd Update To: centos-announce(a)centos.org Message-ID: <20140106160849.GA10654(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0005 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0005.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0d31e0bfd94af81305f8e620a2c859c141d63ee6e7e1695da18ce9ff32b1d8ad libipa_hbac-1.9.2-129.el6_5.4.i686.rpm bd616a723787d89ad2832219915964b1cbb5c45251e013323a17572d18279a7d libipa_hbac-devel-1.9.2-129.el6_5.4.i686.rpm 89ef63c0d8b7d94d53ae76130d82624de337b1b17124abd44f3e5c8dfe8fe442 libipa_hbac-python-1.9.2-129.el6_5.4.i686.rpm d029a76709875099b811c8b788ca761a4851fed24a3e6cd8ac8301aeeebfe50e libsss_autofs-1.9.2-129.el6_5.4.i686.rpm ca729ea089821db0a6e31fae61ef8af691ee44b1c1dd3b7cab3706561ac5de8f libsss_idmap-1.9.2-129.el6_5.4.i686.rpm 570b574f6edd9bc3aeead48a3c8c3dda1425a97c5b53b429c8e99d83236b706b libsss_idmap-devel-1.9.2-129.el6_5.4.i686.rpm c4c441c07b31ffb3515725e08bfdb42bb0bf6a40731b21a8ccf737918765c0d1 libsss_sudo-1.9.2-129.el6_5.4.i686.rpm fab7bb18cf94a75dc2ae89444cd26f593871ff74e0ee7d48d46666703121f3d3 libsss_sudo-devel-1.9.2-129.el6_5.4.i686.rpm 036a42feb61a07ae20a44ba2119f59f7208acdcb4a3f2c99578ae6fb8e950806 sssd-1.9.2-129.el6_5.4.i686.rpm 63b9d09340e4c54efec67109d168de2ec1c489e9f08e5eb0887cc155977c4406 sssd-client-1.9.2-129.el6_5.4.i686.rpm 82673b1596a9ac0dddcbbc09398607d20a2d852e65d37dc8294260d82d2ef485 sssd-tools-1.9.2-129.el6_5.4.i686.rpm x86_64: 0d31e0bfd94af81305f8e620a2c859c141d63ee6e7e1695da18ce9ff32b1d8ad libipa_hbac-1.9.2-129.el6_5.4.i686.rpm ac4561121f9aaf41acae676fbb33cff958afb8c071a43274b7970df0c056191f libipa_hbac-1.9.2-129.el6_5.4.x86_64.rpm bd616a723787d89ad2832219915964b1cbb5c45251e013323a17572d18279a7d libipa_hbac-devel-1.9.2-129.el6_5.4.i686.rpm 2a53eda1460fdf2cc9df81487c05c45c876d70fa104ee88833a40864bff84bd6 libipa_hbac-devel-1.9.2-129.el6_5.4.x86_64.rpm 09f2329cf4a85ce0ed1e2e5d57df1548b592143cc914d56996abf704ba34044b libipa_hbac-python-1.9.2-129.el6_5.4.x86_64.rpm 73eaff3cccaa30f13cf431c1b5b19461e9e2c931ea85e2a00fe73d5c2109104f libsss_autofs-1.9.2-129.el6_5.4.x86_64.rpm ca729ea089821db0a6e31fae61ef8af691ee44b1c1dd3b7cab3706561ac5de8f libsss_idmap-1.9.2-129.el6_5.4.i686.rpm a7ba5cea05f9519f873bd08bdb478aad7f79156f8db26a7aceaf264ce90593e9 libsss_idmap-1.9.2-129.el6_5.4.x86_64.rpm 570b574f6edd9bc3aeead48a3c8c3dda1425a97c5b53b429c8e99d83236b706b libsss_idmap-devel-1.9.2-129.el6_5.4.i686.rpm f9346e709519c0bcb049d0f9d1cbe95692864bb8f114a96b1913f0763bf94dad libsss_idmap-devel-1.9.2-129.el6_5.4.x86_64.rpm 3ccbe1d1f618371ed1a71dc08fa30b5a997c0fcc119704202a901e5fd7cc9520 libsss_sudo-1.9.2-129.el6_5.4.x86_64.rpm fab7bb18cf94a75dc2ae89444cd26f593871ff74e0ee7d48d46666703121f3d3 libsss_sudo-devel-1.9.2-129.el6_5.4.i686.rpm 9a72bb6896d6052055cecf2206d0cdd49bd7ef672040f2154da662402d34082d libsss_sudo-devel-1.9.2-129.el6_5.4.x86_64.rpm 6afd1e8393d11c7f977b715a49935db27868dc9375c614872d65d4084e9e5d36 sssd-1.9.2-129.el6_5.4.x86_64.rpm 63b9d09340e4c54efec67109d168de2ec1c489e9f08e5eb0887cc155977c4406 sssd-client-1.9.2-129.el6_5.4.i686.rpm 218cbec8a327d7077713b545d95738f962d2fec46d11a6ee415b9858cd01012b sssd-client-1.9.2-129.el6_5.4.x86_64.rpm c7e5f0ab55282731cf7a4d0b316cec008135772a6b9eae5fc0c74f2f7bb9d81b sssd-tools-1.9.2-129.el6_5.4.x86_64.rpm Source: ccda87b7a3678c790b5802581d057d16f76ac908c1d317e55bb61b5730c892e3 sssd-1.9.2-129.el6_5.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 3 ***********************************************

1 0

nfs client kerberos cache
by Darod Zyree 06 Jan '14

06 Jan '14

Greetings, Not sure if this is the correct mail list. I have the following test environment set up: - 1x ipa master = ipa1.example.com - 1x nfs server = nfs1.example.com - 1x nfs client = nfsclient1.example.com NFS version 4 is used and the appropriate Kerberos principal has been created in IPA: [root@nfs1 ~]# ipa service-show nfs/nfs1.example.com(a)EXAMPLE.COM Principal: nfs/nfs1.example.com(a)EXAMPLE.COM Keytab: True Managed by: nfs1.example.com Mounting using krb5p works: [root@nfsclient1 ~]# mount -v -t nfs -o sec=krb5p nfs1.example.com:/exports/homes/ /mnt mount.nfs: timeout set for Mon Jan 6 21:25:56 2014 mount.nfs: trying text-based options 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' nfs1.example.com:/exports/homes/ on /mnt type nfs (rw,sec=krb5p) rpcgssd created the Kerberos cache file as indicated in /var/log/messages: rpc.gssd[2473]: INFO: Credentials in CC 'FILE:/tmp/krb5cc_machine_EXAMPLE.COM' are good until 1389125973 So far so good, but then: 1) I unmount everything from nfs1, remove the nfs1.example.host, its DNS record(s) and service principcals. 2) I redeploy the nfs1.example.com and re-create the nfs/nfs1.example.com(a)EXAMPLE.COM principal 3) I try to mount the same NFS share from nfs1 on nfsclient1 I get an error: mount.nfs: trying text-based options 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' mount.nfs: mount(2): Operation not permitted Now I'm not an IPA or Kerberos expert but I am guessing that this happens because the nfsclient1 still has, and uses, the /tmp/krb5cc_machine_EXAMPLE.COM cache file? This file would have the “old” Kerberos credentials?... On the NFS server in /var/log/messages this error message is displayed: "rpc.svcgssd[5983]: ERROR: GSS-API: error in handle_nullreq: gss_accept_sec_context(): GSS_S_FAILURE (Unspecified GSS failure. Minor code may provide more information) - Wrong principal in request" On the NFS client in /var/log/messages these messages are displayed: "creating context with server nfs(a)nfs1.example.com" "WARNING: Failed to create machine krb5 context with credentials cache FILE:/tmp/krb5cc_machine_EXAMPLE.COM for server nfs1.example.com" "WARNING: Machine cache is prematurely expired or corrupted trying to recreate cache for server nfs1.example.com" Restarting the rpcgssd daemon works, this action removes the /tmp/krb5cc_machine_EXAMPLE.COM file and upon a mount command it is recreated. However restarting the rpcgssd daemon on all NFS clients every time an NFS server is redeployed doesn't feel right. Anyone perhaps have an idea on what I might be doing wrong? Or is this by design?

1 0

Re: [CentOS] I want to ask about some Kernel level operations.
by Eliezer Croitoru 05 Jan '14

05 Jan '14

Hey, I am still not sure if it's Harald or Reindl as first name. Now for the matter in hands: I am building the software mostly manually if I can! The problem is that most software developers tend to build their software in a very good way. The kernel developers for example of a remarkable software is a very strict environment. If I cannot build the kernel as root user it is better to not build it at all from my aspect. The RPMBUILD tools and other automation tools is suppose to help distributing and test the code. Once it has passed these tests why would I need to build them as a non-root user? We all humans and we do tend to maybe miss here and there something but don't let these MOCKs and RPMbuilds to just *vaporise* the basic efforts which the developers invested. I would say something like that: Building as root user\s level is not recommended due to couple incidents in the past. All The Bests, Eliezer On 05/01/14 17:16, Reindl Harald wrote: > DO NOT BUILD AS ROOT AND USE MOCK/RPMBUILD > > what is your problem as you statet even in the original post > that you know that it is not recommended to build as root > but you insist in doing so? > > *what* do you want to achieve with this thread? >

2 1

Re: [CentOS] Need help with spec file for Apache-2.4.7
by James B. Byrne 05 Jan '14

05 Jan '14

On Sun, January 5, 2014 06:02, Peter wrote: > On 01/05/2014 08:28 PM, James B. Byrne wrote: >> >> RPM build errors: >> error: Installed (but unpackaged) file(s) found: > ... >> /usr/bin/apu-1-config > > ... > >> %{_bindir}/apr-u-config > > "apu-l" != "apr-u" > > > Peter > > Ahhh. Thank you. I suppose that eventually I might have noticed. Sigh... Anyway, it is built and packaged now. Next I will see if it runs. Regards, and thanks. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 107, Issue 2
by centos-announce-request＠centos.org 05 Jan '14

05 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0004 CentOS 6 kernel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 4 Jan 2014 12:55:55 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0004 CentOS 6 kernel Update To: centos-announce(a)centos.org Message-ID: <20140104125555.GA28638(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0004 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0004.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 34c4d117faac1ba5a647ac7576a48a9a301577a1311b1ad22259c2b32cb8a0a8 kernel-2.6.32-431.3.1.el6.i686.rpm daab71e92b367f886065f43920b930f1a5b3348819b81d0790124e5370591125 kernel-abi-whitelists-2.6.32-431.3.1.el6.noarch.rpm 68cfab16a48a4307d25f1d7be6384f122e1d4c2d7f56ef5c823ea6c3b614820f kernel-debug-2.6.32-431.3.1.el6.i686.rpm 7536e3613c16b14cbb161627840744d8a430b64002c4fc1516987e5f05fd1a0c kernel-debug-devel-2.6.32-431.3.1.el6.i686.rpm 1852acde5db7b864dab0a17a48d50d2947e3422dafba528a52d4028935037da9 kernel-devel-2.6.32-431.3.1.el6.i686.rpm 39aa17b77d7e2a9b2e87930e3426499f621ffa6197c0fa1f4e35e2bb6196defc kernel-doc-2.6.32-431.3.1.el6.noarch.rpm bc4e725a973506786d0bafb5b1de14da829aacfa0400f53c18f3b56eee77fc7b kernel-firmware-2.6.32-431.3.1.el6.noarch.rpm 88eac5ea76326695f363a5b1cb14d212834484aa35f44646a16fb1c3486020e0 kernel-headers-2.6.32-431.3.1.el6.i686.rpm a5c38eebb8ae8cdbe3d8876996848921a430833be657159988a125ce86eae717 perf-2.6.32-431.3.1.el6.i686.rpm 5155425da669468c00f0a9f77e1c8e6960cc679e350b6a2766764833956021dc python-perf-2.6.32-431.3.1.el6.i686.rpm x86_64: e15259cfd6dacdcec24a5975df56149a65f6f027b585d27fc35c4520f4353062 kernel-2.6.32-431.3.1.el6.x86_64.rpm daab71e92b367f886065f43920b930f1a5b3348819b81d0790124e5370591125 kernel-abi-whitelists-2.6.32-431.3.1.el6.noarch.rpm 0c3532615ab9cdadcf23843adad81fb19cab36d815611d5695bc80b2a321fd79 kernel-debug-2.6.32-431.3.1.el6.x86_64.rpm d34677a8534e705ce75a985e56730efc0262a1a902d0f7d7af206817f954cc6d kernel-debug-devel-2.6.32-431.3.1.el6.x86_64.rpm 059b6dab8c655a7a796cfc14a8d20e80dae2a7a2a0328f0be22cbe6cbcbe97b0 kernel-devel-2.6.32-431.3.1.el6.x86_64.rpm 39aa17b77d7e2a9b2e87930e3426499f621ffa6197c0fa1f4e35e2bb6196defc kernel-doc-2.6.32-431.3.1.el6.noarch.rpm bc4e725a973506786d0bafb5b1de14da829aacfa0400f53c18f3b56eee77fc7b kernel-firmware-2.6.32-431.3.1.el6.noarch.rpm ea1fde8c16aa8be359ca6a405d87ff32589c7f2ca08f499e5d45e415dbf4bd29 kernel-headers-2.6.32-431.3.1.el6.x86_64.rpm b45abf04cd19268befdb8530be5c454ee2b389f5f88d9a91c36e67892b65ca9b perf-2.6.32-431.3.1.el6.x86_64.rpm 28d7a61f170305f78af67c923ec47b53f79816acdb4816256214f3a31e429f9b python-perf-2.6.32-431.3.1.el6.x86_64.rpm Source: c676b2ec0d3d2222569157dc7ea67e7941b5f9615f0fe92834dbcb3707b8099c kernel-2.6.32-431.3.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 2 ***********************************************

1 0

Re: [CentOS] Need help with spec file for Apache-2.4.7
by James B. Byrne 05 Jan '14

05 Jan '14

On Fri, January 3, 2014 20:29, Markus Falb wrote: > > On 03.Jan.2014, at 21:24, James B. Byrne wrote: > >> Now, I added this in the Sources: >> >> Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 >> Source1: http://www.apache.org/dist/httpd/httpd-%{version}-deps.tar.bz2 > > You have to extract Source1 into the BUILDDIR... > You can verify if apr directory is present with > > $ rpmbuild -bp httpd.spec > $ ls ../BUILD/httpd-2.4.7 > >> <--- rpmbuild/SPECS/httpd.spec > > ... > >> %prep >> %setup -q > > after that %setup macro your working directory should be > rpmbuild/BUILD/httpd-2.4.7 > now something like > > %setup -D -q -b 1 > > http://docs.fedoraproject.org/en-US/Fedora_Draft_Documentation/0.1/html-sin… > > -- > Markus > Thank you very much for that reference. This got me past that roadblock. I have resolved many other difficulties but I have run into another problem for which I am unable find any guidance. Now I am getting this error in the build: RPM build errors: File not found: /builddir/build/BUILDROOT/httpd-2.4.7-1.x86_64/usr/lib64/httpd/modules/mod_session_crypto.so Child return code was: 1 EXCEPTION: Command failed. See logs for output. # ['bash', '--login', '-c', 'rpmbuild -bb --target x86_64 --nodeps builddir/build/SPECS/httpd.spec'] I cannot find anything in the spec file that refers to this module by name other than the following: %{_libdir}/httpd/modules/mod_session_crypto.so Am I missing something obvious? Is there an undeclared dependency? Any assistance gratefully accepted. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

New company name
by kwazi mavuso 04 Jan '14

04 Jan '14

Good day I'm on the verge of starting a Data and Analytics company. We'll start small with a few systems running CentOS Linux and developing our software using python. However, we still haven't decided on a name for the business. Please go to the following link to help me choose a most appropriate name out of a choice of six: https://docs.google.com/forms/ d/1drhW4vdGTkV24uUi1sAJIJSkNm- E073FSO6s0NFEMMU/viewform It's just one multiple choice question, your help will be greatly appreciated. Kind Regards, Kay

4 3

Elliptic curve on Centos 6.x
by Eero Volotinen 04 Jan '14

04 Jan '14

Hi, Is there nice way to put back EC encryption on Centos? RHEL disabled it due "patent issues", but is third party providing packages to EC enabled packages to centos ? -- Eero

12 20

Need help with spec file for Apache-2.4.7
by James B. Byrne 04 Jan '14

04 Jan '14

I am trying to build an RPM for Apache-2.4.7-1 on Centos-6.5-i86_64. I am using mock. The are three build dependencies that I am trying to resolve. One, mod_socache_dc / distcache, I have simply removed from the spec file. The other two are arp and apr-utils. Since httpd-2.4.7 needs arp >= 1.4 I got the two latter requirements from http://www.apache.org/dist/httpd/httpd-2.4.7-deps.tar.bz2 and extracted them into rpmbuild/SOURCES/httpd-2.4.7/srclib intending to use the --with-included-arp configuration directive per rpmbuild/SOURCES/httpd-2.4.7/INSTALL. I also revised the spec file to remove requirements for the removed dependencies. #BuildRequires: apr-devel >= 1.4.0, apr-util-devel >= 1.4.0 # Replaced by --with-included-apr . . . #Requires: apr-devel, apr-util-devel # Replaced by --with-included-apr and this little 'gotcha' # forcibly prevent use of bundled apr, apr-util, pcre # rm -rf srclib/{apr,apr-util,pcre} removed this from %configure: # --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ and replaced it with this: --with-included-apr \ and removed the reference to mod_socache_dc #%files -n mod_socache_dc #%defattr(-,root,root) #%{_libdir}/httpd/modules/mod_socache_dc.so However, the build dies saying that it cannot find arp/arp-utils: configure: Configuring Apache Portable Runtime library... configure: configure: error: Bundled APR requested but not found at ./srclib/. Download and unpack the corresponding apr and apr-util packages to ./srclib/. RPM build errors: error: Bad exit status from /var/tmp/rpm-tmp.pXoIWK (%build) Bad exit status from /var/tmp/rpm-tmp.pXoIWK (%build) Child return code was: 1 Now, I added this in the Sources: Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 Source1: http://www.apache.org/dist/httpd/httpd-%{version}-deps.tar.bz2 And I have confirmed that the srclib directory contains the files for arp and arp-utils: $ ll rpmbuild/SOURCES/httpd-2.4.7/srclib total 12 drwxr-xr-x. 27 byrnejb byrnejb 4096 Jan 3 14:11 apr drwxr-xr-x. 19 byrnejb byrnejb 4096 Nov 19 12:36 apr-util -rw-r--r--. 1 byrnejb byrnejb 121 Feb 11 2005 Makefile.in As this pretty much exhausts my small stock of knowledge respecting rpmbuild it is evident that I need some help with the spec file to get past this problem. The spec is provided below and I would be grateful if anyone could help me out with this. I am sure others would find the information useful as well. Thanks. <--- rpmbuild/SPECS/httpd.spec %define contentdir /var/www %define suexec_caller apache %define mmn 20120211 Summary: Apache HTTP Server Name: httpd Version: 2.4.7 Release: 1 URL: http://httpd.apache.org/ Vendor: Apache Software Foundation Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 Source1: http://www.apache.org/dist/httpd/httpd-%{version}-deps.tar.bz2 License: Apache License, Version 2.0 Group: System Environment/Daemons BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root BuildRequires: autoconf, perl, pkgconfig, findutils BuildRequires: zlib-devel, libselinux-devel, libuuid-devel #BuildRequires: apr-devel >= 1.4.0, apr-util-devel >= 1.4.0 # using --with-included-apr instead BuildRequires: pcre-devel >= 5.0 Requires: initscripts >= 8.36, /etc/mime.types Obsoletes: httpd-suexec Requires(pre): /usr/sbin/useradd Requires(post): chkconfig Provides: webserver Provides: mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release} Provides: httpd-mmn = %{mmn} %description Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet. %package devel Group: Development/Libraries Summary: Development tools for the Apache HTTP server. Obsoletes: secureweb-devel, apache-devel #Requires: apr-devel, apr-util-devel # Replaced by --with-included-apr Requires: pkgconfig, libtool Requires: httpd = %{version}-%{release} %description devel The httpd-devel package contains the APXS binary and other files that you need to build Dynamic Shared Objects (DSOs) for the Apache HTTP Server. If you are installing the Apache HTTP server and you want to be able to compile or develop additional modules for Apache, you need to install this package. %package manual Group: Documentation Summary: Documentation for the Apache HTTP server. Requires: httpd = :%{version}-%{release} Obsoletes: secureweb-manual, apache-manual %description manual The httpd-manual package contains the complete manual and reference guide for the Apache HTTP server. The information can also be found at http://httpd.apache.org/docs/. %package tools Group: System Environment/Daemons Summary: Tools for use with the Apache HTTP Server %description tools The httpd-tools package contains tools which can be used with the Apache HTTP Server. %package -n mod_authnz_ldap Group: System Environment/Daemons Summary: LDAP modules for the Apache HTTP server BuildRequires: openldap-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_authnz_ldap The mod_authnz_ldap module for the Apache HTTP server provides authentication and authorization against an LDAP server, while mod_ldap provides an LDAP cache. %package -n mod_lua Group: System Environment/Daemons Summary: Lua language module for the Apache HTTP server BuildRequires: lua-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_lua The mod_lua module for the Apache HTTP server allows the server to be extended with scripts written in the Lua programming language. %package -n mod_proxy_html Group: System Environment/Daemons Summary: Proxy HTML filter modules for the Apache HTTP server Epoch: 1 BuildRequires: libxml2-devel Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_proxy_html The mod_proxy_html module for the Apache HTTP server provides a filter to rewrite HTML links within web content when used within a reverse proxy environment. The mod_xml2enc module provides enhanced charset/internationalisation support for mod_proxy_html. #%package -n mod_socache_dc #Group: System Environment/Daemons #Summary: Distcache shared object cache module for the Apache HTTP server #BuildRequires: distcache-devel #Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} # #%description -n mod_socache_dc #The mod_socache_dc module for the Apache HTTP server allows the shared #object cache to use the distcache shared caching mechanism. %package -n mod_ssl Group: System Environment/Daemons Summary: SSL/TLS module for the Apache HTTP server Epoch: 1 BuildRequires: openssl-devel Requires(post): openssl, /bin/cat Requires(pre): httpd Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_ssl The mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. %prep %setup -q # Safety check: prevent build if defined MMN does not equal upstream MMN. vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n ' /^2/p'` if test "x${vmmn}" != "x%{mmn}"; then : Error: Upstream MMN is now ${vmmn}, packaged MMN is %{mmn}. : Update the mmn macro and rebuild. exit 1 fi %build # forcibly prevent use of bundled apr, apr-util, pcre # rm -rf srclib/{apr,apr-util,pcre} # --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ %configure \ --enable-layout=RPM \ --libdir=%{_libdir} \ --sysconfdir=%{_sysconfdir}/httpd/conf \ --includedir=%{_includedir}/httpd \ --libexecdir=%{_libdir}/httpd/modules \ --datadir=%{contentdir} \ --with-installbuilddir=%{_libdir}/httpd/build \ --enable-mpms-shared=all \ --with-included-apr \ --enable-suexec --with-suexec \ --with-suexec-caller=%{suexec_caller} \ --with-suexec-docroot=%{contentdir} \ --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ --with-suexec-bin=%{_sbindir}/suexec \ --with-suexec-uidmin=500 --with-suexec-gidmin=100 \ --enable-pie \ --with-pcre \ --enable-mods-shared=all \ --enable-ssl --with-ssl --enable-socache-dc --enable-bucketeer \ --enable-case-filter --enable-case-filter-in \ --disable-imagemap make %{?_smp_mflags} %install rm -rf $RPM_BUILD_ROOT make DESTDIR=$RPM_BUILD_ROOT install # for holding mod_dav lock database mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/dav # create a prototype session cache mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl touch $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl/scache.{dir,pag,sem} # Make the MMN accessible to module packages echo %{mmn} > $RPM_BUILD_ROOT%{_includedir}/httpd/.mmn # Set up /var directories mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/httpd mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/cache-root # symlinks for /etc/httpd ln -s ../..%{_localstatedir}/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs ln -s ../..%{_localstatedir}/run $RPM_BUILD_ROOT/etc/httpd/run ln -s ../..%{_libdir}/httpd/modules $RPM_BUILD_ROOT/etc/httpd/modules mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d # install SYSV init stuff mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d install -m755 ./build/rpm/httpd.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/httpd install -m755 ./build/rpm/htcacheclean.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/htcacheclean # install log rotation stuff mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d install -m644 ./build/rpm/httpd.logrotate \ $RPM_BUILD_ROOT/etc/logrotate.d/httpd # Remove unpackaged files rm -rf $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.exp \ $RPM_BUILD_ROOT%{contentdir}/cgi-bin/* # Make suexec a+rw so it can be stripped. %%files lists real permissions chmod 755 $RPM_BUILD_ROOT%{_sbindir}/suexec %pre # Add the "apache" user /usr/sbin/useradd -c "Apache" -u 48 \ -s /sbin/nologin -r -d %{contentdir} apache 2> /dev/null || : %post # Register the httpd service /sbin/chkconfig --add httpd /sbin/chkconfig --add htcacheclean %preun if [ $1 = 0 ]; then /sbin/service httpd stop > /dev/null 2>&1 /sbin/service htcacheclean stop > /dev/null 2>&1 /sbin/chkconfig --del httpd /sbin/chkconfig --del htcacheclean fi %post -n mod_ssl umask 077 if [ ! -f %{_sysconfdir}/httpd/conf/server.key ] ; then %{_bindir}/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > %{_sysconfdir}/httpd/conf/server.key 2> /dev/null fi FQDN=`hostname` if [ "x${FQDN}" = "x" ]; then FQDN=localhost.localdomain fi if [ ! -f %{_sysconfdir}/httpd/conf/server.crt ] ; then cat << EOF | %{_bindir}/openssl req -new -key %{_sysconfdir}/httpd/conf/server.key -x509 -days 365 -out %{_sysconfdir}/httpd/conf/server.crt 2>/dev/null -- SomeState SomeCity SomeOrganization SomeOrganizationalUnit ${FQDN} root@${FQDN} EOF fi %check # Check the built modules are all PIC if readelf -d $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so | grep TEXTREL; then : modules contain non-relocatable code exit 1 fi %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) %doc ABOUT_APACHE README CHANGES LICENSE NOTICE %dir %{_sysconfdir}/httpd %{_sysconfdir}/httpd/modules %{_sysconfdir}/httpd/logs %{_sysconfdir}/httpd/run %dir %{_sysconfdir}/httpd/conf %dir %{_sysconfdir}/httpd/conf.d %config(noreplace) %{_sysconfdir}/httpd/conf/httpd.conf %config(noreplace) %{_sysconfdir}/httpd/conf/magic %config(noreplace) %{_sysconfdir}/httpd/conf/mime.types %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/httpd.conf %config %{_sysconfdir}/logrotate.d/httpd %config %{_sysconfdir}/rc.d/init.d/httpd %config %{_sysconfdir}/rc.d/init.d/htcacheclean %{_sbindir}/fcgistarter %{_sbindir}/htcacheclean %{_sbindir}/httpd %{_sbindir}/apachectl %attr(4510,root,%{suexec_caller}) %{_sbindir}/suexec %dir %{_libdir}/httpd %dir %{_libdir}/httpd/modules %{_libdir}/httpd/modules/mod_access_compat.so %{_libdir}/httpd/modules/mod_actions.so %{_libdir}/httpd/modules/mod_alias.so %{_libdir}/httpd/modules/mod_allowmethods.so %{_libdir}/httpd/modules/mod_asis.so %{_libdir}/httpd/modules/mod_auth_basic.so %{_libdir}/httpd/modules/mod_auth_digest.so %{_libdir}/httpd/modules/mod_auth_form.so %{_libdir}/httpd/modules/mod_authn_anon.so %{_libdir}/httpd/modules/mod_authn_core.so %{_libdir}/httpd/modules/mod_authn_dbd.so %{_libdir}/httpd/modules/mod_authn_dbm.so %{_libdir}/httpd/modules/mod_authn_file.so %{_libdir}/httpd/modules/mod_authn_socache.so %{_libdir}/httpd/modules/mod_authz_core.so %{_libdir}/httpd/modules/mod_authz_dbd.so %{_libdir}/httpd/modules/mod_authz_dbm.so %{_libdir}/httpd/modules/mod_authz_groupfile.so %{_libdir}/httpd/modules/mod_authz_host.so %{_libdir}/httpd/modules/mod_authz_owner.so %{_libdir}/httpd/modules/mod_authz_user.so %{_libdir}/httpd/modules/mod_autoindex.so %{_libdir}/httpd/modules/mod_bucketeer.so %{_libdir}/httpd/modules/mod_buffer.so %{_libdir}/httpd/modules/mod_cache_disk.so %{_libdir}/httpd/modules/mod_cache_socache.so %{_libdir}/httpd/modules/mod_cache.so %{_libdir}/httpd/modules/mod_case_filter.so %{_libdir}/httpd/modules/mod_case_filter_in.so %{_libdir}/httpd/modules/mod_cgid.so %{_libdir}/httpd/modules/mod_charset_lite.so %{_libdir}/httpd/modules/mod_data.so %{_libdir}/httpd/modules/mod_dav_fs.so %{_libdir}/httpd/modules/mod_dav_lock.so %{_libdir}/httpd/modules/mod_dav.so %{_libdir}/httpd/modules/mod_dbd.so %{_libdir}/httpd/modules/mod_deflate.so %{_libdir}/httpd/modules/mod_dialup.so %{_libdir}/httpd/modules/mod_dir.so %{_libdir}/httpd/modules/mod_dumpio.so %{_libdir}/httpd/modules/mod_echo.so %{_libdir}/httpd/modules/mod_env.so %{_libdir}/httpd/modules/mod_expires.so %{_libdir}/httpd/modules/mod_ext_filter.so %{_libdir}/httpd/modules/mod_file_cache.so %{_libdir}/httpd/modules/mod_filter.so %{_libdir}/httpd/modules/mod_headers.so %{_libdir}/httpd/modules/mod_heartbeat.so %{_libdir}/httpd/modules/mod_heartmonitor.so %{_libdir}/httpd/modules/mod_include.so %{_libdir}/httpd/modules/mod_info.so %{_libdir}/httpd/modules/mod_lbmethod_bybusyness.so %{_libdir}/httpd/modules/mod_lbmethod_byrequests.so %{_libdir}/httpd/modules/mod_lbmethod_bytraffic.so %{_libdir}/httpd/modules/mod_lbmethod_heartbeat.so %{_libdir}/httpd/modules/mod_log_config.so %{_libdir}/httpd/modules/mod_log_debug.so %{_libdir}/httpd/modules/mod_log_forensic.so %{_libdir}/httpd/modules/mod_logio.so %{_libdir}/httpd/modules/mod_macro.so %{_libdir}/httpd/modules/mod_mime_magic.so %{_libdir}/httpd/modules/mod_mime.so %{_libdir}/httpd/modules/mod_mpm_event.so %{_libdir}/httpd/modules/mod_mpm_prefork.so %{_libdir}/httpd/modules/mod_mpm_worker.so %{_libdir}/httpd/modules/mod_negotiation.so %{_libdir}/httpd/modules/mod_proxy_ajp.so %{_libdir}/httpd/modules/mod_proxy_balancer.so %{_libdir}/httpd/modules/mod_proxy_connect.so %{_libdir}/httpd/modules/mod_proxy_express.so %{_libdir}/httpd/modules/mod_proxy_fcgi.so %{_libdir}/httpd/modules/mod_proxy_fdpass.so %{_libdir}/httpd/modules/mod_proxy_ftp.so %{_libdir}/httpd/modules/mod_proxy_http.so %{_libdir}/httpd/modules/mod_proxy_scgi.so %{_libdir}/httpd/modules/mod_proxy_wstunnel.so %{_libdir}/httpd/modules/mod_proxy.so %{_libdir}/httpd/modules/mod_ratelimit.so %{_libdir}/httpd/modules/mod_reflector.so %{_libdir}/httpd/modules/mod_remoteip.so %{_libdir}/httpd/modules/mod_reqtimeout.so %{_libdir}/httpd/modules/mod_request.so %{_libdir}/httpd/modules/mod_rewrite.so %{_libdir}/httpd/modules/mod_sed.so %{_libdir}/httpd/modules/mod_session_cookie.so %{_libdir}/httpd/modules/mod_session_crypto.so %{_libdir}/httpd/modules/mod_session_dbd.so %{_libdir}/httpd/modules/mod_session.so %{_libdir}/httpd/modules/mod_setenvif.so %{_libdir}/httpd/modules/mod_slotmem_plain.so %{_libdir}/httpd/modules/mod_slotmem_shm.so %{_libdir}/httpd/modules/mod_socache_dbm.so %{_libdir}/httpd/modules/mod_socache_memcache.so %{_libdir}/httpd/modules/mod_socache_shmcb.so %{_libdir}/httpd/modules/mod_speling.so %{_libdir}/httpd/modules/mod_status.so %{_libdir}/httpd/modules/mod_substitute.so %{_libdir}/httpd/modules/mod_suexec.so %{_libdir}/httpd/modules/mod_unique_id.so %{_libdir}/httpd/modules/mod_unixd.so %{_libdir}/httpd/modules/mod_userdir.so %{_libdir}/httpd/modules/mod_usertrack.so %{_libdir}/httpd/modules/mod_version.so %{_libdir}/httpd/modules/mod_vhost_alias.so %{_libdir}/httpd/modules/mod_watchdog.so %dir %{contentdir} %dir %{contentdir}/cgi-bin %dir %{contentdir}/html %dir %{contentdir}/icons %dir %{contentdir}/error %dir %{contentdir}/error/include %{contentdir}/icons/* %{contentdir}/error/README %{contentdir}/html/index.html %config(noreplace) %{contentdir}/error/*.var %config(noreplace) %{contentdir}/error/include/*.html %attr(0700,root,root) %dir %{_localstatedir}/log/httpd %attr(0700,apache,apache) %dir %{_localstatedir}/lib/dav %attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd/cache-root %{_mandir}/man1/* %{_mandir}/man8/suexec* %{_mandir}/man8/apachectl.8* %{_mandir}/man8/httpd.8* %{_mandir}/man8/htcacheclean.8* %{_mandir}/man8/fcgistarter.8* %files manual %defattr(-,root,root) %{contentdir}/manual %{contentdir}/error/README %files tools %defattr(-,root,root) %{_bindir}/ab %{_bindir}/htdbm %{_bindir}/htdigest %{_bindir}/htpasswd %{_bindir}/logresolve %{_bindir}/httxt2dbm %{_sbindir}/rotatelogs %{_mandir}/man1/htdbm.1* %{_mandir}/man1/htdigest.1* %{_mandir}/man1/htpasswd.1* %{_mandir}/man1/httxt2dbm.1* %{_mandir}/man1/ab.1* %{_mandir}/man1/logresolve.1* %{_mandir}/man8/rotatelogs.8* %doc LICENSE NOTICE %files -n mod_authnz_ldap %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ldap.so %{_libdir}/httpd/modules/mod_authnz_ldap.so %files -n mod_lua %defattr(-,root,root) %{_libdir}/httpd/modules/mod_lua.so %files -n mod_proxy_html %defattr(-,root,root) %{_libdir}/httpd/modules/mod_proxy_html.so %{_libdir}/httpd/modules/mod_xml2enc.so #%files -n mod_socache_dc #%defattr(-,root,root) #%{_libdir}/httpd/modules/mod_socache_dc.so %files -n mod_ssl %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ssl.so %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-ssl.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-ssl.conf %attr(0700,apache,root) %dir %{_localstatedir}/cache/mod_ssl %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.dir %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.pag %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.sem %files devel %defattr(-,root,root) %{_includedir}/httpd %{_bindir}/apxs %{_sbindir}/checkgid %{_bindir}/dbmmanage %{_sbindir}/envvars* %{_mandir}/man1/dbmmanage.1* %{_mandir}/man1/apxs.1* %dir %{_libdir}/httpd/build %{_libdir}/httpd/build/*.mk %{_libdir}/httpd/build/instdso.sh %{_libdir}/httpd/build/config.nice %{_libdir}/httpd/build/mkdir.sh ---> -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CentOS-announce Digest, Vol 107, Issue 1
by centos-announce-request＠centos.org 03 Jan '14

03 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0002 CentOS 5 cman Update (Johnny Hughes) 2. CEBA-2014:0003 CentOS 6 ethtool Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 2 Jan 2014 11:54:35 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0002 CentOS 5 cman Update To: centos-announce(a)centos.org Message-ID: <20140102115435.GA14421(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0002 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0002.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dde5d14bade8d2b230b1ec8bab7fce5ac7a975da5f0b790a659e2dc82da92f37 cman-2.0.115-118.el5.3.i386.rpm e4ac83c90ee260258a6a30f6a43ee395279003e02f4194520d128005ffeb1ea6 cman-devel-2.0.115-118.el5.3.i386.rpm x86_64: fc9b0732deb33f4d3b1bc8eff57a95cb84d53617c050f89aa95c1f402b2ce991 cman-2.0.115-118.el5.3.x86_64.rpm e4ac83c90ee260258a6a30f6a43ee395279003e02f4194520d128005ffeb1ea6 cman-devel-2.0.115-118.el5.3.i386.rpm cb3af8aedef8c35cfbd78aba591ad1a88f36025b2ddd400fd15a7711c008c796 cman-devel-2.0.115-118.el5.3.x86_64.rpm Source: 484688b49783f3993702854d1b6fa1d583dbe618fdc2d9d54681546c4a480fff cman-2.0.115-118.el5.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 2 Jan 2014 12:13:51 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0003 CentOS 6 ethtool Update To: centos-announce(a)centos.org Message-ID: <20140102121351.GA55416(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0003 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0003.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f1987173982e5053872b6856a787d63011339765aaa32d443006d803283e20fb ethtool-3.5-1.2.el6_5.i686.rpm x86_64: 24104b292bc87a7969b762d2ec5f2484ac0f2d40b744e5d8064666fe713d09af ethtool-3.5-1.2.el6_5.x86_64.rpm Source: 8a2e8291662222593b8eb02c7c076527b074df73d7e63babc4d51e299182e2e1 ethtool-3.5-1.2.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 1 ***********************************************

1 0

Re: [CentOS] I want to ask about some Kernel level operations.
by Michael Lampe 03 Jan '14

03 Jan '14

Eliezer wrote: > What would be a clean buildroot for? Well, only God himself did the initial creative work just once -- after that, He let things go, because it was already to complicated even for Him -- or perfect. Anyway, because He had not planned doing it again and reiterate, we now have theology and the subject of theodicy. And remember: even the pope uses 'sudo' when he speaks 'ex cathedra'. So wtf are you asking for?? -Michael

2 1

Re: [CentOS] I want to ask about some Kernel level operations.
by Eliezer Croitoru 02 Jan '14

02 Jan '14

On 03/01/14 01:42, Reindl Harald wrote: > so hire somebody Looking for a recommendation for one.. Please also add the price for learning from him. Thanks, Eliezer

1 0

Re: [CentOS] Elliptic curve on Centos 6.x
by Eero Volotinen 02 Jan '14

02 Jan '14

what about update to 6.5 which brings it already back > why do you not keep your system up-to-date at all? > ECHDE with CentOS 6.5 works fine and is one of the 6.5 features > I already noticed it: https://twitter.com/reaperhulk/status/407384786114596864 So only needed thing is recompile ec enabled packages (like httpd) for centos? -- Eero

1 0

RHEL Load Balancer Add-on vs KeepAlived
by Dimitar Georgievski 02 Jan '14

02 Jan '14

Hello, I've started reviewing HA solution for HAProxy and trying to decide between RHEL HA Add-on and KeeAlived. Just curious if anyone had a chance to use any of these technologies in a production environment? I would love to learn what your experience with these technologies is in terms of management, scaling, troubleshooting, and monitoring. I am leaning towards RHEL Add-on at the moment because a better documentation, simpler architecture, set-up and management. This project also appears to me to be more active compared to KeepAlived, but I might be wrong. Thanks, Dimitar

1 0

clicking on link in Thunderbird fails to open page in Firefox
by ken 02 Jan '14

02 Jan '14

This worked fine for years until I updated firefox and thunderbird recently. Now, however, when I click on a link in an email in thunderbird, rather than open the indicated webpage in firefox, nothing at all happens. network.protocol-handler.app.http in tbird's about:config specifies the executable /usr/lib/thunderbird/open-browser.sh and running the latter at the CLI with a URL as an arg does work as expected: the spec'd URL is loaded into firefox. So I suspect a bug in tbird. Anyone else having this problem?

6 12

nautilus
by aditya mamidwar 31 Dec '13

31 Dec '13

while # sudo nautilus i get this : root@static-16 aditya]# sudo nautilus No protocol specified Could not parse arguments: Cannot open display: [root@static-16 aditya]# please resolve. Also what does the "static-16" denote? -- -Aditya Mamidwar

4 5

Hangs after inactivity
by Arvind Nagarajan 31 Dec '13

31 Dec '13

Hi, My linux machine hangs after some period of inactivity (8+ hrs). Anyone experiencing similar issue. CentOS Release 6.5(Final) Kernel Linux 2.6.32-431.el6_x86_64 GNOME 2.28.2 Processor (0 - 7): Intel(R) Core(TM) i7-4770 CPU @ 3.40 GHz Any pointers will be helpful. Thanks, --Arvind

3 2

Nvidia driver and CentOS 6.5 [was: Re:intrusive chrome ]
by Akemi Yagi 30 Dec '13

30 Dec '13

On Mon, Dec 30, 2013 at 9:17 AM, Johnny Hughes <johnny(a)centos.org> wrote: > On 12/26/2013 12:03 PM, Phil Dobbin wrote: >> It's also happening now with Firefox as well (in fact, Firefox is >> virtually unusable) so I suspect there is something happening with >> either this machine or the OS. > > Are you running the proprietary NVIDIA driver? (either the one from > elrepo OR manually building from the NVIDIA site) > > If so, the recent xorg-x11-server updates require that you rebuild (or > reinstall) the drivers as those drivers replace some xorg files and if > you do not reinstall it can freeze the system or crash X. If you are having issues with the Nvidia driver under CentOS 6.5, the first thing you may want to try is to run: yum remove xorg-x11-glamor (See http://lists.elrepo.org/pipermail/elrepo/2013-November/002058.html if you care about the details. :-) Akemi

1 0

oom situation
by Oguz Yilmaz 30 Dec '13

30 Dec '13

I have continous oom&panic situation unresolved. I am not sure system fills up all the ram (36GB). Why this system triggered this oom situation? Is it about some other memory? highmem? lowmem? stack size? Best Regards, Kernel 3.10.24 Dec 27 09:19:05 2013 kernel: : [277622.359064] squid invoked oom-killer: gfp_mask=0x42d0, order=3, oom_score_adj=0 Dec 27 09:19:05 2013 kernel: : [277622.359069] squid cpuset=/ mems_allowed=0 Dec 27 09:19:05 2013 kernel: : [277622.359074] CPU: 9 PID: 15533 Comm: squid Not tainted 3.10.24-1.lsg #1 Dec 27 09:19:05 2013 kernel: : [277622.359076] Hardware name: Intel Thurley/Greencity, BIOS 080016 10/05/2011 Dec 27 09:19:05 2013 kernel: : [277622.359078] 00000003 e377b280 e03c3c38 c06472d6 e03c3c98 c04d2d96 c0a68f84 e377b580 Dec 27 09:19:05 2013 kernel: : [277622.359089] 000042d0 00000003 00000000 e03c3c64 c04abbda e42bd318 00000000 e03c3cf4 Dec 27 09:19:05 2013 kernel: : [277622.359096] 000042d0 00000001 00000247 00000000 e03c3c94 c04d3d5f 00000001 00000042 Dec 27 09:19:05 2013 kernel: : [277622.359105] Call Trace: Dec 27 09:19:05 2013 kernel: : [277622.359116] [<c06472d6>] dump_stack+0x16/0x20 Dec 27 09:19:05 2013 kernel: : [277622.359121] [<c04d2d96>] dump_header+0x66/0x1c0 Dec 27 09:19:05 2013 kernel: : [277622.359127] [<c04abbda>] ? __delayacct_freepages_end+0x3a/0x40 Dec 27 09:19:05 2013 kernel: : [277622.359131] [<c04d3d5f>] ? zone_watermark_ok+0x2f/0x40 Dec 27 09:19:05 2013 kernel: : [277622.359135] [<c04d2f27>] check_panic_on_oom+0x37/0x60 Dec 27 09:19:05 2013 kernel: : [277622.359138] [<c04d36d2>] out_of_memory+0x92/0x250 Dec 27 09:19:05 2013 kernel: : [277622.359144] [<c04dd1fa>] ? wakeup_kswapd+0xda/0x120 Dec 27 09:19:05 2013 kernel: : [277622.359148] [<c04d6cee>] __alloc_pages_nodemask+0x68e/0x6a0 Dec 27 09:19:05 2013 kernel: : [277622.359155] [<c0801c1e>] sk_page_frag_refill+0x7e/0x120 Dec 27 09:19:05 2013 kernel: : [277622.359160] [<c084b8c7>] tcp_sendmsg+0x387/0xbf0 Dec 27 09:19:05 2013 kernel: : [277622.359166] [<c0469a2f>] ? put_prev_task_fair+0x1f/0x350 Dec 27 09:19:05 2013 kernel: : [277622.359173] [<c0ba7d8b>] ? longrun_init+0x2b/0x30 Dec 27 09:19:05 2013 kernel: : [277622.359177] [<c084b540>] ? tcp_tso_segment+0x380/0x380 Dec 27 09:19:05 2013 kernel: : [277622.359182] [<c086d0da>] inet_sendmsg+0x4a/0xa0 Dec 27 09:19:05 2013 kernel: : [277622.359186] [<c07ff3a6>] sock_aio_write+0x116/0x130 Dec 27 09:19:05 2013 kernel: : [277622.359191] [<c0457acc>] ? hrtimer_try_to_cancel+0x3c/0xb0 Dec 27 09:19:05 2013 kernel: : [277622.359197] [<c050b208>] do_sync_write+0x68/0xa0 Dec 27 09:19:05 2013 kernel: : [277622.359202] [<c050caa0>] vfs_write+0x190/0x1b0 Dec 27 09:19:05 2013 kernel: : [277622.359206] [<c050cbb3>] SyS_write+0x53/0x80 Dec 27 09:19:05 2013 kernel: : [277622.359211] [<c08f72ba>] sysenter_do_call+0x12/0x22 Dec 27 09:19:05 2013 kernel: : [277622.359213] Mem-Info: Dec 27 09:19:05 2013 kernel: : [277622.359215] DMA per-cpu: Dec 27 09:19:05 2013 kernel: : [277622.359218] CPU 0: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359220] CPU 1: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359222] CPU 2: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359224] CPU 3: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359226] CPU 4: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359228] CPU 5: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359230] CPU 6: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359232] CPU 7: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359234] CPU 8: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359236] CPU 9: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359238] CPU 10: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359240] CPU 11: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359242] CPU 12: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359244] CPU 13: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359246] CPU 14: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359248] CPU 15: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359250] CPU 16: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359253] CPU 17: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359255] CPU 18: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359258] CPU 19: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359260] CPU 20: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359262] CPU 21: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359264] CPU 22: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359266] CPU 23: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359268] Normal per-cpu: Dec 27 09:19:05 2013 kernel: : [277622.359270] CPU 0: hi: 186, btch: 31 usd: 34 Dec 27 09:19:05 2013 kernel: : [277622.359272] CPU 1: hi: 186, btch: 31 usd: 72 Dec 27 09:19:05 2013 kernel: : [277622.359274] CPU 2: hi: 186, btch: 31 usd: 40 Dec 27 09:19:05 2013 kernel: : [277622.359276] CPU 3: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359279] CPU 4: hi: 186, btch: 31 usd: 39 Dec 27 09:19:05 2013 kernel: : [277622.359281] CPU 5: hi: 186, btch: 31 usd: 49 Dec 27 09:19:05 2013 kernel: : [277622.359283] CPU 6: hi: 186, btch: 31 usd: 50 Dec 27 09:19:05 2013 kernel: : [277622.359285] CPU 7: hi: 186, btch: 31 usd: 25 Dec 27 09:19:05 2013 kernel: : [277622.359286] CPU 8: hi: 186, btch: 31 usd: 42 Dec 27 09:19:05 2013 kernel: : [277622.359289] CPU 9: hi: 186, btch: 31 usd: 39 Dec 27 09:19:05 2013 kernel: : [277622.359290] CPU 10: hi: 186, btch: 31 usd: 155 Dec 27 09:19:05 2013 kernel: : [277622.359293] CPU 11: hi: 186, btch: 31 usd: 56 Dec 27 09:19:05 2013 kernel: : [277622.359295] CPU 12: hi: 186, btch: 31 usd: 2 Dec 27 09:19:05 2013 kernel: : [277622.359297] CPU 13: hi: 186, btch: 31 usd: 162 Dec 27 09:19:05 2013 kernel: : [277622.359299] CPU 14: hi: 186, btch: 31 usd: 67 Dec 27 09:19:05 2013 kernel: : [277622.359301] CPU 15: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359303] CPU 16: hi: 186, btch: 31 usd: 68 Dec 27 09:19:05 2013 kernel: : [277622.359305] CPU 17: hi: 186, btch: 31 usd: 38 Dec 27 09:19:05 2013 kernel: : [277622.359307] CPU 18: hi: 186, btch: 31 usd: 56 Dec 27 09:19:05 2013 kernel: : [277622.359308] CPU 19: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359310] CPU 20: hi: 186, btch: 31 usd: 54 Dec 27 09:19:05 2013 kernel: : [277622.359312] CPU 21: hi: 186, btch: 31 usd: 35 Dec 27 09:19:05 2013 kernel: : [277622.359314] CPU 22: hi: 186, btch: 31 usd: 2 Dec 27 09:19:05 2013 kernel: : [277622.359316] CPU 23: hi: 186, btch: 31 usd: 60 Dec 27 09:19:05 2013 kernel: : [277622.359318] HighMem per-cpu: Dec 27 09:19:05 2013 kernel: : [277622.359320] CPU 0: hi: 186, btch: 31 usd: 32 Dec 27 09:19:05 2013 kernel: : [277622.359322] CPU 1: hi: 186, btch: 31 usd: 52 Dec 27 09:19:05 2013 kernel: : [277622.359324] CPU 2: hi: 186, btch: 31 usd: 9 Dec 27 09:19:05 2013 kernel: : [277622.359326] CPU 3: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359328] CPU 4: hi: 186, btch: 31 usd: 125 Dec 27 09:19:05 2013 kernel: : [277622.359330] CPU 5: hi: 186, btch: 31 usd: 116 Dec 27 09:19:05 2013 kernel: : [277622.359332] CPU 6: hi: 186, btch: 31 usd: 126 Dec 27 09:19:05 2013 kernel: : [277622.359333] CPU 7: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359336] CPU 8: hi: 186, btch: 31 usd: 79 Dec 27 09:19:05 2013 kernel: : [277622.359338] CPU 9: hi: 186, btch: 31 usd: 34 Dec 27 09:19:05 2013 kernel: : [277622.359340] CPU 10: hi: 186, btch: 31 usd: 111 Dec 27 09:19:05 2013 kernel: : [277622.359341] CPU 11: hi: 186, btch: 31 usd: 144 Dec 27 09:19:05 2013 kernel: : [277622.359343] CPU 12: hi: 186, btch: 31 usd: 15 Dec 27 09:19:05 2013 kernel: : [277622.359345] CPU 13: hi: 186, btch: 31 usd: 166 Dec 27 09:19:05 2013 kernel: : [277622.359347] CPU 14: hi: 186, btch: 31 usd: 185 Dec 27 09:19:05 2013 kernel: : [277622.359349] CPU 15: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359351] CPU 16: hi: 186, btch: 31 usd: 58 Dec 27 09:19:05 2013 kernel: : [277622.359353] CPU 17: hi: 186, btch: 31 usd: 122 Dec 27 09:19:05 2013 kernel: : [277622.359356] CPU 18: hi: 186, btch: 31 usd: 170 Dec 27 09:19:05 2013 kernel: : [277622.359358] CPU 19: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359360] CPU 20: hi: 186, btch: 31 usd: 30 Dec 27 09:19:05 2013 kernel: : [277622.359362] CPU 21: hi: 186, btch: 31 usd: 33 Dec 27 09:19:05 2013 kernel: : [277622.359364] CPU 22: hi: 186, btch: 31 usd: 28 Dec 27 09:19:05 2013 kernel: : [277622.359366] CPU 23: hi: 186, btch: 31 usd: 44 Dec 27 09:19:05 2013 kernel: : [277622.359371] active_anon:658515 inactive_anon:54399 isolated_anon:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] active_file:1172176 inactive_file:323606 isolated_file:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] unevictable:0 dirty:0 writeback:0 unstable:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] free:6911872 slab_reclaimable:29430 slab_unreclaimable:34726 Dec 27 09:19:05 2013 kernel: : [277622.359371] mapped:45784 shmem:9850 pagetables:107714 bounce:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] free_cma:0 Dec 27 09:19:05 2013 kernel: : [277622.359382] DMA free:2332kB min:36kB low:44kB high:52kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:15968kB managed:6960kB mlocked:0kB dirty:0kB writeback:0kB mapped:0kB shmem:0kB slab_reclaimable:8kB slab_unreclaimable:288kB kernel_stack:0kB pagetables:0kB unstable:0kB bounce:0kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? yes Dec 27 09:19:05 2013 kernel: : [277622.359384] lowmem_reserve[]: 0 573 36539 36539 Dec 27 09:19:05 2013 kernel: : [277622.359393] Normal free:114488kB min:3044kB low:3804kB high:4564kB active_anon:0kB inactive_anon:0kB active_file:252kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:894968kB managed:587540kB mlocked:0kB dirty:0kB writeback:0kB mapped:4kB shmem:0kB slab_reclaimable:117712kB slab_unreclaimable:138616kB kernel_stack:11976kB pagetables:0kB unstable:0kB bounce:0kB free_cma:0kB writeback_tmp:0kB pages_scanned:982 all_unreclaimable? yes Dec 27 09:19:05 2013 kernel: : [277622.359395] lowmem_reserve[]: 0 0 287725 287725 Dec 27 09:19:05 2013 kernel: : [277622.359404] HighMem free:27530668kB min:512kB low:48272kB high:96036kB active_anon:2634060kB inactive_anon:217596kB active_file:4688452kB inactive_file:1294168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:36828872kB managed:36828872kB mlocked:0kB dirty:0kB writeback:0kB mapped:183132kB shmem:39400kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:430856kB unstable:0kB bounce:367564104kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no Dec 27 09:19:05 2013 kernel: : [277622.359406] lowmem_reserve[]: 0 0 0 0 Dec 27 09:19:05 2013 kernel: : [277622.359410] DMA: 3*4kB (U) 2*8kB (U) 4*16kB (U) 5*32kB (U) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (R) 0*4096kB = 2428kB Dec 27 09:19:05 2013 kernel: : [277622.359422] Normal: 5360*4kB (UEM) 3667*8kB (UEM) 3964*16kB (UEMR) 13*32kB (MR) 0*64kB 1*128kB (R) 1*256kB (R) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 115000kB Dec 27 09:19:05 2013 kernel: : [277622.359435] HighMem: 6672*4kB (M) 74585*8kB (UM) 40828*16kB (UM) 17275*32kB (UM) 3314*64kB (UM) 1126*128kB (UM) 992*256kB (UM) 585*512kB (UM) 225*1024kB (UM) 78*2048kB (UMR) 5957*4096kB (UM) = 27529128kB Dec 27 09:19:05 2013 kernel: : [277622.359452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Dec 27 09:19:05 2013 kernel: : [277622.359454] 1505509 total pagecache pages Dec 27 09:19:05 2013 kernel: : [277622.359457] 4 pages in swap cache Dec 27 09:19:05 2013 kernel: : [277622.359459] Swap cache stats: add 13, delete 9, find 0/0 Dec 27 09:19:05 2013 kernel: : [277622.359460] Free swap = 35318812kB Dec 27 09:19:05 2013 kernel: : [277622.359462] Total swap = 35318864kB Dec 27 09:19:05 2013 kernel: : [277622.450529] 9699327 pages RAM Dec 27 09:19:05 2013 kernel: : [277622.450532] 9471490 pages HighMem Dec 27 09:19:05 2013 kernel: : [277622.450533] 342749 pages reserved Dec 27 09:19:05 2013 kernel: : [277622.450534] 2864256 pages shared Dec 27 09:19:05 2013 kernel: : [277622.450535] 1501243 pages non-shared Dec 27 09:19:05 2013 kernel: : [277622.450538] Kernel panic - not syncing: Out of memory: system-wide panic_on_oom is enabled Dec 27 09:19:05 2013 kernel: : [277622.450538] # cat /proc/meminfo MemTotal: 37426312 kB MemFree: 28328992 kB Buffers: 94728 kB Cached: 6216068 kB SwapCached: 0 kB Active: 6958572 kB Inactive: 1815380 kB Active(anon): 2329152 kB Inactive(anon): 170252 kB Active(file): 4629420 kB Inactive(file): 1645128 kB Unevictable: 0 kB Mlocked: 0 kB HighTotal: 36828872 kB HighFree: 28076144 kB LowTotal: 597440 kB LowFree: 252848 kB SwapTotal: 35318864 kB SwapFree: 35318860 kB Dirty: 0 kB Writeback: 8 kB AnonPages: 2463512 kB Mapped: 162296 kB Shmem: 36332 kB Slab: 208676 kB SReclaimable: 120872 kB SUnreclaim: 87804 kB KernelStack: 6320 kB PageTables: 42280 kB NFS_Unstable: 0 kB Bounce: 124 kB WritebackTmp: 0 kB CommitLimit: 54032020 kB Committed_AS: 3191916 kB VmallocTotal: 122880 kB VmallocUsed: 27088 kB VmallocChunk: 29312 kB HugePages_Total: 0 HugePages_Free: 0 HugePages_Rsvd: 0 HugePages_Surp: 0 Hugepagesize: 2048 kB DirectMap4k: 10232 kB DirectMap2M: 901120 kB sysctl: vm.oom_dump_tasks = 0 vm.oom_kill_allocating_task = 1 vm.panic_on_oom = 1 vm.admin_reserve_kbytes = 8192 vm.block_dump = 0 vm.dirty_background_bytes = 0 vm.dirty_background_ratio = 10 vm.dirty_bytes = 0 vm.dirty_expire_centisecs = 3000 vm.dirty_ratio = 20 vm.dirty_writeback_centisecs = 500 vm.drop_caches = 0 vm.highmem_is_dirtyable = 0 vm.hugepages_treat_as_movable = 0 vm.hugetlb_shm_group = 0 vm.laptop_mode = 0 vm.legacy_va_layout = 0 vm.lowmem_reserve_ratio = 256 32 32 vm.max_map_count = 65530 vm.min_free_kbytes = 3084 vm.mmap_min_addr = 4096 vm.nr_hugepages = 0 vm.nr_overcommit_hugepages = 0 vm.nr_pdflush_threads = 0 vm.overcommit_memory = 0 vm.overcommit_ratio = 50 vm.page-cluster = 3 vm.percpu_pagelist_fraction = 0 vm.scan_unevictable_pages = 0 vm.stat_interval = 1 vm.swappiness = 30 vm.user_reserve_kbytes = 131072 vm.vdso_enabled = 1 vm.vfs_cache_pressure = 100 # ulimit -a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 292370 max locked memory (kbytes, -l) 64 max memory size (kbytes, -m) unlimited open files (-n) 36728 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 292370 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited

3 2

dd ?
by hadi motamedi 30 Dec '13

30 Dec '13

Dear All I learned to clone my disk as the following : #dd if=/dev/sda of=/dev/sdb As far as I have understood, there is another gui-based utility named clonezilla that can do the same. If I am correct, please let me know how can I install clonezilla on my centos machine to try cloning my disk? Thank you

3 3

Serial Console Config in 6.5
by Camron W. Fox 30 Dec '13

30 Dec '13

Alle, After upgrading from 6.4 to 6.5, our serial console configuration non longer work. We have the following upstart file: [cwfox@hilo ~]$ cat /etc/init/ttyS0.conf # ttyS0 - agetty # # This service maintains a agetty on ttyS0. stop on runlevel [S016] start on runlevel [23] respawn exec agetty -h -L -w /dev/ttyS0 115200 vt100 [cwfox@hilo ~]$ And the following in /etc/securetty: [cwfox@hilo ~]$ sudo tail -2 /etc/securetty ttyS0 ttyS1 [cwfox@hilo ~]$ And finally this is appended to what used to be the kernel (now the module) line in /boot/grub/grub.conf: module /vmlinuz-2.6.32-431.1.2.0.1.el6.x86_64 ro root=/dev/mapper/vg_hilo-lv_root intel_iommu=on rd_NO_LUKS LANG=en_US.UTF-8 rd_LVM_LV=vg_hilo/lv_swap rd_NO_MD SYSFONT=latarcyrheb-sun16 rd_LVM_LV=vg_hilo/lv_root KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet crashkernel=auto console=tty0 console=ttyS0,115200 We've tried putting console=tty0 console=ttyS0,115200 in the kernel line, but no joy. We couldn't find anything in the Release Notes about a change in the serial console config. Can anyone point us in the right direction please? Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu Management Services of America, Inc. E-mail: cwfox(a)us.fujitsu.com

2 1

CentOS-announce Digest, Vol 106, Issue 15
by centos-announce-request＠centos.org 29 Dec '13

29 Dec '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:X018 Important Xen4CentOS kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 28 Dec 2013 16:38:45 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:X018 Important Xen4CentOS kernel Security Update To: CentOS-announce(a)centos.org Message-ID: <20131228163845.GA42596(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:X018 (Xen4CentOS) The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) ----------------------------- X86_64 ----------------------------- 2ac8f3b6799eac04c6fc5fe054a68d00bdf914f173087a7802c9bce8b4366e48 e1000e-2.5.4-3.10.25.2.el6.centos.alt.x86_64.rpm ac80d6e58bc9fd234b4baf3f51e35ef01a61ae592b0214cdc92af62565463e43 kernel-3.10.25-11.el6.centos.alt.x86_64.rpm 35cf6745c91e45cf90657baedde114f5e7911a59d8a0764d22f95c236462f3d8 kernel-devel-3.10.25-11.el6.centos.alt.x86_64.rpm 80af2fa6099081cf4ca7500551ab927a2f66fde7dbbfeac5fd9511f5c134b943 kernel-doc-3.10.25-11.el6.centos.alt.noarch.rpm 4b1695185de72f03cb530b29baf5fede27601ddd710b00f62e3978e8273417ac kernel-firmware-3.10.25-11.el6.centos.alt.noarch.rpm be1d1b7b7dd9100859bac1eb4bb6441eb206478aa0a36912dd83b760984ebd1f kernel-headers-3.10.25-11.el6.centos.alt.x86_64.rpm e237b1dbbd40285da0a616679adc6674eb6e6f86855e857b886b66cc402a4fab perf-3.10.25-11.el6.centos.alt.x86_64.rpm ----------------------------- Source: ----------------------------- 6babccc82261cf25110059cdc8e0365e8a2fa085a0009501ed24fee15760 e1000e-2.5.4-3.10.25.2.el6.centos.alt.src.rpm 3197faef868a5637acef74b626723ff75eaa4fc5082a8c79165178418c683c54 kernel-3.10.25-11.el6.centos.alt.src.rpm ===================================================== Kernel Changelog info from the SPEC file: * Sat Dec 27 2013 Johnny Hughes <johnny(a)centos.org> 3.10.25-11 - addresses CVE-2013-4587, CVE-2013-6367, CVE-2013-6368, CVE-2013-6376 e1000e Changelog info from the SPEC file: * Fri Dec 27 2013 Johnny Hughes <johnny(a)centos.org> - 2.5.4-3.10.25.2.el6.centos.alt - build against version 3.10.25 kernel ===================================================== The following kernel changelogs are available from kernel.org since the previous kernel: https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.25 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.24 ===================================================== The following security issues are addressed in this update: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4587 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6367 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6368 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6376 ===================================================== NOTE: You must run /usr/bin/grub-bootxen.sh to update the file /boot/grub/grub.conf (or you must update that file manually) to boot the new kernel on a dom0 xen machine. See for info: http://wiki.centos.org/HowTos/Xen/Xen4QuickStart -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 106, Issue 15 ************************************************

1 0

Centos 6.5 Unable to start wireless
by antonio 28 Dec '13

28 Dec '13

Made a minimal install, then added Gnome, etc, etc, now I have a full running system but: on the laptop I have a Broadcom BMC4311 that is not seen from system even if driver seems (b43) to be loaded If I connect an USB dongle with RLT8187 (high power dongle) I see also Broadcom BCM 4311 (high power dongle is working on another system):I guess tha USB port power is too low to make dongle work In any case I get the message that wireless is disabled. Any comment? -- Antonio M Skype: amontag52 Linux Fedora F20 (Heisenbug) on Acer 5720 http://lugsaronno.altervista.org http://www.campingmonterosa.com

2 1

CentOS & eclipse
by Steve 27 Dec '13

27 Dec '13

I'm running an up-to-date CentOS 6.5 and I wanted to install eclipse so I went to System->Adminitration->Add/Remove Software and installed eclipse-cdt-1:7.0.1-4.el6 and a bunch of dependent packages. >From the eclipse help menu I see that this is version 3.6.1. According to wikipedia this is a eclipse Helios which was released in June of 2010. My question is why is this so far out of date? My understanding was that CentOS was generally about a year out-of-date. I must confess that I don't know where I got that idea from and it is no doubt, wrong but 3 1/2 years out-of-date seems excessive. Is it just a packaging issue and whoever makes the RPMs hasn't made a new one? If I try to check for updates from inside eclipse, I get various failures for non-existant sites and dependency conflicts. Can anyone explain the situation and maybe shed some light on the history of how we got to this point. >From what I have read so far the solution is to ignore the rpms and install from the eclipse site. Thanks, Steve

7 9

CentOS6 CR repo - depsolving problem
by SilverTip257 27 Dec '13

27 Dec '13

All, Has anyone else had a problem with the CR repo on a 6.4 or 6.5 system? I have a test VM that has the CentOS6 CR repo enabled and it recently (well a week or so) started having dependency problems. It's choking on dependencies for ca-cerfificates. Obviously there aren't any CR packages yet for 6.5 so a zero package count and empty directory on the mirror [0] are legitimate. But should the depsolving problems be the expected behavior? [0] http://mirror.centos.org/centos/6.5/cr/x86_64/Packages/ Up until now, that machine has happily had the CR repo enabled. Thanks for any tips and assistance. ~]# yum deplist ca-certificates Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile <...snipped...> Finding dependencies: package: ca-certificates.noarch 2013.1.95-65.1.el6_5 dependency: /bin/bash Unsatisfied dependency dependency: p11-kit-trust >= 0.18.4-2 Unsatisfied dependency dependency: /bin/sh Unsatisfied dependency dependency: p11-kit >= 0.18.4-2 Unsatisfied dependency ~]# yum repolist enabled Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile <...snipped...> repo id repo name status base CentOS-6 - Base 0 cr CentOS-6 - CR 0 epel Extra Packages for Enterprise Linux 6 - x86_64 10,171 extras CentOS-6 - Extras 14 updates CentOS-6 - Updates 286 repolist: 10,472 ~]# cat /etc/yum.repos.d/CentOS-CR.repo # CentOS-CR.repo # # The continuous release ( CR ) repository contains rpms from the # next point release of CentOS, which isnt itself released as yet. # # Look at http://wiki.centos.org/AdditionalResources/Repositories/CR # for more details about how this repository works and what users # should expect to see included / excluded [cr] name=CentOS-$releasever - CR baseurl=http://mirror.centos.org/centos/$releasever/cr/$basearch/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6 -- ---~~.~~--- Mike // SilverTip257 //

2 2

Raid on Intel R1304BB4DC
by Norman Schklar 27 Dec '13

27 Dec '13

I'm trying to install 6.5 on this server. I can't get past the RAID. CentOS doesn't recognize my 4ea 1tb drives. I don't find a way to bypass the Intel RAID to use software RAID. Suggestions? Norm

1 0

Re: [CentOS] Postfix Autoresponder (CentOS 6.5 x64)
by Alexander Dalloz 26 Dec '13

26 Dec '13

Am 26.12.2013 21:10, schrieb JEWEL AHMMED: >> http://wiki2.dovecot.org/Pigeonhole/Sieve/Examples >> >> -> "Vacation auto-reply" >> >> Follow http://wiki2.dovecot.org/Pigeonhole/ManageSieve/Configuration to >> set it up. >> >> Regards >> >> Alexander > > > Hello Alexander, > I am so sorry, I don't understand about your link. :( > Please be sure this link is correct! The link is correct. Please take some time and reading to understand. See "yum info dovecot-pigeonhole". > Thank you very much. And please keep the discussion on the list. Alexander

1 0

Postfix Autoresponder (CentOS 6.5 x64)
by JEWEL AHMMED 26 Dec '13

26 Dec '13

Can any expert tell me, or give me any tutorial link? How can I Set Up Postfix Autoresponder for my email account? I am new in Linux & Now I am using CentOS 6.5 x64

5 9

New thunderbird and ligntning on CentOS 5...
by John Doe 26 Dec '13

26 Dec '13

Hey, anybody found a way to run the new Thunderbird Lightning calendar addon on CentOS 5...? From my debugging, it seems like the lightning addon is compiled with a newer version of glibc... Failed to load native module at path '.../Linux_x86-gcc3/libcalbasecomps.so': (80004005) /lib/libc.so.6: version `GLIBC_2.7' not found Tried older versions, 2.6 and 2.5b2, but they seem not compatible with TB 24: Failed to load native module at path '.../Linux_x86-gcc3/libcalbasecomps.so': (80004005) /usr/lib/thunderbird/libxul.so: version `xul23.0' not found I guess I need to reinstall my worsktation to CentOS 6 soon... Thx, JD

2 2

Remove/deactivate the session and language buttons in login screen
by cbulist＠gmail.com 25 Dec '13

25 Dec '13

Hi All, I'm using centOS 6.4 with openbox as windows manager. I modified /etc/X11/xinit/Xsession file in orden to set up openbox as default windows manager for all users (I changed gnome-session to openbox-session). Now, I would like to remove or deactivate the the session and language button in login screen. I tried to find these using gconf-editor but without any luck. I could change the banner text message and disabled user list but nothing for the other buttons. Any clue how can I accomplish this? Thanks in advance!

1 1

Have a great Holiday season
by Karanbir Singh 25 Dec '13

25 Dec '13

hi, Here is wishing everyone in the CentOS community a great holiday season, awesome new year and a great 2014. May 2014 bring friendlier + larger communities, stabler distros and a general reduction in systems frustrations for the users! regards from and to everyone, - KB -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

10 10

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss