- Discuss - lists.centos.org

Acrobat Reader 9 on Centos 4.7
by tblader 17 Apr '09

17 Apr '09

Hello, Anyone know how to get Acrobat 9 running* on Centos 4.7? Looks like a libc conflict: /Adobe/Reader9/Reader/intellinux/bin/acroread: error while loading shared \ libraries: /apps/Adobe/Reader9_libs/libstdc++.so.6: requires glibc 2.5 or later dynamic linker Thanks Thomas [*] - http://www.us-cert.gov/cas/techalerts/TA09-051A.html -- Flambeau Inc. Technology Center - Baraboo, WI Email : tblader(a)flambeau.com Keyserver: http://pgp.mit.edu KeyID: 0x00E9EC2C

4 4

Re: [CentOS] Dual-boot with WinXP, CentOS already installed
by Guy Boisvert 17 Apr '09

17 Apr '09

Sorin Srbu wrote: > > Isn't reinstalling GAG the same thing as reinstalling grub. What's the > incentive so to speak? Is GAG so much better, or just easier to work with > than grub? > Easier. GAG has its own boot media (diskette or cd). It has a graphical interface and is very easy. Guy Boisvert, ing. IngTegration inc.

1 0

looking for alternative to SME & Clark Connect
by Rudi Ahlers 17 Apr '09

17 Apr '09

Hi all, I'm looking for a (preferably free) alternative to SME / Clark Connect. I basically need the following: - firewall - nat - VPN - bandwidth limiting / monitoring - email (SMTP / POP3 / IMAP) & groupware - file & printer sharing - RAID support - if possible fail-over / high availability support. I need to support about 15 - 30 (some part time) students, so I would like to keep the costs low. If it's free, so much better. SME works for most of the stuff, but it still runs on CentOS 4, and I'd prefer to use 5. Any recommendations? -- Kind Regards Rudi Ahlers

8 11

Re: [CentOS] kernel update doesn't update grub.conf
by Devin Reade 17 Apr '09

17 Apr '09

[I saw this thread in the mailing list archives, but wasn't subscribed at the time, so sorry it's not a proper follow-up.] The symptoms you describe could be a side effect of being previously hit by <http://bugs.centos.org/view.php?id=2914> and <https://bugzilla.redhat.com/show_bug.cgi?id=447841>. Those bug items describe workarounds. After you get mkinitrd upgraded to that in 5.3 the problem should go away, although you may have to manually fix up the results of the bad kernel install. Devin -- You live and learn. Or you don't live long. - Robert Heinlein

2 1

[OT] rsa host key change
by Ed Donahue 17 Apr '09

17 Apr '09

Anyone ever come across a linux server host key changing with out a reboot, sshd restart, change in negotiating (SSHv1, SSHv2), and different DNS name or IP address? I have a server on RHEL4.4 that changed its host key. Red Hat Enterprise Linux ES release 4 (Nahant Update 4) openssh-server-3.9p1-8.RHEL4.15 2.6.9-42.ELsmp uptime 944 days Started getting the eavesdropping message from a login that is supposed to login w/o a password. And always did before today.

3 2

CUPS oddity
by Niki Kovacs 17 Apr '09

17 Apr '09

Hi, I've been setting up a few printer servers with CUPS. Our public libraries here all run 100% Linux (CentOS 5), so what I do is simply install the printer on one of the machines (with a static IP) and then configure CUPS so it can act as a printer server for Linux clients. It took me some time to figure this out, and I remember pulling my hair out for a few sunny afternoons, but I eventually got it working. One thing kept me stuck for days, until I finally found the answer on debian-administration.org. My server machine has an IP of 192.168.1.252/255.255.255.0. There's a Brother laser printer attached to it. The CUPS configuration file is edited so machines on the 192.168.1.* network can use it, and I can also access the CUPS web interface from anywhere. But here's what puzzles me. In the default cupsd.conf configuration file the 'Listen' directive looks like this: # Only listen for connections from the local machine. Listen localhost:631 Listen /var/run/cups/cups.sock Here's the oddity: I *have* to specifically add the machine's IP, like this: Listen localhost:631 Listen 192.168.1.252 Listen /var/run/cups/cups.sock If I don't add this, machines on the network are unable to connect to the server. Can anybody explain this strange behaviour to me? Cheers, Niki

3 3

CentOS 4 dkms-ndiswrapper
by Agile Aspect 17 Apr '09

17 Apr '09

Hi - I'm trying to get wireless running on CentOS 4.7 on a dual core laptop (latitude-e4500) for an employee. I'm having trouble with building dkms-ndiswraper-1.54-1.el4.rf - enclosed are the errors messages. The kernel was rebuilt to disable CONFIG_4KSTACKS. The errors prior to rebuilding the kernel are identical to the errors after rebuilding the kernel and rebooting - minus the error regarding the CONFIG_4KSTACKS. Basically I just typed make in the directory. I'm using dkms this time - I've never used it before. I'm under the impression that all I had to do was type 'make' in the directory in the ndiswrapper directory. Any help would be greatly appreciated! -- Agile make -C /home/praveen/rpmbuild/BUILD/kernel-2.6.9/linux-2.6.9 M=/usr/src/ndiswra pper-1.54-1.el4.rf make[1]: Entering directory `/home/praveen/rpmbuild/BUILD/kernel-2.6.9/linux-2.6 .9' MKEXPORT /usr/src/ndiswrapper-1.54-1.el4.rf/crt_exports.h CC [M] /usr/src/ndiswrapper-1.54-1.el4.rf/crt.o In file included from /usr/src/ndiswrapper-1.54-1.el4.rf/crt.c:16: /usr/src/ndiswrapper-1.54-1.el4.rf/ntoskernel.h:289:1: warning: "for_each_possib le_cpu" redefined In file included from include/linux/sched.h:15, from include/linux/module.h:10, from /usr/src/ndiswrapper-1.54-1.el4.rf/ntoskernel.h:22, from /usr/src/ndiswrapper-1.54-1.el4.rf/crt.c:16: include/linux/cpumask.h:374:1: warning: this is the location of the previous def inition In file included from /usr/src/ndiswrapper-1.54-1.el4.rf/crt.c:16: /usr/src/ndiswrapper-1.54-1.el4.rf/ntoskernel.h:649: error: field `lock' has inc omplete type /usr/src/ndiswrapper-1.54-1.el4.rf/ntoskernel.h: In function `raise_irql': /usr/src/ndiswrapper-1.54-1.el4.rf/ntoskernel.h:686: warning: implicit declarati on of function `mutex_lock' /usr/src/ndiswrapper-1.54-1.el4.rf/ntoskernel.h: In function `lower_irql': /usr/src/ndiswrapper-1.54-1.el4.rf/ntoskernel.h:708: warning: implicit declaration of function `mutex_unlock'make[2]: *** [/usr/src/ndiswrapper-1.54-1.el4.rf/crt.o] Error 1 make[1]: *** [_module_/usr/src/ndiswrapper-1.54-1.el4.rf] Error 2 make[1]: Leaving directory `/home/praveen/rpmbuild/BUILD/kernel-2.6.9/linux-2.6.9' make: *** [modules] Error 2 -- "We are drowning in information and starving for knowledge." -- Rutherford D. Roger

2 1

Re: [CentOS] Dual-boot with WinXP, CentOS already installed
by Kai Schaetzl 17 Apr '09

17 Apr '09

Sorin Srbu wrote on Fri, 17 Apr 2009 09:16:33 +0200: > Apparantely Windows can bork up after a while if the system files aren't on > C:. No, that is a myth. You just cannot put the system drive on an extended partition, it has to be a primary partition. If that is the first non-Linux partition Windows will name it C, anyway, as it just ignores partition types it doesn't know. But, as I said, the letter doesn't matter. I was thinking the Windows installer will see the linux partitions and > try to name them C: and D: etc, thus Windows will be installed on E: or F:, > which might not go down well with some programs. No, see above, but really, it doesn't matter at all. Windows isn't that dumb. > > > >> Would I be better off disconnecting the drive containing CentOS and > >> reconnect it when I'm done installing Windows. Then boot with CentOS > rescue > >> and reinstall grub to the Windows-hd MBR? > > > >Why? If you want to put them on separate *hardware* then you don't have to > >reinstall anything. Just make sure that the CentOS drive is the first boot > >drive. > > Windows drive numbering, see above. This way Windows doesn't see linux at > all. No, I meant: why then reinstall grub? No need for it. You just change grub.conf. If you want to use a second disk because of drive numbering: no, you don't need to do that. If you want to do it for other reasons, like space: go ahead! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

1 0

Re: [CentOS] DKMS and new(er) Nvidia-drivers
by MHR 17 Apr '09

17 Apr '09

On Wed, Apr 15, 2009 at 1:08 AM, Sorin Srbu <sorin.srbu(a)orgfarm.uu.se> wrote: > > Diagonal thin black lines originating from upper left corner for starters. > Then if I open a gui, whatever sort, that window gets those lines too. Menus > are unreadable because of this, but slightly more readable if I move the > mouse pointer over the menu entry. The lines tend to go away for a short > while if I log off and log on again. Weird thing is that the lines are > always diagonal and tend to always originate from the upper left corner of > whatever window. > > This is with gnome mind you, and *supposedly* this one is the most stable of > all the desktop environments. Haven't tried with KDE and xfce. Can't tell > for sure if it's gnome or the Nvidia drivers specifically, but I'm leaning > towards the drivers. > > It's not a hardware issue, as I've run rhel3 on the same machines w/o any > artifacts. > > The hardware's two-three year old Asus mobo with a single-core AMD x64 and a > rather feisty Nvidia Quadra gfx card. Don't have the exact details right > now, but it should give a hint or two. All the P4-machines, as well as the > i7-boxes, seem to work fine with dkms. I've never seen this problem at all - running AMD 64x2 7750, 4Gb memory with GEForce 7200gs card, nvidia driver nvidia-x11-drv-173.08-1.beta.el5.rf.x86_64 (from rpmforge - duh). I've used a 19" CRT, 17" 1280x1024 flat panel and, currently, 22" 1680x1050 flat panel (Emprex - cheap, but works great). I tried the L&G nvidia driver last year some time, but I decided I'd rather have the rpmforge working dkms driver than the L&G, even though it's a beta driver. When I upgraded to 5.3, that was the first time the driver was actually rebuilt for the kernel since 5.0. HTH mhr

2 1

Re: [CentOS] Dual-boot with WinXP, CentOS already installed
by David G. Miller 17 Apr '09

17 Apr '09

"Sorin Srbu" <sorin.srbu(a)orgfarm.uu.se> wrote: > Hi all, > > I'd like to deploy a solution with dual-booting systems where CentOS 5.3 is > already installed and WinXP will be installed to a separate disk. > > I found > http://apcmag.com/how_to_dual_boot_linux_and_windows_xp_linux_installed_fir… > and it seems straight forward enough, although the description is for Ubuntu. > > The problem as I see it, is that the how-to differs from how CentOS looks in > /etc/grub.conf and the boot-loader in Ubuntu with respect to making grub work > again after the Windows install. > > I found Tldp.org mentioning dual-boot plenty, but most or all articles listed > are using lilo as a boot-loader, which seems a bit obsolete and besides I > can't quite translate the instructions from lilo to grub. 8-/ > > Basically, what would I need to change in the how-to from apcmag.com above?? > Thanks for any pointers. As noted in other replies, Windows not not play well with anything else. Your best bet would be to disable/remove/disconnect the drive with CentOS and then do the Windows install to the other drive. Once Windows is installed, you can reconnect the CentOS drive and then easily edit grub.conf to boot Windows using the "chainloader" directive. This approach will only work if there are no primary partitions on the CentOS drive that Windows recognizes. Windows (just like DOS) assigns drive letters to partitions in drive number order starting with the primary partitions and then moving on to the extended partitions. The bottom line is that you want the first Windows partition on the non-CentOS drive to get assigned drive letter C: when Windows boots. As long as Windows doesn't recognize the partition type (e.g., ext3), no drive letter gets assigned. The problem with suggestions to just install Windows and then either use another boot loader or repair the grub installation is that you are stuck doing that work through Windows. My experience has been that Windows isn't as easy to work with for making changes to the boot loader and any approach that overwrites the Windows boot loader may leave you with Windows not being bootable. The approach I described above leaves the Windows boot loader in place although you may need to edit C:\boot.ini to make sure it can still find Windows when both disks are "present." Here is the grub.conf that I use on my laptop. The internal drive boots to either CentOS or Windows while Fedora 10 and Ubuntu are on an external USB drive. # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You have a /boot partition. This means that # all kernel and initrd paths are relative to /boot/, eg. # root (hd0,2) # kernel /vmlinuz-version ro root=/dev/hda6 # initrd /initrd-version.img #boot=/dev/hda default=0 timeout=5 splashimage=(hd0,2)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.18-92.1.22.el5) root (hd0,2) kernel /vmlinuz-2.6.18-92.1.22.el5 ro root=LABEL=/ rhgb initrd /initrd-2.6.18-92.1.22.el5.img title CentOS (2.6.18-92.1.18.el5) root (hd0,2) kernel /vmlinuz-2.6.18-92.1.18.el5 ro root=LABEL=/ rhgb initrd /initrd-2.6.18-92.1.18.el5.img title Fedora (2.6.27.19-170.2.35.fc10.x86_64) root (hd1,0) kernel /vmlinuz-2.6.27.19-170.2.35.fc10.x86_64 ro root=UUID=232029fe-c524-47b4-a5d6-d45c0ce7e56b rhgb nomodeset initrd /initrd-2.6.27.19-170.2.35.fc10.x86_64.img title Ubuntu (2.6.27-7 x86_64) root (hd1,4) kernel /vmlinuz-2.6.27-7-generic ro root=LABEL=uSlash initrd /initrd-2.6.27-7-generic title Windoze rootnoverify (hd0,0) chainloader +1 My grub.conf points to Windows on a partition on the internal drive. Yours would point to Windows on the "second" drive (probably hd1). Likewise, your boot.ini will need to point to Windows with something like: multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP" changing to: multi(0)disk(0)rdisk(1)partition(1)\WINDOWS="Microsoft Windows XP" Note the change -----^ I'm assuming your Windows disk would end up being /dev/hdb in a Linux world. If your system is using SATA drives or the Windows drive would be something other than /dev/hdb, you may need to make some adjustments to what I have suggested. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

7 8

Re: [CentOS] Dual-boot with WinXP, CentOS already installed
by Kai Schaetzl 17 Apr '09

17 Apr '09

Sorin Srbu wrote on Thu, 16 Apr 2009 14:35:40 +0200: > Googled some more. Realised /boot/grub/menu.lst *is* /etc/grub.conf... Duh! You want to change /boot/grub/grub.conf, nothing else ! > > Also some people say it's better to have Windows installed to the first > harddrive and the first partition (so that C: is the where it should be on > 1st hd/1st partition). Doesn't matter. > > Would I be better off disconnecting the drive containing CentOS and > reconnect it when I'm done installing Windows. Then boot with CentOS rescue > and reinstall grub to the Windows-hd MBR? Why? If you want to put them on separate *hardware* then you don't have to reinstall anything. Just make sure that the CentOS drive is the first boot drive. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 4

Re: [CentOS] Dual-boot with WinXP, CentOS already installed
by Kai Schaetzl 17 Apr '09

17 Apr '09

Sorin Srbu wrote on Thu, 16 Apr 2009 16:03:53 +0200: > Generally speaking, which one is the easiest and/or safest if time is an issue > and you want to things fast and streamlined doing this, grub-install or backup > and restore MBR. That is assuming I don't screw up when I do either and > mistype or something. > > Or are both things different sides of the same coin kinda' thing? I think I prefer the grub-install way because it's easier to remember what you have to do and harder to mistype. Using dd works 100%, though, if done correctly. Even if there is something wrong with grub-install or grub in the live disk, dd is hardly affected. But, as I said, if you use two disks and pull the first out you do not have to reinstall/restore the MBR anyway. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

2 1

Re: [CentOS] Dual-boot with WinXP, CentOS already installed
by Kai Schaetzl 17 Apr '09

17 Apr '09

Sorin Srbu wrote on Thu, 16 Apr 2009 14:08:57 +0200: > Basically, what would I need to change in the how-to from apcmag.com above?? It's like that tutorial says. Forget about backing up grub.conf. This is nonsense. You want to make a backup before changing it, just in case, but not because of the XP installation. After the installation you have to reinstall grub with "grub-install" (from a live disk) and add the chainloader stuff to grub.conf. mount /dev/sda2 /mnt/linux (if that is where you linux resides) grub-install --root-directory=/mnt/linux /dev/sda (if you want to install it to the partition use sda2 instead of sda, then the partition has to be active, so that you can boot from it) Instead of using grub-install you can backup the mbr before the installation and then restore it afterwards. You can easily get bad results from that if you mistype, though. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 5

Re: [CentOS] rt3 3.8.2 latest version as rpm for C5?
by Mark Pryor 17 Apr '09

17 Apr '09

Jim, --- On Tue, 4/14/09, Jim Perrin <jperrin(a)gmail.com> wrote: > From: Jim Perrin <jperrin(a)gmail.com> > Subject: Re: [CentOS] rt3 3.8.2 latest version as rpm for C5? > To: "CentOS mailing list" <centos(a)centos.org> > Date: Tuesday, April 14, 2009, 5:12 PM > On Tue, Apr 14, 2009 at 3:07 AM, > Rainer Traut <tr.ml(a)gmx.de> > wrote: > > Hi, > > > > I know, epel has rt3 in version 3.6.x. > > And - sadly - for version 3.8.x the perl module > dependencies are way > > ahead of what I can find in epel or rpmforge. > > But we really need some of the 3.8.x series features. > > > > So has anybody maybe built those modules + rt3 v3.8.x > for C5? > > Any hint? > > I started to run down this rabbit hole and had most of it > built via > mock and one of dag's cpan-> rpm scripts. After a few > rounds of > builds, it became immediately apparent that some of the > requirements > directly conflict with the perl rpm shipped by centos and > RHEL. > Specifically the Encode bits required by RT 3.8 are much > newer than > what is provided in the centos perl rpm. I wasn't willing > to do that > level of replacement when building RT because I didn't need > the > feature sets in 3.8 and I wasn't aware of what else that > might impact > for other users. After trying for 2 hours, I ran into 3 brickwall-issues. Like you found, there are two base perl modules which require newer versions than that which comes with 5.3. These modules are File::Temp and Encode (core) cpan2rpm can package them OK, but there are fatal transaction check errors when installing. Mr. JV is the author of RT3 and DBIx::SearchBuilder. The SearchBuilder module also stopped me (briefly) with a dependency on DBD::Oracle. To grab this from CPAN requires the supporting Orable Libs. I altered the spec and removed any Oracle depends. These 3 issues were enough to cause me to give up. -- Mark

2 1

Many missing updates for CentOS 4?
by Tom G. Christensen 16 Apr '09

16 Apr '09

According to centos-announce there's been no updates for CentOS 4 i386/x86_64 since the seamonkey errata (CESA-2009:0325) on 2009-03-06. A quick rundown shows a rather worrying backlog of missing security updates, some more than a month old: 2009:0313 - Moderate: wireshark 2009:0333 - Moderate: libpng/libpng10 2009:0331 - Important: kernel 2009:0344 - Moderate: libsoup 2009:0354 - Moderate: evolution-data-server 2009:0355 - Moderate: evolution and evolution-data-server 2009:0341 - Moderate: curl 2009:0345 - Moderate: ghostscript (superceded by 2009:0420) 2009:0258 - Moderate: thunderbird 2009:0362 - Moderate: NetworkManager 2009:0373 - Moderate: systemtap 2009:0397 - Critical: firefox 2009:0398 - Critical: seamonkey 2009:0337 - Moderate: php 2009:0409 - Important: krb5 2009:0411 - Moderate: device-mapper-multipath 2009:0420 - Moderate: ghostscript Is there any work being done on these? -tgc

2 2

Redland rdf libraries
by James B. Byrne 16 Apr '09

16 Apr '09

I may have a requirement for these libraries on my CentOS-5.3 box. Does anyone know of a recent rpm for centos that provides them? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)
by Dianne Yumul 16 Apr '09

16 Apr '09

Dan Mensom wrote: > Does anyone know what these accesses are? > <snip> > Also, on a related note, is it normally best practices to > 'setenforce 0' > during a 5.x upgrade? I also got these type of messages. I just did a yum update from 5.2. Output from audit2allow are as follows: allow useradd_t rpm_t:tcp_socket { read write }; allow useradd_t rpm_var_lib_t:file { read write }; allow useradd_t var_lib_t:file write; allow useradd_t var_t:file read; I have similar messages for auditctl_t, cupsd_t, groupadd_t, rdisc_t, restorecon_t, restorecond_t, semanage_t and setrans_t. It looks like they only happened during the upgrade and haven't gotten any every since. Just wondering too if these messages are normal (everything is working flawlessly) and if there's anything I should've done to ensure the upgrade is complete. Thank you. Dianne Wells Gaming Research (800) 854-6809 (775) 826-3232

1 0

Sendmail forwarding external email sent to root
by Neil Aggarwal 16 Apr '09

16 Apr '09

Hello: On a CentOS5 machine I set up for a client, in /etc/aliases, I set root's mail to forward to my email address so I can get notices from cron, etc. Unfortunately, I am now getting a lot of spam which is sent to root(a)theservername.com How can I tell sendmail to not accept external email to root? I searched the Internet and found some horribly convoluted solutions. There has to be a simple way to do this, like putting a line in sendmail.mc or something. Anyone know a good solution? Thanks Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details.

3 4

Re: [CentOS] re-install package
by David G. Miller 16 Apr '09

16 Apr '09

Dag Wieers <dag(a)centos.org> wrote: > On Tue, 14 Apr 2009, Erik Laxdal wrote: >> > Jerry Geis wrote: >> >>> >> I tried to install alsa 1.0.19 on centos 5.3 64 - did not work - compile >>> >> errors. >>> >> >>> >> I need to re-install alsa-lib and alsa-util . >>> >> I dont want to do rpm -e first on those packages as dependcy is crazy. >>> >> I know they were installed (rpm -qa | grep alsa tells me so) I just want >>> >> to re-install ? >>> >> How do I do that? >>> >> > >> > Try the new "reinstall" option in CentOS 5.3's version of yum: >> > >> > yum reinstall alsa-lib alsa-util >> > > Finally ! 10 years after apt :) I saw a t-shirt advertised recently that said "apt-get girlfriend". I'm guessing yum still can't do that ;-). Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

8 8

SELinux errors on my CentOS 5.3 (32 bit) Desktop after upgrade from 5.2
by Lanny Marcus 16 Apr '09

16 Apr '09

I am running SELinux in Permissive mode. GNOME and KDE are installed. Following the upgrade from CentOS 5.2 to 5.3 (32 bit) I am getting SELinux messages. Possibly of interest to someone here or upstream? (Since I'm using Permissive mode, this is not a problem for me). If these are known issues, please disregard. Messages follow: (1) SELinux is preventing nm-system-setti (system_dbusd_t) "getsched" to <Unknown> (system_dbusd_t). SELinux denied access requested by nm-system-setti. It is not expected that this access is required by nm-system-setti and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Source Context: system_u:system_r:system_dbusd_tTarget Context: system_u:system_r:system_dbusd_tTarget Objects: None [ process ]Source: nm-system-settiSource Path: /usr/sbin/nm-system-settingsPort: <Unknown>Host: dell2400.homelanSource RPM Packages: NetworkManager-0.7.0-4.el5_3Target RPM Packages: Policy RPM: selinux-policy-2.4.6-203.el5Selinux Enabled: TruePolicy Type: targetedMLS Enabled: TrueEnforcing Mode: PermissivePlugin Name: catchallHost Name: dell2400.homelanPlatform: Linux dell2400.homelan 2.6.18-128.1.6.el5 #1 SMP Wed Apr 1 09:19:18 EDT 2009 i686 i686Alert Count: 11First Seen: Fri 10 Apr 2009 09:10:39 PM COTLast Seen: Thu 16 Apr 2009 07:31:47 AM COTLocal ID: 19712f1c-5303-49bf-a8bc-6016b7f060d5 Line Numbers: Raw Audit Messages :host=dell2400.homelan type=AVC msg=audit(1239885107.4:18): avc: denied { getsched } for pid=2970 comm="nm-system-setti" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process host=dell2400.homelan type=SYSCALL msg=audit(1239885107.4:18): arch=40000003 syscall=155 success=yes exit=0 a0=b9a a1=b7f0690c a2=95fff4 a3=b7f06700 items=0 ppid=1 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nm-system-setti" exe="/usr/sbin/nm-system-settings" subj=system_u:system_r:system_dbusd_t:s0 key=(null (2) SELinux is preventing nm-system-setti (system_dbusd_t) "sys_nice" to <Unknown> (system_dbusd_t). SELinux denied access requested by nm-system-setti. It is not expected that this access is required by nm-system-setti and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Source Context: system_u:system_r:system_dbusd_tTarget Context: system_u:system_r:system_dbusd_tTarget Objects: None [ capability ]Source: nm-system-settiSource Path: /usr/sbin/nm-system-settingsPort: <Unknown>Host: dell2400.homelanSource RPM Packages: NetworkManager-0.7.0-4.el5_3Target RPM Packages: Policy RPM: selinux-policy-2.4.6-203.el5Selinux Enabled: TruePolicy Type: targetedMLS Enabled: TrueEnforcing Mode: PermissivePlugin Name: catchallHost Name: dell2400.homelanPlatform: Linux dell2400.homelan 2.6.18-128.1.6.el5 #1 SMP Wed Apr 1 09:19:18 EDT 2009 i686 i686Alert Count: 11First Seen: Fri 10 Apr 2009 09:10:39 PM COTLast Seen: Thu 16 Apr 2009 07:31:47 AM COTLocal ID: 6cf4e81a-0958-4d3e-aba8-9ab4c9e3b7c9 Line Numbers: Raw Audit Messages :host=dell2400.homelan type=AVC msg=audit(1239885107.9:19): avc: denied { sys_nice } for pid=2970 comm="nm-system-setti" capability=23 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=capability host=dell2400.homelan type=AVC msg=audit(1239885107.9:19): avc: denied { setsched } for pid=2970 comm="nm-system-setti" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process host=dell2400.homelan type=SYSCALL msg=audit(1239885107.9:19): arch=40000003 syscall=156 success=yes exit=0 a0=b9a a1=0 a2=bfa7b5a4 a3=b7f06700 items=0 ppid=1 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nm-system-setti" exe="/usr/sbin/nm-system-settings" subj=system_u:system_r:system_dbusd_t:s0 key=(null)

1 0

Feature list between 5.2 and 5.3
by Drew Weaver 16 Apr '09

16 Apr '09

does anyone know if (and where) a feature list of the changes between CentOS 5.2 and 5.3 can be found? All of the documentation that I could find on centos.org is related to 5.2 and 5.1 thanks, -Drew

3 2

Re: [CentOS] Dual-boot with WinXP, CentOS already installed
by Sorin Srbu 16 Apr '09

16 Apr '09

>-----Original Message----- >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf >Of Sorin Srbu >Sent: Thursday, April 16, 2009 2:09 PM >To: 'CentOS mailing list' >Subject: [CentOS] Dual-boot with WinXP, CentOS already installed > >I'd like to deploy a solution with dual-booting systems where CentOS 5.3 is >already installed and WinXP will be installed to a separate disk. > >I found >http://apcmag.com/how_to_dual_boot_linux_and_windows_xp_linux_installed_fir st.htm?page=1 >and it seems straight forward enough, although the description is for Ubuntu. > >The problem as I see it, is that the how-to differs from how CentOS looks in >/etc/grub.conf and the boot-loader in Ubuntu with respect to making grub work >again after the Windows install. Googled some more. Realised /boot/grub/menu.lst *is* /etc/grub.conf... Duh! Also some people say it's better to have Windows installed to the first harddrive and the first partition (so that C: is the where it should be on 1st hd/1st partition). Would I be better off disconnecting the drive containing CentOS and reconnect it when I'm done installing Windows. Then boot with CentOS rescue and reinstall grub to the Windows-hd MBR?

1 0

Dual-boot with WinXP, CentOS already installed
by Sorin Srbu 16 Apr '09

16 Apr '09

Hi all, I'd like to deploy a solution with dual-booting systems where CentOS 5.3 is already installed and WinXP will be installed to a separate disk. I found http://apcmag.com/how_to_dual_boot_linux_and_windows_xp_linux_installed_fir… and it seems straight forward enough, although the description is for Ubuntu. The problem as I see it, is that the how-to differs from how CentOS looks in /etc/grub.conf and the boot-loader in Ubuntu with respect to making grub work again after the Windows install. I found Tldp.org mentioning dual-boot plenty, but most or all articles listed are using lilo as a boot-loader, which seems a bit obsolete and besides I can't quite translate the instructions from lilo to grub. 8-/ Basically, what would I need to change in the how-to from apcmag.com above?? Thanks for any pointers. -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu [Sysadmin, Systems Engineer] # Dept of Medicinal Chemistry, Phone: +46 (0)18-4714482 >3 signals> GSM # Div of Org Pharm Chem, Mobile: +46 (0)701-718023 # Box 574, Uppsala University, Fax: +46 (0)18-4714482 # SE-751 23 Uppsala, Sweden Visit: BMC, Husargatan 3, D5:512b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # () ASCII ribbon campaign - Against html E-mail # /\ # # MotD follows: # CentOS: When you need Enterprise uptime, without Enterprise pricing.

1 0

Sharing RAM between VM
by Larry 16 Apr '09

16 Apr '09

Hi, all! I have a server with 4 virtual machines ( using xen). Is there a way to make them share RAM? I found out something about balloons, but it didn't distribute RAM dynamically. So I decided that xen can't achieve that. I tried luci and ricci and now all my VMs are in a cluster. But I don't think this actually helped. Can you suggest a software and/or manual or a question which I should ask google for completing this task? All doms/nodes are with Centos 5.3(final). Thanks!

5 9

Updates for csgfs on CentOS4
by carlopmart 16 Apr '09

16 Apr '09

Hi all, I am trying to install csgfs on two CentOS hosts. I have installed latest kernel from updates repository. But when I try to install csgfs, yum returns me this: Dependencies Resolved ============================================================================= Package Arch Version Repository Size ============================================================================= Installing: ccs i686 1.0.12-1 csgfs 71 k cman i686 1.0.24-1 csgfs 66 k cman-kernel i686 2.6.9-55.13.el4.centos.1 csgfs 136 k gnbd i686 1.0.9-1 csgfs 117 k gnbd-kernel i686 2.6.9-10.50.el4.centos.1 csgfs 13 k Installing for dependencies: kernel i686 2.6.9-78.0.1.EL update 12 M magma i686 1.0.8-1 csgfs 34 k Transaction Summary ============================================================================= Install 7 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 13 M Is this ok [y/N] Yum tries to install kernel 2.6.9-78.0.1.EL. Where are the updates modules for csgfs to use with kernel 2.6.9-78.0.13.EL?? Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

1 0

Re: [CentOS] DKMS and new(er) Nvidia-drivers
by JohnS 16 Apr '09

16 Apr '09

On Wed, 2009-04-15 at 10:08 +0200, Sorin Srbu wrote: > >-----Original Message----- > >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf > >Of Michael A. Peters > >Sent: Tuesday, April 14, 2009 5:57 PM > >To: CentOS mailing list > >Subject: Re: [CentOS] DKMS and new(er) Nvidia-drivers > > > >> Strangely enough, only the systems running an Amd cpu gives the screen > >> artefacts. Go figure... > > > >What the artifacts? > >I switched to the DKMS module in rpmforge and am running an AMD CPU. > >Only think I've noticed is a weird issue with the cursor in thunderbird, > >I don't know if that is nvidia related or not though. It is annoying and > >I don't recall it being there before I updated the driver. > > Diagonal thin black lines originating from upper left corner for starters. > Then if I open a gui, whatever sort, that window gets those lines too. Menus > are unreadable because of this, but slightly more readable if I move the > mouse pointer over the menu entry. The lines tend to go away for a short > while if I log off and log on again. Weird thing is that the lines are > always diagonal and tend to always originate from the upper left corner of > whatever window. > > This is with gnome mind you, and *supposedly* this one is the most stable of > all the desktop environments. Haven't tried with KDE and xfce. Can't tell > for sure if it's gnome or the Nvidia drivers specifically, but I'm leaning > towards the drivers. > > It's not a hardware issue, as I've run rhel3 on the same machines w/o any > artifacts. > > The hardware's two-three year old Asus mobo with a single-core AMD x64 and a > rather feisty Nvidia Quadra gfx card. Don't have the exact details right > now, but it should give a hint or two. All the P4-machines, as well as the > i7-boxes, seem to work fine with dkms. --- No none of that is hardware issues. It is issues with the Nvidia Driver it self. Some or all of those issues can be solved by Downgrading the driver it self. All this is in the documentation and are known problems on both Linux and Windows. JohnStanley

2 1

coolkey
by John R Pierce 16 Apr '09

16 Apr '09

anyone familiar with coolkey, an interface for smartcards? apparently its built into centos5, but I don't seem to see it for centos4, and i need to support both (actually, we have a lot more c4 systems in production than 5)... does anyone know offhand where to find el4 RPMs for this and its related packages (pcsc-lite, etc) ?

2 3

rsync to full disk
by Les Mikesell 15 Apr '09

15 Apr '09

I recently noticed that an "rsync -av" to a full disk keeps sending files even after the target is out of space. Has it always done that? I suppose it is reasonable to keep trying in case it subsequently crosses a mount point or space becomes available but I expected it to quit on that sort of error. -- Les Mikesell lesmikesell(a)gmail.com

3 4

Can not get IP address
by Anand Vaddarapu 15 Apr '09

15 Apr '09

Hi, while installing centos 5.2 i enabled dhcp. centos machine did not get IP address and can not get to internet. ifconfig results Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.255.255.0 inet6 addr: ::1/128 Scope:Host UP Loopback RUNNING MTU:16436 Metric:1 RX packets:1251 errors:0 dropped:0 overruns:0 frame:0 TX packets:212517 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 Please help me. Thanks

5 5

Building a kernel without kabichk
by Terry Hull 15 Apr '09

15 Apr '09

I¹m trying to build a 2.6.18-128.1.6.el5 kernel without kabichk. I have downloaded the sources, installed the compiler, etc and ran the following command rpmbuild -bb --target=`uname -m` --without kabichk --with baseonly --without debug \ --without debuginfo kernel-2.6.spec. I had modified the .SPEC file according to the WIKI page http://wiki.centos.org/HowTos/Custom_Kernel I have NOT installed any patches that will break KABI, but I am wanting to patch the kernel for SCST, and that will do it. Currently, I¹m just trying to get the beast to build. I have been successful getting this to work on older versions like 2.6.18-92.1.22, but I have not had success with 128.1.6. l. I have not worried about build errors at this point, because I¹m hoping someone can say, ³Just do this, and all will be well.² I am relatively new to CentOS / RedHat, but I do have a significant amount of Linux experience building kernels. I am now trying to see if I can get the kernel to build with kabi in place. Any pointers would be greatly appreciated. TIA. -- Terry Hull Network Resource Group, Inc. President

3 5

Using cdrecord on CentOS
by Niki Kovacs 15 Apr '09

15 Apr '09

Hi, I'd like to use cdrecord on the command line. I'm currently reading the relevant chapter in Carla Schroder's "Linux Cookbook". Unfortunately, some of the tricks and hints included in the book don't seem to work the same way on a standard CentOS 5 install. 1) Am I supposed to be root to use cdrecord and burn an .iso file? 2) How do I specify a device? 'cdrecord -scanbus' doesn't seem to work. Say my CD burner is /dev/hdc, would 'cdrecord dev=/dev/hdc' be the correct way to address it? Cheers, Niki

6 14

CentOS-announce Digest, Vol 50, Issue 9
by centos-announce-request＠centos.org 15 Apr '09

15 Apr '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2009:0416 CentOS 5 i386 cman Update (Karanbir Singh) 2. CEBA-2009:0416 CentOS 5 x86_64 cman Update (Karanbir Singh) 3. CEBA-2009:0417 CentOS 5 i386 openais Update (Karanbir Singh) 4. CEBA-2009:0417 CentOS 5 x86_64 openais Update (Karanbir Singh) 5. CEBA-2009-0418 CentOS 5 i386 gfs2-utils Update (Karanbir Singh) 6. CEBA-2009-0418 CentOS 5 x86_64 gfs2-utils Update (Karanbir Singh) 7. CEBA-2009:0415 CentOS 5 i386 rgmanager Update (Karanbir Singh) 8. CEBA-2009:0415 CentOS 5 x86_64 rgmanager Update (Karanbir Singh) 9. CESA-2009:0420 Moderate CentOS 3 i386 ghostscript - security update (Tru Huynh) 10. CESA-2009:0420 Moderate CentOS 3 x86_64 ghostscript - security update (Tru Huynh) 11. CESA-2009:0420 Moderate CentOS 3 ia64 ghostscript - security update (Pasi Pirhonen) 12. CESA-2009:0420 Moderate CentOS 4 ia64 ghostscript - security update (Pasi Pirhonen) 13. CESA-2009:0420 Moderate CentOS 3 s390(x) ghostscript - security update (Pasi Pirhonen) 14. CESA-2009:0420 Moderate CentOS 4 s390(x) ghostscript - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Tue, 14 Apr 2009 21:32:35 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:0416 CentOS 5 i386 cman Update To: centos-announce(a)centos.org Message-ID: <20090414213235.GA1569(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:0416 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0416.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 992bb974cb87b232e3935c2d8acfdec7 cman-2.0.98-1.el5_3.1.i386.rpm c695f9fdff111c9f2a04007798792fab cman-devel-2.0.98-1.el5_3.1.i386.rpm Source: 9233c8e712fdc1ccf6db91a1fe85d022 cman-2.0.98-1.el5_3.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 14 Apr 2009 21:32:35 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:0416 CentOS 5 x86_64 cman Update To: centos-announce(a)centos.org Message-ID: <20090414213235.GA1584(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:0416 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0416.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 0b75b2f4001c9b6cc53226abe766301a cman-2.0.98-1.el5_3.1.x86_64.rpm f4b72080b856aae004e3430ea72dfff0 cman-devel-2.0.98-1.el5_3.1.i386.rpm c07ba99fc3dd1920230ce14af4cee64a cman-devel-2.0.98-1.el5_3.1.x86_64.rpm Source: 9233c8e712fdc1ccf6db91a1fe85d022 cman-2.0.98-1.el5_3.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 14 Apr 2009 21:33:55 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:0417 CentOS 5 i386 openais Update To: centos-announce(a)centos.org Message-ID: <20090414213355.GA1655(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:0417 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0417.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 0a420de5ee5c82da22399dce34048e06 openais-0.80.3-22.el5_3.4.i386.rpm 28a9a34a8e415217f8c3e3ed972e0555 openais-devel-0.80.3-22.el5_3.4.i386.rpm Source: b471e3171455d7bf1a3978761a72efc4 openais-0.80.3-22.el5_3.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 14 Apr 2009 21:33:56 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:0417 CentOS 5 x86_64 openais Update To: centos-announce(a)centos.org Message-ID: <20090414213356.GA1670(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:0417 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0417.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a0cfb5020abea71012ed931470f297e8 openais-0.80.3-22.el5_3.4.x86_64.rpm d6a60923d3afd585e68ba56611378b06 openais-devel-0.80.3-22.el5_3.4.i386.rpm 32bf86105d3c13b0d77a9c40dfa6c5b8 openais-devel-0.80.3-22.el5_3.4.x86_64.rpm Source: b471e3171455d7bf1a3978761a72efc4 openais-0.80.3-22.el5_3.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 14 Apr 2009 21:35:25 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009-0418 CentOS 5 i386 gfs2-utils Update To: centos-announce(a)centos.org Message-ID: <20090414213525.GA1732(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009-0418 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0418.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9723f6b1ea097f791c1f70cd6fec3730 gfs2-utils-0.1.53-1.el5_3.2.i386.rpm Source: 73e2f54a0434386319595d9b7df3ad9b gfs2-utils-0.1.53-1.el5_3.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Tue, 14 Apr 2009 21:35:25 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009-0418 CentOS 5 x86_64 gfs2-utils Update To: centos-announce(a)centos.org Message-ID: <20090414213525.GA1749(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009-0418 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0418.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6b7078e35244849bed5bd8cc3244f39b gfs2-utils-0.1.53-1.el5_3.2.x86_64.rpm Source: 73e2f54a0434386319595d9b7df3ad9b gfs2-utils-0.1.53-1.el5_3.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Tue, 14 Apr 2009 21:36:47 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:0415 CentOS 5 i386 rgmanager Update To: centos-announce(a)centos.org Message-ID: <20090414213647.GA1812(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:0415 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0415.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 6e42076a6cd7819b40bdd92eb6be59f6 rgmanager-2.0.46-1.el5.centos.3.i386.rpm Source: 6878605051dc0dbd41b5c444fcedced8 rgmanager-2.0.46-1.el5.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Tue, 14 Apr 2009 21:36:47 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:0415 CentOS 5 x86_64 rgmanager Update To: centos-announce(a)centos.org Message-ID: <20090414213647.GA1827(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:0415 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0415.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: c1ae4d4e3d3436e9f935d5a2f0736cae rgmanager-2.0.46-1.el5.centos.3.x86_64.rpm Source: 6878605051dc0dbd41b5c444fcedced8 rgmanager-2.0.46-1.el5.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Wed, 15 Apr 2009 00:27:36 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:0420 Moderate CentOS 3 i386 ghostscript - security update To: centos-announce(a)centos.org Message-ID: <20090414222736.GA10237(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:0420 ghostscript security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-0420.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/ghostscript-7.05-32.1.20.i386.rpm updates/i386/RPMS/ghostscript-devel-7.05-32.1.20.i386.rpm updates/i386/RPMS/hpijs-1.3-32.1.20.i386.rpm source: updates/SRPMS/ghostscript-7.05-32.1.20.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update ghostscript\* hpijs Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

IO accounting
by Chris Zimmerman 15 Apr '09

15 Apr '09

Just a general question to CentOS users, I'm curious if there is a supported or known working kernel newer than 2.6.20 that has IO accounting support. I know I could built it from source but I'd rather use a more tested one from a repo of some variety if possible. I'm referring to this feature. http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=comm… In short this appears to have been seeked out by several people just curious if there is anyone out there that uses a nonstandard repo or source out there on their Cent server.

1 0

re-install package
by Jerry Geis 15 Apr '09

15 Apr '09

I tried to install alsa 1.0.19 on centos 5.3 64 - did not work - compile errors. I need to re-install alsa-lib and alsa-util . I dont want to do rpm -e first on those packages as dependcy is crazy. I know they were installed (rpm -qa | grep alsa tells me so) I just want to re-install ? How do I do that? Thanks, Jerry

9 10

rt3 3.8.2 latest version as rpm for C5?
by Rainer Traut 15 Apr '09

15 Apr '09

Hi, I know, epel has rt3 in version 3.6.x. And - sadly - for version 3.8.x the perl module dependencies are way ahead of what I can find in epel or rpmforge. But we really need some of the 3.8.x series features. So has anybody maybe built those modules + rt3 v3.8.x for C5? Any hint? I really do not want to install f10. :O Thx Rainer

3 5

Re: [CentOS] DKMS and new(er) Nvidia-drivers
by Michael A. Peters 15 Apr '09

15 Apr '09

Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf >> Of Scott Silva >> Sent: Wednesday, April 08, 2009 8:19 PM >> To: centos(a)centos.org >> Subject: Re: [CentOS] DKMS and new(er) Nvidia-drivers >> >> on 4-6-2009 5:55 AM Sorin Srbu spake the following: >>> I got the DKMS-system working and now have the Nvidia-drivers v173.08 >>> installed (using rpmforge as suggested previously). Unfortunately this >>> particular driver version gives me screen artifacts so as to make the >>> screen >>> more or less unreadable. >>> >> You could always try and make a newer version yourself using the old one as a >> template. Here is some help; >> >> http://www.linuxjournal.com/article/6896 >> >> http://www.dell.com/downloads/global/power/1q04-ler.pdf >> >> http://linux.dell.com/dkms/dkms-ols2004.pdf > > Ok, thanks. I'll see if I can some sense of the instructions. 8-) > > Strangely enough, only the systems running an Amd cpu gives the screen > artefacts. Go figure... What the artifacts? I switched to the DKMS module in rpmforge and am running an AMD CPU. Only think I've noticed is a weird issue with the cursor in thunderbird, I don't know if that is nvidia related or not though. It is annoying and I don't recall it being there before I updated the driver. Asus M2N board AMD X2 CPU (I think a 5200 - I forget - 2.6 GHz) nVidia Corporation NV42 [GeForce 6800 XT] (rev a2) nvidia-x11-drv-173.08-1.beta.el5.rf kernel 2.6.18-128.1.6.el5 x86_64

3 3

ext3_free_blocks_sb: bit already cleared for block
by Gordon Messmer 14 Apr '09

14 Apr '09

I opened bug 494927 with Red Hat after seeing this kernel error on two different hosts, just a few days after updating or installing CentOS 5.3: https://bugzilla.redhat.com/show_bug.cgi?id=494927 Has anyone else seen this yet? The patch that RH included in kernel-2.6.9-78.0.17.EL.src.rpm to fix the problem appears to have been in their 2.6.18 rpm since revision 15, so something else is apparently causing the same problem. I'm running bonnie++ in a loop on a VM running the affected kernel hoping to duplicate the problem.

2 3

Problem again with shockwave, or flash player (I think)...
by Linda Stark 14 Apr '09

14 Apr '09

Hi there, OK I thought I had this problem solved last week. Last week with help from this list, we installed the flash player on my Centos 5 desktop machine. But now when I go to cnbc, I am getting that same problem when trying to view vids on their site. So I click the icon where the empty video frame is to install the plugin, the "no suitable plugins were found" box come comes up again, so I click on the manual install button, and I am getting the "/tmp/adobe-release-i386-1.0-1.noarch-2.rpm is already installed" box again. On youtube however, or other sites, I can view vids, and I thought that the flash player was installed OK last week but some sites I still can't view videos. Any ideas what I can do? Thanks anyone. _________________________________________________________________ Rediscover Hotmail®: Get e-mail storage that grows with you. http://windowslive.com/RediscoverHotmail?ocid=TXT_TAGLM_WL_HM_Rediscover_St…

4 4

Clamd and Amavis
by Anne Wilson 14 Apr '09

14 Apr '09

I'm trying to get amavis to play using clamd and tried to follow this: # ### http://www.clamav.net/ ['ClamAV-clamd', \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd"], qr/\bOK$/, qr/\bFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ], # # NOTE: run clamd under the same user as amavisd, or run it under its own # # uid such as clamav, add user clamav to the amavis group, and then add # # AllowSupplementaryGroups to clamd.conf; # # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in # # this entry; when running chrooted one may prefer socket "$MYHOME/clamd". # ### http://www.clamav.net/ and CPAN (memory-hungry! clamd is preferred) # # note that Mail::ClamAV requires perl to be build with threading! # ['Mail::ClamAV', \&ask_clamav, "*", [0], [1], qr/^INFECTED: (.+)/], I came unstuck with the instruction regarding the LocalSocket. If I change that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the clamd service won't start, saying the socket doesn't exist. What am I doing wrong? Anne

4 15

Re: [CentOS] Building a kernel without kabichk
by Terry Hull 14 Apr '09

14 Apr '09

On 4/14/09 3:12 AM, in article bfa89a870904140112s490d223ch440cf009d20e88df(a)mail.gmail.com, "Akemi Yagi" <amyagi(a)gmail.com> wrote: > On Mon, Apr 13, 2009 at 8:08 PM, Terry Hull <tah(a)nrg-inc.com> wrote: >> >> >> On 4/13/09 7:01 PM, in article >> bfa89a870904131701i2afd9b41j78b53b0611a9e462(a)mail.gmail.com, "Akemi Yagi" >> <amyagi(a)gmail.com> wrote: > >> The patches I need to make do break kABI. I just have not yet applied them. >> I was trying to get the base kernel to build before I added the complexity >> of patching it. > >>> If the build still fails, please post the last portion of the error >>> log (or e-mail the whole log file to me). >> >> I have attached a compressed log file. The errors seem to be in the build >> of OCFS. > > Thanks for the err log file. From the looks of it, the error is in the > code itself as you noted. So, that should have nothing to do with > kABI. > > I checked my own log for the kernel 128.1.6 building but did not see > anything (warnings and such) relating to ocfs2. You mentioned " have > NOT installed any patches that will break KABI". Have you installed > any patches at all, that is, patches that do not break kABI ? If so, > would any of them touch the ocfs code? > > Akemi It may also be of note that I've done this on two separate machines. I guess I'm a little puzzled by this. It must be true that very few people actually have to turn off kABI, or this would have come up before. I know that I can turn off ocfs in the .config and see if there is anything else that does not build correctly. -- Terry Hull Network Resource Group, Inc.

2 1

Re: [CentOS] Building a kernel without kabichk
by Terry Hull 14 Apr '09

14 Apr '09

On 4/14/09 3:12 AM, in article bfa89a870904140112s490d223ch440cf009d20e88df(a)mail.gmail.com, "Akemi Yagi" <amyagi(a)gmail.com> wrote: > On Mon, Apr 13, 2009 at 8:08 PM, Terry Hull <tah(a)nrg-inc.com> wrote: >> >> >> On 4/13/09 7:01 PM, in article >> bfa89a870904131701i2afd9b41j78b53b0611a9e462(a)mail.gmail.com, "Akemi Yagi" >> <amyagi(a)gmail.com> wrote: > >> The patches I need to make do break kABI. I just have not yet applied them. >> I was trying to get the base kernel to build before I added the complexity >> of patching it. > >>> If the build still fails, please post the last portion of the error >>> log (or e-mail the whole log file to me). >> >> I have attached a compressed log file. The errors seem to be in the build >> of OCFS. > > Thanks for the err log file. From the looks of it, the error is in the > code itself as you noted. So, that should have nothing to do with > kABI. > > I checked my own log for the kernel 128.1.6 building but did not see > anything (warnings and such) relating to ocfs2. You mentioned " have > NOT installed any patches that will break KABI". Have you installed > any patches at all, that is, patches that do not break kABI ? If so, > would any of them touch the ocfs code? > > Akemi No, I have not added any patches at all to the source. I just modified the .spec file and compiled with the --without kabichk option. I also did not have any trouble building the kernel as long as kabichk was enabled. -- Terry Hull Network Resource Group, Inc. President

2 1

Ramdisk
by Matt 14 Apr '09

14 Apr '09

On Centos 4.x 32 I want to create like a 64Mbyte ramdisk. Is there a problem putting 30k to 80k empty files on a ramdisk? Is there a simple howto on creating a ramdisk that anyone knows of off the top of there head? Matt

2 1

python-dbus
by Anne Wilson 14 Apr '09

14 Apr '09

During startup there is a message about a missing python-dbus. Querying rpm and yum tells me that nothing provides python-dbus and no such package exists. What do I need? Anne

3 5

Raid1 on CentOS 5.x 64bit
by Matt 14 Apr '09

14 Apr '09

Does anyone know of a howto on setting up raid1 on CentOS 5.x 64 bit? Matt

7 8

Re: [CentOS] DKMS and new(er) Nvidia-drivers
by Scott Silva 14 Apr '09

14 Apr '09

on 4-6-2009 5:55 AM Sorin Srbu spake the following: > I got the DKMS-system working and now have the Nvidia-drivers v173.08 > installed (using rpmforge as suggested previously). Unfortunately this > particular driver version gives me screen artifacts so as to make the screen > more or less unreadable. > > Nvidia's proprietary drivers are now up to v180.44 and this version is fine > with my test system. > > I really like the DKMS-system, as it enables me to keep kernel and > gfx-drivers up-to-date on our course-lab computers doing 3D-molecular > modeling. However if I can't make use of newer, and better, drivers this > whole thing is borked for me... 8-/ > > My question is who updates those drivers, as the v173.08 Nvidia drivers are > now almost a year old? Would there be any other good repo with more current > drivers suitable for use with DKMS and CentOS? > The repos I found are tagged with PCLinux, Mandriva and Ubuntu to name a few. > I'm not quite sure these rpms would work with CentOS and the dkms install > there. > > Any hints appreciated. Thanks. > You could always try and make a newer version yourself using the old one as a template. Here is some help; http://www.linuxjournal.com/article/6896 http://www.dell.com/downloads/global/power/1q04-ler.pdf http://linux.dell.com/dkms/dkms-ols2004.pdf

3 3

Clamav engine updates
by Mike Yates 14 Apr '09

14 Apr '09

Hi I get this on every scan report:- LibClamAV Warning: *********************************************************** LibClamAV Warning: *** This version of the ClamAV engine is outdated. *** LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq *** LibClamAV Warning: *********************************************************** ----------- SCAN SUMMARY ----------- Known viruses: 538589 Engine version: 0.94.2 yet "yum update clamd clamav clamav-db" returns "No Packages marked for Update". Is there a yum URL I should add to get 0.95.1 (and onwards) from CentOS or Redhat, or must I "roll my own" ? Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV Antivirus.

2 1

httpd with SNI
by German Pulido 14 Apr '09

14 Apr '09

Hi! I am currently publishing some web services on a Centos 5.3 server on my office using the included apache httpd. They are available from the Internet, and they require validation (username/password). I would like to publish them all under https, so the passwords won't travel unencrypted, but then all my sites use the same certificate on apache httpd. The solution to this is using an httpd server that supports SNI: <http://en.wikipedia.org/wiki/Server_Name_Indication> however, the httpd included in Centos does not have this feature. Question is: have anybody made httpd RPMs for CentOS supporting this feature? (according to the link, httpd supports this since 2.2.11) or maybe they can be requested on the CentOS Plus repositories? Thanks!

5 4

Repo for Abiword
by centos＠911networks.com 14 Apr '09

14 Apr '09

Hi, I need to run Abiword on CentOS 5.3, any repository? -- Thanks

5 4

Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)
by Dan Mensom 14 Apr '09

14 Apr '09

Hey guys, I've been getting some strange selinux messages after the 5.3 upgrade. It appears as though my mail system (postfix) is constantly trying to access the rpm database? Here's the audit messages (I tend to look at my selinux messages using audit2allow < /var/log/audit.log as I find it easier to read quickly): allow postfix_postdrop_t rpm_t:tcp_socket { read write }; allow postfix_postdrop_t rpm_var_lib_t:file { read write }; allow postfix_postdrop_t user_home_t:file { getattr append }; allow postfix_postdrop_t var_lib_t:file write; allow system_mail_t rpm_t:tcp_socket { read write }; allow system_mail_t rpm_var_lib_t:file { read write }; allow system_mail_t var_lib_t:file write; I've been getting the latter set continously since the upgrade. The first set appeared briefly when I did a 'setenforce 0' to diagnose a spamc_t issue with calling the /usr/sbin/sendmail symlink.. They correspond to audit.log messages similar to the following: type=AVC msg=audit(1239664501.977:9052044): avc: denied { write } for pid=18901 comm="sendmail" name="transaction-done.2009-04-12.22:52.45" dev=loop0 ino=901575 scontext=user_u:system_r:system_mail_t:s0-s0:c0.c1023 tcontext=user_u:object_r:var_lib_t:s0 tclass=file type=AVC msg=audit(1239664501.977:9052044): avc: denied { read write } for pid=18901 comm="sendmail" name="__db.000" dev=loop0 ino=901554 scontext=user_u:system_r:system_mail_t:s0-s0:c0.c1023 tcontext=root:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1239664501.977:9052044): arch=40000003 syscall=11 success=yes exit=0 a0=5e2237b8 a1=5e223584 a2=5e2439bc a3=8 items=0 ppid=18880 pid=18901 auid=517 uid=517 gid=517 euid=517 suid=517 fsuid=517 egid=517 sgid=517 fsgid=517 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.postfix" subj=user_u:system_r:system_mail_t:s0-s0:c0.c1023 key=(null) type=AVC_PATH msg=audit(1239664501.977:9052044): path="/var/lib/rpm/__db.000" type=AVC_PATH msg=audit(1239664501.977:9052044): path=2F7661722F6C69622F79756D2F7472616E73616374696F6E2D646F6E652E323030392D30342D31322E32323A35322E34352028646 56C6574656429 During the upgrade it looks like it was pretty common for most packages' contexts to attempt to access a tcp socket to rpm and do similar things (again, in audit2allow format): allow tzdata_t rpm_t:tcp_socket { read write }; allow tzdata_t rpm_var_lib_t:file { read write }; allow tzdata_t var_lib_t:file write; allow tzdata_t var_t:file read; But I was surprised that these mail messages didn't show up till the following day, and are still showing up continuously now. Does anyone know what these accesses are? And why they might be still continously triggering for the mail system, where as all the other packages have stopped causing them? Also, on a related note, is it normally best practices to 'setenforce 0' during a 5.x upgrade? Is it possible I've damaged something by leaving selinux enabled? Other than the spamassassin issue, the machine seems to be running ok..

3 3

Processes to disable
by David Lemcoe 14 Apr '09

14 Apr '09

I was told by some more-experienced Cent users that there are a bunch of processes I should kill and get out of the startup folder. He said that Cent (even with a small install) has a bunch of processes that really aren't needed and just burn up processes. Which ones should I get rid of for just a webserver? MySQL server? Thanks.

5 8

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss