- Discuss - lists.centos.org

Centos7 Cant start vncserver
by Robert Moskowitz 26 May '17

26 May '17

OK, first time configuring vncserver on Centos7. I have read through a bunch of old messages here on vncserver and thought I had it. Obviously not. 1) cp /usr/lib/systemd/system/vncserver@.service /etc/systemd/system/vncserver@.service 2) vi /etc/systemd/system/vncserver@.service I changed <USER> in both places to root 3) systemctl daemon-reload 4) systemctl enable vncserver@:3.service 5) vncpasswd To create /root/.vnc/passwd 6) systemctl start vncserver@:3.service # systemctl -l status vncserver@:3 ● vncserver@:3.service - Remote desktop service (VNC) Loaded: loaded (/etc/systemd/system/vncserver@.service; enabled; vendor preset: disabled) Active: failed (Result: resources) since Thu 2017-05-25 12:31:13 EDT; 13s ago Process: 5173 ExecStart=/usr/sbin/runuser -l root -c /usr/bin/vncserver %i (code=exited, status=0/SUCCESS) Process: 5170 ExecStartPre=/bin/sh -c /usr/bin/vncserver -kill %i > /dev/null 2>&1 || : (code=exited, status=0/SUCCESS) May 25 12:31:10 homebase.home.htt systemd[1]: Starting Remote desktop service (VNC)... May 25 12:31:13 homebase.home.htt systemd[1]: PID file /home/root/.vnc/homebase.home.htt:3.pid not readable (yet?) after start. May 25 12:31:13 homebase.home.htt systemd[1]: Failed to start Remote desktop service (VNC). May 25 12:31:13 homebase.home.htt systemd[1]: Unit vncserver@:3.service entered failed state. May 25 12:31:13 homebase.home.htt systemd[1]: vncserver@:3.service failed. Thanks for all help.

2 2

question about shared samba directory file permissions..
by Jason Welsh 26 May '17

26 May '17

im trying to set up a shared samba directory for users to use on centos 7, but whenever I create a file from the samba client to the samba server, the owner of the file ends up being the user the share is mounted up as.. on the server (server1), [samba] comment = samba share path = /samba/ read only = No valid users = @samba write list = @samba force group = +samba create mask = 0770 browseable = yes [root@server1 ~]# grep samba /etc/group samba:x:6666:user2,user3 [root@server1 ~]# id user2 uid=2010(user2) gid=2010(user2) groups=2010(user2),6666(samba) on the client (server2), [root@server2 ~]# grep samba /etc/group samba:x:6666:user2,user3 [user2@server2 samba]$ pwd /mnt/samba [user2@server2 samba]$ df -h ./ Filesystem Size Used Avail Use% Mounted on //rhce1/samba 11G 4.5G 5.8G 44% /mnt/samba [user2@server2 samba]$ touch file [user2@server2 samba]$ ls -al file -rw-rw----. 1 *user3* samba 0 May 22 15:52 file [user2@server2 samba]$ id uid=2010(user2) gid=2010(user2) groups=2010(user2),6666(samba) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 [user2@server2 samba]$ any ideas? regards, Jason

4 4

What is in a yum group
by Robert Moskowitz 25 May '17

25 May '17

I want to install Xfce on a ClearOS server. They have not defined any desktop groups (actually no groups other than minimal). But lots of Xfce rpms are in their repos. How can I see what rpms Centos would install with a 'yum group install'? Then I get to install vnc server and set up the client right... thanks

7 21

startx on console 2
by Robert Moskowitz 25 May '17

25 May '17

I seem to recall that there is some special option to run X11 on <Alt-F2> On this ClearOS system, their console sits on the default console. You have to <Alt-F2> (etc.) to get a text login. Now that I have Xfce kind of installed, I want to see it on the system console, and I thought that just running startx would work. It doesn't. Got some errors. And then I remembered years back where there was some extra options used to run startx on one of the other consoles. But it has been too many years and I can't find any notes on it. The manpage says something about a DISPLAY option, but its use is very unclear. thanks

2 1

Getting to Mate or Xfce
by Beartooth 25 May '17

25 May '17

My wife bought a new Thinkpad, on which we had the shop install CentOS 7 (I *think* it's 7.3.) Alas!, I didn't think to specify NOT Gnome, in thunder. So of course I got it. I've tried several times to force myself to accommodate Gnome3, always with no joy. How do I get Mate or Xfce instead? Related problem: when I become root and tell it "yum update," it figures out a list of umpteen hundred rpms to update, but then runs through attempts at mirrors and keeps failing till it runs out. It failed to connect to my wireless router (or even to find it, afaict). So I plugged it into the router with an ethernet cable. No joy.

6 6

iptables
by Chad Cordero 25 May '17

25 May '17

I have an old postfix server that was historically used by the campus as an outbound gateway. The campus is now supposed to use a different server running HAProxy with several backe-end postfix servers. I am using iptables on CentOS 7 to log and block smtp and submission traffic not coming from my front-end HAProxy server (with a few exceptions for testing and monitoring). What I would like to do is log and redirect the connection to the proxy server. How do I do this? # cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.21 on Wed May 24 12:22:03 2017 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [134:13069] :LOGGING - [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT … -A INPUT -s 139.182.75.64/27 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.111.0/24 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.249.25/32 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.249.254/32 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.75.64/27 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.111.0/24 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.249.25/32 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.249.254/32 -p tcp -m tcp --dport 587 -j ACCEPT … -A INPUT -j LOGGING -A LOGGING -m limit --limit 2/min -j LOG --log-prefix "IPTables-Dropped: " -A LOGGING -j DROP COMMIT # Completed on Wed May 24 12:22:03 2017 --- Chad Cordero Information Technology Consultant Enterprise & Cloud Services Information Technology Services California State University, San Bernardino 5500 University Pkwy San Bernardino, CA 92407-2393 Main Line: 909/537-7677 Direct Line: 909/537-7281 Fax: 909/537-7141 http://support.csusb.edu/ --- Disclaimer: This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer.

1 0

System Time Source
by Chris Olson 25 May '17

25 May '17

One of our STEM interns recently observed that there are inexpensive clocks that sync via radio to standard time services. This begged a question about why every computer would not have a radio module to receive time. Our senior staff did not have a good answer or if time from such a radio module would be supported by the operating system. When I was a student, such questions would have earned me extra homework assignments. We now have only PC directed relationships with interns so we don't assign any extra homework for curiosity. Can anyone help with the answers? Thanks and best regards.

12 17

CentOS6 and squid34 package ...
by Walter H. 25 May '17

25 May '17

Hello what is the essential difference between the default squid package and this squid34 package, as I have problems using this squid34 package for FTP connections; there are no shown icons, when going to e.g. ftp://ftp.adobe.com/ when I tell the browser to show the image then I get this squid generated message ... the same config /etc/squid/squid.conf works with the default squid package ... <message> While trying to retrieve the URL: http://proxy.local:3128/squid-internal-static/icons/silk/folder.png <http://zbox-ci323.waldinet.local:3128/squid-internal-static/icons/silk/fold…> The following error was encountered: * *Access Denied. * Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect. Your cache administrator is ... ------------------------------------------------------------------------ Generated Thu, 25 May 2017 06:50:02 GMT by proxy.local (squid/3.4.14) </message> has anybody the hint for me, what is wrong ..., here is the /etc/squid/squid.conf <squid.conf> acl localnet src 192.168.1.0/24 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost manager http_access deny manager http_access deny to_localhost http_access allow localnet http_access allow localhost http_access deny all http_reply_access allow all http_port 3128 cache_dir ufs /var/spool/squid 16400 16 256 coredump_dir /var/spool/squid nonhierarchical_direct off visible_hostname proxy.local unique_hostname proxy.local forwarded_for off cache_mem 2560 MB icon_directory /usr/share/squid/icons error_directory /etc/squid/errors as_whois_server whois.ra.net logformat combined %>A %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh access_log /var/log/squid/access.log combined refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 </squid.conf> the same host has a running apache, where host proxy.local is a password protected web, which has the folling for port 80 <virt. host> RewriteCond %{HTTP_HOST} ^proxy\.local(:80)?$ [NC] RewriteRule ^/(.*)$ https://proxy.local/$1 [L,R=301] </virt. host> for port 443 <virt. host> <Location /> AuthName Firewall/Router AuthType Basic AuthUserFile /var/www/passwrds Require User admin </Location> </virt. host> /var/log/squid/access.log has this ... <squid log> client - - [25/May/2017:08:50:02 +0200] "GET http://proxy.local:3128/squid-internal-static/icons/silk/folder.png HTTP/1.1" 403 1655 "ftp://ftp.adobe.com/" "UserAgent" TCP_DENIED:HIER_NONE </squid log> the apache doesn't log anything in connection with this ... has anybody the hint for me, what is causing this? Thanks, Walter

1 0

System Time Source Responses
by Chris Olson 24 May '17

24 May '17

It looks like we may have hit on a popular subject with the questions about system time sources. Thanks for all of the responses. Our intern and senior software staff now have useful information and new perspective.

1 0

network setup: meaning of PEERROUTES option
by hw 24 May '17

24 May '17

Hi, what´s the meaning of the PEERROUTES option in the networking scripts? I couldn´t find that documented anywhere. I managed to set up a bonding interface and when sending pings, I´m getting redirection messages from the gateway unless I manually add a route to the network. So I guess that for some reason, the routing doesn´t get set up correctly, and I wonder how to get that to work. Am I missing the PEERROUTES option, or does that do something else?

2 1

local ephemeral ports usage and distribution / inet_csk_get_port()
by Ferreol Lnx 24 May '17

24 May '17

Hello I'm using CentOS Linux release 7.3.1611 (Core) with kernel 3.10.0-514.16.1.el7.x86_64 Using iperf for bond benchmarking, and opening several sockets, I noticed a strange behavior. My Centos using iperf as a client to connect to an iperf server (running either CentOS or Debian) requesting N parallel TCP connections. I notice that the local ephemeral ports used are not consecutive and are always even ports numbers. This can change to "only odd ports numbers" depending on the setting net.ipv4.ip_local_port_range, but basically, the idea is the Centos kernel does "+2" when finding a local port for socket, not doing +1. Doing a netstat, generally speaking, only even (or odd) local ports are used so this does not seem application dependent. It's possible, however, to request both odd and even local ports, when requesting to bind them explicitly and not letting kernel function "inet_csk_get_port" determining it. To compare to another distro, Debian 7 3.2.78-1 x86_64 does increment local port number by +1 when opening sockets, using both even and odd local sockets numbers. This has an influence when doing network interfaces bonding with LACP 801.3ad with layer3+4 hashing policy, because the trafic to one remote host/service will improperly be balanced over bonded interfaces with Centos. Is there any known kernel patch or reason to explain this behavior ? thanks for any hints. best regards FdeS

1 0

CentOS-announce Digest, Vol 147, Issue 5
by centos-announce-request＠centos.org 24 May '17

24 May '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:1268 Important CentOS 6 libtirpc Security Update (Johnny Hughes) 2. CESA-2017:1267 Important CentOS 6 rpcbind Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 23 May 2017 15:00:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1268 Important CentOS 6 libtirpc Security Update Message-ID: <20170523150044.GA58677(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1268 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1268.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3684bcc6ce857f6c24a6af3dde4d99b2004cf1d99d6597d43342dfd84d57b719 libtirpc-0.2.1-13.el6_9.i686.rpm 4cd594d71db84acf14778290e41e881bd59a0888fd43ebadba1fc2a1ec71bd32 libtirpc-devel-0.2.1-13.el6_9.i686.rpm x86_64: 3684bcc6ce857f6c24a6af3dde4d99b2004cf1d99d6597d43342dfd84d57b719 libtirpc-0.2.1-13.el6_9.i686.rpm 2c3d4212c9f672ce596a588e4b3842e345e6dc1912e73c0f3ce6923d0e7564b4 libtirpc-0.2.1-13.el6_9.x86_64.rpm 4cd594d71db84acf14778290e41e881bd59a0888fd43ebadba1fc2a1ec71bd32 libtirpc-devel-0.2.1-13.el6_9.i686.rpm 95b3827651bf9ec144bc231d1694161e9528179a29f2bf54728e7e39b60f32c3 libtirpc-devel-0.2.1-13.el6_9.x86_64.rpm Source: e2b020c0ae829d04df4c22787a637f11d066b958e091d986f6661f0fc70d893a libtirpc-0.2.1-13.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 23 May 2017 15:01:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1267 Important CentOS 6 rpcbind Security Update Message-ID: <20170523150119.GA58879(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1267 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1267.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9c11e7bbce5dab16b850853f4326f33f964dbfbb37f74b73b8db6f9f0f7d5f63 rpcbind-0.2.0-13.el6_9.i686.rpm x86_64: 6d58fc80fd6222919987dae28bb21027ec7847004e8ec8981b0fa92861d090a2 rpcbind-0.2.0-13.el6_9.x86_64.rpm Source: b0176907e5c14eb295702cd39ada3f60cdbf05010508420a68696bfd206d6489 rpcbind-0.2.0-13.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 147, Issue 5 ***********************************************

1 0

CentOS 6.8 and samba
by isdtor 23 May '17

23 May '17

Other than the original 6.8 release version 3.6.23-33, samba has not been functioning correctly for me under 6.8. The symptoms are that about 6-7 days after starting the server, users start complaining that they can no longer open documents on their share. Upon inspection, I find several, sometimes nearly a dozen smb processes owned by a single user, on top of those run under root. Stopping the service does not stop these processes. They are only killable with SIGKILL, and after that, a service restart does not result in a functioning service, i.e. connections are refused, which can be verified easily with smbclient. The only cure is a server reboot. And it is not the same user id every time it happens. Useful logs of any type are not available. I have tested -35 and -36, both show the same behaviour. This is a production server and I have no time for tinkering; downgrading to -33 and blocking samba updates is the only workaround for now.

6 12

CentOS-announce Digest, Vol 147, Issue 4
by centos-announce-request＠centos.org 23 May '17

23 May '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:1265 Moderate CentOS 7 samba Security Update (Johnny Hughes) 2. CESA-2017:1264 Important CentOS 7 kdelibs Security Update (Johnny Hughes) 3. CESA-2017:1262 Important CentOS 7 rpcbind Security Update (Johnny Hughes) 4. CESA-2017:1263 Important CentOS 7 libtirpc Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 22 May 2017 16:26:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1265 Moderate CentOS 7 samba Security Update Message-ID: <20170522162622.GA45032(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1265 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1265.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 87f3041a57ee5ae9cab106a52453c7448378af844d78cd9b5b4dc2e1edc074a8 ctdb-4.4.4-13.el7_3.x86_64.rpm 6da6bdebf3976a903782cccc3b3eefc7e10f7257222aae625861051b92ca1a6c ctdb-tests-4.4.4-13.el7_3.x86_64.rpm 64c272f417ee271b7c12448322c320dc10445f88308494bdad738c569f70a008 libsmbclient-4.4.4-13.el7_3.i686.rpm fda4b264959ab24d720e57d908cf6b3a6cd16da0f099c9436b5b565f2910b590 libsmbclient-4.4.4-13.el7_3.x86_64.rpm 46f6ee213fc34fb9beb56cc4bb16cf00cea26ab715b37ae3c6b4a642308b6c99 libsmbclient-devel-4.4.4-13.el7_3.i686.rpm db1fc9912ea4320f0a42c3cea0fe7719312a95b883590d9967dabeec1aa3e5dc libsmbclient-devel-4.4.4-13.el7_3.x86_64.rpm a4c2a10e4d778f59c4e0f0cfeb36d47a84b3645a4f04c46ba2d81dd236c36305 libwbclient-4.4.4-13.el7_3.i686.rpm 1902ca4ca7dd60b90ca114035380ae707ebc5ef143fd9eb615f5e2c1cd974d03 libwbclient-4.4.4-13.el7_3.x86_64.rpm 7925ae6065f9de888b4df6317c219e90f330929da55ba18eff473cc6b5b7f05f libwbclient-devel-4.4.4-13.el7_3.i686.rpm 8683f0db33c1eac68a8f9df5bb112bc2fba0d03c560c7394e0ea6ceff06fcafb libwbclient-devel-4.4.4-13.el7_3.x86_64.rpm 1af0d447e22395bc73a27d096fdd463ee24bfbc13d61c26ff04ad01076b48093 samba-4.4.4-13.el7_3.x86_64.rpm 66de169c17078f8adafd1f9195d70193f453c10a7370e2a6607c37f543f4fa23 samba-client-4.4.4-13.el7_3.x86_64.rpm f2e7d714bcf7d689fe85c42f6de03ae0585ee9499cea6f04cedce06e057c03aa samba-client-libs-4.4.4-13.el7_3.i686.rpm 4fe84e05f773566ce25fdad4327a1f07d531eb45511212850574326df03062fa samba-client-libs-4.4.4-13.el7_3.x86_64.rpm 61f0afc67bf74e585c7a9ea7ae6706bd31b89ade09f0b143c39f361c80a7036e samba-common-4.4.4-13.el7_3.noarch.rpm 9e8196dd3c4cb4c429c3308a3e54274050805dbe66fe91b9ee45105be3155ef0 samba-common-libs-4.4.4-13.el7_3.x86_64.rpm 9bb13f57e44808322a3aa249bb29a085b068119cb6d1588735898e739351adf2 samba-common-tools-4.4.4-13.el7_3.x86_64.rpm 5454679d0b23895921f70e0e2e32ac7ea419a2c4c364f9d78f3bead74c112c23 samba-dc-4.4.4-13.el7_3.x86_64.rpm f992afe08f34cdec0ce7d5e993166d9b4b0229922034cacf97acc5c51e58ef56 samba-dc-libs-4.4.4-13.el7_3.x86_64.rpm b933f35d3228697c31b19aa947a7a1918c367929e1a7f93b629bbb3b6cff287a samba-devel-4.4.4-13.el7_3.i686.rpm a7cd27846531c3cba9a3adf73906700be0d89ff1e7478adabc0e373e851bc487 samba-devel-4.4.4-13.el7_3.x86_64.rpm 7614bd860d72f18585e5e5378525c6c0174d739c14e1d9177c060333a05a2149 samba-krb5-printing-4.4.4-13.el7_3.x86_64.rpm 6ad331fa053f8e99b9bcfc8b01d162acc84503f8e7abd55e49cd7ac83197ba4e samba-libs-4.4.4-13.el7_3.i686.rpm 03eefe547b37f3b8e1b821eafe657697e8b42811d63a9b6034d17ffe32bee711 samba-libs-4.4.4-13.el7_3.x86_64.rpm 2d0c871d224761b8c23fa669cd9eae34daa3723345212fe3d4269bbf60ef192a samba-pidl-4.4.4-13.el7_3.noarch.rpm c7c98de78c15b7e89028f72afd5818ed8340992de01a701993da9ec32624ea66 samba-python-4.4.4-13.el7_3.x86_64.rpm dde2ea6c04db36ded74a1df07270d6074c28b981f7e8f4e1507dcfb866e66b67 samba-test-4.4.4-13.el7_3.x86_64.rpm 6998106a6f0cff5b4f9a99c73f28b521b007df3d993ad62d0a07e20306b91d3e samba-test-libs-4.4.4-13.el7_3.i686.rpm 2ba737421a58044621b427c919bd51779bf078714d9d5a12a7f9387205c9b7a3 samba-test-libs-4.4.4-13.el7_3.x86_64.rpm c23517db31ebfaabce6122aa07ae036a7c96ec06ef90d2500d46841199f69770 samba-vfs-glusterfs-4.4.4-13.el7_3.x86_64.rpm e7affb4bc403411c40f7a08dc9268a6c55ee56edf43f280ea84821cd95e39d9a samba-winbind-4.4.4-13.el7_3.x86_64.rpm bdbb8a2be95c9d97aa3457ce42dcab4bf3716bed0cd3fe1b030deb7761901ee2 samba-winbind-clients-4.4.4-13.el7_3.x86_64.rpm e86b3e9f536f34f2a3e504f76b88db584a6edac3a71b0d3f0cebed4dc8f851f4 samba-winbind-krb5-locator-4.4.4-13.el7_3.x86_64.rpm cc01f1c5f9697d1e0f3c80f02c7e34fafd706f629596612ea9c8d76f27333042 samba-winbind-modules-4.4.4-13.el7_3.i686.rpm 52008986fb74177ceca12402970760a4d3dbf77e05b54a139f6233fe854b4e1b samba-winbind-modules-4.4.4-13.el7_3.x86_64.rpm Source: 9be3848e21123fc916dcc8a357f1b628682bdd92b42c806fc810dc350ffcd753 samba-4.4.4-13.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 22 May 2017 16:27:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1264 Important CentOS 7 kdelibs Security Update Message-ID: <20170522162746.GA45138(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1264 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1264.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f3e22666fba8c8111928a8f24136d3c9264c9ff493a7ed9e835a6bf5d7ce7140 kdelibs-4.14.8-6.el7_3.i686.rpm 94f689579faf8da4d7ad45123bb2c06bc11489165fef94b6147f51d31bcb30e8 kdelibs-4.14.8-6.el7_3.x86_64.rpm f7b0fc9c737d4b1bde539fe0ad6244197f2f33394af0681cfcf57140b5298b2a kdelibs-apidocs-4.14.8-6.el7_3.noarch.rpm 954c2ecab2f8bb2366f3b1877650dde9756c351b9a05143c9bde1d932decb191 kdelibs-common-4.14.8-6.el7_3.x86_64.rpm 873ec7107fc9f785552ed6364cab5177843b68eee619ddb23581980fcca75cc2 kdelibs-devel-4.14.8-6.el7_3.i686.rpm 8ba9a2644e75f5e404f6a41070fa4954e9e309ecc8e1fd6342b56cdc307c877c kdelibs-devel-4.14.8-6.el7_3.x86_64.rpm 0119fe8e7df71838bf35a67f96888e310b7f25f8c86282acf8474b03ae7326d5 kdelibs-ktexteditor-4.14.8-6.el7_3.i686.rpm 64978ded4630c6f325b78170824280d86bf2a1566232b9e8e5025992162ab858 kdelibs-ktexteditor-4.14.8-6.el7_3.x86_64.rpm Source: c2931314523bca3fb71d17d9da6bc61d118021c46ac3f70c7f4290b0b000900c kdelibs-4.14.8-6.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 22 May 2017 16:28:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1262 Important CentOS 7 rpcbind Security Update Message-ID: <20170522162800.GA45200(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1262 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1262.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9a1fa40b82e9edf90ecf7be9f2d8cc5a82cfb29d1715fee8e92934a5e28f4756 rpcbind-0.2.0-38.el7_3.x86_64.rpm Source: fe79bbfae44b1d853e0094063c9969433741aa668cee620fa43575bcfcd3dae8 rpcbind-0.2.0-38.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 22 May 2017 16:28:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1263 Important CentOS 7 libtirpc Security Update Message-ID: <20170522162817.GA45269(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1263 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1263.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c3335fa4f02ac6905a98a90e4edc9d520f5b654ab12634971afd148f61236a96 libtirpc-0.2.4-0.8.el7_3.i686.rpm 27af85f33e8eb8fdf75eb15f9ba9c42ccccafd38d84c423a108f44f2e459b6bb libtirpc-0.2.4-0.8.el7_3.x86_64.rpm 1271313afac68fc2f1dca601e55fb47377d906465eeea8fd17ab5967a005314a libtirpc-devel-0.2.4-0.8.el7_3.i686.rpm 09951955a070ede720c6f54f5d3eccc2817247c1b641dfb08e0bf1c92ccfa2f9 libtirpc-devel-0.2.4-0.8.el7_3.x86_64.rpm Source: 0bf32a9fcca7b97bb91e0f56edf32dcc5a41be35b9c39b53418b45bd16b2ae5f libtirpc-0.2.4-0.8.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 147, Issue 4 ***********************************************

1 0

C6 Module Keys
by Ken Smith 21 May '17

21 May '17

Hello, As part of testing an alternative module I saved the original module and copied the test one in. The test was done and I put the original module back. Now the original module is not loading at startup and doing it manually I get the error WARNING: Error inserting {Module name & path } Required key not available. And in /var/log/messages shortly after boot I can see kernel: ksign: Installing public key data Loading keyring - Added public key D9FDC491F0A38D91 - User ID: CentOS (Kernel Module GPG key) and I also see ksign: module signed with unknown public key - signature keyid: 6aa10540a705b299 ver=4 Module signed with unknown public key Logged when I try to manually load the original module. Has something not loaded at startup? Or what??? Puzzled - any ideas Thanks Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 5

yum error
by vychytraly . 21 May '17

21 May '17

Hello friends, today I encountered this issue on one of the centos machines, yesterday everything seemed woking normally: $ sudo yum update There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: lIbgscaPi_krb .co.2: cannot open shared object file: No such file or directory Please install a package which provides this module, or verify that the module is installed correctly. It's possible that the above module doesn't match the current version of Python, which is: 2.7.5 (default, Nov 6 2016, 00:28:07) [GCC 4.8.5 20150623 (Red Hat 4.8.5-11)] If you cannot solve this problem yourself, please go to the yum faq at: http://yum.baseurl.org/wiki/Faq Im sure I did not overwrite any of the python packages, since I have protectbase configured. Please do you know what could be the problem? Thank you very much and have a nice day vychytraly

3 4

Google-chrome-stable
by Rob Kampen 21 May '17

21 May '17

Over the last week or so I have noticed that chrome fails to load pages - in fact even the setup pages do not load. Blow away the ~/.config/google-chrome/ files and restart Seems to work for a little while - then stops again - no other pages load. I have done the cleanup of the .config/google-chrome directory and then with the fresh session tried both with my google account and without any account - same result. I have just done an update in the hope it may fix things so now running Version 58.0.3029.110 (64-bit) What is going on? Firefox is working just fine. [rkampen@robsc7 google-chrome]$ rpm -qa |grep google google-chrome-stable-58.0.3029.110-1.x86_64 google-crosextra-caladea-fonts-1.002-0.4.20130214.el7.noarch google-crosextra-carlito-fonts-1.103-0.2.20130920.el7.noarch Any suggestions appreciated.

1 0

get pdftk into (or from) a repo
by ken 20 May '17

20 May '17

pdftk used to be in a repo... or maybe it still is, but I don't know which one. Anyone know?

5 9

[OT] how to give ssh options to rdist
by Gianluca Cecchi 19 May '17

19 May '17

Hello, I'm trying to configure rdist over ssh so that it connects at target side as a particular user. I'm using CentOS 7.3 on both ends (I also tested with Fedora 25 with the same behavor) So I create at source side the file ~/.ssh/config under mysourceuser home Host targetsrv.localdomain.local HostName targetsrv.localdomain.local User mytargetuser Then, connected as mysourceuser user on local server $ ssh targetsrv.localdomain.local mytargetuser(a)targetsrv.localdomain.local's password: So far so good as expected. But if I create a small distfile to distribute a file on targetsrv.localdomain.local and execute rdist on it, I receive the prompt of mysourceuser password, not mytargetuser one.... $ rdist -P /usr/bin/ssh -f ./distfile distrotest mysourceuser(a)targetsrv.localdomain.local's password: It seems the config file is not honored. I tried different combinations but none worked eg creating a wrapper script that runs ssh -F config_file "$@" I can workaround the problem using inside the distfile "mytargetuser(a)targetsrv.localdomain.local" instead of "targetsrv.localdomain.local" , this way it works. But I would like to avoid it if possible as I have a distfile with many entries and variables as destination hosts target. Any help appreciated Thanks, Gianluca

1 0

Re: [CentOS] What's Next
by Eugene Poole 19 May '17

19 May '17

I read somewhere that the PCIe issue is indicative of some other hardware (PCIe SSD; etc) not working correctly. Also, the 4.10 kernel is not the kernel out of the box. In a environment with 10 or more servers do you really want a custom kernel? How do you maintain all of these custom kernels (i.e. is a different kernel required for a HP Gen 8 server different than a HP Gen 9 server?)? I've learned my lesson from using the FOSS HPLIP HP printer driver - every time the kernel is updated you have to re-install the driver... TIA -- Eugene Poole Woodstock, Georgia

2 1

strange system outage
by Larry Martell 18 May '17

18 May '17

I have a CentOS 7 system that I run a home grown python daemon on. I run this same daemon on many other systems without any incident. On this one system the daemon seems to die or be killed every day around 3:30am. There is nothing it its log or any system logs that tell me why it dies. However in /var/log/messages every day I see something like this: May 10 03:35:58 localhost pure-ftpd: (tool(a)xx.xx.xx.xx) [NOTICE] /usrMay 10 03:57:57 localhost pure-ftpd: (tool(a)xx.xx.xx.xx) [NOTICE] /usr/local/motor/data//B31/today/Images/CP0982436.00C_T6PH8_M0-R_1/T6PH8_M0-RN_TT6PH8_M0-R_P4_M1_FX-1_FY4_RR1_TR1_Ver3.jpg uploaded (90666 bytes, 8322.34KB/sec) Notice how the message that was being printed at 03:35:58 is truncated mid-message and the next message is at 03:57:57 – there are always messages like around the time when the daemon dies. What could be going on here?

6 15

Re: [CentOS] Centos 7 and MAC address munging
by m.roth＠5-cent.us 18 May '17

18 May '17

Subject: Re: [CentOS] Centos 7 and MAC address munging Date: Thu, 18 May 2017 06:22:21 +0100 From: James Hogarth <james.hogarth(a)gmail.com> > > On 17 May 2017 8:53 pm, <m.roth(a)5-cent.us> wrote: > >> Odd situation: I've mentioned before that I have several users for whom I >< have to spoof the MAC address, due to a software license. Now, I've got >> net.ifnames=0 biosdevname=0 on the grub2 command line, and I've got the >> spoofed MAC address in /etc/sysconfig/network-sctipts/ifcfg-eth0. > >> But he had a serious problem - X froze, and he thought to reboot, rather >> than call me. It came up with the actual MAC. I tried a number of things, >> including reboots, but the only thing that worked was systemctl stop >> NetworkManager, ifdown eth0, then ifup eth0, then start NetworkMangler, >> and all was good. > >> Yeah, I know, afterwards, I remembered I should have use nmcli.... > >> But the real question is *why* did it fail on the reboot. I find no clues >> in dmesg, or messages, or boot.log. > >> Clues for the poor? > > Is this box fully updated? I ask as the NM since 7.3 has different > behaviour from release due to rebasing. Mostly. Running 3.10.0-514.10.2.el7.x86_64, and yum tells me nothing marked for update (that's ignoring that we have exclude=kernel* *xorg* *nvid* kmod* in yum.conf) > > What does `nmcli con sh eth0 | grep clone` tell you? > 802-3-ethernet.cloned-mac-address: and the spoofed MAC address. > It's that property you need to set. Sorry, I don't understand the above sentence. What property - 802-3-ethernet.cloned-mac-address? And this is on top of ifcfg-eth0, and all the rest? mark

1 0

Best practices for copying lots of files machine-to-machine
by ken 18 May '17

18 May '17

An entire filesystem (~180g) needs to be copied from one local linux machine to another. Since both systems are on the same local subnet, there's no need for encryption. I've done this sort of thing before a few times in the past in different ways, but wanted to get input from others on what's worked best for them. One consideration is that the source filesystem contains quite a few hardlinks and symlinks and of course I want to preserve these, and preserve all timestamps and ownerships and permissions as well. Maintaining the integrity of this metadata and the integrity of the files themselves if of course the top priority. Speed is also a consideration, but having done this before, I find it even more important to have a running progress report or log so I can see how the session is proceeding and approximately how much longer it will be until finished... and too to see if something's hung up. One other consideration: There isn't much disk space left on the source machine, so creating a tar file, even compressed, isn't an option. What relevant methods have you been impressed by?

7 10

plymouth themes problem
by Fred Smith 18 May '17

18 May '17

Hi all! I was playing with plymouth themes on a c7 box. I found a page on redhat, in their rhel7 documentation that describes how to change to a different plymouth screen: plymouth-set-default-theme --list to find out what themes are installed. then I installed the remaining bunch the yum had available. so then installing one by doing plymouth-set-default-theme <theme name> dracut -f as documented on the aforementioned page, followed by a reboot produces NO plymouth splash screen. not even if I revert to the system default theme (the "charge" theme). Anybody know what I'm overlooking here? thanks! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- The Lord detests the way of the wicked but he loves those who pursue righteousness. ----------------------------- Proverbs 15:9 (niv) -----------------------------

2 1

Centos 7 and MAC address munging
by m.roth＠5-cent.us 18 May '17

18 May '17

Odd situation: I've mentioned before that I have several users for whom I have to spoof the MAC address, due to a software license. Now, I've got net.ifnames=0 biosdevname=0 on the grub2 command line, and I've got the spoofed MAC address in /etc/sysconfig/network-sctipts/ifcfg-eth0. But he had a serious problem - X froze, and he thought to reboot, rather than call me. It came up with the actual MAC. I tried a number of things, including reboots, but the only thing that worked was systemctl stop NetworkManager, ifdown eth0, then ifup eth0, then start NetworkMangler, and all was good. Yeah, I know, afterwards, I remembered I should have use nmcli.... But the real question is *why* did it fail on the reboot. I find no clues in dmesg, or messages, or boot.log. Clues for the poor? mark

2 1

CentOS 7 on HP DL160 G6
by H 18 May '17

18 May '17

I am running the latest updated version of CentOS on a HP DL160 G6 server as a workstation with the Mate desktop, not Gnome. The only expansion card I have installed is a MSI Geforce GT710 graphics card driving two monitors. Unfortunately the computer locks up at random intervals: neither the mouse nor the keyboard work and I lose the SSH connection to the computer I have used to see if the entire computer locks up or only the desktop. If I leave the computer in this state it eventually reboots. Any suggestions on where to begin researching this? Thank you.

5 10

What's Next
by Eugene Poole 18 May '17

18 May '17

OK, AMD has announced it's new line of server and desktop processors. What level of CentOS has been tested on them? OK then, when will CentOS be tested on them? Or do we wait for Red Hat? -- Eugene Poole Woodstock, Georgia

7 7

From Networkmanager to self managed configuration files
by Andreas Benzler 17 May '17

17 May '17

I don't know who is intereseted in, http://www.centos.cms4all.org/index.php/2017/03/07/centos-7-the-journey-for… Can be a bug, because the isn't nessesery. Sincerely AndyBe

9 33

CentOS 7 and sound
by Jerry Geis 16 May '17

16 May '17

Hello, I have a need to get CentOS 7 sound working on a console only machine. X is not running. Currently when I try aplay: aplay /usr/share/sounds/alsa/Front_Center.wav ALSA lib pulse.c:243:(pulse_connect) PulseAudio: Unable to connect: Connection refused aplay: main:786: audio open error: Connection refused aplay -l **** List of PLAYBACK Hardware Devices **** card 1: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog] Subdevices: 1/1 Subdevice #0: subdevice #0 So sound is present - I presume pulseaudio is not running as X is not running, Can I run audio without X ? Next steps ? running in an ALSA mode is fine with me - but how? Thanks, Jerry

2 2

CentOS-announce Digest, Vol 147, Issue 3
by centos-announce-request＠centos.org 16 May '17

16 May '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:1208 Important CentOS 6 jasper Security Update (Johnny Hughes) 2. CESA-2017:1230 Important CentOS 6 ghostscript Security Update (Johnny Hughes) 3. CESA-2017:1230 Important CentOS 7 ghostscript Security Update (Johnny Hughes) 4. CESA-2017:1208 Important CentOS 7 jasper Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 15 May 2017 15:59:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1208 Important CentOS 6 jasper Security Update Message-ID: <20170515155923.GA7088(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1208 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1208.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 065e0d1bf12c76b8c069e195cc766f413513de631fc2068102c6274bf32a5331 jasper-1.900.1-21.el6_9.i686.rpm fb061499b5f77715cc8edcb8be8bb9e7be45a5471eafcec4f2b108a8a66a6caf jasper-devel-1.900.1-21.el6_9.i686.rpm 2e159a9085ea69dc5494e61caa75a2baad3b313d4c9aaa28d210019d39e1dcc1 jasper-libs-1.900.1-21.el6_9.i686.rpm 6bff2a512a3a02648e7a7e576430def2da83ce3b9e04d9d4645d272028bf74b5 jasper-utils-1.900.1-21.el6_9.i686.rpm x86_64: f2796377490accb35ffc0e76528f712659d30add0842887ce504b8d6645fd220 jasper-1.900.1-21.el6_9.x86_64.rpm fb061499b5f77715cc8edcb8be8bb9e7be45a5471eafcec4f2b108a8a66a6caf jasper-devel-1.900.1-21.el6_9.i686.rpm c5df9adf35d20e7a849fbf7e377cb0cb8902f01f2bcb94c94e31001c9ca058ab jasper-devel-1.900.1-21.el6_9.x86_64.rpm 2e159a9085ea69dc5494e61caa75a2baad3b313d4c9aaa28d210019d39e1dcc1 jasper-libs-1.900.1-21.el6_9.i686.rpm 2d59e1277757dc31c39400a7276f08d8afd03504ce8440facce1f84bb4be714f jasper-libs-1.900.1-21.el6_9.x86_64.rpm b61bc76d97dad867740d8774637fc055cc28289fa4f02b3e6dcaf5d8b3ffa76c jasper-utils-1.900.1-21.el6_9.x86_64.rpm Source: ef8e5d52a2bc6ad50c48ef1ebe4490a67bb92df075afacc102b16d8f076fb162 jasper-1.900.1-21.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 15 May 2017 15:59:50 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1230 Important CentOS 6 ghostscript Security Update Message-ID: <20170515155950.GA7362(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1230 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1230.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5a76fb12c6c3c14c0961c03320e8d7770ce72c09a21e614a7aed3864d87943e5 ghostscript-8.70-23.el6_9.2.i686.rpm d8ce9d3bc452838b99d3613f71dafdcaefe8ba989f48f7933bf3aa81b7531f5b ghostscript-devel-8.70-23.el6_9.2.i686.rpm dcc02d7bd26fa4b2c1eb3a9c9066780f327325917f6f6a7d1c95f7bca715248e ghostscript-doc-8.70-23.el6_9.2.i686.rpm 1ae49f1a618b81c2fc128ad0eaf399e3c0f11742a5517106ae84260001d48582 ghostscript-gtk-8.70-23.el6_9.2.i686.rpm x86_64: 5a76fb12c6c3c14c0961c03320e8d7770ce72c09a21e614a7aed3864d87943e5 ghostscript-8.70-23.el6_9.2.i686.rpm a5f9fe8c575085bba8c5b5e437e7b82cac128ec023617ca75766fef175b271db ghostscript-8.70-23.el6_9.2.x86_64.rpm d8ce9d3bc452838b99d3613f71dafdcaefe8ba989f48f7933bf3aa81b7531f5b ghostscript-devel-8.70-23.el6_9.2.i686.rpm 9e9079054a2e805d877c3d6f8b039649170ed6721cfd9178fa158ce5e7aaaa7b ghostscript-devel-8.70-23.el6_9.2.x86_64.rpm 9e2d67a2fd1be67f0d0637baea8f71fa077a69803e95d7a5240473edbef4762c ghostscript-doc-8.70-23.el6_9.2.x86_64.rpm 7a9b3f8e415a5d88701631590a58d0dd40f105c13b215739115e6b8b8ed99b4e ghostscript-gtk-8.70-23.el6_9.2.x86_64.rpm Source: 1d42f1dfb0b4fac0fb35bd46b712b429691c0f56d9637d3cc6bb23092681053e ghostscript-8.70-23.el6_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 15 May 2017 16:45:50 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1230 Important CentOS 7 ghostscript Security Update Message-ID: <20170515164550.GA11623(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1230 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1230.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 13b528fab28b799cb7821c627dba7610b800724b72013a457d0b8e307a51dd97 ghostscript-9.07-20.el7_3.5.i686.rpm 98164b6667981379add6d5aaca6e636afc09705f28876bbbd55b39662b1355ae ghostscript-9.07-20.el7_3.5.x86_64.rpm 08099c3554cc5cc69e6b39fb46653b521c78d5f7dd898299bb8509b46c60da5c ghostscript-cups-9.07-20.el7_3.5.x86_64.rpm d8955de29347efbb508e0347f733c5fcc9cea0fcd6c67b38f9cee4753a5af259 ghostscript-devel-9.07-20.el7_3.5.i686.rpm dfc06dd01dfd83596c32838d1299bd7627ff4448638d4965a5b18d374c426ba2 ghostscript-devel-9.07-20.el7_3.5.x86_64.rpm 17930cd40d86834840e4f647512d9d90c7aba63b752910d7cc72594e329c9441 ghostscript-doc-9.07-20.el7_3.5.noarch.rpm 71928ee68a7cfbad0f986b1af5e1d534b37625a2f3b7190841b51a6b9150dfe5 ghostscript-gtk-9.07-20.el7_3.5.x86_64.rpm Source: ba98ea2b439b24ff44f59cb96fef42bdc616f6834aa9b97e7baa6d22194b7960 ghostscript-9.07-20.el7_3.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 15 May 2017 16:46:03 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1208 Important CentOS 7 jasper Security Update Message-ID: <20170515164603.GA11713(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1208 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1208.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bf4bec0731557d9200609d59f46d1b66da039a1887828d2d477be9b93675a137 jasper-1.900.1-30.el7_3.x86_64.rpm 094699ed29af7ed7ba8dffbdbcd8cd345339acf9b4da7a519d1bfcea7bef23b0 jasper-devel-1.900.1-30.el7_3.i686.rpm d7c8e089c540c9d1ed779130e51a7637fd242cdea676c545216a2cb49fdd77a9 jasper-devel-1.900.1-30.el7_3.x86_64.rpm 33528f9a2f5eaffc09abaed6f5b81f336815820969406a24dfb7526d587ed54b jasper-libs-1.900.1-30.el7_3.i686.rpm 63ee65983ed5bd9f8d2516f4066d3642cdff69f63b5251a52470094e7a816150 jasper-libs-1.900.1-30.el7_3.x86_64.rpm a7863af6605c1c32063a611a530c0b4da2312b98fb2da4138e4071fa8f6762c2 jasper-utils-1.900.1-30.el7_3.x86_64.rpm Source: 37135c918505fca6233f9ab55193602bb9ed97dcde43a50ed6f2dae3a45038fc jasper-1.900.1-30.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 147, Issue 3 ***********************************************

1 0

kickstart: dracut-initqueue fails due to unresolvable hostname even though network config looks perfectly ok
by Frank Thommen 16 May '17

16 May '17

Hi, kickstarting fails due to problems with host resolution, even though the network seems to be properly configured through DHCP. eno1 and eno2 are both attached to the network, but only eno1 gets an IP via DHCP. Still `curl` cannot resolve the mirror host and the kickstart host during dracut-initqueue: rdsosreport.txt ------------------------------------------------ [...] [ 14.780428] localhost kernel: IPv6: ADDRCONF(NETDEV_UP): eno1: link is not ready [ 19.977052] localhost kernel: tg3 0000:0b:00.0 eno1: Link is up at 1000 Mbps, full duplex [ 19.977118] localhost kernel: tg3 0000:0b:00.0 eno1: Flow control is off for TX and off for RX [ 19.978880] localhost kernel: tg3 0000:0b:00.0 eno1: EEE is disabled [ 19.980693] localhost kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eno1: link becomes ready [ 19.829468] localhost dracut-initqueue[992]: dhcp: PREINIT eno1 up [ 19.853734] localhost dhclient[1393]: DHCPDISCOVER on eno1 to 255.255.255.255 port 67 interval 6 (xid=0x4df19201) [ 26.030151] localhost dhclient[1393]: DHCPDISCOVER on eno1 to 255.255.255.255 port 67 interval 13 (xid=0x4df19201) [ 26.033472] localhost dhclient[1393]: DHCPREQUEST on eno1 to 255.255.255.255 port 67 (xid=0x4df19201) [ 26.033668] localhost dhclient[1393]: DHCPOFFER from 10.128.196.98 [ 26.038851] localhost dhclient[1393]: DHCPACK from 10.128.196.98 (xid=0x4df19201) [ 26.067534] localhost dracut-initqueue[992]: dhcp: BOND setting eno1 [ 28.082735] localhost dhclient[1393]: bound to 10.128.196.20 -- renewal in 21301 seconds. [ 28.456131] localhost kernel: tg3 0000:0b:00.1: irq 153 for MSI/MSI-X [ 28.456149] localhost kernel: tg3 0000:0b:00.1: irq 154 for MSI/MSI-X [ 28.456165] localhost kernel: tg3 0000:0b:00.1: irq 155 for MSI/MSI-X [ 28.456180] localhost kernel: tg3 0000:0b:00.1: irq 156 for MSI/MSI-X [ 28.456196] localhost kernel: tg3 0000:0b:00.1: irq 157 for MSI/MSI-X [ 28.570450] localhost kernel: IPv6: ADDRCONF(NETDEV_UP): eno2: link is not ready [ 34.024621] localhost kernel: tg3 0000:0b:00.1 eno2: Link is up at 1000 Mbps, full duplex [ 34.026347] localhost kernel: tg3 0000:0b:00.1 eno2: Flow control is off for TX and off for RX [ 34.028069] localhost kernel: tg3 0000:0b:00.1 eno2: EEE is disabled [ 34.029776] localhost kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eno2: link becomes ready [ 33.803606] localhost dracut-initqueue[992]: dhcp: PREINIT eno2 up [ 33.827664] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 7 (xid=0x1e8bdc4b) [ 41.000199] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 15 (xid=0x1e8bdc4b) [ 55.588353] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 18 (xid=0x1e8bdc4b) [ 74.172423] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 12 (xid=0x1e8bdc4b) [ 86.446514] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 9 (xid=0x1e8bdc4b) [ 95.253443] localhost dhclient[1570]: No DHCPOFFERS received. [ 95.253648] localhost dhclient[1570]: No working leases in persistent database - sleeping. [ 95.282175] localhost dracut-initqueue[992]: dhcp: FAIL [ 95.353255] localhost dracut-initqueue[992]: RTNETLINK answers: File exists [ 102.502688] localhost dracut-initqueue[992]: Warning: can't find installer mainimage path in .treeinfo [ 102.517568] localhost dracut-initqueue[992]: % Total % Received % Xferd Average Speed Time Time Time Current [ 102.525942] localhost dracut-initqueue[992]: Dload Upload Total Spent Left Speed [ 102.534277] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 1 seconds. 3 retries left. [ 103.527190] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 2 seconds. 2 retries left. [ 105.533677] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 4 seconds. 1 retries left. [ 109.542329] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: our.centos.mirror; Unknown error [ 109.551613] localhost dracut-initqueue[992]: Warning: Downloading 'http://our.centos.mirror/7.2.1511/os/x86_64/LiveOS/squashfs.img' failed! [ 109.615143] localhost dracut-initqueue[992]: % Total % Received % Xferd Average Speed Time Time Time Current [ 109.624698] localhost dracut-initqueue[992]: Dload Upload Total Spent Left Speed [ 109.625018] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 1 seconds. 3 retries left. [ 110.624800] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 2 seconds. 2 retries left. [ 112.631351] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 4 seconds. 1 retries left. [ 116.639935] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: our.kickstart.server; Unknown error [ 116.650727] localhost dracut-initqueue[992]: Warning: failed to fetch kickstart from http://our.kickstart.server/ks.cgi [ 242.126427] our.client dracut-initqueue[992]: Warning: dracut-initqueue timeout - starting timeout scripts [... 120 times this warning ...] [ 304.648460] our.client systemd[1]: Received SIGRTMIN+20 from PID 991 (plymouthd). [ 304.650862] our.client dracut-initqueue[992]: Warning: /dev/root does not exist [ 304.659840] our.client systemd[1]: Starting Dracut Emergency Shell... [ 304.684459] our.client systemd[1]: Received SIGRTMIN+21 from PID 991 (plymouthd). [... exiting to emergency shell ...] dropped to the emergency shell, the network config looks absolutely ok: $ ip route default via 10.128.196.97 dev eno1 10.128.196.0/24 dev eno1 proto kernel scope link src 10.128.196.20 169.254.95.0/24 dev enp0s20u1u5 proto kernel scope link src 169.254.95.120 $ `ip a` shows the correct IP address for eno1 and /etc/resolv.conf has all required nameservers. From the emergency shell both hostnames (our.centos.mirror and our.kickstart.server) are perfectly resolvable and accessible. The used PXE config is: LABEL CentOS-7 kernel centos-7.2/vmlinuz append initrd=centos-7.2/initrd.img ip=dhcp inst.repo=http://our.centos.mirror/7.2.1511/os/x86_64 inst.ks.sendmac inst.ks=http://our.kickstart.server/ks.cgi Any idea, why curl cannot resolve the two hostnames or how I can debug this further? Cheers frank

3 5

Re: [CentOS] centos 7- boot doesn't wait for startup script to complete
by KM 15 May '17

15 May '17

Hello,Nothing I have found has solved this issue. the service starts on boot, but the booting process continues. When I log in my startup script is still running and finishes up. that is good at least, but I'd still like to know how to make it wait. Any feedback is appreciated. Thanks in advance.KM From: KM <info4km(a)yahoo.com> To: CentOS mailing list <centos(a)centos.org> Sent: Tuesday, August 9, 2016 3:38 PM Subject: Re: [CentOS] centos 7- boot doesn't wait for startup script to complete FYI - I just found the following post, https://www.centos.org/forums/viewtopic.php?f=47&t=48140 , which I hadn't seen before. It has to do with adding an entry to rc.local. This has worked for me. I know the correct way would be to set up a systemd service file as I started doing. I will consider all of this while we are supporting different flavors of CentOS/RedHat. Any feedback on this let me know, and as always.... thanks in advance.KM From: KM <info4km(a)yahoo.com> To: CentOS mailing list <centos(a)centos.org> Sent: Tuesday, August 9, 2016 3:07 PM Subject: Re: [CentOS] centos 7- boot doesn't wait for startup script to complete I am taking a step back. I have a normal rc script that is installed with our product. All of the CentOS 7 documentation says the script should work on startup/shutdown. But it doesn't. If I run the script manually it works as it should of course. When I restart the server, nothing happens or starts up. So my question is should it be working as it was without me changing anything? The only way I was able to make it work was to add a service file for it in the systemd directory which is what led to my email in the trail attached below. Any way to see what it is doing? I'll try debugging into out application logs again, but haven't had much luck with that.Thanks in advanceKM From: Jonathan Billings <billings(a)negate.org> To: CentOS mailing list <centos(a)centos.org> Sent: Thursday, August 4, 2016 5:10 PM Subject: Re: [CentOS] centos 7- boot doesn't wait for startup script to complete > On Aug 4, 2016, at 14:35, KM <info4km(a)yahoo.com> wrote: > > thank you for the feedback. I tried using Before=systemd-user-sessions.service. At first glance it seems to work, but then the oracle DB shuts down. Note that myservices starts oracle and then does a few things for our application. > When I remove that entry, it goes right to the login as I originally described, but the oracle DB does not shut down. maybe I have the wrong combination of timeout options with this other option or something, although the timeouts seemed to work also. > Just thought I'd throw it out there. In either case, thanks for helping. > I looked online for an explanation of the options for these files, other that the systemd manual page which is hard to use. I really couldn't find one. Any suggestions? > Thanks again.KM Is your service still a oneshot type? If you are starting daemonized services, systemd is probably terminating them. You should use a 'forking' type for services that will keep around processes. > From: Jonathan Billings <billings(a)negate.org> > To: CentOS mailing list <centos(a)centos.org> > Sent: Tuesday, August 2, 2016 9:28 AM > Subject: Re: [CentOS] centos 7- boot doesn't wait for startup script to complete > >> On Tue, Aug 02, 2016 at 12:56:21PM +0000, KM wrote: >> # used to set up the Myservices onstartup >> [Unit] >> Description=Start and stop Myservices >> >> [Service] >> Type=oneshot >> ExecStart=/etc/init.d/Myservices start >> ExecStop=/etc/init.d/Myservices stop >> RemainAfterExit=yes >> >> [Install] >> WantedBy=multi-user.target > > Reformatting so it is readable. > > What you probably want to do is to add something to the [Unit] section > to make the completion of the be a requirement for the user login > service. Something like: > > Before=systemd-user-sessions.service > > You will most likely also need to add a TimeoutStartSec= to your > [Service] section to give it a longer time to run before systemd times > out the service start. > > > -- > Jonathan Billings <billings(a)negate.org> > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos

2 1

How can kickstart be (re)started manually from the dracut emergency shell?
by Frank Thommen 15 May '17

15 May '17

Hi, this is a side question to my other thread regarding dracut-initqueue network issues. Once I'm thrown into a dracut emergency shell (PXE booted system): How can I restart the kickstart installation process manually from there? Can I at all? Background is, that I'd like to add some debugging output to some of the dracut scripts and rerun the installation process to see why it fails. Thanks frank

1 0

Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks
by Son Son 15 May '17

15 May '17

Concern: Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks OS: CentOS 7.3 kernel Version: 3.10.0-514.el7.x86_64 Any IO (write) block size more than 4KiB is split in to number of 4KiB blocks on Centos 7.3 ( where I don't see similar issue on 7.2). I have a setup that involves TWO CentOS 7.3 servers. I tried to run 4MB IO on FC LUN(s) on these servers discovered through Emulex LPe 16000 HBAs. Changed ‘options lpfc lpfc_sg_seg_cn =>1024’ and ‘max_secors_kb =>4MB’ params towards attaining supersize IO ( 4MB block size) , however there are no improvements in getting more than 4K block size IO. There was no impact from these changes. Looking for a help to tune the system to attain supersize IO operation (4MB writes) Regards, Sk

1 0

SCSI drives and Centos 7
by Gregory P. Ennis 14 May '17

14 May '17

Everyone, about 4 years ago, I tried to install CentOS 6 on a Supermicro server with SCSI drives using a LSI raid system. I could never figure out or find a way to make the installation disc of Centos 6 identify the SCSI drives. The installation disc for Centos 5 identified the SCSI drives without a problem. I finally gave up on Centos 6 and installed Centos 5 and the system has worked very well for the last 4 years Now that Centos 5 has been retired, I would like to install Centos 7 on this server. Does the install disc for Centos 7 have the same issues with SCSI drives as Centos 6? Has anyone used Centos 7 on SCSI drives, or am I going to need to get an upgrade of the server? The server is working great. Greg Ennis -- Gregory P. Ennis, M.D., M.R.O. Medical Director EcCare Health Centers www.EcCare.com 972-659-1234

7 13

Virt-Manager and full-screen display
by Nicolas Kovacs 13 May '17

13 May '17

Hi, I have CentOS 7 with Qemu/KVM and Libvirt running on a headless HP Proliant Server. Virtual hosts are managed via Virt-Manager installed on a CentOS 7 + KDE client via SSH. Things are running quite nicely for now, I only have a few small minor details to adjust. On my main workstation running Slackware64 14.1, I also have Qemu/KVM and Virt-Manager installed. When I launch a virtual host and switch to full-screen display, the host is a "real" full screen. But when I do the same thing with CentOS, I don't have a real full-screen display. There's still two grey bars left on the upper and lower end of the screen. Any idea how I can get rid of these and have a 100% full-screen display for a KVM host? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

CentOS 6 / Intel CPU support
by Leon Fauster 12 May '17

12 May '17

https://access.redhat.com/support/policy/intel shows mainly Xeon CPUs. What about Intel Core i7-6700 Quad-Core Skylake has the current EL6 variant support for it? Any experience? Feedback would be greatly appreciated. Thanks, LF

5 8

sshd and problems with network vs NetworkManager
by Gianluca Cecchi 12 May '17

12 May '17

Hello, I'm registering a strange new behavior after updating openssh on my CentOS 7.3 server. Firt of all difference of systemd service configuration between new openssh-server-6.6.1p1-35.el7_3.x86_64 and old openssh-server-6.6.1p1-33.el7_3.x86_6 [root@c7service ~]# diff new_sshd.service old_sshd.service 8c8,9 < Type=notify --- > Type=forking > PIDFile=/var/run/sshd.pid 10c11 < ExecStart=/usr/sbin/sshd -D $OPTIONS --- > ExecStart=/usr/sbin/sshd $OPTIONS 15d15 < RestartPreventExitStatus=255 It changed the Type and it was also added the RestartPreventExitStatus directove. The effects I'm noticing are: 1) If using NetworkManager and no ListenAddress entry in sshd_config --> all ok (listen on ipv4 and ipv6) 2) If using NetworkManager and I put ListenAddress=ip in sshd_config --> all ok 3) If NetworkManager disabled and using only network service and no ListenAddress entry in sshd_config --> ok (listen on ipv4 and ipv6) 4) If NetworkManager disabled and using only network service and I put ListenAddress=ip in sshd_config --> ko with 255 error and so no restart 5) If NetworkManager disabled and using only network service and I put ListenAddress=0.0.0.0 --> ok 6) If NetworkManager disabled and using only network service and I put ListenAddress=ip and comment out the RestartPreventExitStatus line --> ko with 255 error and after 42s restart and ok of sshd Can anyone replicate on an RH EL and report? Do you think I can opena a bugzilla for this or NetworkManager is supposed to be kept running as official support? I have a server with two network interfaces where I want to enable sshd only on the second and I'm blocked if I disable NetworkManager. In the mean time I have commented out the service line related to restart n case of 255 error... I see here that actually 255 is the common exit code for many sshd errors and some discussions about Type of sshd service: https://bugzilla.redhat.com/show_bug.cgi?id=1398360 In changelog of rpm between old and new eleases I only see: * Wed Mar 01 2017 Jakub Jelen <jjelen(a)redhat.com> - 6.6.1p1-35 + 0.9.3-9 - Do not send SD_NOTIFY from forked childern (#1381997) * Fri Feb 24 2017 Jakub Jelen <jjelen(a)redhat.com> - 6.6.1p1-34 + 0.9.3-9 - Add SD_NOTIFY code to help systemd to track running service (#1381997) Thanks in advance, Gianluca

1 0

Thunderbird Regression
by Mark LaPierre 11 May '17

11 May '17

Has anyone else noticed a 10X slowing of the time it takes Thunderbird to load an email that contains graphics on CentOS 6? The last Thunderbird update moved us from Thunderbird 45 to Thunderbird 52. While Thunderbird was loading the images the hard drive was busy cranking out seeks. I have all my local home accounts mounted on a software raid. I solved the problem with a downgrade to Thunderbird 45, but that's a poor solution not keeping Thunderbird up to date with the latest security patches. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 1

TLSv1.3 support?
by Walter H. 11 May '17

11 May '17

Hello, will the next update of CentOS 6 (6.10) have TLSv1.3 support? Thanks, Walter

2 2

Basic authentication - maybe off topoc
by Jerry Geis 11 May '17

11 May '17

Hi - I am using CentOS 7.3 and trying to receive basic authentication. I run a command liked: curl -X POST -u jerry:pw http://192.168.1.8/inbound.cgi When I use printenv in the cgi I do not see the user and password anywhere. Isn't it supposed to be there in an environment variable like REMOTE_USER ? How do I receive the basic authentication ? Thanks, Jerry

3 3

CentOS 7 selinux
by Larry Martell 10 May '17

10 May '17

If I make a change to /etc/sysconfig/selinux do I have to restart anything for the change to take effect?

4 4

CentOS-announce Digest, Vol 147, Issue 2
by centos-announce-request＠centos.org 10 May '17

10 May '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:1202 Important CentOS 6 bind Security Update (Johnny Hughes) 2. CESA-2017:1206 Important CentOS 6 qemu-kvm Security Update (Johnny Hughes) 3. CESA-2017:1204 Moderate CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) 4. CESA-2017:1201 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 5. CESA-2017:1201 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 6. CESA-2017:1204 Moderate CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 May 2017 16:58:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1202 Important CentOS 6 bind Security Update Message-ID: <20170509165821.GA49289(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1202 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1202.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c1b56581baba94701da450a96e6ab96f6ac4f083e5f421c3ebe7124aa3411179 bind-9.8.2-0.62.rc1.el6_9.2.i686.rpm e033ff2999ee5094166f858629831f12caf926c10f2156d1bf92dd5fbc6c3a7b bind-chroot-9.8.2-0.62.rc1.el6_9.2.i686.rpm f3bd19a5c47a27ae24967a06b7bf37b09b27631556cd1873ac6b8b9f55b41b78 bind-devel-9.8.2-0.62.rc1.el6_9.2.i686.rpm ec7c8ae880e8366214991ca56d02bed6043665ae34657aac5814c781e2e2b5af bind-libs-9.8.2-0.62.rc1.el6_9.2.i686.rpm 2cecf3d6f6631711bc00d8c65a89c69f35caec84fd6a32aede440c6a3f7e0163 bind-sdb-9.8.2-0.62.rc1.el6_9.2.i686.rpm 37d38b81206240ff8562534ca327ac7fdbd4592ebcee0caaa637eccd3df8a8e9 bind-utils-9.8.2-0.62.rc1.el6_9.2.i686.rpm x86_64: 7320440995c79fe2648545554f8fa76bd1467f8873df842002783d7e8c3d7e38 bind-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm 9f589d84f1278d8c2c8595e2967fdee489478359a369f11a9f4c9a26f49fbccc bind-chroot-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm f3bd19a5c47a27ae24967a06b7bf37b09b27631556cd1873ac6b8b9f55b41b78 bind-devel-9.8.2-0.62.rc1.el6_9.2.i686.rpm 0bc38d410990965648547b2fa605fcb177512b1488b192d6dbb060cfa018ee89 bind-devel-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm ec7c8ae880e8366214991ca56d02bed6043665ae34657aac5814c781e2e2b5af bind-libs-9.8.2-0.62.rc1.el6_9.2.i686.rpm 949b45a95464c27e4093db800058df377fb9c5f7cf866655c3952c5f7c9c262d bind-libs-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm 5cbf42814270ca79b07de4864a56eb33dbc5c8e55cccdabbec816c8abcbd4655 bind-sdb-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm 97e32251f12374180ecd20ac5bce16b7c904367f9a308b9b890c46f0da452f6c bind-utils-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm Source: 6fd6c22a5158c38ff37918a7488a7ee579918c961464891d6f06b396c39df64f bind-9.8.2-0.62.rc1.el6_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 9 May 2017 16:59:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1206 Important CentOS 6 qemu-kvm Security Update Message-ID: <20170509165913.GA49513(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1206 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1206.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1127cd30a8d85a38840172fb9dba9bf17948011904c3f7d815d9faa7682e1808 qemu-guest-agent-0.12.1.2-2.503.el6_9.3.i686.rpm x86_64: 5f5ac3bcae2e27129b79f0d61344dbe4a536969210980986dd30e4bd1d6014cc qemu-guest-agent-0.12.1.2-2.503.el6_9.3.x86_64.rpm 9893748998130ab9303f158dd41673c37285dd913b5f25772ba5c7000bc5d7d8 qemu-img-0.12.1.2-2.503.el6_9.3.x86_64.rpm b4e189c5665d88b29f1f926ae6eb155138caf570efaea9a62fc352dbb14e1e0a qemu-kvm-0.12.1.2-2.503.el6_9.3.x86_64.rpm c205e403f4783d35ae6f2f71800f0da072eecd9186e540c621975e341a37e04c qemu-kvm-tools-0.12.1.2-2.503.el6_9.3.x86_64.rpm Source: 3f668573bbb95a3a79e82cc2d57fbb8213dedcff0c99b861754fc05fdbdfb513 qemu-kvm-0.12.1.2-2.503.el6_9.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 9 May 2017 16:59:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1204 Moderate CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20170509165958.GA49788(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1204 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1204.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ebfdee6821a0a033abc9f5063bd2e52ce7919986a5c1739fa84ffc7b1eb9a53c java-1.7.0-openjdk-1.7.0.141-2.6.10.1.el6_9.i686.rpm e9307aee536ac1be8137878a836e9037076fe72d6f66d7ef730b8d0cbe0246e7 java-1.7.0-openjdk-demo-1.7.0.141-2.6.10.1.el6_9.i686.rpm 1c49b6e45452fad29dd317f5a2a30fd20dc61c1da05d7814924fb17f258db28f java-1.7.0-openjdk-devel-1.7.0.141-2.6.10.1.el6_9.i686.rpm eb9d7593936c5c57390f1eae69cb6df41ebd3e0611fc6529ef71c47692826c78 java-1.7.0-openjdk-javadoc-1.7.0.141-2.6.10.1.el6_9.noarch.rpm 3eb6210ea2441df5ab1e72a1cd0d99b7483efd02b21d899df0b23cd5b80820d9 java-1.7.0-openjdk-src-1.7.0.141-2.6.10.1.el6_9.i686.rpm x86_64: ab2a99f59f85ba47eeb0a12c88c5c55f46c32c2d960a8d23a09b8f3c85718a1b java-1.7.0-openjdk-1.7.0.141-2.6.10.1.el6_9.x86_64.rpm c804ca8ea2a4436a90ee87a8e752cf87d2edadda1fefdefd92929729131d25ae java-1.7.0-openjdk-demo-1.7.0.141-2.6.10.1.el6_9.x86_64.rpm b3ecfc32de925d197ad4bae86c425bd431771363121654e6a166f3ad34e362c7 java-1.7.0-openjdk-devel-1.7.0.141-2.6.10.1.el6_9.x86_64.rpm eb9d7593936c5c57390f1eae69cb6df41ebd3e0611fc6529ef71c47692826c78 java-1.7.0-openjdk-javadoc-1.7.0.141-2.6.10.1.el6_9.noarch.rpm 9bda631ed3d3083eebe2ae9d975d22a206f7371586a04fd9754904b2f89cbb17 java-1.7.0-openjdk-src-1.7.0.141-2.6.10.1.el6_9.x86_64.rpm Source: d50910897cdd02147db5e3f880a10a64142e50c86bdc0ac28c752a0e5735c758 java-1.7.0-openjdk-1.7.0.141-2.6.10.1.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Tue, 9 May 2017 17:01:33 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1201 Important CentOS 6 thunderbird Security Update Message-ID: <20170509170133.GA50007(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1201 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1201.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7591a0fa7d14c55bd4ebf4ce7079f86d2941f78933b4c329c23d4f30f880244b thunderbird-52.1.0-1.el6.centos.i686.rpm x86_64: 8b938732635979eafa3e2cd0ede2dcf7a4cabfb419998a1848622c69a9cc01b5 thunderbird-52.1.0-1.el6.centos.x86_64.rpm Source: 21fc84a445440a16fc4c778c47450ae94e2493efc36ed1812524d1f4fc2e9a84 thunderbird-52.1.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Tue, 9 May 2017 21:04:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1201 Important CentOS 7 thunderbird Security Update Message-ID: <20170509210430.GA56135(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1201 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1201.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f2ec0d231aa5e854886bb0184715eeac1131a027e8707cbe9918a650f0631476 thunderbird-52.1.0-1.el7.centos.x86_64.rpm Source: f4c72f9e6a3c34b11c1e09ad6ccab0652af776db61caa0888680ad2cc41d503f thunderbird-52.1.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Tue, 9 May 2017 21:04:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1204 Moderate CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20170509210458.GA56230(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1204 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1204.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4df61fba30e01dbc6d6f06ab469740e33095f989f821bd9733a42950e3f94061 java-1.7.0-openjdk-1.7.0.141-2.6.10.1.el7_3.x86_64.rpm 97828abefb8a0350bc6b32f4329bdfe30c45f32c8179c8d86f636ba8663be71c java-1.7.0-openjdk-accessibility-1.7.0.141-2.6.10.1.el7_3.x86_64.rpm d2bdbbfe1665ce36281f70cd6dd9bf93e61d0026e740cc732575719310412455 java-1.7.0-openjdk-demo-1.7.0.141-2.6.10.1.el7_3.x86_64.rpm c343e8baed8419d59f502f69148bd52fbdc98e06268a4e9c6562c262c20bc23f java-1.7.0-openjdk-devel-1.7.0.141-2.6.10.1.el7_3.x86_64.rpm 90e4a58dc9fd24e3a742f6842c0546947c2c2a0be54a8207b49d150ad568c46f java-1.7.0-openjdk-headless-1.7.0.141-2.6.10.1.el7_3.x86_64.rpm c8ef0aa0f15da23929068abf3470308518257adbc50011d5f4592614df4601c1 java-1.7.0-openjdk-javadoc-1.7.0.141-2.6.10.1.el7_3.noarch.rpm f708168ce664ec29c4d9f49020a8ffe707a05bbe10fa35db8347065a4a2d1ea1 java-1.7.0-openjdk-src-1.7.0.141-2.6.10.1.el7_3.x86_64.rpm Source: 08655b931427182c9701d70f6424f738edf593acafdd70fb6e8a085a7669759b java-1.7.0-openjdk-1.7.0.141-2.6.10.1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 147, Issue 2 ***********************************************

1 0

how to use intel-gpu-tools
by qw 10 May '17

10 May '17

Hi, I use ffmpeg with Intel QSV to transcode some sample clips. And I want to monitor Intel GPU usage. I found intel-gpu-tools in centos 7. Can intel-gpu-tools monitor Intel GPU usage? how to use it? Thanks! Regards Andrew

4 3

cannot access file: Input/output error
by Robert Moskowitz 09 May '17

09 May '17

I have a file on a backup usb drive that I get the following error: # ls -ls P* ls: cannot access Power usage.xls: Input/output error How can I delete this file so that the nightly backup will write out the current version to the backup drive? I tried: # rm -f Power\ usage.xls rm: cannot remove `Power usage.xls': Input/output error Which you can see did not work. thanks

4 3

rpcbind fails to start after creating virbr0 bridge
by Nicolas Kovacs 09 May '17

09 May '17

Hi, In my office I have an HP Proliant server running CentOS 7. It's a minimal install without GUI. The machine has two network interface cards, and for now it's acting as gateway/firewall, and it's running ntpd, Dnsmasq and Rsnapshot. I'd like this machine to also be a KVM virtualization host, so I installed qemu-kvm and libvirt. The interface facing the LAN is enp3s0, so I created a virbr0 bridge like this. # /etc/sysconfig/network-scripts/ifcfg-enp3s0 DEVICE=enp3s0 TYPE=Ethernet ONBOOT=yes BRIDGE=virbr0 And then: # /etc/sysconfig/network-scripts/ifcfg-virbr0 DEVICE=virbr0 TYPE=Bridge ONBOOT=yes BOOTPROTO=static IPADDR=192.168.2.1 NETMASK=255.255.255.0 I replaced enp3s0 in my firewall script and in dnsmasq.conf and rebooted, and everything seems OK now... or almost. Here's an unexpected error I get. # systemctl --failed UNIT LOAD ACTIVE SUB DESCRIPTION ● rpcbind.socket loaded failed failed RPCbind Server Activation Socket This error appeared since I created my virbr0 interface, so I presume it has something to do with it. Unfortunately, I'm clueless. Any suggestions? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

High load average of processes on CentOS 7.3.1611
by Lakshay Mudgal 09 May '17

09 May '17

Hi, I am working on an application which I previously tested on Centos6.6 and now after compiling same application on centos7.3.1611 and running I am observing a high load average. load avg with centos 6.6 remained to be 1.5 in same test where it remains >4.5 in centos 7.3.1611. The application uses high network resource to communicate over UDP and SCTP. there is zero process disk IO with application(zero logging in runtime). Though CPU usage of application is same but load average is consistently high and I am not able to debug the reason. Any insights. *Warm Regards* *Lakshay Mudgal*

1 0

Re: [CentOS] Latest AMD CPUs and AM4 Motherboards
by Eugene Poole 09 May '17

09 May '17

Thanks! Gonna hold off until 7.4 is more than 3-weeks old. TIA Gene On 5/8/2017 1:27 AM, Laurent Wandrebeck wrote: > Yes, tested on C7 (r7 1700, some Asus prime B350). Unstability to come > unless you use 4.10+ from say, EPEL repo. Forget about C6, imho. > I hope 7.4 will properly support Ryzen and derivatives will official > rh kernel. > > HTH, > Laurent. > > Le 8 mai 2017 06:23:37 GMT+02:00, Eugene Poole <etpoole60(a)comcast.net> > a écrit : > > Has anyone used the new AMD CPUs and AM4 motherboards with CentOS 6 / 7? > > Any reservations or warnings? > > > -- > Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma > brièveté. -- Eugene Poole Woodstock, Georgia

1 0

Latest AMD CPUs and AM4 Motherboards
by Eugene Poole 08 May '17

08 May '17

Has anyone used the new AMD CPUs and AM4 motherboards with CentOS 6 / 7? Any reservations or warnings? -- Eugene Poole Woodstock, Georgia

3 3

Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks
by Son Son 08 May '17

08 May '17

Concern: Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks OS: CentOS 7.3 kernel Version: 3.10.0-514.el7.x86_64 Any IO (write) block size more than 4KiB is split in to number of 4KiB blocks on Centos 7.3 ( where I don't see similar issue on 7.2). I have a setup that involves TWO CentOS 7.3 servers. I tried to run 4MB IO on FC LUN(s) on these servers discovered through Emulex LPe 16000 HBAs. Changed ‘options lpfc lpfc_sg_seg_cn =>1024’ and ‘max_secors_kb =>4MB’ params towards attaining supersize IO ( 4MB block size) , however there are no improvements in getting more than 4K block size IO. There was no impact from these changes. Looking for a help to tune the system to attain supersize IO operation (4MB writes) Regards, Sk

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss