- Discuss - lists.centos.org

CentOS-announce Digest, Vol 143, Issue 8
by centos-announce-request＠centos.org 20 Jan '17

20 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0086 Important CentOS 7 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 19 Jan 2017 13:30:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0086 Important CentOS 7 kernel Security Update Message-ID: <20170119133014.GA30129(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0086 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0086.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a301e9bd95957c5af03b85f8612aaf2053de837e1805e6e649312da8f49f952d kernel-3.10.0-514.6.1.el7.x86_64.rpm dad8a63d9c77bb941a0424b49ff21b6cc67f56e667258fbb3ae8fe9bf61a2812 kernel-abi-whitelists-3.10.0-514.6.1.el7.noarch.rpm c0f9f36cfe07a52320ac47449654f70400bf73707760037106be9563a1428d56 kernel-debug-3.10.0-514.6.1.el7.x86_64.rpm 09bdd98395b85932b2c73151ff6d025608e4fe874eb8b2a70190a5171bddeda3 kernel-debug-devel-3.10.0-514.6.1.el7.x86_64.rpm 628011a5e1958516519b9c65de9cbe9c17e37cd1d1ec26b123f5ddcfa52ef28c kernel-devel-3.10.0-514.6.1.el7.x86_64.rpm cfccc9265a4450544ef7fe783259517b9b0926e0982cccaa292781a82e6a9aa2 kernel-doc-3.10.0-514.6.1.el7.noarch.rpm 50decaf498dccec72c9925ef0c009158fd6cb298fcd5ed9e8dc688e0aeaf3b3e kernel-headers-3.10.0-514.6.1.el7.x86_64.rpm 389bc2f1b0999c01dbc57278a8a5fb45d353899c2fbc404f73e15ae7cecbb907 kernel-tools-3.10.0-514.6.1.el7.x86_64.rpm b2b363e82c863c73dafa895601bdd1fa9aea72bbd3325e1a63e8fbdec6290b35 kernel-tools-libs-3.10.0-514.6.1.el7.x86_64.rpm 5c32cfb66d0b0fc4c6aa6530b70c0d2a65dd6d2631ee68364c1843196ddcf35d kernel-tools-libs-devel-3.10.0-514.6.1.el7.x86_64.rpm 0e49420a74763b655ebf9b0dfbd3d8d9cb8fca551e7f4cd052667b253630b921 perf-3.10.0-514.6.1.el7.x86_64.rpm ea6b2f457ed461d2e1b1b451b834510dc8869be78d7aa3d59fc730c819f6edc0 python-perf-3.10.0-514.6.1.el7.x86_64.rpm Source: cb4cf328e79357f0d0884ee1c84ff4a014554b6e0c9094b6d616cab540c43289 kernel-3.10.0-514.6.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 8 ***********************************************

1 0

[OT] VOIP
by TE Dukes 20 Jan '17

20 Jan '17

Hello, I changed ISPs a few weeks ago and now I'm on cable. In doing so, I lost the ability to use the DSL as a FAX line. So, I bought an OOMA. Turns out it uses a number of ports, three of which are reserved, 53 TCP/UDP, 110 TCP and 443 TCP. These ports have already been port forwarded from my cable modem/router to my server. I'm thinking this isn't going to work unless I change some ports on my server, which I'm not willing to do. I spent over 30 minutes with their support people last night. It appears the ports cannot be changed on the OOMA device. Are there any work arounds? TIA

3 4

SELinux upgrade
by Scott Robbins 19 Jan '17

19 Jan '17

Well, got hit by this too. Ironically, I don't use docker, I think I had it installed being pulled in for something else. So, tried the yum remove docker* but no go. When I do semanage port -a -t ssh_port_t -p tcp <port> I get an error Bad type declaration at /etc/selinux/targeted/tmp/modules/100/docker/cil:1 which is something that doesn't exist. Tried installing container-selinux, but so far, the only way to get SSH to work on a default port is to setenforce 0. This isn't a really important machine, but it is certainly annoying. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

1 0

Increase CPU usage on HV after upgrade (7.2 -> 7.3)
by Subscriber 19 Jan '17

19 Jan '17

Hello , After upgrading the system from CentOS 7.2.1511 to CenOS 7.3.1611 I see that the average processing time has increased from 5-7% to 12-15% (doubled). Not critical but it is not pleasant. Server as KVM with 5 virtual machines. Someone noticed something similar? If so, how to fix that? Thx.

4 11

SELinux upgrade
by Marcin Trendota 19 Jan '17

19 Jan '17

Hello All After recent system upgrade (this night) i lost access to two servers through SSH, because of change in SELinux policy - i have ssh there on different port and now it's gone. Thanks to puppet i was able to change SSH port back to default and log in, but is this expected behavior? I thought minor upgrade shouldn't break up things? Or maybe "semanage port -a -t ssh_port_t -p tcp port" isn't enough to ensure persistency? -- Over And Out MoonWolf

6 7

Reliable way of having both LAN and WIFI on headless box
by Gary Stainburn 19 Jan '17

19 Jan '17

Once again I am building a headless Centos 7 box that needs to reliably be on both the LAN and WIFI network at all times. Amongst other things it's going to be an AirPrint bridge enabling IPads to print to printers on a different VLAN. I have asked about this before and got a solution working using nmtui to set up both the LAN and WIFI interface, and activate them. However, the WIFI link is unreliable. Sometimes it doesn't activate, or after a while de-activates. Sometimes it doesn't even appear in nmtui to enable me to activate it. Can anyone help me with how I can set up a more reliable server. Thanks Gary

9 15

Test
by TE Dukes 19 Jan '17

19 Jan '17

Is it working?

4 4

System Time Jumps During Boot on CentOS 7
by Peter Brady 19 Jan '17

19 Jan '17

Hi All, Just noticed a funny time jump on a testing CentOS 7 VM. Specifically the system time jumps around by a few hours during system boot. The below is a selection from /var/log/messages during boot: Jan 19 12:49:57 arr-data-dev chronyd[716]: Frequency -0.829 +/- 0.007 ppm read from /var/lib/chrony/drift Jan 19 12:49:57 arr-data-dev polkitd[720]: Started polkitd version 0.112 Jan 19 12:49:57 arr-data-dev systemd: Starting D-Bus System Message Bus... Jan 19 12:49:57 arr-data-dev systemd: Starting GSSAPI Proxy Daemon... Jan 19 12:49:57 arr-data-dev systemd: Started Dump dmesg to /var/log/dmesg. Jan 19 12:49:57 arr-data-dev kernel: NET: Registered protocol family 40 Jan 19 12:49:57 arr-data-dev sssd: Starting up Jan 19 12:49:57 arr-data-dev systemd: Started GSSAPI Proxy Daemon. Jan 19 12:49:57 arr-data-dev systemd: Reached target NFS client services. Jan 19 12:49:57 arr-data-dev systemd: Starting NFS client services. Jan 19 12:49:57 arr-data-dev systemd: Reached target Remote File Systems (Pre). Jan 19 12:49:57 arr-data-dev systemd: Starting Remote File Systems (Pre). Jan 19 12:49:57 arr-data-dev systemd: Started Authorization Manager. Jan 19 12:49:57 arr-data-dev systemd: Starting firewalld - dynamic firewall daemon... Jan 19 20:47:57 arr-data-dev systemd: Time has been changed Jan 19 20:47:57 arr-data-dev chronyd[716]: Forward time jump detected! Jan 19 20:47:57 arr-data-dev sssd[be[default]]: Starting up <snip> Jan 19 20:48:05 arr-data-dev systemd: Starting Multi-User System. Jan 19 20:48:05 arr-data-dev systemd: Starting Update UTMP about System Runlevel Changes... Jan 19 20:48:05 arr-data-dev systemd: Started Update UTMP about System Runlevel Changes. Jan 19 12:50:09 arr-data-dev chronyd[716]: Selected source IP-CHANGED Jan 19 12:50:09 arr-data-dev chronyd[716]: System clock wrong by -28676.126423 seconds, adjustment started Jan 19 12:50:09 arr-data-dev chronyd[716]: System clock was stepped by -28676.126423 seconds Jan 19 12:50:09 arr-data-dev systemd: Time has been changed Jan 19 12:50:09 arr-data-dev chronyd[716]: Selected source IP-CHANGED Jan 19 12:50:10 arr-data-dev chronyd[716]: Selected source IP-CHANGED Jan 19 12:50:11 arr-data-dev chronyd[716]: Selected source IP-CHANGED For reference the 12:49 -> 12:50 is the correct local time, I'm in the Australian Eastern Daylight Saving time zone and my hardware clock (from hwclock) is close to that time. The plus eight hours jump has me curious though as I think this is causing some trouble for SSSD and Network Manager that are starting up in interval when the time is stepped forward. Given I'm at +11 from UTC the system clock does not appear to be jumping to UTC. I'm running 3.10.0-514.2.2.el7.x86_64 with yum reporting no patches. This is a VM running on ESXi 5.6. According to /var/log/boot.log everything started up OK. Has anyone seen anything similar? Thanks in advance, -pete

1 1

Avago (LSI) SAS-3 controller, poor performance on CentOS 7
by Gordon Messmer 18 Jan '17

18 Jan '17

I have a handful of new systems where I've seen unexpectedly low disk performance on an Avago SAS controller, when using CentOS 7. It looked like a regression, so I installed CentOS 6 on one of them and reloaded CentOS 7 on the other. Immediately after install, a difference is apparent in the RAID rebuild speed. The CentOS 6 system is initializing its software RAID5 array at somewhere around 120MB/s, while the CentOS 7 system is rebuilding at around 55MB/s. It took a while to get an older system installed, and I wasn't able to boot CentOS 6 under UEFI, to that's one difference between the systems. I also set the elevator on CentOS 7 to cfq, to match the CentOS 6 system. That didn't have any apparent effect. Other than that, the kernel reports "MSI-X vectors supported: 96" on C6, but "MSI-X vectors supported: 8" on C7. I don't know if that's a difference that would affect performance. Does anyone have experience with these controllers? Any pointers while I continue tracking this down? Output from lspci follows, as well as dmesg output regarding the MPT controller and the RAID array status on C6 and C7. 01:00.0 Serial Attached SCSI controller: LSI Logic / Symbios Logic SAS3008 PCI-Express Fusion-MPT SAS-3 (rev 02) Subsystem: LSI Logic / Symbios Logic Device 30e0 Physical Slot: 1 Flags: bus master, fast devsel, latency 0, IRQ 24 I/O ports at e000 [size=256] Memory at fb240000 (64-bit, non-prefetchable) [size=64K] Memory at fb200000 (64-bit, non-prefetchable) [size=256K] Expansion ROM at fb100000 [disabled] [size=1M] Capabilities: [50] Power Management version 3 Capabilities: [68] Express Endpoint, MSI 00 Capabilities: [d0] Vital Product Data Capabilities: [a8] MSI: Enable- Count=1/1 Maskable+ 64bit+ Capabilities: [c0] MSI-X: Enable+ Count=96 Masked- Capabilities: [100] Advanced Error Reporting Capabilities: [1e0] #19 Capabilities: [1c0] Power Budgeting <?> Capabilities: [190] #16 Capabilities: [148] Alternative Routing-ID Interpretation (ARI) Kernel driver in use: mpt3sas CentOS 6: # dmesg | grep -i mpt mpt3sas version 09.102.00.00-rh loaded mpt3sas 0000:01:00.0: PCI INT A -> GSI 26 (level, low) -> IRQ 26 mpt3sas 0000:01:00.0: setting latency timer to 64 mpt3sas_cm0: 64 BIT PCI BUS DMA ADDRESSING SUPPORTED, total mem (32772632 kB) mpt3sas_cm0: MSI-X vectors supported: 96, no of cores: 12, max_msix_vectors: -1 mpt3sas 0000:01:00.0: irq 60 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 61 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 62 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 63 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 64 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 65 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 66 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 67 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 68 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 69 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 70 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 71 for MSI/MSI-X mpt3sas0-msix0: PCI-MSI-X enabled: IRQ 60 mpt3sas0-msix1: PCI-MSI-X enabled: IRQ 61 mpt3sas0-msix2: PCI-MSI-X enabled: IRQ 62 mpt3sas0-msix3: PCI-MSI-X enabled: IRQ 63 mpt3sas0-msix4: PCI-MSI-X enabled: IRQ 64 mpt3sas0-msix5: PCI-MSI-X enabled: IRQ 65 mpt3sas0-msix6: PCI-MSI-X enabled: IRQ 66 mpt3sas0-msix7: PCI-MSI-X enabled: IRQ 67 mpt3sas0-msix8: PCI-MSI-X enabled: IRQ 68 mpt3sas0-msix9: PCI-MSI-X enabled: IRQ 69 mpt3sas0-msix10: PCI-MSI-X enabled: IRQ 70 mpt3sas0-msix11: PCI-MSI-X enabled: IRQ 71 mpt3sas_cm0: iomem(0x00000000fb240000), mapped(0xffffc90013ee0000), size(65536) mpt3sas_cm0: ioport(0x000000000000e000), size(256) mpt3sas_cm0: sending message unit reset !! mpt3sas_cm0: message unit reset: SUCCESS mpt3sas_cm0: Allocated physical memory: size(17971 kB) mpt3sas_cm0: Current Controller Queue Depth(9979),Max Controller Queue Depth(10240) mpt3sas_cm0: Scatter Gather Elements per IO(128) mpt3sas_cm0: LSISAS3008: FWVersion(10.00.00.00), ChipRevision(0x02), BiosVersion(08.25.00.00) mpt3sas_cm0: Protocol=( scsi0 : Fusion MPT SAS Host mpt3sas_cm0: sending port enable !! mpt3sas_cm0: host_add: handle(0x0001), sas_addr(0x500605b00aee5510), phys(8) mpt3sas_cm0: port enable: SUCCESS # cat /proc/mdstat Personalities : [raid6] [raid5] [raid4] [raid1] md0 : active raid1 sda2[0] sdb2[1] 999360 blocks super 1.0 [2/2] [UU] md1 : active raid5 sdf3[6] sde3[4] sdd3[3] sdc3[2] sda3[0] sdb3[1] 19528458240 blocks super 1.2 level 5, 64k chunk, algorithm 2 [6/5] [UUUUU_] [====>................] recovery = 22.1% (864374932/3905691648) finish=417.0min speed=121538K/sec bitmap: 1/30 pages [4KB], 65536KB chunk unused devices: <none> CentOS 7: # dmesg | grep -i mpt mpt3sas version 04.100.00.00 loaded mpt3sas0: 64 BIT PCI BUS DMA ADDRESSING SUPPORTED, total mem (32674176 kB) mpt3sas0: MSI-X vectors supported: 8, no of cores: 12, max_msix_vectors: 8 mpt3sas 0000:01:00.0: irq 45 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 46 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 47 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 49 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 50 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 51 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 52 for MSI/MSI-X mpt3sas 0000:01:00.0: irq 53 for MSI/MSI-X mpt3sas0-msix0: PCI-MSI-X enabled: IRQ 45 mpt3sas0-msix1: PCI-MSI-X enabled: IRQ 46 mpt3sas0-msix2: PCI-MSI-X enabled: IRQ 47 mpt3sas0-msix3: PCI-MSI-X enabled: IRQ 49 mpt3sas0-msix4: PCI-MSI-X enabled: IRQ 50 mpt3sas0-msix5: PCI-MSI-X enabled: IRQ 51 mpt3sas0-msix6: PCI-MSI-X enabled: IRQ 52 mpt3sas0-msix7: PCI-MSI-X enabled: IRQ 53 mpt3sas0: iomem(0x00000000fb240000), mapped(0xffffc90013180000), size(65536) mpt3sas0: ioport(0x000000000000e000), size(256) mpt3sas0: sending message unit reset !! mpt3sas0: message unit reset: SUCCESS mpt3sas0: Allocated physical memory: size(17329 kB) mpt3sas0: Current Controller Queue Depth(9979),Max Controller Queue Depth(10240) mpt3sas0: Scatter Gather Elements per IO(128) mpt3sas0: LSISAS3008: FWVersion(10.00.00.00), ChipRevision(0x02), BiosVersion(08.25.00.00) mpt3sas0: Protocol=( scsi host0: Fusion MPT SAS Host mpt3sas0: sending port enable !! mpt3sas0: host_add: handle(0x0001), sas_addr(0x500605b00aee5ca0), phys(8) mpt3sas0: port enable: SUCCESS # cat /proc/mdstat Personalities : [raid1] [raid6] [raid5] [raid4] md125 : active raid1 sda1[0] sdb1[1] 194496 blocks super 1.0 [2/2] [UU] md126 : active raid5 sdf3[6] sda3[0] sde3[4] sdd3[3] sdc3[2] sdb3[1] 19528458240 blocks super 1.2 level 5, 64k chunk, algorithm 2 [6/5] [UUUUU_] [=========>...........] recovery = 47.6% (1862704880/3905691648) finish=569.6min speed=59772K/sec bitmap: 2/30 pages [8KB], 65536KB chunk md127 : active raid1 sda2[0] sdb2[1] 999360 blocks super 1.0 [2/2] [UU] unused devices: <none>

3 5

Centos 7 dhcpd failure to allow a 2nd network over same interal nic
by Gregory P. Ennis 18 Jan '17

18 Jan '17

Everyone, I am trying to set up a second internal network (192.168.0.0/24) and have not been able to get dhcp to start when I have the following in my dhcpd.conf file : subnet 192.168.0.0 netmask 255.255.255.0 { range 192.168.0.110 192.168.0.130; option subnet-mask 255.255.255.0; option broadcast-address 192.168.0.255; option routers 192.168.0.1; option domain-name-servers 192.168.0.1; } When i remove the above from dhcpd.conf dhcpd works perfectly I have my internal nic card set with two ip addresses one of which is 192.168.0.1. the other address is my standard internal network address. I have also set up the domain server to allow access from 192.168.0.0/24, and the firewall allows internal access to the same subnet. The error that I get is the following : Job for dhcpd.service failed because the control process exited with error code. See "systemctl status dhcpd.service" and "journalctl -xe" for details. When I evaluate journalctl -xe the following is obtained : dhcpd[18763]: Internet Systems Consortium DHCP Server 4.2.5 dhcpd[18763]: Copyright 2004-2013 Internet Systems Consortium. dhcpd[18763]: All rights reserved. dhcpd[18763]: For info, please visit https://www.isc.org/software/dhcp/ dhcpd[18763]: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file dhcpd[18763]: Internet Systems Consortium DHCP Server 4.2.5 dhcpd[18763]: Copyright 2004-2013 Internet Systems Consortium. dhcpd[18763]: All rights reserved. dhcpd[18763]: For info, please visit https://www.isc.org/software/dhcp/ dhcpd[18763]: Wrote 0 deleted host decls to leases file. dhcpd[18763]: Wrote 0 new dynamic host decls to leases file. dhcpd[18763]: Wrote 2 leases to leases file. dhcpd[18763]: Interface enp0s29u1u2 matches multiple shared networks dhcpd[18763]: dhcpd[18763]: This version of ISC DHCP is based on the release available dhcpd[18763]: on ftp.isc.org. Features have been added and other changes dhcpd[18763]: have been made to the base software release in order to make dhcpd[18763]: it work better with this distribution. dhcpd[18763]: dhcpd[18763]: Please report for this software via the CentOS Bugs Database: dhcpd[18763]: http://bugs.centos.org/ dhcpd.service: main process exited, code=exited, status=1/FAILURE dhcpd[18763]: systemd[1]: Failed to start DHCPv4 Server Daemon. When I review the information about dhcpd it appears that it can manage the ip addresses for two networks on different nic cards, but is there a problem in having it manage two networks on the same nic card? Does anyone have any ideas? Would sure appreciate your help. Greg Ennis -- Greg Ennis PoMec Corporation www.PoMec.Net

8 16

Centos7: disable hot-corner
by johan.vermeulen7＠telenet.be 18 Jan '17

18 Jan '17

Hello All, I switched some laptops over from Mate to Gnome. Now I would like to disable the hot -switch-to-gnome3- corner. When googling this, I see a lot of posts referring to /usr/share/gnome-shell/js /...... but the js dir is not there on my system. I also see posts referring to gnome-extensions, but I need to do it remotely from the cli. Can anyone help with this? Greetings, J.

1 0

PI3
by Jerry Geis 18 Jan '17

18 Jan '17

Hi All, I downloaded: http://mirror.centos.org/altarch/7/isos/armhfp/ for the PI3 This article says the PI3 runs X. http://news.softpedia.com/news/centos-7-linux-officially-released-for-raspb… When I groupinstall Gnome desktop and reboot, then run startx I get an error about no screens found. Whats the trick to get X on the PI3? Thanks, Jerry

3 3

CentOS-announce Digest, Vol 143, Issue 6
by centos-announce-request＠centos.org 18 Jan '17

18 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0063 Important CentOS 5 bind Security Update (Johnny Hughes) 2. CESA-2017:0064 Important CentOS 5 bind97 Security Update (Johnny Hughes) 3. CESA-2017:0062 Important CentOS 7 bind Security Update (Johnny Hughes) 4. CESA-2017:0063 Important CentOS 6 bind Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 17 Jan 2017 13:00:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0063 Important CentOS 5 bind Security Update Message-ID: <20170117130014.GA12460(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0063 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0063.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 476cd5104692bcf026b6db800aeecff31c5600f3d64fac08084c3d61853f0645 bind-9.3.6-25.P1.el5_11.12.i386.rpm d526c2176aed4fee687f110fe8d892bcc553bcb1a756fb0cafd8b90643723a92 bind-chroot-9.3.6-25.P1.el5_11.12.i386.rpm f021b8dcca512def5daf9030caa562d29d25722c9537880d57cb2810dfb2e18b bind-devel-9.3.6-25.P1.el5_11.12.i386.rpm 4ed7fef04663dd5698df65b8330f761f8b3baf4d6f0d9724dc805c490f99a075 bind-libbind-devel-9.3.6-25.P1.el5_11.12.i386.rpm 355bc4519a8e4407a58c6ff57f9f73aa0f0e58a5c387ddebb2b501d203d717fd bind-libs-9.3.6-25.P1.el5_11.12.i386.rpm c39fde90b9dae40891146c07e22fa86efa67b1b7c3398342a02e3f4e8a00efd7 bind-sdb-9.3.6-25.P1.el5_11.12.i386.rpm 1a0aac18b38c02f92d46679e1bf597c34736ebb52babe608db6a027cd33dbfa2 bind-utils-9.3.6-25.P1.el5_11.12.i386.rpm a0e4df6c9c9a8e71ba271a273499f89ad8711f526e6e3f96d12cc3f975916802 caching-nameserver-9.3.6-25.P1.el5_11.12.i386.rpm x86_64: e82197a8f8b22b38fc714a1d11ef84cea29dfefef9eb54ad294922f720b8c3ef bind-9.3.6-25.P1.el5_11.12.x86_64.rpm ad683a24813a69d495ae71e5894b85de01414773b793ed916b36bb522b7c2342 bind-chroot-9.3.6-25.P1.el5_11.12.x86_64.rpm f021b8dcca512def5daf9030caa562d29d25722c9537880d57cb2810dfb2e18b bind-devel-9.3.6-25.P1.el5_11.12.i386.rpm a2870ab0a9bafe00d644546d951804d9953534de6a236253585367d512122fbf bind-devel-9.3.6-25.P1.el5_11.12.x86_64.rpm 4ed7fef04663dd5698df65b8330f761f8b3baf4d6f0d9724dc805c490f99a075 bind-libbind-devel-9.3.6-25.P1.el5_11.12.i386.rpm 7a2b25aa3226c64f5f454da3e3d52672a0e8da89fd38b7c614384266097d576c bind-libbind-devel-9.3.6-25.P1.el5_11.12.x86_64.rpm 355bc4519a8e4407a58c6ff57f9f73aa0f0e58a5c387ddebb2b501d203d717fd bind-libs-9.3.6-25.P1.el5_11.12.i386.rpm 0e1b85f2a746ce8a8548c3d22aa78a559cc75c7ff790a0169b2692a0132809b8 bind-libs-9.3.6-25.P1.el5_11.12.x86_64.rpm 1b15168ef3f4846baded7033e5184b6abfd24ed88bf5591d54b52b583bfcdb2e bind-sdb-9.3.6-25.P1.el5_11.12.x86_64.rpm 0f02b6e4925d97a6451bf2c4edc99b0d9d4f4c1757cd7403c9986fb2bfd61f7d bind-utils-9.3.6-25.P1.el5_11.12.x86_64.rpm 77ed878e16195d8314c9c2f95a4ba84a6d87254813d1abe517233f36b6b637cf caching-nameserver-9.3.6-25.P1.el5_11.12.x86_64.rpm Source: 897436d4f721c68e17038d55daac3947493f08a294a15a92cb211ac16c9a1605 bind-9.3.6-25.P1.el5_11.12.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 17 Jan 2017 13:00:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0064 Important CentOS 5 bind97 Security Update Message-ID: <20170117130047.GA12610(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0064 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0064.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 15901c27eb18339d100c822e229763b20a1c17442bc12394bf98d14b534f50db bind97-9.7.0-21.P2.el5_11.10.i386.rpm e628be5d4849b82e978989c405e4f3248f59d3bdeeb0ecc61216138a00f1061a bind97-chroot-9.7.0-21.P2.el5_11.10.i386.rpm ed3e8c4ef3105c25788a7a9f030f3992264d0a026d4dc56185cb3d8501dd3aff bind97-devel-9.7.0-21.P2.el5_11.10.i386.rpm 6621f2186190dca0b182539e7a6dc7fcb9be0e8ce08b157a9952209b17538e25 bind97-libs-9.7.0-21.P2.el5_11.10.i386.rpm 1e6dc63437f48c256ce341138759faf635b79afbb5fbc0cb1ca0b7e92828b530 bind97-utils-9.7.0-21.P2.el5_11.10.i386.rpm x86_64: f2c9671bbd0e1060fb57646a7095869fa6fd4d53b92422403c2ebf75899088b6 bind97-9.7.0-21.P2.el5_11.10.x86_64.rpm c459368a91c11712682af9cad9e4211d7a400f845981878eb36631087773d468 bind97-chroot-9.7.0-21.P2.el5_11.10.x86_64.rpm ed3e8c4ef3105c25788a7a9f030f3992264d0a026d4dc56185cb3d8501dd3aff bind97-devel-9.7.0-21.P2.el5_11.10.i386.rpm d1447bac46b92250da988fbba14372fdfd8e50b496630d220e2b3b7146d93b10 bind97-devel-9.7.0-21.P2.el5_11.10.x86_64.rpm 6621f2186190dca0b182539e7a6dc7fcb9be0e8ce08b157a9952209b17538e25 bind97-libs-9.7.0-21.P2.el5_11.10.i386.rpm 4ca5c353ee4caffccd0eb04ea239c30db06ff857020df3ed03eab8e0b68f7865 bind97-libs-9.7.0-21.P2.el5_11.10.x86_64.rpm 5b81957e075bb723933dbe8df9cbab893cffa8512d2ffaae0a9e2ec78c893da8 bind97-utils-9.7.0-21.P2.el5_11.10.x86_64.rpm Source: 258485f13396e50e1d83ca27fd2e4da0c96c0b8bc1ea3f54eca79006e6ca0c60 bind97-9.7.0-21.P2.el5_11.10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 17 Jan 2017 13:12:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0062 Important CentOS 7 bind Security Update Message-ID: <20170117131256.GA36308(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0062 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0062.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 922e6d7db809f86fb353cf2635724692c169f81b8f306372400e810dfcc7dd21 bind-9.9.4-38.el7_3.1.x86_64.rpm d7521bfd2279313d0ca6d92c2ca9f724c25a343cc3f7bf104d6bafdfe6c1baea bind-chroot-9.9.4-38.el7_3.1.x86_64.rpm 6745e01a27f6f2b0ee43040254f4737b455d6ed66ae161bf9c6b116572b3962f bind-devel-9.9.4-38.el7_3.1.i686.rpm 35898e81da63115180e390304796010f06b175f99598461efe2937e6b05dd17b bind-devel-9.9.4-38.el7_3.1.x86_64.rpm 8ba46f89c530972d8f7e60e25864437f265e76516bc3d51c949c3c85a65c6e75 bind-libs-9.9.4-38.el7_3.1.i686.rpm 5cfe528a1c12d5e97949cc56e89817c9156f5d46a674c2d1de2e21df5d441fe9 bind-libs-9.9.4-38.el7_3.1.x86_64.rpm 3e92363d65aa194ace31e76814279e88f64ed59921da6098189bb4e577c2a220 bind-libs-lite-9.9.4-38.el7_3.1.i686.rpm fcccb3dbd7846be233881a8c525d4515210c9d431921333ce4fc94697dd314c5 bind-libs-lite-9.9.4-38.el7_3.1.x86_64.rpm 07549f43dac929ba85a7e1123e4d8c3149a75947e8e88716588cd07f02cc7a2d bind-license-9.9.4-38.el7_3.1.noarch.rpm 85adc57e21acf71af69b06b17f236c3f8cdbfb2db660e97ef62d2332fbcbb41c bind-lite-devel-9.9.4-38.el7_3.1.i686.rpm 7c7bb26f5860bceacdb4884172daf16f04aee1e45bd61b1369448c6d9a08c6bd bind-lite-devel-9.9.4-38.el7_3.1.x86_64.rpm 533e77ad5b75b00ff4dc30640cb597f4d9471fbe8dec20ae0c537bb27c1f27a5 bind-pkcs11-9.9.4-38.el7_3.1.x86_64.rpm e81e12e30f217e052c830be848978e6aaf1792d49b5b790bfb740e66b9dc180f bind-pkcs11-devel-9.9.4-38.el7_3.1.i686.rpm 623b00adb0a66786faf9b7e7afe603534092cd4e0674eec44132b555af0c9077 bind-pkcs11-devel-9.9.4-38.el7_3.1.x86_64.rpm 6fee761a9ffde4503bb94a45b4480630801c30c8815c0b7153f9c2665ba4ab2d bind-pkcs11-libs-9.9.4-38.el7_3.1.i686.rpm 1c9cbe6497dcaa0fc9a54021a43f29df8648083e16934258f6c0fe68a32908de bind-pkcs11-libs-9.9.4-38.el7_3.1.x86_64.rpm 5e5b779edaa5ba9d19149ea28cb31a491ab14e2298c8b3fbc206c8133799d336 bind-pkcs11-utils-9.9.4-38.el7_3.1.x86_64.rpm 4678bbf2437150632e574f371e0719ceb36a8f5e3d8998c54a5a3ac64e414d9e bind-sdb-9.9.4-38.el7_3.1.x86_64.rpm 3c23783b1a42f0af013f38a698c25275425fe2fc0bd5483a104b3c0415fc28d4 bind-sdb-chroot-9.9.4-38.el7_3.1.x86_64.rpm 356da572ddae5297282284bae84be7df83daf6f28239d5f3768e72d7f24427ec bind-utils-9.9.4-38.el7_3.1.x86_64.rpm Source: 878bbd8d211b55b559f825892c3f2b57f2188fd5377e69e6bd36d861c068caae bind-9.9.4-38.el7_3.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Tue, 17 Jan 2017 13:14:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0063 Important CentOS 6 bind Security Update Message-ID: <20170117131425.GA36634(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0063 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0063.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a5e9d904f5d3b760438b3d50e40a99abf24f2a83ac43333072a1362c0f61186a bind-9.8.2-0.47.rc1.el6_8.4.i686.rpm c88b96127401b4a73d7fb4260d284bcfe50cec45215e4b3b97a50e27db5a8742 bind-chroot-9.8.2-0.47.rc1.el6_8.4.i686.rpm e24be65343576a042a8a0b567f35bcf7a68314ceaa9698c045a9aeb226043c29 bind-devel-9.8.2-0.47.rc1.el6_8.4.i686.rpm 21ba0901191dee2ca1764921a0932245005edb3fab4b12d47c21dffabe8124ba bind-libs-9.8.2-0.47.rc1.el6_8.4.i686.rpm fe720e84cf035fed2e6bc1dff1f81a57e1f77d65aa0cc99428a282518cceabbc bind-sdb-9.8.2-0.47.rc1.el6_8.4.i686.rpm 04b878f0bd69fc813a575b48d268480e1ec8230a0e78fdc14e44ae312a777e54 bind-utils-9.8.2-0.47.rc1.el6_8.4.i686.rpm x86_64: 135d88035e507920bc4d63a49af67cc28fba5d59b15851652e67a5e4771b27b6 bind-9.8.2-0.47.rc1.el6_8.4.x86_64.rpm 6b173a9d942a21163cfd200bcf2687660d00201a5af79bfa5a48f8951e9381f4 bind-chroot-9.8.2-0.47.rc1.el6_8.4.x86_64.rpm e24be65343576a042a8a0b567f35bcf7a68314ceaa9698c045a9aeb226043c29 bind-devel-9.8.2-0.47.rc1.el6_8.4.i686.rpm ec3b537c771895846e6046ccefe92ef6342fca039ce7a58a5e0a6df40ed9b472 bind-devel-9.8.2-0.47.rc1.el6_8.4.x86_64.rpm 21ba0901191dee2ca1764921a0932245005edb3fab4b12d47c21dffabe8124ba bind-libs-9.8.2-0.47.rc1.el6_8.4.i686.rpm cbc4ec06b260f3201e0ff37718fd618cf2053f107f94d2206be41e1782961b0c bind-libs-9.8.2-0.47.rc1.el6_8.4.x86_64.rpm 7c171bfb67e8e22ab4bbff74032892ec381e5936191633f75af8534734966b47 bind-sdb-9.8.2-0.47.rc1.el6_8.4.x86_64.rpm 38fbafe72a6c6bc0acf4f1ddbfe648227e2bd05d558fc8adb848f8a3b2ab76f9 bind-utils-9.8.2-0.47.rc1.el6_8.4.x86_64.rpm Source: a48d7e57f50030bad2b2574c73e1060decb61eb2d11abf917876ac792efce6da bind-9.8.2-0.47.rc1.el6_8.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 6 ***********************************************

1 0

disable/mask NetworkManager leads to unit startup fails
by Oberdorfer Patrick 17 Jan '17

17 Jan '17

Hello! For me it was best practice to disable "NetworkManager" on headless installations. Now suddenly I ran into an problem with several programs not starting correctly upon boot anymore. The problem seems to be that their unit files contain "After=network.target" but network.target wont wait till network is up and working, just waits for some low level network stuff. Now I read that it would be good practice to edit this and use "After=network-online.target" instead. But I don't want to touch several systemd unit files shipped via rpm packages. Software like unbound, postfix and so on which needs to bind to ip+port on startup fails on my systems now since I disabled NetworkManager. What solved the problem for me was to install "systemd-networkd" instead and enable it upon boot. It's system unit file pulls in "network.target" as "Wants" this way software that says "After=network.target" will start after network cards are configured. Why there is this behavior I haven't found out yet. Whats your best practice to archieve stable networking upon reboot? Do you use NetworkManager or systemd-networkd or maybe something exotic anyway? PS: I have already filed an Bugzilla report here: https://bugzilla.redhat.com/show_bug.cgi?id=1412570 Thanks!

2 3

NetworkManager vs. Firewalld vs. /etc/sysconfig/network-scripts/ifcfg-*****
by Mike 17 Jan '17

17 Jan '17

I've made 3 CentOS 7 installation attempts to configure a simple firewall/router box with 2 nics. I got myself into a circular scenario where NetworkManager and firewalld and /etc/sysconfig/network-scrpts/ifcfg-***** were interfering or overwriting each other. Needed to perform ifdown enp3s7 on the internal LAN nic in order to make the external internet enp2s0 reach websites and ping nameservers. After completing firewall-cmd --complete-reload the internal LAN nic would still provide private ip addresses via dhcpd server but LAN clients could not access the internet. So far these steps work to enable both nics to provide router and firewall services: 1. sysctemctl stop NetworkManager 2. systemctl disable NetworkManager 3. Create dhcp ifcfg-***** for external interface. It must include a “ZONE=external” statement even though firewalld service will overwrite and erase it like this “ZONE=” Example (external/internet nic): Code: TYPE=Ethernet BOOTPROTO=dhcp NM_CONTROLLED=no DEFROUTE=yes IPV4_FAILURE_FATAL=no IPV6INIT=yes IPV6_AUTOCONF=yes IPV6_DEFROUTE=yes IPV6_FAILURE_FATAL=no NAME=enp2s0 UUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx DEVICE=enp2s0 ONBOOT=yes PEERDNS=yes PEERROUTES=yes IPV6_PEERDNS=yes IPV6_PEERROUTES=yes ZONE=external 4. Create static ip address ifcfg-enp3s7 for internal interface. Example (internal/LAN nic): Code: TYPE=Ethernet BOOTPROTO=static NM_CONTROLLED=no DEFROUTE=yes IPV4_FAILURE_FATAL=no IPV6INIT=yes IPV6_AUTOCONF=yes IPV6_DEFROUTE=yes IPV6_FAILURE_FATAL=no NAME=enp3s7 UUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx DEVICE=enp3s7 ONBOOT=yes HWADDR=xx:xx:xx:xx:xx:xx DNS1=75.75.75.75 DNS2=75.75.76.76 IPADDR=10.10.1.1 NETMASK=255.255.255.0 PREFIX=24 GATEWAY=10.10.1.1 IPV6_PEERDNS=yes IPV6_PEERROUTES=yes IPV6_PRIVACY=no ZONE=internal 5. As said in #3, firewalld will erase the ZONE setting on the external nic configured for dhcp. The only way I've found to deal with this overwriting is to make the intended external ethernet device associated with the default zone in firewalld. When firewalld reads the empty zone reference "ZONE=____" it will revert and assign the default zone I set like this --- Code: firewall-cmd --change-interface=enp2s0 --zone=external --permanent firewall-cmd --set-default-zone=external firewall-cmd --complete-reload 6. The external ethernet device won’t work (cannot ping any internet host) until you manually Deactivate it and then Reactivate it. ~# ifdown enp2s0 ~# ifup enp2s0 I didn't include my dhcpd server settings or firewalld settings for brevity. Please let me know if those would be helpful. Although the steps above work, it's definitely not ideal. If I need to reboot the routerbox remotely, I won't be able to access it again to perform the necessary ifdown/ifup routine to enable input/output/forward through the external interface. Any guidance on how to make this work is greatly appreciated. Kind regards.

3 3

BackupPC
by TE Dukes 15 Jan '17

15 Jan '17

Hello, Been working on this for a couple days and I am stuck! Followed the CentOS WIKI on BackupPC to the letter. It may be outdated, not sure. I also looked at the tutorial on HowToForge. I'm trying to get a windows client to backup via smb. I created the user 'backuppc' on the windows client with admin priviledges. I can map the drive/share from my CentOS Samba server using 'backuppc' credentials. Here's the error: full backup started for directory / Running: /usr/bin/ssh -q -x -l root hp8200 /usr/bin/rsync --server --sender --numeric-ids --perms --owner --group -D --links --hard-links --times --block-size=2048 --recursive --ignore-times . / Xfer PIDs are now 27000 Read EOF: Connection reset by peer Tried again: got 0 bytes Done: 0 files, 0 bytes Got fatal error during xfer (Unable to read 4 bytes) Backup aborted (Unable to read 4 bytes) Not saving this as a partial backup since it has fewer files than the prior one (got 0 and 0 files versus 0) /etc/BackupPC/hp8200.pl $Conf{XferMethod} = 'smb'; $Conf{SmbShareUserName} = 'backuppc'; $Conf{SmbSharePasswd} = 'xxxxxxxx'; $Conf{SmbShareName} = 'C'; Looking at the -l option it appears 'root' is trying to login. Windows doesn't use a root account per se. Do I need to change something in the config.pl? TIA

3 5

how to troubleshoot GUI issue?
by Dave Burns 14 Jan '17

14 Jan '17

Hello, I'm using a recent install of centos 7, no GUI customizations that I recall. When I log in using the GUI it accepts my password and the mouse appears on a black screen, like it is preparing the desktop, but the desktop never appears. If I hit control-alt-f4 and log in using the command line, and then execute startx, Everything seems to work perfectly. What sort of troubleshooting should I do to figure out what is stalling? I'm not at all familiar with this aspect of things. thanks, Dave

4 3

Re: [CentOS] Unable to edit resolv.conf - SOLVED
by TE Dukes 13 Jan '17

13 Jan '17

> -----Original Message----- > From: CentOS [mailto:centos-bounces@centos.org] On Behalf Of Gordon > Messmer > Sent: Friday, January 13, 2017 10:42 AM > To: CentOS mailing list > Subject: Re: [CentOS] Unable to edit resolv.conf > > On 01/13/2017 07:07 AM, TE Dukes wrote: > > I may have. If so, is there a way to undo it? > > > You can determine whether you've set the file's immutable attribute using > "lsattr". You can remove it using "chattr -i" > I found that I had done a chattr -i /etc/resolv.conf some time ago. Its now corrected. Thanks for all the help!!

1 0

Question on /usr/bin/import for CentOS 7
by Jerry Geis 13 Jan '17

13 Jan '17

Under CentOS 6 I could run the command: /usr/bin/import -window root screen.png to get a screen capture - worked great. On CentOS 7.2.1511 when I run the above command I hear beep beep and the resulting screen.png is just black. Two questions: 1) how can I get the screen shot? 2) how can I disable the beep beep Thanks, Jerry

4 10

yum --security check-update
by John Cenile 13 Jan '17

13 Jan '17

Hi all, Does anyone know why when I run the following command, I get thousands of packages in the output, saying they've been excluded? [root@server yum.repos.d]# yum --security check-update | less Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.removed.com * epel: mirror.removed.com * extras: mirror.removed.com * updates: mirror.removed.com --> libdb-5.3.21-19.el7.i686 from base excluded (updateinfo) --> libcxgb4-static-1.3.5-3.el7.i686 from base excluded (updateinfo) --> libcxgb4-static-1.3.5-3.el7.x86_64 from base excluded (updateinfo) --> libcxgb3-static-1.3.1-8.el7.x86_64 from base excluded (updateinfo) --> libcxgb4-1.3.5-3.el7.x86_64 from base excluded (updateinfo) --> libdaemon-devel-0.14-7.el7.i686 from base excluded (updateinfo) --> libdaemon-devel-0.14-7.el7.x86_64 from base excluded (updateinfo) --> libdaemon-0.14-7.el7.i686 from base excluded (updateinfo) --> telepathy-logger-devel-0.8.0-5.el7.x86_64 from base excluded (updateinfo) --> 1:telepathy-mission-control-5.16.3-3.el7.i686 from base excluded (updateinfo) --> qt5-qtxmlpatterns-5.6.1-10.el7.x86_64 from base excluded (updateinfo) --> qt5-qtxmlpatterns-5.6.1-10.el7.i686 from base excluded (updateinfo) <snip> Any other server I run this on *only* outputs the packages that need to be updated? This is a CentOS 7 VM.

2 1

Unable to edit resolv.conf
by TE Dukes 13 Jan '17

13 Jan '17

Hello, I changed ISPs and need to update name servers in resolv.conf. I have tried nano, gedit, Webmin, system-config-network and it won't allow me to make the changes. I have Network Manager turned off and when I enable it , eth0 and eth1 have no entries. I enabled it, added the connections, but still no changes. I'm stuck TIA

7 14

CentOS-announce Digest, Vol 143, Issue 5
by centos-announce-request＠centos.org 13 Jan '17

13 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2017:0034 CentOS 6 389-ds-base BugFix Update (Johnny Hughes) 2. CEBA-2017:0038 CentOS 6 bash BugFix Update (Johnny Hughes) 3. CEBA-2017:0035 CentOS 6 db4 BugFix Update (Johnny Hughes) 4. CEBA-2017:0032 CentOS 6 java-1.8.0-openjdk BugFix Update (Johnny Hughes) 5. CEBA-2017:0040 CentOS 6 lftp BugFix Update (Johnny Hughes) 6. CEBA-2017:0033 CentOS 6 ORBit2 BugFix Update (Johnny Hughes) 7. CEBA-2017:0037 CentOS 6 rdma BugFix Update (Johnny Hughes) 8. CESA-2017:0036 Important CentOS 6 kernel Security Update (Johnny Hughes) 9. CESA-2017:0061 Important CentOS 6 java-1.6.0-openjdk Security Update (Johnny Hughes) 10. CEBA-2017:0039 CentOS 6 httpd BugFix Update (Johnny Hughes) 11. CESA-2017:0061 Important CentOS 5 java-1.6.0-openjdk Security Update (Johnny Hughes) 12. CESA-2017:0061 Important CentOS 7 java-1.6.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 12 Jan 2017 15:42:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0034 CentOS 6 389-ds-base BugFix Update Message-ID: <20170112154209.GA14975(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0034 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0034.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: caabd957c7e1fc168601c60ead72df3e56ee41c38bc98ae8c328f56b1796473e 389-ds-base-1.2.11.15-85.el6_8.i686.rpm 7533235603563ee95e5eaef879e0fdc107eb9e0e7500a46cfb861cf275483e10 389-ds-base-devel-1.2.11.15-85.el6_8.i686.rpm 53bf9cc19a37d08edfc0a5e8b81cf6c3b9ee60baf09f59889320393804e12148 389-ds-base-libs-1.2.11.15-85.el6_8.i686.rpm x86_64: ef40f532ddc83b0bfb9b620696a489d5b8b2440233b682d20f7977bbf778c3bf 389-ds-base-1.2.11.15-85.el6_8.x86_64.rpm 7533235603563ee95e5eaef879e0fdc107eb9e0e7500a46cfb861cf275483e10 389-ds-base-devel-1.2.11.15-85.el6_8.i686.rpm a02c5699a58e0a7c9b6addb6c7de529d7395e801f0ab2359d80322782f6cf359 389-ds-base-devel-1.2.11.15-85.el6_8.x86_64.rpm 53bf9cc19a37d08edfc0a5e8b81cf6c3b9ee60baf09f59889320393804e12148 389-ds-base-libs-1.2.11.15-85.el6_8.i686.rpm 8ebcc96c4074c85605fc037861eda775f561401c9ceabdf46a740c366aab33e7 389-ds-base-libs-1.2.11.15-85.el6_8.x86_64.rpm Source: 23edf76ac613a55055cada1e34dece1c05f05973534a93b0a87eb98ebdb92822 389-ds-base-1.2.11.15-85.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 12 Jan 2017 15:42:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0038 CentOS 6 bash BugFix Update Message-ID: <20170112154256.GA15179(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0038 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0038.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6689941bca2a3f39c3aff416204ddbb3ac1bde73017fee0648a26340d8115dbf bash-4.1.2-41.el6_8.i686.rpm ffd11c447ab88a9ecfe2563fd9c342d9787c158f1cd2ca043e3b35b59fedaa27 bash-doc-4.1.2-41.el6_8.i686.rpm x86_64: 30209c04edfa8e59b0788739c383f3ae60e75d6df59b7a6d5df901010c68e014 bash-4.1.2-41.el6_8.x86_64.rpm 28ad9bacbcf4a34e9af04951a57b1d1543fe14bfc467b45c5744305fb74076c6 bash-doc-4.1.2-41.el6_8.x86_64.rpm Source: 51f44455653b116a613fdafd1ebdc8819deab2c39fddb5a5a388e3ca1f9276ea bash-4.1.2-41.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 12 Jan 2017 15:43:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0035 CentOS 6 db4 BugFix Update Message-ID: <20170112154324.GA15525(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0035 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0035.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0e38b3d3bfd03d4d4fcd6068b70793f15e383aa63002f293bf361301db018949 db4-4.7.25-20.el6_8.1.i686.rpm 84d84d1240373dc37c72bc83f298ad4f28210510f47cb3bbbe0869599e58416d db4-cxx-4.7.25-20.el6_8.1.i686.rpm 250360d9259ceae06c06b9e3a4ca00f2a4dab80bf321d7914db240a8947af6e7 db4-devel-4.7.25-20.el6_8.1.i686.rpm 284f6a43f9731a0ed7ae3f27148febd3bac9ed8927a84d8770ab4e5be0aa1711 db4-devel-static-4.7.25-20.el6_8.1.i686.rpm 19fabc26fb65e7cedc21bb95f51c0d1309594c15219c5b6b52dfa6a7a6a571e9 db4-java-4.7.25-20.el6_8.1.i686.rpm 26b4afe25eb59c19c1deaf24bfbbe4efc83c9074f783c664648a838865c215f4 db4-tcl-4.7.25-20.el6_8.1.i686.rpm 009cbbd4f9671b5ccd9cc1f6ef7fdd38e6be04b60f3d0b61568b8849d6175a86 db4-utils-4.7.25-20.el6_8.1.i686.rpm x86_64: 0e38b3d3bfd03d4d4fcd6068b70793f15e383aa63002f293bf361301db018949 db4-4.7.25-20.el6_8.1.i686.rpm 0faa6bed44dd2a76ff040b31de24ef8a143229791176bfaae1dab1b471b21565 db4-4.7.25-20.el6_8.1.x86_64.rpm 84d84d1240373dc37c72bc83f298ad4f28210510f47cb3bbbe0869599e58416d db4-cxx-4.7.25-20.el6_8.1.i686.rpm 64f49c1c2dd29caf58127cb0e77bdf8b848bb00571e94d814746dee609d4b7b8 db4-cxx-4.7.25-20.el6_8.1.x86_64.rpm 250360d9259ceae06c06b9e3a4ca00f2a4dab80bf321d7914db240a8947af6e7 db4-devel-4.7.25-20.el6_8.1.i686.rpm 5a29af9a0a383d6a26e34d95781967d4ced9297fd5af5400394bb2640c21b89d db4-devel-4.7.25-20.el6_8.1.x86_64.rpm 3898ad27d462678547717d2909e55a89fdbeb5008d7ed49aea16226520c31f8c db4-devel-static-4.7.25-20.el6_8.1.x86_64.rpm 31e283bde68a12e72eb0829b159ea29145d9591ad533ccaa118d6edfae1933f6 db4-java-4.7.25-20.el6_8.1.x86_64.rpm 08e65a3ad9772905b953ebf81ce2b4e68615ecdf86b16a80051eba92c0294322 db4-tcl-4.7.25-20.el6_8.1.x86_64.rpm f4146fabf30e3df9f4666bc3ae0e0f86088cd6f22b432cc1b4bf0e59f3cc472f db4-utils-4.7.25-20.el6_8.1.x86_64.rpm Source: 61468eb1e729957b2ae26b2e9222da0c7c156f91eb8b192eda392ded078b010b db4-4.7.25-20.el6_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 12 Jan 2017 15:44:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0032 CentOS 6 java-1.8.0-openjdk BugFix Update Message-ID: <20170112154418.GA15951(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0032 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0032.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0ffa5b068e35841354332b973a8ea6bb970338b53cf0b6c70f94fe9fa92c09da java-1.8.0-openjdk-1.8.0.111-1.b15.el6_8.i686.rpm ba3d8c3539ac6884676b7ffbb18eb79c084e9a7c32bde80a25c7d007d1a691f3 java-1.8.0-openjdk-debug-1.8.0.111-1.b15.el6_8.i686.rpm f7b6e1d39ea96bf832c119439e1437f676c57dfe953c63278f2dbab9298cdb75 java-1.8.0-openjdk-demo-1.8.0.111-1.b15.el6_8.i686.rpm c9a2905c829cc2b136053997bc5a111909ff139e4d4cec41ebfeaf4a17a0c9a4 java-1.8.0-openjdk-demo-debug-1.8.0.111-1.b15.el6_8.i686.rpm fb82199056038f2ae1f6d9cafebb8fa78aaf560c2aae85f12ffb1a6123e42341 java-1.8.0-openjdk-devel-1.8.0.111-1.b15.el6_8.i686.rpm 6d9246946aded2b471e5e1286f0f8df3b481530acb596d85ad14757c68afaad6 java-1.8.0-openjdk-devel-debug-1.8.0.111-1.b15.el6_8.i686.rpm 5198f5eea3819d32af6c064d4ad0f9af27a020d15a44680b323b29a68d4d6975 java-1.8.0-openjdk-headless-1.8.0.111-1.b15.el6_8.i686.rpm f9932d5418c92ead2af360b347870721cec3931c7fde73aa0f81c8733b151e01 java-1.8.0-openjdk-headless-debug-1.8.0.111-1.b15.el6_8.i686.rpm 196a44c03a9a5f598f5def74b6c248c59ffea3b441280f8bd50c1f0997a01071 java-1.8.0-openjdk-javadoc-1.8.0.111-1.b15.el6_8.noarch.rpm c993da73ac0a5939ee549b6bf9736eda0ad4534f26a681987fbc99025bb856ce java-1.8.0-openjdk-javadoc-debug-1.8.0.111-1.b15.el6_8.noarch.rpm de65006e24a8b6deeff4ece08519908735ec9962d97e1c25d5daddc97a6e854d java-1.8.0-openjdk-src-1.8.0.111-1.b15.el6_8.i686.rpm bad793bfed407f8b98a84b289189deb70dccec93abc8c0b251a49608ecf08f6b java-1.8.0-openjdk-src-debug-1.8.0.111-1.b15.el6_8.i686.rpm x86_64: 2fcea103582a5073f7750dd2641d7e109042fc4362404e5e8b814688eece95e2 java-1.8.0-openjdk-1.8.0.111-1.b15.el6_8.x86_64.rpm 4c2580240685167c71bdbbc3799f10600eac935beb302124c85ceef5d9ab7819 java-1.8.0-openjdk-debug-1.8.0.111-1.b15.el6_8.x86_64.rpm 04e26ecf48123ddfc1983a060a6f452c03d3377fae6c3936e2b3cb05c39be04e java-1.8.0-openjdk-demo-1.8.0.111-1.b15.el6_8.x86_64.rpm 65c1b27fa88d7556809a0b53338a3150da786812ab84ef38525c34e544b54cb9 java-1.8.0-openjdk-demo-debug-1.8.0.111-1.b15.el6_8.x86_64.rpm 57126e532fe47b95546a611c45dc272969a993a3c6db624a3111278375d00e32 java-1.8.0-openjdk-devel-1.8.0.111-1.b15.el6_8.x86_64.rpm c4091d560d2a2a9b48a27c96731259b614bcccad12005e1a4586133870c6b889 java-1.8.0-openjdk-devel-debug-1.8.0.111-1.b15.el6_8.x86_64.rpm 9d3fece1118e45ca268076c20cbdd315e1b14c1ffbd80640caa059e47dce2f72 java-1.8.0-openjdk-headless-1.8.0.111-1.b15.el6_8.x86_64.rpm 583da39977d14e2e6ad3aa27721c222cbbf2ce5800aea3fc6850c89fc74ba205 java-1.8.0-openjdk-headless-debug-1.8.0.111-1.b15.el6_8.x86_64.rpm 196a44c03a9a5f598f5def74b6c248c59ffea3b441280f8bd50c1f0997a01071 java-1.8.0-openjdk-javadoc-1.8.0.111-1.b15.el6_8.noarch.rpm c993da73ac0a5939ee549b6bf9736eda0ad4534f26a681987fbc99025bb856ce java-1.8.0-openjdk-javadoc-debug-1.8.0.111-1.b15.el6_8.noarch.rpm 97cc79bc61cd5e375215dd40f21c6b0bc4da19e2ae39093738276806db99e993 java-1.8.0-openjdk-src-1.8.0.111-1.b15.el6_8.x86_64.rpm 505029b894f40540af12a2a73b229ded5994d3dfdcbfa8112df6dccaa93320ca java-1.8.0-openjdk-src-debug-1.8.0.111-1.b15.el6_8.x86_64.rpm Source: 1862afebc9110234b0934a67336dfa44bb781879600a30b44c8f75338987b47c java-1.8.0-openjdk-1.8.0.111-1.b15.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 12 Jan 2017 15:44:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0040 CentOS 6 lftp BugFix Update Message-ID: <20170112154447.GA16166(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0040 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0040.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bf0451919bffe8f45288ff806cda98dc5a0ecb96ce3509518751a3e71d28299e lftp-4.0.9-6.el6_8.4.i686.rpm db635751773fbe039b1d77d1e7b0b23ab10cceb51882bda64b941bc33bedb757 lftp-scripts-4.0.9-6.el6_8.4.noarch.rpm x86_64: bf0451919bffe8f45288ff806cda98dc5a0ecb96ce3509518751a3e71d28299e lftp-4.0.9-6.el6_8.4.i686.rpm 49df691d230e05d9c9c759c64884435763bd4de7e99aef3a327acedddecf0055 lftp-4.0.9-6.el6_8.4.x86_64.rpm db635751773fbe039b1d77d1e7b0b23ab10cceb51882bda64b941bc33bedb757 lftp-scripts-4.0.9-6.el6_8.4.noarch.rpm Source: 9301774d5c15f8161f50c4251409163c6c440bf4434ff0d0005e573bad4f9e04 lftp-4.0.9-6.el6_8.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Thu, 12 Jan 2017 15:45:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0033 CentOS 6 ORBit2 BugFix Update Message-ID: <20170112154509.GA16396(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0033 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0033.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3bff9c387906da55739a61b73c5d7df733343a1a1a02341a12f46a80bb48586e ORBit2-2.14.17-6.el6_8.i686.rpm 27bca6ef643e8ab4965a52d6cb7e31280d14a478a1622993cc4cf2c870fbc4ac ORBit2-devel-2.14.17-6.el6_8.i686.rpm x86_64: 3bff9c387906da55739a61b73c5d7df733343a1a1a02341a12f46a80bb48586e ORBit2-2.14.17-6.el6_8.i686.rpm 08c017cdfa0eb0ffbe99b64b73c02949b7e4e4e208469fb42b06cde0af461484 ORBit2-2.14.17-6.el6_8.x86_64.rpm 27bca6ef643e8ab4965a52d6cb7e31280d14a478a1622993cc4cf2c870fbc4ac ORBit2-devel-2.14.17-6.el6_8.i686.rpm ea0268c9265b56c00a7503158cb88a0e39c0a92087ef2885f8df25ba2facf7a1 ORBit2-devel-2.14.17-6.el6_8.x86_64.rpm Source: a5d55732763d5c35fdd068051d5eea90f3d7943ce2a32408cf8119611bc613fa ORBit2-2.14.17-6.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Thu, 12 Jan 2017 15:46:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0037 CentOS 6 rdma BugFix Update Message-ID: <20170112154600.GA16571(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0037 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0037.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 556f67c49dfae7ce96d3a1ec080faff4caf5a8ef2db4d46a7ebf15a45b4245e4 rdma-6.8_4.1-2.el6_8.noarch.rpm x86_64: 556f67c49dfae7ce96d3a1ec080faff4caf5a8ef2db4d46a7ebf15a45b4245e4 rdma-6.8_4.1-2.el6_8.noarch.rpm Source: 4be3c53aac1c941986e2a1393f76d55abfeb484d9bcf6c4f2369213ce1b9dd16 rdma-6.8_4.1-2.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Thu, 12 Jan 2017 15:47:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0036 Important CentOS 6 kernel Security Update Message-ID: <20170112154738.GA17005(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0036 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0036.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b1639db83476da19278cf09b4c64551007c8ff9887da39680d723a2e4f4429b2 kernel-2.6.32-642.13.1.el6.i686.rpm 7c2fcce9141d8852fd5c76d5e2184e360f89abe2c7e8f9921591139a7c8b7720 kernel-abi-whitelists-2.6.32-642.13.1.el6.noarch.rpm 917f51f55886b65b9dff976c1526c392532d3d8e28754690578b8d94c191e3f6 kernel-debug-2.6.32-642.13.1.el6.i686.rpm 6b49acfe41068529bd2d3a329ab974fd207f698e4a98b1aacae7a950c71bc82e kernel-debug-devel-2.6.32-642.13.1.el6.i686.rpm a2b3a42c8f685c1e02b007b7baf07b90abdb67f52ea30e2a7e414b28a0e6abeb kernel-devel-2.6.32-642.13.1.el6.i686.rpm 61c70db2b6ad77e9cf415a94fbf9875386613d9fe1b3d2638be21455b7341543 kernel-doc-2.6.32-642.13.1.el6.noarch.rpm 3a2023649ca1d5d935c99af74c0252578411307081bf5642377126960e54f353 kernel-firmware-2.6.32-642.13.1.el6.noarch.rpm 04e35d5359f5d55146e5592de8886cc4018ef7435a5a752d8afd2ef053cf9b51 kernel-headers-2.6.32-642.13.1.el6.i686.rpm 3aff995eab072c1768c9e6225c456cf52bfa327fd35a5c4d543ed21d9a6d2eeb perf-2.6.32-642.13.1.el6.i686.rpm 294aa4ed96ff8e8f7e6296178216b41f1c6bd517c0c4a6e2d58124d638f672c4 python-perf-2.6.32-642.13.1.el6.i686.rpm x86_64: 701352dd886a194189c798e81f4be26785c1ef095704cf7c50a2e37674dd69d6 kernel-2.6.32-642.13.1.el6.x86_64.rpm 7c2fcce9141d8852fd5c76d5e2184e360f89abe2c7e8f9921591139a7c8b7720 kernel-abi-whitelists-2.6.32-642.13.1.el6.noarch.rpm 9c589ad5fa3a3fe9f9ab37597da617df1b0d06c60f770b66fc6cb4f8a6b113af kernel-debug-2.6.32-642.13.1.el6.x86_64.rpm 6b49acfe41068529bd2d3a329ab974fd207f698e4a98b1aacae7a950c71bc82e kernel-debug-devel-2.6.32-642.13.1.el6.i686.rpm d0cff5b0279c7382df6dcd35f1ac88d96d726711f8c53f3e7d9c8ceb0aab5548 kernel-debug-devel-2.6.32-642.13.1.el6.x86_64.rpm bfa09910d0b0eb05e7c3deb80835fc81d84511ff6e181bb405c1455f4f9e75f1 kernel-devel-2.6.32-642.13.1.el6.x86_64.rpm 61c70db2b6ad77e9cf415a94fbf9875386613d9fe1b3d2638be21455b7341543 kernel-doc-2.6.32-642.13.1.el6.noarch.rpm 3a2023649ca1d5d935c99af74c0252578411307081bf5642377126960e54f353 kernel-firmware-2.6.32-642.13.1.el6.noarch.rpm a747b9083d4fdfc36fafc0883f66a2cb71f56a270070600830910b43fb3e5512 kernel-headers-2.6.32-642.13.1.el6.x86_64.rpm 0f5deea250a271948911aafcbd0f891807ad31f35e3389041664c416b565e634 perf-2.6.32-642.13.1.el6.x86_64.rpm 6a1a332f307da31d8abbae62ad27c6a9b47ddfc68354325f39af66a309b7255b python-perf-2.6.32-642.13.1.el6.x86_64.rpm Source: a336f633c896b4811fab20c497977b1cb3f433d7931529c5efbef132a50fed42 kernel-2.6.32-642.13.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Thu, 12 Jan 2017 15:48:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0061 Important CentOS 6 java-1.6.0-openjdk Security Update Message-ID: <20170112154829.GA17276(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0061 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0061.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fbe38db21511356596f3fd2ec3c5a2f0437a88b44afb9672323e597ec82da6e5 java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el6_8.i686.rpm 82c69fc5e016742123ef25bd30486282e1b53628134b97b6e003faa114a930bc java-1.6.0-openjdk-demo-1.6.0.41-1.13.13.1.el6_8.i686.rpm 5bca48019a04e30d2e5f719939a0a50a56f1099d6147ee0082e7207cc7bd3831 java-1.6.0-openjdk-devel-1.6.0.41-1.13.13.1.el6_8.i686.rpm 616d8bb42341b341e847bd59e718f1898d5331dd2770a03a9728a98b2332abfc java-1.6.0-openjdk-javadoc-1.6.0.41-1.13.13.1.el6_8.i686.rpm 1323f1aa427025b64cf885ec10240d1dcb41ab2b3a174886f9029b1e4dcd8ed6 java-1.6.0-openjdk-src-1.6.0.41-1.13.13.1.el6_8.i686.rpm x86_64: 0749f3374448f4b99b2fa76e643e524e34adfc5efda043c295d66470d45bb6d9 java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el6_8.x86_64.rpm e356aedbedb77ea8b2fa32a4a925cc16ed9891748f2fd7fb0240c783216f3196 java-1.6.0-openjdk-demo-1.6.0.41-1.13.13.1.el6_8.x86_64.rpm bb420a9a9e5bec448673f0041fa60df6096e88c3bca572a566ec18881bd80bac java-1.6.0-openjdk-devel-1.6.0.41-1.13.13.1.el6_8.x86_64.rpm 18c5454d485856965af6c95b9e2e313d18b55bfb85c28274538a0def04f1cbce java-1.6.0-openjdk-javadoc-1.6.0.41-1.13.13.1.el6_8.x86_64.rpm 62a7f10b751a10de373db1749afae36632fe838d033d7586052392b16fe2e93e java-1.6.0-openjdk-src-1.6.0.41-1.13.13.1.el6_8.x86_64.rpm Source: c03a1f52b500604726065daa8cfc9fd0a72d373fd91507ebfd400cef387c85b1 java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 10 Date: Thu, 12 Jan 2017 17:28:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0039 CentOS 6 httpd BugFix Update Message-ID: <20170112172813.GA18662(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0039 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0039.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 581aa8778bb1d34b857818d535e2ea480ced03eac4c3bcbc1e4d5d8af8160a22 httpd-2.2.15-56.el6.centos.3.i686.rpm d9ddf11fae0084907566b2d6dcc85173dfa9e5f574925c7abee810d4326e5fa3 httpd-devel-2.2.15-56.el6.centos.3.i686.rpm 3983c78315489b2c3490121e4c9bbc222d853b96b9eaa69780a13ba8aeed04d1 httpd-manual-2.2.15-56.el6.centos.3.noarch.rpm a3678a42238869e0a512634279ce42d6151b147ef1c7196dedadd6cd72696fe6 httpd-tools-2.2.15-56.el6.centos.3.i686.rpm b82abb76ef360f0e9d27bb2362a3ecfebf4d45ad69b35b644614084e7392c011 mod_ssl-2.2.15-56.el6.centos.3.i686.rpm x86_64: 636f0ad0c29316821ac7ebdaa02a04b33917bcf1a4c029ab8c51f7939eb1d84e httpd-2.2.15-56.el6.centos.3.x86_64.rpm d9ddf11fae0084907566b2d6dcc85173dfa9e5f574925c7abee810d4326e5fa3 httpd-devel-2.2.15-56.el6.centos.3.i686.rpm 0a8f01d7cb91c49843092ad8c6575927390f333d46199dc2a086a1600d18acd4 httpd-devel-2.2.15-56.el6.centos.3.x86_64.rpm 3983c78315489b2c3490121e4c9bbc222d853b96b9eaa69780a13ba8aeed04d1 httpd-manual-2.2.15-56.el6.centos.3.noarch.rpm 9b671a7991261c7d6133afd1d31c797074effdd97307063626e4c05f64b9ccb5 httpd-tools-2.2.15-56.el6.centos.3.x86_64.rpm 701ffee453d54a01ff3f7a5df2ad11527d9884f3586380d33fb3cd19518eb60b mod_ssl-2.2.15-56.el6.centos.3.x86_64.rpm Source: 60d62e637abe2fc9bda4697b9c013f25c33042f9e2b421c95974a6ee3ecf9fda httpd-2.2.15-56.el6.centos.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 11 Date: Thu, 12 Jan 2017 17:50:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0061 Important CentOS 5 java-1.6.0-openjdk Security Update Message-ID: <20170112175025.GA2034(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0061 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0061.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d6efd768bce046eb776d6f8d7fc8394bd3377fe6b8b5cb182469791d2670fdb1 java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el5_11.i386.rpm a1b4eae3ff6aeb925b257c400486f5411cf5042d0a865c5d752e6615223f1448 java-1.6.0-openjdk-demo-1.6.0.41-1.13.13.1.el5_11.i386.rpm f1a89e5dfc4dcfb2929320bee9cfb5c23479ae7d5fda2fe0222c61958c52b19d java-1.6.0-openjdk-devel-1.6.0.41-1.13.13.1.el5_11.i386.rpm 50349af44934fc8c3fc48599c4c1c87b51f271e26a2b8302c4c10e4b23bd0cf1 java-1.6.0-openjdk-javadoc-1.6.0.41-1.13.13.1.el5_11.i386.rpm b65bb1e119c561e45a0ecbe59fe8b7bdb713ad24d3dbc55e7e666bc138244b40 java-1.6.0-openjdk-src-1.6.0.41-1.13.13.1.el5_11.i386.rpm x86_64: 98462c9aad451671c5c7eebd8fe3684a24fdc00ed9eb49d03925e3d4aeaa1464 java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el5_11.x86_64.rpm 250e80ec92d03ce9839007c70b9e11c2a0cbff8723863ca99290b8af7cad2c2a java-1.6.0-openjdk-demo-1.6.0.41-1.13.13.1.el5_11.x86_64.rpm 0b73e7925bf79b0d313f937f391560b1986e6001dc84c103feb3c80bd1d69d18 java-1.6.0-openjdk-devel-1.6.0.41-1.13.13.1.el5_11.x86_64.rpm 86dcb95e4edfba8f3ecf11c0a27fa746e8cd4354ab0f37604d6d129a304c0537 java-1.6.0-openjdk-javadoc-1.6.0.41-1.13.13.1.el5_11.x86_64.rpm 18a975eac232be3f93269f767d30fa5127d069007fa9906450b99c58442cc0ba java-1.6.0-openjdk-src-1.6.0.41-1.13.13.1.el5_11.x86_64.rpm Source: 911b1b0d5bf709edaabddbbd284e08b35d81219fdc4f4f6186442c0adbd8d8d3 java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 12 Date: Thu, 12 Jan 2017 19:10:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0061 Important CentOS 7 java-1.6.0-openjdk Security Update Message-ID: <20170112191038.GA33066(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0061 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0061.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 8e64d5bf9a9e00b0efd01f7587b88ccd2bfa4c4085b99e7b187cca431044f78e java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el7_3.x86_64.rpm 02323a9ca82630e15fe6cbc341de84981ccbbf99417b0262f323c83cabc7991d java-1.6.0-openjdk-demo-1.6.0.41-1.13.13.1.el7_3.x86_64.rpm 1e8a461f3c1cc1e5283b17feeb72e1a555ce59005c6124347ee39d19562acbb5 java-1.6.0-openjdk-devel-1.6.0.41-1.13.13.1.el7_3.x86_64.rpm 4b54969f6dedd53f94cd8b2b06f57582a9d8a12136c79fa15bb0e332689979ab java-1.6.0-openjdk-javadoc-1.6.0.41-1.13.13.1.el7_3.x86_64.rpm 65abc525b7e7ce1d6b1e444b90edaafaf59357f19ed299acde7661de522d6b87 java-1.6.0-openjdk-src-1.6.0.41-1.13.13.1.el7_3.x86_64.rpm Source: 6a6dd327bb80f5413e43672e0f366d35f5b5b6f2c72443515466ac8bf3d66c80 java-1.6.0-openjdk-1.6.0.41-1.13.13.1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 5 ***********************************************

1 0

Network Storage
by TE Dukes 13 Jan '17

13 Jan '17

Hello, I have looked into the various network attached storage devices and software based solutions. Can't really find one I like. Would it be possible to add a couple HDs to my existing 6.8 server and set them up as RAID drives? If so, how would I keep it from mirroring the system drive? Just spent$2500 on a transmission for my truck, so I broke right know and need to go the cheapest route. TIA

3 4

Strange sefault with ping and route
by Andreas Benzler 12 Jan '17

12 Jan '17

Hallo Guys, something went wrong and I didn't know from where. - uninstall vmware (removed to virtual adapter) - reinstall package with route and ping and glibc - test with original kernel and own vanilla nothing helps. Laptop by my side has same software stand no problem at all gdb --args ping benzler.me GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-94.el7 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /home/andy/ping...Missing separate debuginfo for /home/andy/ping Try: yum --enablerepo='*debug*' install /usr/lib/debug/.build-id/cf/6d0aa0f86229ec76a471ce1ca25d39af234e43.debug Reading symbols from /home/andy/ping...(no debugging symbols found)...done. (no debugging symbols found)...done. (gdb) run Starting program: /home/andy/ping benzler.me Warning: couldn't activate thread debugging using libthread_db: Cannot find new threads: generic error warning: File "/usr/lib64/libthread_db-1.0.so" auto-loading has been declined by your `auto-load safe-path' set to "$debugdir: $datadir/auto-load:/usr/bin/mono-gdb.py". To enable execution of this file add add-auto-load-safe-path /usr/lib64/libthread_db-1.0.so line to your configuration file "/home/andy/.gdbinit". To completely disable this security protection add set auto-load safe-path / line to your configuration file "/home/andy/.gdbinit". For more information about this security protection see the "Auto-loading safe path" section in the GDB manual. E.g., run from the shell: info "(gdb)Auto-loading safe path" warning: Unable to find libthread_db matching inferior's thread library, thread debugging will not be available. Program received signal SIGSEGV, Segmentation fault. 0x00007ffff088c915 in __pthread_initialize_minimal_internal ( argc=<optimized out>, argv=0x7fffffffe0f8, envp=0x7fffffffe110) at nptl-init.c:324 324 THREAD_SETMEM (pd, cpuclock_offset, GL(dl_cpuclock_offset)); (gdb) quit A debugging session is active. Inferior 1 [process 4358] will be killed. gdb --args route GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-94.el7 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/sbin/route...Reading symbols from /usr/sbin/route...(no debugging symbols found)...done. (no debugging symbols found)...done. Missing separate debuginfos, use: debuginfo-install net-tools-2.0-0.17.20131004git.el7.x86_64 (gdb) run Starting program: /usr/sbin/route Kernel IP Routentabelle Ziel Router Genmask Flags Metric Ref Use Iface Warning: couldn't activate thread debugging using libthread_db: Cannot find new threads: generic error warning: File "/usr/lib64/libthread_db-1.0.so" auto-loading has been declined by your `auto-load safe-path' set to "$debugdir: $datadir/auto-load:/usr/bin/mono-gdb.py". To enable execution of this file add add-auto-load-safe-path /usr/lib64/libthread_db-1.0.so line to your configuration file "/home/andy/.gdbinit". To completely disable this security protection add set auto-load safe-path / line to your configuration file "/home/andy/.gdbinit". For more information about this security protection see the "Auto-loading safe path" section in the GDB manual. E.g., run from the shell: info "(gdb)Auto-loading safe path" warning: Unable to find libthread_db matching inferior's thread library, thread debugging will not be available. Program received signal SIGSEGV, Segmentation fault. 0x00007ffff0cc6915 in __pthread_initialize_minimal_internal (argc=<optimized out>, argv=0x7fffffffe118, envp=0x7fffffffe128) at nptl-init.c:324 324 THREAD_SETMEM (pd, cpuclock_offset, GL(dl_cpuclock_offset)); Quit anyway? (y or n) y both end up in nptl-init.c:324 324 THREAD_SETMEM (pd, cpuclock_offset, GL(dl_cpuclock_offset)); All other commands with ftp sftp ssh nslookup works. Any ideas? Sincerely Andy Machine cpu i3770 cpu. Laptop cpu 7500 i5 (works)

1 1

Re: [CentOS] [Security Advisory] RHSA-2017:0036 Important: kernel security and bug fix update
by Phelps, Matthew 12 Jan '17

12 Jan '17

Any word on this update for CentOS 6? This one seems pretty bad if it's a remote exploit. -- Matt Phelps System Administrator, Computation Facility Harvard - Smithsonian Center for Astrophysics mphelps(a)cfa.harvard.edu, http://www.cfa.harvard.edu ---------- Forwarded message ---------- From: Red Hat Errata Notifications <errata(a)redhat.com> Date: Tue, Jan 10, 2017 at 5:19 PM Subject: [Security Advisory] RHSA-2017:0036 Important: kernel security and bug fix update To: mphelps(a)cfa.harvard.edu The following Red Hat Security Advisory has been published which may affect subscriptions which you have purchased. RHSA-2017:0036 Important: kernel security and bug fix update Summary: An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-after-free vulnerability was found in the kernels socket recvmmsg subsystem. This may allow remote attackers to corrupt memory and may allow execution of arbitrary code. This corruption takes place during the error handling routines within __sys_recvmmsg() function. (CVE-2016-7117, Important) * An out-of-bounds heap memory access leading to a Denial of Service, heap disclosure, or further impact was found in setsockopt(). The function call is normally restricted to root, however some processes with cap_sys_admin may also be able to trigger this flaw in privileged container environments. (CVE-2016-4998, Moderate) * A use-after-free vulnerability was found in tcp_xmit_retransmit_queue and other tcp_* functions. This condition could allow an attacker to send an incorrect selective acknowledgment to existing connections, possibly resetting a connection. (CVE-2016-6828, Moderate) Bug Fix(es): * When parallel NFS returned a file layout, a kernel crash sometimes occurred. This update removes the call to the BUG_ON() function from a code path of a client that returns the file layout. As a result, the kernel no longer crashes in the described situation. (BZ#1385480) * When a guest virtual machine (VM) on Microsoft Hyper-V was set to crash on a Nonmaskable Interrupt (NMI) that was injected from the host, this VM became unresponsive and did not create the vmcore dump file. This update applies a set of patches to the Virtual Machine Bus kernel driver (hv_vmbus) that fix this bug. As a result, the VM now first creates and saves the vmcore dump file and then reboots. (BZ#1385482) * From Red Hat Enterprise Linux 6.6 to 6.8, the IPv6 routing cache occasionally showed incorrect values. This update fixes the DST_NOCOUNT mechanism, and the IPv6 routing cache now shows correct values. (BZ#1391974) * When using the ixgbe driver and the software Fibre Channel over Ethernet (FCoE) stack, suboptimal performance in some cases occurred on systems with a large number of CPUs. This update fixes the fc_exch_alloc() function to try all the available exchange managers in the list for an available exchange ID. This change avoids failing allocations, which previously led to the host busy status. (BZ#1392818) * When the vmwgfx kernel module loads, it overrides the boot resolution automatically. Consequently, users were not able to change the resolution by manual setting of the kernel's 'vga=' parameter in the /boot/grub/grub.conf file. This update adds the 'nomodeset' parameter, which can be set in the /boot/grub/grub.conf file. The 'nomodeset' parameter allows the users to prevent the vmwgfx driver from loading. As a result, the setting of the 'vga=' parameter works as expected, in case that vmwgfx does not load. (BZ#1392875) * When Red Hat Enterprise Linux 6.8 was booted on SMBIOS 3.0 based systems, Desktop Management Interface (DMI) information, which is referenced by several applications, such as NEC server's memory RAS utility, was missing entries in the sysfs virtual file system. This update fixes the underlying source code, and sysfs now shows the DMI information as expected. (BZ#1393464) * Previously, bonding mode active backup and the propagation of the media access control (MAC) address to a VLAN interface did not work in Red Hat Enterprise Linux 6.8, when the fail_over_mac bonding parameter was set to fail_over_mac=active. With this update, the underlying source code has been fixed so that the VLANs continue inheriting the MAC address of the active physical interface until the VLAN MAC address is explicitly set to any value. As a result, IPv6 EUI64 addresses for the VLAN can reflect any changes to the MAC address of the physical interface, and Duplicate Address Detection (DAD) behaves as expected. (BZ#1396479) Full details and references: https://access.redhat.com/errata/RHSA-2017:0036?sc_cid=701600000006NHXAA2 CVE Names: CVE-2016-4998 CVE-2016-6828 CVE-2016-7117 Revision History: Issue Date: 2017-01-10 Updated: 2017-01-10 ------------------------------------------------------------ ---------------------------------- Manage Errata Notifications ------------------------------------------------------------ ---------------------------------- You are receiving this email because you have elected to receive errata notifications from Red Hat. This message is being sent to: Red Hat login: mphelps2013 Email address on file: <mphelps(a)cfa.harvard.edu> Update your preferences at https://www.redhat.com/wapps/ ugc/protected/notif.html ------------------------------------------------------------ ---------------------------------- Contact ------------------------------------------------------------ ---------------------------------- The Red Hat security contact is secalert(a)redhat.com. More contact details at https://access.redhat.com/security/team/contact/ This is an automated message. Please do not reply. If you have further questions or concerns, please contact Red Hat Technical Support https://access.redhat.com/ support/contact/technicalSupport/ or open a support case via the Red Hat Customer Portal https://access.redhat.com/support/cases/#/case/new/ Copyright 2017 Red Hat, Inc.

1 1

How to avoid "firstboot" in CentOS 7 kickstart
by Valeri Galtsev 12 Jan '17

12 Jan '17

Dear Experts, Sorry about taking shortcut and asking everybody... My question is: how do you avoid "firstboot" screen in latest CentOS 7.3 kickstart. I have installed about a dozen of CentOS 7 (none of which was 7.3) with that kickstart file. None of them ever went to firstboot screen on first boot. Now after kickstart installation of CentOS 7.3 it goes into firstboot screen showing two configuration options: 1. [x] License information (license accepted) 2. [ ] User creation (no user will be created Please, make your choice from the above { quit, continue or refresh } Here are relevant lines from my kickstart that I assume should have taken care of everything (in the order of their appearance, I dropped irrelevant lines): firstboot --disable eula --agreed (I always were creating one regular user in a post install section, which I do have in this KS file, and that user is successfully created) Thanks for all your help! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

5 6

Re: [CentOS] Ghostscript update?
by m.roth＠5-cent.us 12 Jan '17

12 Jan '17

Leonard's summary of the fix (and I note this is just for CentOS 6) is diff -up /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps.new.bad /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps --- /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps.new.bad 2017-01-04 11:20:37.000000000 +0100 +++ /usr/share/ghostscript/8.70/Resource/Init/gs_init.ps 2015-07-24 00:00:19.000000000 +0200 @@ -2025,7 +2025,6 @@ readonly def /LockFilePermissions true >> setuserparams } - systemdict /getenv {pop //false} put if % setpagedevice has the side effect of clearing the page, but % we will just document that. Using setpagedevice keeps the device Which, if I understand what I'm reading, just has added the systemdict line. I added that, and tried to run evince, which did not crash, but did give me invalidaccess -7 invalidaccess -7 invalidaccess -7 Have I misunderstood the fix? mark

3 2

Centos 7 force reverse dns lookup for none registered addr
by Itschak Mugzach 12 Jan '17

12 Jan '17

I have an application running on a home network. the client is windows and the server is Centos 7. I can access the application from a browser, but when I try a HTTP POST from another Centos 7 box (CLI) I get 54 ECONNRESET Connection reset by peer RECV. after reviewing TCPDUMP i see that Centos drops the connection after trying to do a reverse DNS lookup. The problem is that I am not using DNS but direct IP addresses. How can I force Centos not to do a reverse DNS lookup? Best, ITschak

2 1

Allow execution of commands via ssh but not to login
by Bernard Fay 12 Jan '17

12 Jan '17

Hi, Is there a way to allow a user to execute commands via ssh, for example: "ssh user@server ls", but disallow the same user to login on this server with "ssh user@server" ? Thanks, Bernard

4 4

Re: [CentOS] Firefox Issue
by James B. Byrne 12 Jan '17

12 Jan '17

On Thu, January 5, 2017 17:23, Always Learning wrote: > > > Cyber attacks are gradually replacing armed conflicts. > Better fight with bits than blood. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

8 13

Trouble removing files in chrooted sftp
by Myyrä, Timo 12 Jan '17

12 Jan '17

Hi, I have trouble setting up chrooted SFTP for our user. I got the basic SFTP chroot working, user is chrooted to its home directory, I've added /home/userb/etc directory with dummy passwd, group and localtime files. The problem is that instead of only accessing its own files, I need the user to be able to remove another users files. I have web application which runs as different user, the sftp user is member of the web users group. I then setup bind mounts from web users data dir to chrooted users home directory. The chrooted user can't remove any files in the directory owned by another user. The directory permissions are 0775 so they should allow the access. If I don't use chroot I can remove the file just fine so it seems to be something on the chroot that limits the access. I tried to add simple directory, checked the permissions and tried to delete file and it failed as well so the bind mount should be the issue. Here's sample output: # cat etc/{passwd,group} webapp-user:x:5020:5020::/home/webapp-user:/sbin/nologin chroot-user:x:5029:10000::/home/chroot-user:/sbin/nologin root:x:0:0:not really root::: sftp-chroot:x:10000:chroot-user webapp-user:x:5020:chroot-user # ls -lR .: total 0 drwx--x--- 2 root sftp-chroot 61 Jan 5 07:34 etc drwxr-x--- 2 chroot-user sftp-chroot 6 Nov 20 2015 failed drwxr-x--- 2 chroot-user sftp-chroot 16 Jan 5 07:46 input drwxrwxr-x 2 webapp-user webapp-user 98 Jan 5 07:18 intranet ./etc: total 16 -rw-r--r-- 1 root root 55 Jan 5 07:34 group -rw-r----- 1 root root 1883 Jan 5 06:45 localtime -rw-r--r-- 1 root root 172 Jan 5 06:51 passwd -rw-r--r-- 1 root root 105 Jan 5 06:46 passwd~ ./failed: total 0 ./input: total 0 ./intranet: total 72 -rw-rw-r-- 1 chroot-user sftp-chroot 0 Jan 5 07:02 test1.txt -rw-rw-r-- 1 webapp-user webapp-user 0 Jan 5 07:02 test2.txt So why can't I remove the intranet/test* files inside sftp chroot even if the chroot-user is member of webapp-user group and the directory itself has group permissions? Br, Timo M

2 3

Re: [CentOS] Firefox Issue
by m.roth＠5-cent.us 12 Jan '17

12 Jan '17

Always Learning wrote: > On Fri, 2017-01-06 at 12:54 -0500, m.roth(a)5-cent.us wrote: >> James B. Byrne wrote: >> > On Thu, January 5, 2017 17:23, Always Learning wrote: >> >> >> >> Cyber attacks are gradually replacing armed conflicts. >> > >> > Better fight with bits than blood. >> >> Yes, but... attacks on the friggin' IoT could result in lots of blood. Or, less so, what do you mean all the rail lines have been knocked out of commission for a week, and we can't get food to the eastern half of the country? Or power? <snip> > Query: How did the Reds get into the Democrats computer systems ? Hope it wasn't a Redhat/Centos system but an 'open Windoze' set-up. In at least one of the several, it was a phishing attack. In another case, someone responded slowly to a query... and had a typo saying the *reverse* of what they meant to say. mark

2 1

Missing Dependency python-yubico
by Mark LaPierre 12 Jan '17

12 Jan '17

Hey all, I'm trying to install the fedora-packager group so that I can build Fedora source packages into RPMs that I can install. I'm getting this error: Error: Package: fedora-packager-0.6.0.1-1.el6.noarch (epel) Requires: python-yubico <SNIP> [root@peach ~]# yum install python-yubico <SNIP> No package python-yubico available. Do you suppose that maybe this is a typo where python-yubico was typed instead of python-yubikey? When I google for python-yubico Google suggests python-yubikey instead. But maybe not! RPM Search turns up python-yubico packages for Fedora 2[234] for x86_64, and CentOS 7.3 for x86_64 and finds no hits for python-yubikey. Maybe the fedora-packager group only works on CentOS 7? I'm so confused ;-) Does anyone have a suggestion for how I can solve this issue? Is there another way to build source packages into RPM packages that I can install? CentOS release 6.8 (Final) Linux peach.patch 2.6.32-642.11.1.el6.x86_64 #1 SMP Fri Nov 18 19:25:05 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

3 5

Microcode.service error when booting 7.3.1611
by Albert McCann 11 Jan '17

11 Jan '17

In 7.3.1611, running kernel "3.10.0-514.2.2.el7.centos.plus.x86_64 #1 SMP Wed Dec 7 19:10:15 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux" with microcode_ctl-2.1-16.1.el7_3.x86_64, I'm seeing the following error when booting: systemd[1]: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. systemd[1]: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. systemd[1]: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly:Unit is not loaded properly: Invalid argument. Googling that last line returns a single (useless to me) RedHat URL, which requires one to log in for details. https://access.redhat.com/solutions/2851331 Anyone else seeing this, or know what the secret fix is? Could it be the use of the double quotes in this line: ExecStart=/usr/bin/bash -c "grep -l GenuineIntel /proc/cpuinfo | xargs grep -l "model.*79" > /dev/null || echo 1 > /sys/devices/system/cpu/microcode/reload" Al -- "Pieces of Nine! Pieces of Nine!" Another parroty error.

2 2

HSM
by J Martin Rushton 11 Jan '17

11 Jan '17

Purely from interest, is there any current FOSS implementation of HSM? I note that XFS has dropped support for DMAPI, have other filesystems? Regards, Martin

3 7

Ghostscript update?
by Frank Cox 11 Jan '17

11 Jan '17

Has the issue with the last ghostscript update been resolved? I temporarily added ghostcript to the excludes line in my yum.conf to prevent problems and haven't seen any more mention of it here. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

3 2

CentOS 7: BUG: unable to handle kernel NULL pointer dereference
by m.roth＠5-cent.us 10 Jan '17

10 Jan '17

We've just started seeing this. Anyone else? reason: BUG: unable to handle kernel NULL pointer dereference at 00000000000000b8 component: kernel count: 1 analyzer: vmcore architecture: x86_64 event_log: kernel: 3.10.0-327.18.2.el7.x86_64 last_occurrence: 1484067452 os_release: CentOS Linux release 7.3.1611 (Core) runlevel: N 3 time: Tue 10 Jan 2017 11:57:32 AM EST type: vmcore uid: 0 username: root mark

2 2

firefox/flash/CNN issue in Centos-7
by Fred Smith 10 Jan '17

10 Jan '17

Hi all! I have 3 up to date C7 systems. One of them has flash installed, the other two do not. One of the two without flash displays CNN videos fine. I'm not sure whether it is using html5/canvas, or some other mechanism. the other system without flash fails to display them because flash is missing. So far I have not been able to figure out what is different in the two systems' firefox configuration. All 3 systems use the firefox version that ships with Centos-7 (i.e., the one that yum update provides). I've compared the addons and plugins and can't see anything different there that I'd expect to be related to this issue. can anyone here suggest further ideas? thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For him who is able to keep you from falling and to present you before his glorious presence without fault and with great joy--to the only God our Savior be glory, majesty, power and authority, through Jesus Christ our Lord, before all ages, now and forevermore! Amen." ----------------------------- Jude 1:24,25 (niv) -----------------------------

1 0

CentOS-announce Digest, Vol 143, Issue 4
by centos-announce-request＠centos.org 10 Jan '17

10 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0021 Moderate CentOS 7 gstreamer1-plugins-bad-free Security Update (Johnny Hughes) 2. CESA-2017:0020 Moderate CentOS 7 gstreamer1-plugins-good Security Update (Johnny Hughes) 3. CESA-2017:0018 Moderate CentOS 7 gstreamer-plugins-bad-free Security Update (Johnny Hughes) 4. CESA-2017:0019 Moderate CentOS 7 gstreamer-plugins-good Security Update (Johnny Hughes) 5. CEBA-2017:0028 CentOS 7 microcode_ctl BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 9 Jan 2017 18:11:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0021 Moderate CentOS 7 gstreamer1-plugins-bad-free Security Update Message-ID: <20170109181154.GA23849(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0021 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0021.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 23f8f6f9072ec3952e0c93069cfaf4d0b269cd3e3996930170c403dbaaf17283 gstreamer1-plugins-bad-free-1.4.5-6.el7_3.i686.rpm e21a428f35bbbd46b0f7cad98d3e40917c8ea87601c9c0a2647b104d99ec9a1e gstreamer1-plugins-bad-free-1.4.5-6.el7_3.x86_64.rpm 99017542aaccce48ea2369bc5b20fcd51dd0f25bd9eae3951e4c114aab7dbb79 gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3.i686.rpm df0a776c12fb2bfa96ebffe88fe319c13756d97e1a9c32ec16b53d6610261aff gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3.x86_64.rpm Source: ddb2b4d91cad129e073f1475cb2fde83e6fae3e5d4f672bac00147354f9fffa2 gstreamer1-plugins-bad-free-1.4.5-6.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 9 Jan 2017 18:12:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0020 Moderate CentOS 7 gstreamer1-plugins-good Security Update Message-ID: <20170109181211.GA23914(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0020 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0020.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c838de922d7acd48798a9f332e39551393c8fbb7fa3b4afb01d77275fd94a103 gstreamer1-plugins-good-1.4.5-3.el7_3.i686.rpm a489ca4c9a531371199b8be555e7cdb0d8a4bdbc3af5ba9c44e0da485a14053b gstreamer1-plugins-good-1.4.5-3.el7_3.x86_64.rpm Source: dc34f6f83bf4aeb0c0dad21c3636a4f5c0472586ea563114ac1d74bf55edc432 gstreamer1-plugins-good-1.4.5-3.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 9 Jan 2017 18:12:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0018 Moderate CentOS 7 gstreamer-plugins-bad-free Security Update Message-ID: <20170109181236.GA23996(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0018 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0018.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0e5c6f0f4f695419bff987ad7f0624794f74329907bdb1776c1077017c0666c5 gstreamer-plugins-bad-free-0.10.23-22.el7_3.i686.rpm d60b6a172330f487cc7fe3e86c043e02f6fd5141ef7ebca6bcf2602d30481663 gstreamer-plugins-bad-free-0.10.23-22.el7_3.x86_64.rpm a0837e25a58016e4788584bb26414bd1d242b44aaadf721e6770a88ab898c454 gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3.i686.rpm 5e000d60daea6dd4591b4b61da3b3232065eeb01988df2d2289f02e070628d22 gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3.x86_64.rpm 7e0632e474f5fa966ea24349cc53fe1877b6c20aeaf2d6f47b41dde2f7c30e57 gstreamer-plugins-bad-free-devel-docs-0.10.23-22.el7_3.x86_64.rpm Source: 7a319a29d70089613ecbf6a6a05c61e088feb8c2d35ca9b8f8ac8069ec6d9d33 gstreamer-plugins-bad-free-0.10.23-22.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 9 Jan 2017 18:12:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0019 Moderate CentOS 7 gstreamer-plugins-good Security Update Message-ID: <20170109181252.GA24065(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0019 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0019.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 77dacabde4b81da516ce07abfdceaecc4480a005813fdd6158f4bc1784e85843 gstreamer-plugins-good-0.10.31-12.el7_3.i686.rpm 4a47c9f56c4b441f1b5af8bb4f5fb61dd4625eb207e099778eb030612101303f gstreamer-plugins-good-0.10.31-12.el7_3.x86_64.rpm d951aae005f845da7839a48f4586570924b800064d08d5dbb995955d6814b245 gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm Source: 95568e4d1e099ac827df5ac486546a7fcf4eced6cd9dab0d9a779e8f4a392fbb gstreamer-plugins-good-0.10.31-12.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Mon, 9 Jan 2017 18:13:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0028 CentOS 7 microcode_ctl BugFix Update Message-ID: <20170109181307.GA24127(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0028 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0028.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 85eef65a7d078c46b6a6f42e9538baac1af55fac9bdf03f5c404e0332ccdbd20 microcode_ctl-2.1-16.1.el7_3.x86_64.rpm Source: 5a0f93d799a646b8e021052c5274b7ad1ad24d8e9f54a9452acba50861a1bdc6 microcode_ctl-2.1-16.1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 4 ***********************************************

1 0

How to downgrade gtk2 libs in CentOS 6.8?
by Walter Dnes 09 Jan '17

09 Jan '17

Hi all. I'm using a CentOS 6.8 VM to do volunteer builds for an open source project. I want to build Pale Moon with a gtk2 library older than 2.24, to allow people with older linuxes to run it. Short summary, if built against version gtk2-2.24 and/or higher, the binary will use a function that does not exist in gtk2-2.23 and lower. Net result is that the program dies with an "undefined symbol:" error for people with machines lower than gtk2-2.24. Yes, before you ask, they do get security fixes backported. The hits from my Google search suggested... yum downgrade gtk2 The response from yum was... Only Upgrade available on package: gtk-2.24.23-8.e16.i686 Nothing to do Are there ways around this? -- Walter Dnes <waltdnes(a)waltdnes.org>

5 7

Mate and USB headphones
by Alice Wonder 07 Jan '17

07 Jan '17

Logitech H540 headphones were working fine. Suddenly stopped. Sound Preferences says they are disabled but gives no hints on how to enable them, or how they became disabled. Tried rebooting, unplugging them, etc. Anyone know what is going on? This motherboard doesn't have onboard sound, this USB is my only option. And GNOME simply isn't usable for me, I used GNOME for years but GNOME 3 literally gets in my way all the freaking time trying to force me to do things the new way that just aren't conductive to my thinking style - so MATE is what I use. I have no clue how these headphones became "disabled" or how to change them back to enabled.

3 4

gmail.com rejection of e-mail on a Centos 6 sendmail server related to reverse ipv6 lookups
by Gregory P. Ennis 07 Jan '17

07 Jan '17

Everyone, I have been working on a gmail.com rejection of mail problem related to one of our CentOS 6 mail servers, that was not present on our Centos 7 mail server. At first I just routed the transfer of mail to the Centos 7 sever and the problem was solved, but continued working on the Centos 6 sendmail problem when I had time available. I finally had some time to debug the problem and found some interesting things that I thought of which others may benefit. The following represents the steps I took as well as my own conclusions that may or may not be correct, but I did find a fix to the problem. It was interesting that this problem does not exist for the sendmail of Centos 7, but it did exist for the sendmail of Centos 6. My setup for both sendmail.mc files for 6 and 7 were almost the same. It turns out that the sendmail of Centos 6 and 7 apparently using ipv6 as the default transmission of mail, if ipv6 is not available on Centos 7 it drops back to ipv4, but it does not drop back to ipv4 in Centos 6. Also apparently google does a reverse record lookup on ipv6 connection, and if there is a mismatch then google fails the transfer. I was able to get this far by putting in a debug value of 29 in sendmail.mc and then comparing logs created on our Centos 6 and Centos 7 server. I tried to turn off ipv6 on sendmail.mc on the Centos 6 server by the use of the switch : DAEMON_OPTIONS(`Name=MTA-v4, Family=inet') Unfortunately, this prevented the transfer of all mail so I removed it from sendmail.mc. Further looking at other posts on the internet seems to indicate that sendmail now requires ipv6 to be active to transfer any mail at all. I found the following post that described a fix to the problem. http://serverfault.com/questions/512615/how-to-stop-sendmail-sending-ma il-from-ipv6-instead-of-ipv4/824833#824833 When I added the following with '1.2.3.4' being the ipv4 address of the Centos 6 server that had the problem, the mail to gmail.com worked perfectly. CLIENT_OPTIONS(`Family=inet6,Addr=::ffff:1.2.3.4')dnl If any of the rest of you have had this difficulty I hope this helps. Greg Ennis

1 0

CDB tables in Centos7 Postfix ?
by Tim Smith 07 Jan '17

07 Jan '17

Hi, It seems the default binaries don't have CDB tables compiled into them ? Now, I know Centos isn't Ubuntu, but on Ubuntu there is an optional package in the main distribution "postfix-cdb - CDB map support for Postfix". I can't find anything similar using "yum search", so I'm guessing that's not an option. Unless anyone else here corrects me otherwise, I'm guessing it's back to 'old-school' compile and install myself ? Thanks ! Tim

3 4

sshd problem on reboot
by Alessandro Baggi 07 Jan '17

07 Jan '17

Hi list, I have a dedicated server managed through ssh and this morning I have upgraded my system from 7.2 to 7.3. After yum finished his work, and rebooted my server. After reboot I tried to log in with ssh and got "Connection refused". I've noticed that all public services were online. So I've contacted my provider to get access to the server and I've noticed that ssh was started with my specified port. I've tried to log locally on server and I got connection refused. So I've ridden logs and got: error: bind to port MYPORT in LOCALIP failed: cannot assign requested address. I've restarted sshd and problem "was solved". Now I can't try to replicate this error because I can't reboot the server. My addressing config is: Port PORT AddressFamily inet ListenAddress LOCALIP ListenAddress 127.0.0.1 #ListenAddress :: What can cause this problem? Thanks in advance.

2 1

kickstart problems since 7.3
by Gordon Messmer 06 Jan '17

06 Jan '17

I just tried a kickstart setup for the first time since 7.3 and got an error similar to the error in this unresolved Fedora bug report: https://bugzilla.redhat.com/show_bug.cgi?id=1278260 Has anyone successfully done a kickstart setup using 7.3 on x86_64? I'd imagine this is part of QA, so the answer is almost certainly "yes," but I'm not sure where to start debugging this. I got a working system by supplying the URL to the 7.2 release instead of the current URL.

2 2

Strange (?) device.map in CentOS 7 VM installations
by Nikolaos Milas 06 Jan '17

06 Jan '17

Hello, After repeated failing efforts to restore CentOS 7 backups (taken using mondorescue software), I have found that all my CentOS 7 installations (VMs under KVM) have the same /boot/grub2/device.map, which seemingly refers to two HDs, although the VMs in fact include only one (virtual) HD. For example: /boot/grub2/device.map # this device map was generated by anaconda (hd0) /dev/vda (hd1) /dev/vda Here is the hardware of the VM: # parted -l Model: Linux device-mapper (linear) (dm) Disk /dev/mapper/centos-swap: 2147MB Sector size (logical/physical): 512B/512B Partition Table: loop Disk Flags: Number Start End Size File system Flags 1 0.00B 2147MB 2147MB linux-swap(v1) Model: Linux device-mapper (linear) (dm) Disk /dev/mapper/centos-root: 18.8GB Sector size (logical/physical): 512B/512B Partition Table: loop Disk Flags: Number Start End Size File system Flags 1 0.00B 18.8GB 18.8GB xfs Model: Virtio Block Device (virtblk) Disk /dev/vda: 21.5GB Sector size (logical/physical): 512B/512B Partition Table: msdos Disk Flags: Number Start End Size Type File system Flags 1 1049kB 525MB 524MB primary xfs boot 2 525MB 21.5GB 20.9GB primary lvm This is NOT the case with my CentOS 5 and CentOS 6 VMs, which all have a "correct" device map, with a single (hda0) entry. Is the above behavior expected? If not, what should be the expected way of operation and what may be the cause of it? I am trying to understand where something may be going wrong, so please help. Many Thanks! Nick

5 8

mlx4_0 Initializing and... (infiniband)
by lejeczek 06 Jan '17

06 Jan '17

... Initializing.. hi all, I've a a very basic setup, directly two boxes via two MHEH28-XTC and I cannot activate them. One peculiar thing is I get (randomly & !often): [85947.090496] AMD-Vi: Event logged [ [85947.090539] IO_PAGE_FAULT device=09:00.7 domain=0x0000 address=0x00000000f6ffb000 flags=0x0050] [85947.298509] AMD-Vi: Event logged [ [85947.298550] IO_PAGE_FAULT device=09:00.7 domain=0x0000 address=0x00000000f6ffb000 flags=0x0050] which is the card itself, judging by the device id Would you have and share some thoughts please? $ ./flint/mstflint -d 09:00.0 q # for both cards -W- Running quick query - Skipping full image integrity checks. Image type: FS2 FW Version: 2.9.1000 Device ID: 25408 Description: Node Port1 Port2 Sys image GUIDs: 0008f104039a62a0 0008f104039a62a1 0008f104039a62a2 0008f104039a62a3 MACs: 000000000000 000000000001 VSD: PSID: MT_04A0110001 $ ibstat CA 'mlx4_0' CA type: MT25408 Number of ports: 2 Firmware version: 2.9.1000 Hardware version: a0 Node GUID: 0x0008f104039a08dc System image GUID: 0x0008f104039a08df Port 1: State: Initializing Physical state: LinkUp Rate: 10 Base lid: 1 LMC: 0 SM lid: 1 Capability mask: 0x0259086a Port GUID: 0x0008f104039a08dd Link layer: InfiniBand Port 2: State: Down Physical state: Polling Rate: 10 Base lid: 0 LMC: 0 SM lid: 0 Capability mask: 0x0259086a Port GUID: 0x0008f104039a08de Link layer: InfiniBand in opensm log: Jan 06 17:00:28 817185 [F6D5A700] 0x01 -> sm_mad_ctrl_send_err_cb: ERR 3113: MAD completed in error (IB_TIMEOUT): SubnGet(NodeInfo), attr_mod 0x0, TID 0x1cd1 Jan 06 17:00:28 817200 [F6D5A700] 0x01 -> sm_mad_ctrl_send_err_cb: ERR 3120 Timeout while getting attribute 0x11 (NodeInfo); Possible mis-set mkey?

1 0

does your kdump work?
by lejeczek 06 Jan '17

06 Jan '17

hi all mine does not, and I've tampered with it in many ways, cannot get it to work. best, L.

1 0

Firefox Issue
by Chris Olson 06 Jan '17

06 Jan '17

Everyone is back at work and starting to use computers on our smallest network which has Internet access through a rather old Linksys router. Two systems were left on and screen-locked over the extra long weekend. There does not appear to have been any Internet access interruption in our absence. A Firefox browser on one system was left pointing to a commonly used web site: https://www.yahoo.com/. This Yahoo web page was not displayed when the user unlocked the screen and brought up the browser from the task bar. Instead, a site located at the link https://gaibacoupontec.com was displayed with a message indicating that there was an urgent Firefox update required. There was a button to download and to install the update. I killed the Firefox browser rather than getting rid of it with the X in the upper right hand corner. This event has the aroma of an unwanted cyber intrusion, which is why I killed the browser. I have also copied and stored the full URL displayed in the browser, but have only included the first part "https://gaibacoupontec.com" here so as not to tempt anyone to risk access. Is it possible that a new Firefox flaw has been detected and is being exploited for malicious purposes?

6 5

OpenSCAP failures to to OS version?
by Noam Bernstein 05 Jan '17

05 Jan '17

Hi - I’m running the OpenSCAP STIG profile on a new CentOS 7.1611 installation, and I get a few failures that look like this (output from openscap scan —verbosity INFO). I suspect this is because the openscap module is not accepting CentOS 7 as RHEL 7 for rules purposes, despite an early check for "Community Enterprise Operating System 7” which succeeds. 1. Am I correct in why it’s failing? 2. Is this a bug, or an accepted behavior given that CentOS isn’t actually RHEL? Noam I: oscap: Evaluating XCCDF rule 'accounts_password_pam_retry'. I: oscap: Evaluating definition 'oval:org.open-scap.cpe.rhel:def:7': Red Hat Enterprise Linux 7. I: oscap: Definition 'oval:org.open-scap.cpe.rhel:def:7' evaluated as false. I: oscap: Evaluating definition 'oval:org.open-scap.cpe.rhel:def:1007': Community Enterprise Operating System 7. I: oscap: Definition 'oval:org.open-scap.cpe.rhel:def:1007' evaluated as true. I: oscap: Adding external variable oval:ssg-var_password_pam_retry:var:1. I: oscap: Evaluating definition 'oval:ssg-accounts_password_pam_retry:def:1': Set Password retry Requirements. I: oscap: Criteria are extended by definition 'oval:ssg-installed_OS_is_rhel6:def:1'. I: oscap: Evaluating definition 'oval:ssg-installed_OS_is_rhel6:def:1': Red Hat Enterprise Linux 6. I: oscap: Definition 'oval:ssg-installed_OS_is_rhel6:def:1' evaluated as false. I: oscap: Evaluating textfilecontent54 test 'oval:ssg-test_password_pam_cracklib_retry:tst:1': check the configuration of /etc/pam.d/system-auth. I: oscap: Querying textfilecontent54 object 'oval:ssg-obj_password_pam_cracklib_retry:obj:1', flags: 0. I: oscap: Creating new syschar for textfilecontent54_object 'oval:ssg-obj_password_pam_cracklib_retry:obj:1'. I: probe_textfilecontent54: Opening file '/etc/pam.d/system-auth'. I: oscap: State 'oval:ssg-state_password_pam_retry:ste:1' references external_variable 'oval:ssg-var_password_pam_retry:var:1'. I: oscap: Test 'oval:ssg-test_password_pam_cracklib_retry:tst:1' requires that at least one object defined by 'oval:ssg-obj_password_pam_cracklib_retry:obj:1' exists on the system. I: oscap: 0 objects defined by 'oval:ssg-obj_password_pam_cracklib_retry:obj:1' exist on the system. I: oscap: No item matching object 'oval:ssg-obj_password_pam_cracklib_retry:obj:1' was found on the system. (flag=does not exist) I: oscap: Test 'oval:ssg-test_password_pam_cracklib_retry:tst:1' evaluated as false. I: oscap: Criteria are extended by definition 'oval:ssg-installed_OS_is_rhel7:def:1'. I: oscap: Evaluating definition 'oval:ssg-installed_OS_is_rhel7:def:1': Red Hat Enterprise Linux 7. I: oscap: Definition 'oval:ssg-installed_OS_is_rhel7:def:1' evaluated as false. I: oscap: Evaluating textfilecontent54 test 'oval:ssg-test_password_pam_pwquality_retry:tst:1': check the configuration of /etc/pam.d/system-auth. I: oscap: Querying textfilecontent54 object 'oval:ssg-obj_password_pam_pwquality_retry:obj:1', flags: 0. I: oscap: Creating new syschar for textfilecontent54_object 'oval:ssg-obj_password_pam_pwquality_retry:obj:1'. I: probe_textfilecontent54: Opening file '/etc/pam.d/system-auth'. I: oscap: State 'oval:ssg-state_password_pam_retry:ste:1' references external_variable 'oval:ssg-var_password_pam_retry:var:1'. I: oscap: Test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' requires that at least one object defined by 'oval:ssg-obj_password_pam_pwquality_retry:obj:1' exists on the system. I: oscap: 1 objects defined by 'oval:ssg-obj_password_pam_pwquality_retry:obj:1' exist on the system. I: oscap: All items matching object 'oval:ssg-obj_password_pam_pwquality_retry:obj:1' were collected. (flag=complete) I: oscap: In test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' all of the collected items must satisfy these states: 'oval:ssg-state_password_pam_retry:ste:1'. I: oscap: Entity 'subexpression'='3' of item '106534257' matches corresponding entity in state 'oval:ssg-state_password_pam_retry:ste:1'. I: oscap: Item '106534257' compared to state 'oval:ssg-state_password_pam_retry:ste:1' with result true. I: oscap: Test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' evaluated as true. I: oscap: Criteria are extended by definition 'oval:ssg-installed_OS_is_fedora:def:1'. I: oscap: Evaluating definition 'oval:ssg-installed_OS_is_fedora:def:1': Installed operating system is Fedora. I: oscap: Definition 'oval:ssg-installed_OS_is_fedora:def:1' evaluated as false. I: oscap: Evaluating textfilecontent54 test 'oval:ssg-test_password_pam_pwquality_retry:tst:1': check the configuration of /etc/pam.d/system-auth. I: oscap: Test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' evaluated as true. I: oscap: Definition 'oval:ssg-accounts_password_pam_retry:def:1' evaluated as false.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss