- Discuss - lists.centos.org

Firefox Issue
by Chris Olson 06 Jan '17

06 Jan '17

Everyone is back at work and starting to use computers on our smallest network which has Internet access through a rather old Linksys router. Two systems were left on and screen-locked over the extra long weekend. There does not appear to have been any Internet access interruption in our absence. A Firefox browser on one system was left pointing to a commonly used web site: https://www.yahoo.com/. This Yahoo web page was not displayed when the user unlocked the screen and brought up the browser from the task bar. Instead, a site located at the link https://gaibacoupontec.com was displayed with a message indicating that there was an urgent Firefox update required. There was a button to download and to install the update. I killed the Firefox browser rather than getting rid of it with the X in the upper right hand corner. This event has the aroma of an unwanted cyber intrusion, which is why I killed the browser. I have also copied and stored the full URL displayed in the browser, but have only included the first part "https://gaibacoupontec.com" here so as not to tempt anyone to risk access. Is it possible that a new Firefox flaw has been detected and is being exploited for malicious purposes?

6 5

OpenSCAP failures to to OS version?
by Noam Bernstein 05 Jan '17

05 Jan '17

Hi - I’m running the OpenSCAP STIG profile on a new CentOS 7.1611 installation, and I get a few failures that look like this (output from openscap scan —verbosity INFO). I suspect this is because the openscap module is not accepting CentOS 7 as RHEL 7 for rules purposes, despite an early check for "Community Enterprise Operating System 7” which succeeds. 1. Am I correct in why it’s failing? 2. Is this a bug, or an accepted behavior given that CentOS isn’t actually RHEL? Noam I: oscap: Evaluating XCCDF rule 'accounts_password_pam_retry'. I: oscap: Evaluating definition 'oval:org.open-scap.cpe.rhel:def:7': Red Hat Enterprise Linux 7. I: oscap: Definition 'oval:org.open-scap.cpe.rhel:def:7' evaluated as false. I: oscap: Evaluating definition 'oval:org.open-scap.cpe.rhel:def:1007': Community Enterprise Operating System 7. I: oscap: Definition 'oval:org.open-scap.cpe.rhel:def:1007' evaluated as true. I: oscap: Adding external variable oval:ssg-var_password_pam_retry:var:1. I: oscap: Evaluating definition 'oval:ssg-accounts_password_pam_retry:def:1': Set Password retry Requirements. I: oscap: Criteria are extended by definition 'oval:ssg-installed_OS_is_rhel6:def:1'. I: oscap: Evaluating definition 'oval:ssg-installed_OS_is_rhel6:def:1': Red Hat Enterprise Linux 6. I: oscap: Definition 'oval:ssg-installed_OS_is_rhel6:def:1' evaluated as false. I: oscap: Evaluating textfilecontent54 test 'oval:ssg-test_password_pam_cracklib_retry:tst:1': check the configuration of /etc/pam.d/system-auth. I: oscap: Querying textfilecontent54 object 'oval:ssg-obj_password_pam_cracklib_retry:obj:1', flags: 0. I: oscap: Creating new syschar for textfilecontent54_object 'oval:ssg-obj_password_pam_cracklib_retry:obj:1'. I: probe_textfilecontent54: Opening file '/etc/pam.d/system-auth'. I: oscap: State 'oval:ssg-state_password_pam_retry:ste:1' references external_variable 'oval:ssg-var_password_pam_retry:var:1'. I: oscap: Test 'oval:ssg-test_password_pam_cracklib_retry:tst:1' requires that at least one object defined by 'oval:ssg-obj_password_pam_cracklib_retry:obj:1' exists on the system. I: oscap: 0 objects defined by 'oval:ssg-obj_password_pam_cracklib_retry:obj:1' exist on the system. I: oscap: No item matching object 'oval:ssg-obj_password_pam_cracklib_retry:obj:1' was found on the system. (flag=does not exist) I: oscap: Test 'oval:ssg-test_password_pam_cracklib_retry:tst:1' evaluated as false. I: oscap: Criteria are extended by definition 'oval:ssg-installed_OS_is_rhel7:def:1'. I: oscap: Evaluating definition 'oval:ssg-installed_OS_is_rhel7:def:1': Red Hat Enterprise Linux 7. I: oscap: Definition 'oval:ssg-installed_OS_is_rhel7:def:1' evaluated as false. I: oscap: Evaluating textfilecontent54 test 'oval:ssg-test_password_pam_pwquality_retry:tst:1': check the configuration of /etc/pam.d/system-auth. I: oscap: Querying textfilecontent54 object 'oval:ssg-obj_password_pam_pwquality_retry:obj:1', flags: 0. I: oscap: Creating new syschar for textfilecontent54_object 'oval:ssg-obj_password_pam_pwquality_retry:obj:1'. I: probe_textfilecontent54: Opening file '/etc/pam.d/system-auth'. I: oscap: State 'oval:ssg-state_password_pam_retry:ste:1' references external_variable 'oval:ssg-var_password_pam_retry:var:1'. I: oscap: Test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' requires that at least one object defined by 'oval:ssg-obj_password_pam_pwquality_retry:obj:1' exists on the system. I: oscap: 1 objects defined by 'oval:ssg-obj_password_pam_pwquality_retry:obj:1' exist on the system. I: oscap: All items matching object 'oval:ssg-obj_password_pam_pwquality_retry:obj:1' were collected. (flag=complete) I: oscap: In test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' all of the collected items must satisfy these states: 'oval:ssg-state_password_pam_retry:ste:1'. I: oscap: Entity 'subexpression'='3' of item '106534257' matches corresponding entity in state 'oval:ssg-state_password_pam_retry:ste:1'. I: oscap: Item '106534257' compared to state 'oval:ssg-state_password_pam_retry:ste:1' with result true. I: oscap: Test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' evaluated as true. I: oscap: Criteria are extended by definition 'oval:ssg-installed_OS_is_fedora:def:1'. I: oscap: Evaluating definition 'oval:ssg-installed_OS_is_fedora:def:1': Installed operating system is Fedora. I: oscap: Definition 'oval:ssg-installed_OS_is_fedora:def:1' evaluated as false. I: oscap: Evaluating textfilecontent54 test 'oval:ssg-test_password_pam_pwquality_retry:tst:1': check the configuration of /etc/pam.d/system-auth. I: oscap: Test 'oval:ssg-test_password_pam_pwquality_retry:tst:1' evaluated as true. I: oscap: Definition 'oval:ssg-accounts_password_pam_retry:def:1' evaluated as false.

1 0

Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
by lakhera2017 05 Jan '17

05 Jan '17

I am trying to copy(~7TB of data using rsync) between two server in same data center in the backend its using EMC VMAX3 After copying ~30-40GB of data multipath start failing Dec 15 01:57:53 test.example.com multipathd: 360000970000196801239533037303434: Recovered to normal mode Dec 15 01:57:53 test.example.com multipathd: 360000970000196801239533037303434: remaining active paths: 1 Dec 15 01:57:53 test.example.com kernel: sd 1:0:2:20: [sdeu] Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [root@test log]# multipath -ll |grep -i fail |- 1:0:0:15 sdq 65:0 failed ready running - 3:0:0:15 sdai 66:32 failed ready running We are using default multipath.conf HBA driver version 8.07.00.26.06.8-k HBA model QLogic Corp. ISP8324-based 16Gb Fibre Channel to PCI Express Adapter OS: CentOS 64-bit/2.6.32-642.6.2.el6.x86_64 Hardware:Intel/HP ProLiant DL380 Gen9 Already verified this solution and checked with EMC everything looks good https://access.redhat.com/solutions/438403 Some more info - There is no drop/error packet on the network side. Filesystem is mounted with noatime,nodiratime Filesystem ext4(Already tried xfs but same error) LVM is in striped mode(Started with linear option and then converted to striped) Already disabled THP echo never > /sys/kernel/mm/redhat_transparent_hugepage/enabled Whenever multipath start failing process goes to D state System firmware upgraded Tried with latest version of qlogic driver Tried with different scheduler(noop,deadline,cfq) Tried with different tuned profile(enterprise-storage) Vmcore collected during the time of issue I am able to collect vmcore during the time of issue KERNEL: /usr/lib/debug/lib/modules/2.6.32-642.6.2.el6.x86_64/vmlinux DUMPFILE: vmcore [PARTIAL DUMP] CPUS: 36 DATE: Fri Dec 16 00:11:26 2016 UPTIME: 01:48:57 LOAD AVERAGE: 0.41, 0.49, 0.60 TASKS: 1238 NODENAME: test.example.com RELEASE: 2.6.32-642.6.2.el6.x86_64 VERSION: #1 SMP Wed Oct 26 06:52:09 UTC 2016 MACHINE: x86_64 (2297 Mhz) MEMORY: 511.9 GB PANIC: "BUG: unable to handle kernel NULL pointer dereference at 0000000000000018" PID: 15840 COMMAND: "kjournald" TASK: ffff884023446ab0 [THREAD_INFO: ffff88103def4000] CPU: 2 STATE: TASK_RUNNING (PANIC) -- View this message in context: http://centos.1050465.n5.nabble.com/Result-hostbyte-DID-ERROR-driverbyte-DR… Sent from the CentOS mailing list archive at Nabble.com.

2 2

puppetmaster after updating to 7.3
by Fred Wittekind 05 Jan '17

05 Jan '17

Any one else having issues starting the puppetmaster service after updating to 7.3? Looks like a SELinux issue, I couldn't find an existing bug report, but, seems like I shouldn't be the first one to trip on this issue. # grep puppet audit.log | audit2allow #============= puppetmaster_t ============== allow puppetmaster_t puppetagent_exec_t:file { execute execute_no_trans getattr ioctl open read }; selinux-policy-3.13.1-102.el7_3.7.noarch selinux-policy-targeted-3.13.1-102.el7_3.7.noarch puppet-server-3.6.2-3.el7.noarch (from EPEL) puppet-3.6.2-3.el7.noarch (from EPEL)

2 2

CentOS-announce Digest, Vol 143, Issue 3
by centos-announce-request＠centos.org 05 Jan '17

05 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS 7.3.1611 on ARM64/AArch64 (Jim Perrin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 4 Jan 2017 11:45:51 -0600 From: Jim Perrin <jperrin(a)centos.org> To: centos-announce(a)centos.org, Conversations around CentOS on ARM hardware <arm-dev(a)centos.org> Subject: [CentOS-announce] Release for CentOS 7.3.1611 on ARM64/AArch64 Message-ID: <f1f44f97-e8e0-da6f-3afc-9a168b37b3ea(a)centos.org> Content-Type: text/plain; charset=utf-8 I am pleased to announce the general availability of CentOS Linux 7 (1611) for AArch64/ARM64 machines. == Changes The kernel has been rebased from 4.2.0 to 4.5.0, and includes several patches recently merged into the upstream. The kernel patches and modifications can be found at https://git.centos.org/summary/sig-altarch!kernel.git in the sig-altarch7-aarch64 branch. == Download You can download new images and isos via http://mirror.centos.org/altarch/7/isos/aarch64/ Images and sha256sums: 1513f5325accfd32ac7973a9b24e401c829ece24da78e24d021e507e877f930e CentOS-7-aarch64-Everything.iso f7ae6bae6c2cc177134d7f8f3808e0f457537c4cd48a119620f50d18ff7bb908 CentOS-7-aarch64.img.xz 48776338f8c8994a9499f07e3af847253cf7235c6aac635a8418a2028ec675cf CentOS-7-aarch64-NetInstall.iso f7ae6bae6c2cc177134d7f8f3808e0f457537c4cd48a119620f50d18ff7bb908 CentOS-7-aarch64-rolling.img.xz 238b1ebf22a0ff894064e6ed2ac35ee02a6503657a40ad51f2eee7afc8229e75 CentOS-7-aarch64-rootfs-7.3.1611.tar.xz == Known Issues 1. Mustang based boards must be on the most recent firmware version, otherwise the network may lose connectivity when using 4.5.0-19+ based kernels. Please ensure your hardware is running the most recent firmware available to avoid network issues. 2. Merlin based boards should be on the most recent firmware version, in order to take full advantage of recent kernel improvements. 3. Some ThunderX based boards have been reported to have MAC address inconsistency when using older firmware versions. Please make sure you have the most recent firmware applied to your hardware to avoid network issues. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77 ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 3 ***********************************************

1 0

7.3: Gnome workspaces mirrored
by Gerhard Schneider 05 Jan '17

05 Jan '17

An user is using 2 displays and configured Gnome to "Static Workspaces only on primary display on" using gnome-tweak-tool Till 7.2 it was working as expected. After upgrading to 7.3 the content on the primary screen gets mirrored to all workspaces. When switching to "Static Workspaces only on primary display off" everything is working as expected on 7.3, too. Any ideas? Thank you in advance! Gerhard Schneider -- Gerhard Schneider Institute of Lightweight Design and e-Mail: gs(a)ilsb.tuwien.ac.at Structural Biomechanics (E317) Tel.: +43 1 58801 31716 TU Wien / Vienna / Austria Fax: +43 1 58801 31799 A-1060 Wien, Getreidemarkt 9/BE02 http://www.ilsb.tuwien.ac.at/~gs/

2 1

ghostscript update breaks evince
by Robert Nichols 05 Jan '17

05 Jan '17

Today's ghostscript.x86_64 0:8.70-21.el6_8.1 update causes evince to refuse to display any postscript file. Running evince from a terminal session, I see the errors: invalidaccess -7 invalidaccess -7 invalidaccess -7 ** (evince:1252): WARNING **: Error rendering thumbnail Downgrading to ghostscript.x86_64 0:8.70-21.el6 corrects the problem. Anyone else seeing this? -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

5 5

[OT] Network Attached Storage
by TE Dukes 05 Jan '17

05 Jan '17

Hello, Been thinking about either purchasing one of these or building my own. This will be for home use. I was looking at the QNAP 451+ or building (DYI NAS) one with FreeNAS. I also found that CentOS has a NAS project. Not sure which way to go. They would cost about the same. One would be proprietary and the other open source. I like open source. This for home use. Thought I'd start out with 2, 4TB drives, maybe 3 so I could implement RAID 5. I have four computers to backup. TIA

10 14

Issue with MariaDB-server
by Clint Dilks 05 Jan '17

05 Jan '17

Hi, Today I have updated a CentOS 6.8 system that has MariaDB-server installed from http://yum.mariadb.org/5.5/centos6-amd64 and found that I had an SELinux issue. I know this is not really CentOS related, but thought I would check if anyone else on this list uses this repository and has also seen a problem ? Using the information at https://wiki.centos.org/HowTos/SELinux I have created a local policy that seems to fix things module marialocal 1.0; require { type mysqld_safe_t; class capability { setuid setgid }; } #============= mysqld_safe_t ============== allow mysqld_safe_t self:capability setgid; allow mysqld_safe_t self:capability setuid; My own research suggests this is reasonably safe, but does anyone see a reason why this shouldn't be used ? It may be useful to know that the particular rpms are MariaDB-server-5.5.54-1.el6.x86_64 and selinux-policy-3.7.19-292.el6_8.2.noarch. Thanks for any feedback, and Happy New Year :)

3 2

microcode_ctl-2.1-16 hard crash on Intel E5 2667 v4 CPUs
by Locane 04 Jan '17

04 Jan '17

Hello all! I'm brand new to the mailing list, and I've encountered an issue with the microcode_ctl package version 2.1-16 being installed during the CentOS 7.3 upgrade. It causes my servers to hard stop and they need to be forcibly powered off and back on again with the power button to continue. This RedHat thread https://bugzilla.redhat.com/show_bug.cgi?id=1398698 details the issue, and version 2.1-18 available from Petr Oros' personal section of RedHat http://people.redhat.com/poros/e6a8cc19d733b1526c2519fbaa1e231d/ is supposed to fix the issue. I haven't had a chance to test it yet. My questions are, who decides what packages are current for CentOS when I "yum upgrade"? When can version 2.1-18 be released to avoid this problem? Thanks in advance!

2 3

yum update pulls in lvm-cluster on 7.3
by me＠tdiehl.org 04 Jan '17

04 Jan '17

Hi, I ran "yum update" this morning on a 7.2 machine with all of the cr updates applied to it and yum wants to install lvm-cluster and a bunch of deps. Dependencies Resolved ====================================================================== Package Arch Version Repository Size ====================================================================== Installing for group upgrade "Resilient Storage": lvm2-cluster x86_64 7:2.02.166-1.el7_3.1 updates 663 k Updating: centos-release x86_64 7-3.1611.el7.centos base 23 k Installing for dependencies: corosync x86_64 2.4.0-4.el7 base 213 k corosynclib x86_64 2.4.0-4.el7 base 125 k dlm x86_64 4.0.6-1.el7 base 89 k dlm-lib x86_64 4.0.6-1.el7 base 24 k libqb x86_64 1.0-1.el7 base 92 k resource-agents x86_64 3.9.5-82.el7_3.1 updates 360 k Transaction Summary ========================================================================= Install 1 Package (+6 Dependent packages) Upgrade 1 Package Total download size: 1.6 M Is this ok [y/d/N]: Exiting on user command Your transaction was saved, rerun it with: yum load-transaction /tmp/yum_save_tx.2016-12-13.07-45.PcXumI.yumtx (shadow pts3) # I understand why the centos-release wants to be updated but can someone tell me why it wants to pull in lvm-cluster and friends? This machine is not part of a cluster. Regards, -- Tom me(a)tdiehl.org Spamtrap address me123(a)tdiehl.org

3 5

Amavis on Centosl help
by Tim Smith 04 Jan '17

04 Jan '17

I'm moving from Ubuntu to CentOS 7 Previously, on Ubuntu, installing amavisd would lead to etc/amavis/conf.d that contained: 01-debian 05-domain_id 05-node_id 15-av_scanners 15-content_filter_mode 20-debian_defaults 21-ubuntu_defaults 25-amavis_helpers 30-template_localization 40-policy_banks 50-user However installing amavisd on centos leads to a spaghetti config file (i.e. /etc/amavisd/amavisd.conf and nothing else) For obvious reasons I want to avoid spaghetti config, not only is it poor practice, but also nigh on impossible to maintain properly without breaking stuff. Assuming it is possible, how would I go about changing the Centos "dump" based config into a more sensible one where local site customisations are clearly deliniated ?

2 2

selinux & rsyncd: Allowing global read for backup
by Kenneth Porter 04 Jan '17

04 Jan '17

I want to set up rsyncd to expose the whole drive read-only to BackupPC running on another machine. So I need to set selinux to allow this. According to the Fedora wiki I can do so like this: setsebool -P rsync_disable_trans 1 <https://fedoraproject.org/wiki/SELinux/rsync> But when I run the command on CentOS 7.3 it tells me that this bool is not defined. So what do I do now? (Everything works fine if I set SELinux to permissive.)

1 1

CentOS-announce Digest, Vol 143, Issue 2
by centos-announce-request＠centos.org 04 Jan '17

04 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0014 Moderate CentOS 6 ghostscript Security Update (Johnny Hughes) 2. CESA-2017:0013 Moderate CentOS 7 ghostscript Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 4 Jan 2017 10:39:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0014 Moderate CentOS 6 ghostscript Security Update Message-ID: <20170104103919.GA1722(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0014 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0014.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b782201a3fc51ad215a773f3ce3a5b2f92716470f5182805f854372428d6c05f ghostscript-8.70-21.el6_8.1.i686.rpm c450d8e76f4f7706f1f8d1bf9531d5791531614acd6562d3997816661d86d9a4 ghostscript-devel-8.70-21.el6_8.1.i686.rpm 7b1f7846d3aca69569081267b595309e0e2bcc6b51fef8acc741a27f8e3dcc22 ghostscript-doc-8.70-21.el6_8.1.i686.rpm 16be71364698b556c4c8c972badbf2ff7d906daca967387d9afae10f2a1ce07b ghostscript-gtk-8.70-21.el6_8.1.i686.rpm x86_64: b782201a3fc51ad215a773f3ce3a5b2f92716470f5182805f854372428d6c05f ghostscript-8.70-21.el6_8.1.i686.rpm 8fda7d94d616f78865b778c72611106da4ffa3869811a07be7b8f924147297d9 ghostscript-8.70-21.el6_8.1.x86_64.rpm c450d8e76f4f7706f1f8d1bf9531d5791531614acd6562d3997816661d86d9a4 ghostscript-devel-8.70-21.el6_8.1.i686.rpm 561c3ccd850038e251d319f55fc700b4bed20dd4dcd43fa4765b2e358094749c ghostscript-devel-8.70-21.el6_8.1.x86_64.rpm 1acf2b6457380b6b387815c489cd0d7d8a14511a247a9dc490737a232e68a67b ghostscript-doc-8.70-21.el6_8.1.x86_64.rpm 4a55e46791fa5bb721088d138d96aa897bed83185c370276ba2abeff52d902f8 ghostscript-gtk-8.70-21.el6_8.1.x86_64.rpm Source: 97e350a518a3f78e0cac61831ffde0e915ac60a8965a25e71e8d57b137485b44 ghostscript-8.70-21.el6_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 4 Jan 2017 10:40:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0013 Moderate CentOS 7 ghostscript Security Update Message-ID: <20170104104005.GA1817(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0013 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0013.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f7fbc15229c5174e7b109647986be6b59507b5206272f0ee4ae7c09c8a45d39f ghostscript-9.07-20.el7_3.1.i686.rpm 3f19e6b7e56e128af4283d9fbf771cce4faeb8d68373f194f1603ccfcfb8c007 ghostscript-9.07-20.el7_3.1.x86_64.rpm 8e8ffffd7d90ead4c4fbb4c5981c208d31a17663e98d68dac8506a0f19a0cfc7 ghostscript-cups-9.07-20.el7_3.1.x86_64.rpm 4cfaec60746c560b410c0c142565e552901b31e1162e4fd931a95188745d3404 ghostscript-devel-9.07-20.el7_3.1.i686.rpm 481d904151f42d25f2ba85dff9edf3269a79b5ce5920ee23a2e53ab71ecce105 ghostscript-devel-9.07-20.el7_3.1.x86_64.rpm be68ae75492a0a550ae9fc3a4cbd7de049a023009f4a5c7bafc935ca361cec07 ghostscript-doc-9.07-20.el7_3.1.noarch.rpm d2806d687dc3e68f135f0583d9e5dfc44fb8c87aec3c2c1e91a641eade9b2801 ghostscript-gtk-9.07-20.el7_3.1.x86_64.rpm Source: 3e4c0d68739b7bee6ecb4ea5fb145d5656cc275526e110e88ce9f48568691332 ghostscript-9.07-20.el7_3.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 2 ***********************************************

1 0

CentOS 7 samba server + mac client problems
by Noam Bernstein 03 Jan '17

03 Jan '17

We’ve just started to try to configure a new CentOS 7 disk server, and NFS seems OK so far, but I’m having problems with smb mounts to a Mac OS X client. I have the [homes] section as usual, and some additional shares restricted to specific users, but none seem to work. I know I’m authenticating OK (both from the smbd logs and because when I type the wrong password the Mac’s behavior is different), but in no case can I see any files. The Mac gets as far as creating a mount point and opening a blank Finder window, but it’s completely empty, and when I try to select the server in the Finder sidebar it says “Connection failed” and shows a “Connect As” button, which just initiates another login/mount dialog window. I don’t know what configuration bits are important, so I’m not sure what to include with this message. I do know that I have things set up very similarly to our previous CentOS 6 smb server, and that one seems to work fine. If anyone has gotten such a configuration working, or has any suggestions as to what options in the smb.conf file to focus on, I’d appreciate any clues. thanks, Noam

2 4

cron job failures with a perl script containing Astro::Time
by Gregory P. Ennis 03 Jan '17

03 Jan '17

Everyone, I am building a gateway server with a new : CentOS Linux release 7.3.1611 (Core) with 3.10.0-514.2.2.el7.x86_64 kernel. Everything was going find, but I was not able to get a particular cronjob to function properly that contained a perl script with Astro::Time as an include file. Astro::Time was installed with the use of the cpan module downloaded from the Centos repositories. The error message I get in the logs is : Can't locate Astro/Time.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at /usr/local/bin/s.bkup.degw3.prl line 12. BEGIN failed--compilation aborted at /usr/local/bin/s.bkup.degw3.prl line 12. Line 12 is the line in the perl scrip that contains : use Astro::Time; The script works find from the command line, but will not work at all in a cron job. After I reviewed the previous posts on this mail list about Centos 7 cron job problems I was motivated to change the PATH statements in the /etc/crontab file to include all of the PATH's in my root environment while using a terminal interface. /etc/crontab file : SHELL=/bin/bash #PATH=/sbin:/bin:/usr/sbin:/usr/bin PATH=/usr/lib64/qt- .3/bin:/root/perl5/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bi n:/root/bin QT_PLUGIN_PATH=/usr/lib64/kde4/plugins:/usr/lib/kde4/plugin MAILTO=root The original /etc/crontab file was : SHELL=/bin/bash PATH=/sbin:/bin:/usr/sbin:/usr/bin MAILTO=root Unfortuantely I am still not able to get this script to work. Has anyone else had this problem and found a solution? Greg Ennis

2 2

CentOS-announce Digest, Vol 143, Issue 1
by centos-announce-request＠centos.org 03 Jan '17

03 Jan '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0001 Moderate CentOS 7 ipa Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 2 Jan 2017 18:45:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0001 Moderate CentOS 7 ipa Security Update Message-ID: <20170102184506.GA42785(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0001 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0001.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: dc28c95448c5a8315f1a6546daf679aa59e0679ec1b48bfba148627ea6f48ff6 ipa-admintools-4.4.0-14.el7.centos.1.1.noarch.rpm dcc427dae0a08bcfa430c11ad0bdad58e3ae6083c92fea951c449ab0a533d5b9 ipa-client-4.4.0-14.el7.centos.1.1.x86_64.rpm c056b04f8295d9f5a1cf64e71510061f6023ea2520ea3926ac0b2b927c8c2423 ipa-client-common-4.4.0-14.el7.centos.1.1.noarch.rpm dbcb03c16f66ef6e9a41f2da063bce840b2f12e8ae3b26c460daa17916c2ab21 ipa-common-4.4.0-14.el7.centos.1.1.noarch.rpm 27810c01523855e3dba124e5ff55a366ede67429fe913ca2fc6cd0ff2eccf8bb ipa-python-compat-4.4.0-14.el7.centos.1.1.noarch.rpm f99350ed354fb88fbfa4e575af6795762e356a620f8ee802d1451b11e6d5f732 ipa-server-4.4.0-14.el7.centos.1.1.x86_64.rpm 10ddb20de8bfa614cc7d0b8de3a7be81f34886594b8e758f1bac1edc7833abf1 ipa-server-common-4.4.0-14.el7.centos.1.1.noarch.rpm b2f39aab7979e39144e5debc15e53a42ca9b4ef11ed186e5ea8b2a63cc8a4590 ipa-server-dns-4.4.0-14.el7.centos.1.1.noarch.rpm 3639b9647258e46938d33ab87de9c830cff1aa766faa0e4239518d5096bb10eb ipa-server-trust-ad-4.4.0-14.el7.centos.1.1.x86_64.rpm 47e2d338cc7bd469c0f4c977c6cc9135f2f14cc87c5ae727a44f0247971511b3 python2-ipaclient-4.4.0-14.el7.centos.1.1.noarch.rpm c3c203f1c5b1e92abe93363613811c6a897d0e6cdcf524c482b328c1e778fd52 python2-ipalib-4.4.0-14.el7.centos.1.1.noarch.rpm 4aa2f783fb152fd29501ead599b89d392f71f17e8c7e4b0fe118c8974349d475 python2-ipaserver-4.4.0-14.el7.centos.1.1.noarch.rpm Source: db7bb345ae00c474c7885fefe59f3d86e5641bb82acea48c803e21df1ed54edf ipa-4.4.0-14.el7.centos.1.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 143, Issue 1 ***********************************************

1 0

Noise Cancellation of Server Noise
by H 02 Jan '17

02 Jan '17

Has anyone come across a device that could cancel out the noise from servers, ie. the fan noise? I have a server rack near my office and would like to see if i can decrease the noise level. It would seem to me that the steady drone of the fans could be cancelled out to a large extent.

11 25

Raspberry PI3 - CentOS armv7hl gnome desktop
by Paul R. Ganci 02 Jan '17

02 Jan '17

Maybe there is a better place to post this message but as my question was still CentOS related thought I would start here. Please advise if there is a better forum of which to ask this question. I am playing around with making a "desktop" workstation out of a Raspberry PI3. I have had no problems installing the OS and pretty much have everything working except a Gnome desktop. I did: > yum groupinstall "GNOME Desktop" and from what I can tell everything necessary is installed. However when I try to start X up I see it try and start, the display blinks as if everything is good and then drops back down to the console. The log file shown below shows a single error ([ 2665.952] (EE) AIGLX: reverting to software rendering). [ 2665.710] X.Org X Server 1.17.2 Release Date: 2015-06-16 [ 2665.725] X Protocol Version 11, Revision 0 [ 2665.731] Build Operating System: 4.5.7-fedora-4 [ 2665.736] Current Operating System: Linux centos-rpi3 4.4.33-v7.1.el7 #1 SMP Mon Nov 21 18:48:06 UTC 2016 armv7l [ 2665.736] Kernel command line: 8250.nr_uarts=0 dma.dmachans=0x7f35 bcm2708_fb.fbwidth=1872 bcm2708_fb.fbheight=1168 bcm2709.boardrev=0xa22082 bcm2709.serial=0x54bd9ed0 smsc95xx.macaddr=B8:27:EB:BD:9E:D0 bcm2708_fb.fbswap=1 bcm2709.uart_clock=48000000 vc_mem.mem_base=0x3dc00000 vc_mem.mem_size=0x3f000000 dwc_otg.lpm_enable=0 console=ttyS0,115200 console=tty1 root=/dev/mmcblk0p3 rootfstype=ext4 elevator=deadline rootwait selinux=1 security=selinux enforcing=0 [ 2665.756] Build Date: 09 November 2016 05:46:31PM [ 2665.763] Build ID: xorg-x11-server 1.17.2-22.el7 [ 2665.769] Current version of pixman: 0.34.0 [ 2665.783] Before reporting problems, check http://wiki.x.org to make sure that you have the latest version. [ 2665.783] Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. [ 2665.812] (==) Log file: "/var/log/Xorg.1.log", Time: Sat Dec 31 20:08:58 2016 [ 2665.819] (==) Using config file: "/etc/X11/xorg.conf" [ 2665.827] (==) Using system config directory "/usr/share/X11/xorg.conf.d" [ 2665.828] (==) ServerLayout "Default Layout" [ 2665.828] (**) |-->Screen "Screen0" (0) [ 2665.828] (**) | |-->Monitor "Monitor0" [ 2665.829] (**) | |-->Device "VideocoreIV" [ 2665.829] (**) |-->Input Device "Keyboard0" [ 2665.829] (==) Automatically adding devices [ 2665.829] (==) Automatically enabling devices [ 2665.830] (==) Automatically adding GPU devices [ 2665.830] (==) Max clients allowed: 256, resource mask: 0x1fffff [ 2665.830] (==) FontPath set to: catalogue:/etc/X11/fontpath.d, built-ins [ 2665.830] (==) ModulePath set to "/usr/lib/xorg/modules" [ 2665.830] (II) The server relies on udev to provide the list of input devices. If no devices become available, reconfigure udev or disable AutoAddDevices. [ 2665.830] (WW) Hotplugging is on, devices using drivers 'kbd', 'mouse' or 'vmmouse' will be disabled. [ 2665.830] (WW) Disabling Keyboard0 [ 2665.830] (II) Loader magic: 0x54cf7004 [ 2665.830] (II) Module ABI versions: [ 2665.830] X.Org ANSI C Emulation: 0.4 [ 2665.830] X.Org Video Driver: 19.0 [ 2665.830] X.Org XInput driver : 21.0 [ 2665.830] X.Org Server Extension : 9.0 [ 2665.831] (II) no primary bus or device found [ 2665.831] (II) LoadModule: "glx" [ 2665.832] (II) Loading /usr/lib/xorg/modules/extensions/libglx.so [ 2665.855] (II) Module glx: vendor="X.Org Foundation" [ 2665.855] compiled for 1.17.2, module version = 1.0.0 [ 2665.855] ABI class: X.Org Server Extension, version 9.0 [ 2665.855] (==) AIGLX enabled [ 2665.855] (II) LoadModule: "fbdev" [ 2665.856] (II) Loading /usr/lib/xorg/modules/drivers/fbdev_drv.so [ 2665.857] (II) Module fbdev: vendor="X.Org Foundation" [ 2665.857] compiled for 1.17.2, module version = 0.4.3 [ 2665.857] Module class: X.Org Video Driver [ 2665.857] ABI class: X.Org Video Driver, version 19.0 [ 2665.857] (II) FBDEV: driver for framebuffer: fbdev [ 2665.857] (++) using VT number 1 [ 2665.857] (WW) Falling back to old probe method for fbdev [ 2665.857] (II) Loading sub module "fbdevhw" [ 2665.857] (II) LoadModule: "fbdevhw" [ 2665.858] (II) Loading /usr/lib/xorg/modules/libfbdevhw.so [ 2665.859] (II) Module fbdevhw: vendor="X.Org Foundation" [ 2665.859] compiled for 1.17.2, module version = 0.0.2 [ 2665.859] ABI class: X.Org Video Driver, version 19.0 [ 2665.859] (II) FBDEV(0): using default device [ 2665.859] (WW) VGA arbiter: cannot open kernel arbiter, no multi-card support [ 2665.860] (**) FBDEV(0): Depth 24, (--) framebuffer bpp 32 [ 2665.860] (==) FBDEV(0): RGB weight 888 [ 2665.860] (==) FBDEV(0): Default visual is TrueColor [ 2665.860] (==) FBDEV(0): Using gamma correction (1.0, 1.0, 1.0) [ 2665.860] (II) FBDEV(0): hardware: BCM2708 FB (video memory: 8541kB) [ 2665.860] (II) FBDEV(0): checking modes against framebuffer device... [ 2665.860] (II) FBDEV(0): mode "1920x1200" not found [ 2665.860] (II) FBDEV(0): mode "1600x1200" ok [ 2665.860] (II) FBDEV(0): mode "1280x1024" ok [ 2665.860] (II) FBDEV(0): mode "1152x864" ok [ 2665.860] (II) FBDEV(0): mode "1024x768" ok [ 2665.861] (II) FBDEV(0): mode "800x600" ok [ 2665.861] (II) FBDEV(0): mode "720x400" ok [ 2665.861] (II) FBDEV(0): mode "640x480" ok [ 2665.861] (II) FBDEV(0): checking modes against monitor... [ 2665.861] (--) FBDEV(0): Virtual size is 1600x1200 (pitch 1600) [ 2665.861] (**) FBDEV(0): Default mode "1600x1200": 162.0 MHz (scaled from 0.0 MHz), 75.0 kHz, 60.0 Hz [ 2665.861] (II) FBDEV(0): Modeline "1600x1200"x0.0 162.00 1600 1664 1856 2160 1200 1201 1204 1250 +hsync +vsync (75.0 kHz d) [ 2665.861] (**) FBDEV(0): Default mode "1280x1024": 108.0 MHz (scaled from 0.0 MHz), 64.0 kHz, 60.0 Hz [ 2665.861] (II) FBDEV(0): Modeline "1280x1024"x0.0 108.00 1280 1328 1440 1688 1024 1025 1028 1066 +hsync +vsync (64.0 kHz d) [ 2665.861] (**) FBDEV(0): Default mode "1152x864": 108.0 MHz (scaled from 0.0 MHz), 67.5 kHz, 75.0 Hz [ 2665.861] (II) FBDEV(0): Modeline "1152x864"x0.0 108.00 1152 1216 1344 1600 864 865 868 900 +hsync +vsync (67.5 kHz d) [ 2665.861] (**) FBDEV(0): Default mode "1024x768": 65.0 MHz (scaled from 0.0 MHz), 48.4 kHz, 60.0 Hz [ 2665.861] (II) FBDEV(0): Modeline "1024x768"x0.0 65.00 1024 1048 1184 1344 768 771 777 806 -hsync -vsync (48.4 kHz d) [ 2665.861] (**) FBDEV(0): Default mode "800x600": 36.0 MHz (scaled from 0.0 MHz), 35.2 kHz, 56.2 Hz [ 2665.861] (II) FBDEV(0): Modeline "800x600"x0.0 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz d) [ 2665.862] (**) FBDEV(0): Default mode "640x480": 25.2 MHz (scaled from 0.0 MHz), 31.5 kHz, 59.9 Hz [ 2665.862] (II) FBDEV(0): Modeline "640x480"x0.0 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d) [ 2665.862] (**) FBDEV(0): Display dimensions: (518, 324) mm [ 2665.862] (**) FBDEV(0): DPI set to (78, 94) [ 2665.862] (II) Loading sub module "fb" [ 2665.862] (II) LoadModule: "fb" [ 2665.863] (II) Loading /usr/lib/xorg/modules/libfb.so [ 2665.864] (II) Module fb: vendor="X.Org Foundation" [ 2665.864] compiled for 1.17.2, module version = 1.0.0 [ 2665.865] ABI class: X.Org ANSI C Emulation, version 0.4 [ 2665.865] (**) FBDEV(0): using shadow framebuffer [ 2665.865] (II) Loading sub module "shadow" [ 2665.865] (II) LoadModule: "shadow" [ 2665.865] (II) Loading /usr/lib/xorg/modules/libshadow.so [ 2665.865] (II) Module shadow: vendor="X.Org Foundation" [ 2665.865] compiled for 1.17.2, module version = 1.1.0 [ 2665.866] ABI class: X.Org ANSI C Emulation, version 0.4 [ 2665.866] (==) Depth 24 pixmap format is 32 bpp [ 2665.892] (==) FBDEV(0): Backing store enabled [ 2665.894] (**) FBDEV(0): DPMS enabled [ 2665.894] (==) RandR enabled [ 2665.945] (II) SELinux: Disabled by boolean [ 2665.952] (II) AIGLX: Screen 0 is not DRI2 capable [ 2665.952] (EE) AIGLX: reverting to software rendering [ 2665.998] (II) AIGLX: Loaded and initialized swrast [ 2665.998] (II) GLX: Initialized DRISWRAST GL provider for screen 0 [ 2666.260] (II) config/udev: Adding input device CM Storm QuickFire Rapid keyboard (/dev/input/event0) [ 2666.260] (**) CM Storm QuickFire Rapid keyboard: Applying InputClass "evdev keyboard catchall" [ 2666.260] (II) LoadModule: "evdev" [ 2666.261] (II) Loading /usr/lib/xorg/modules/input/evdev_drv.so [ 2666.263] (II) Module evdev: vendor="X.Org Foundation" [ 2666.263] compiled for 1.17.2, module version = 2.9.2 [ 2666.264] Module class: X.Org XInput Driver [ 2666.264] ABI class: X.Org XInput driver, version 21.0 [ 2666.264] (II) Using input driver 'evdev' for 'CM Storm QuickFire Rapid keyboard' [ 2666.264] (**) CM Storm QuickFire Rapid keyboard: always reports core events [ 2666.264] (**) evdev: CM Storm QuickFire Rapid keyboard: Device: "/dev/input/event0" [ 2666.264] (--) evdev: CM Storm QuickFire Rapid keyboard: Vendor 0x2516 Product 0x4 [ 2666.265] (--) evdev: CM Storm QuickFire Rapid keyboard: Found keys [ 2666.265] (II) evdev: CM Storm QuickFire Rapid keyboard: Configuring as keyboard [ 2666.265] (**) Option "config_info" "udev:/sys/devices/platform/soc/3f980000.usb/usb1/1-1/1-1.3/1-1.3.1/1-1.3.1:1.0/0003:2516:0004.000E/input/input13/event0" [ 2666.265] (II) XINPUT: Adding extended input device "CM Storm QuickFire Rapid keyboard" (type: KEYBOARD, id 6) [ 2666.265] (**) Option "xkb_rules" "evdev" [ 2666.270] (II) config/udev: Adding input device CM Storm QuickFire Rapid keyboard (/dev/input/event1) [ 2666.270] (**) CM Storm QuickFire Rapid keyboard: Applying InputClass "evdev keyboard catchall" [ 2666.270] (II) Using input driver 'evdev' for 'CM Storm QuickFire Rapid keyboard' [ 2666.270] (**) CM Storm QuickFire Rapid keyboard: always reports core events [ 2666.270] (**) evdev: CM Storm QuickFire Rapid keyboard: Device: "/dev/input/event1" [ 2666.271] (--) evdev: CM Storm QuickFire Rapid keyboard: Vendor 0x2516 Product 0x4 [ 2666.271] (--) evdev: CM Storm QuickFire Rapid keyboard: Found keys [ 2666.271] (II) evdev: CM Storm QuickFire Rapid keyboard: Configuring as keyboard [ 2666.271] (**) Option "config_info" "udev:/sys/devices/platform/soc/3f980000.usb/usb1/1-1/1-1.3/1-1.3.1/1-1.3.1:1.1/0003:2516:0004.000F/input/input14/event1" [ 2666.271] (II) XINPUT: Adding extended input device "CM Storm QuickFire Rapid keyboard" (type: KEYBOARD, id 7) [ 2666.271] (**) Option "xkb_rules" "evdev" [ 2666.623] (II) evdev: CM Storm QuickFire Rapid keyboard: Close [ 2666.623] (II) UnloadModule: "evdev" [ 2666.623] (II) evdev: CM Storm QuickFire Rapid keyboard: Close [ 2666.623] (II) UnloadModule: "evdev" [ 2666.703] (II) Server terminated successfully (0). Closing log file. I used this /etc.X11/xorg.conf: Section "ServerLayout" Identifier "Default Layout" Screen 0 "Screen0" 0 0 InputDevice "Keyboard0" "CoreKeyboard" EndSection Section "InputDevice" Identifier "Keyboard0" Driver "kbd" Option "XkbModel" "pc105" Option "XkbLayout" "us" EndSection Section "Device" Identifier "VideocoreIV" VendorName "Broadcom" BoardName "RPI3Graphics" Driver "fbdev" EndSection Section "Monitor" Identifier "Monitor0" VendorName "Dell" ModelName "Ultrasharp U2410" DisplaySize 518 324 HorizSync 30.0 - 81.0 VertRefresh 56.0 - 75.0 Option "DPMS" EndSection Section "Screen" Identifier "Screen0" Device "VideocoreIV" Monitor "Monitor0" DefaultDepth 24 SubSection "Display" Viewport 0 0 Depth 24 Modes "1920x1200" "1600x1200" "1280x1024" "1152x864" "1024x768" "800x600" "720x400" "640x480" EndSubSection EndSection Does anybody see what I am doing wrong? Like I said it looks like the desktop wants to startup but then just crshes. Thanks for your help. Paul (ganci(a)nurdog.com) Cell: (303)257-5208

3 3

Adobereader on Centos7 crashes
by johan.vermeulen7＠telenet.be 01 Jan '17

01 Jan '17

Hello All, I can't get Adobe Reader to run stable on Centos7, when trying to edit settings or trying to print, it crashes. The issue is people need to digitally sign pdf forms. When I open these forms with anything else then Adobereader, I get EM To view the full contents of this document, you need a later version of the PDF viewer. You can upgrade to the latest version of Adobe Reader from www.adobe.com/products/acrobat/readstep2.html I spent a lot of time trying to solve this with other pdf viewers, including google-chrome and Foxit, and trickery with ps2pdf and Pdfedit. Nothing works. I installed Adobereader following this: https://www.if-not-true-then-false.com/2010/install-adobe-acrobat-pdf-reade… The signing of these forms is vital to my organization, so any help would be appreciated. Greetings, J.

3 3

chronyd configuration as a local ntp server
by Phil Amy 30 Dec '16

30 Dec '16

Robert, If your NTP server will be on 7/24, I would uninstall chrony and install ntpd which is still included in CentOS 7. Configure as usual. For the differences between chrony and ntpd reference: http://thegeekdiary.com/centos-rhel-7-chrony-vs-ntp-differences-between-ntp… Essentially, chrony is more for laptops with intermittant network connections, and ntpd is better suited to always-on servers

2 1

php-fpm user other than webserver user?
by Matthias Leopold 29 Dec '16

29 Dec '16

Hi, I don't really know where to post this, i'll try here since i use both CentOS and RHEL... I'd like to know how others handle the setup of Apache httpd and PHP-FPM when the PHP-FPM user is different from the webserver user. This is the case in the default configuration of IUS PHP-FPM packages (not in stock CentOS/RHEL). So I have httpd running as 'apache' and PHP running as 'php-fpm'. I'm aware of special use cases where a configurable PHP user is a nice feature, but how do i handle filesystem setup for this default configuration in a pretty and secure way? Do people use it like that or do they change PHP-FPM user back to 'apache' (like in RH packages)? All of the setups i tried (eg. using ACLs) don't really look "pretty" and "robust", something I'd like to have when using "default" configurations. I hope I'm not thinking too complicated... Thanks for feedback matthias

1 0

C7 Mate - files suddenly moved back onto desktop
by Frank Cox 29 Dec '16

29 Dec '16

My wife sometimes puts files on her desktop to work with them, then cut-and-pastes the file to put it into a folder when she's done. This morning she has seven files on her desktop that she has worked on over the course of the past week. They have suddenly, overnight, moved out of the folders that she had put them into and moved onto her desktop! They are no longer in the folders that she put them into. I told her to log out and log back in since I'm guessing that the Caja file manager may be somehow at fault. Does anyone have any ideas about what else it could be? Some kind of cross-linking on her hard drive? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

2 1

Centos7.3-Mate
by johan.vermeulen7＠telenet.be 29 Dec '16

29 Dec '16

Hello All, I have this problem starting Centos7.3 - the official name escapes me at the moment. I often install Centos7 Minimal, then X Window System, then Mate desktop. This last step gives me trouble, and I have to run # yum groupinstall mate --skip-broken output: skipped packages: NetworkManager-I2tp ldns libreswan unbound-libs xl2tpd I realise this is probably an issue for EPEL or Mate. Happy hollidays J.

2 2

CentOS 7 and systemd: SysV initscript: how detect boot vs. interactive use?
by whitivery 28 Dec '16

28 Dec '16

Moving from CentOS 5 to CentOS 7, discovered that a test in a SysV initscript for whether it is running interactively, instead of at boot time, no longer works. Under CentOS 7 / systemd, is there some way for the initscript to know this?

3 5

GRE based attack?
by Robert Moskowitz 28 Dec '16

28 Dec '16

My new Centso7 server that I am testing out is connected with a public address on my dmz. I am connected to the console port. Overnight the following message was logged to the console: [44133.679108] conntrack: generic helper won't handle protocol 47. Please consider loading the specific helper module. Protocol 47 is GRE. So was this 'just' an a ping by an attacker? No one, but I have any business on this server. Well other than the files I put up for people. thanks

1 0

nVidia K1200 on Centos
by H 28 Dec '16

28 Dec '16

Can anyone confirm that the above 4-port card is supported at its full resolution and capabilities under CentOS 6 and/or 7? The card has four DisplayPort 1.2 connectors, each capable of driving a 4K monitor. Thank you.

3 2

chronyd configuration as a local ntp server
by Robert Moskowitz 27 Dec '16

27 Dec '16

This is for centos 7 that has chronyd 2.1.1 I am looking into how to use chronyd as my local ntp server. On my old servers with ntpd I had local access control lines like: restrict 192.168.128.0 mask 255.255.255.0 nomodify notrap But in looking for documentation on chronyd I did not find anything on this at: https://chrony.tuxfamily.org/doc/2.1/manual.html In the actual /etc/chronyd.conf there is the sample line: # Allow NTP client access from local network. #allow 192.168/16 Does this allow only allow queries? Does chronyd support the 'restrict' option? thank you

3 4

GUI black screen on login, startx works???
by Dave Burns 27 Dec '16

27 Dec '16

Hello, I'm using a recent install of centos 7, no GUI customizations that I recall. When I log in using the GUI it accepts my password and the mouse appears on a black screen, like it is preparing the desktop, but the desktop never appears. If I hit control-alt-f4 and log in using the command line, and then execute startx, Everything seems to work perfectly. What sort of troubleshooting should I do to figure out what is stalling? I'm not at all familiar with this aspect of things. thanks, Dave

1 0

devtoolset-4 ageing?
by lejeczek 27 Dec '16

27 Dec '16

hi everyone just a quickie to devel maybe. I'm looking at some bits: devtoolset-4-elfutils-libelf-0.163-2.el7.x86_64 VS elfutils-0.166-2.el7.x86_64 isn't devtool ageing? Could this be the case with more packages? regards, L.

2 6

CentOS 7.2.1511 upgrade to 7.3, many failed dependencies
by m.roth＠5-cent.us 27 Dec '16

27 Dec '16

Hi, folks, I know there was some talk on the list about this, but a) I'm at work, and that thread is pop-3 on my system at home, and b) what attention I paid didn't suggest *this*: Transaction Summary ================================================================================ Install 3 Packages (+10 Dependent packages) Upgrade 537 Packages Skipped (dependency problems) 278 Packages Total download size: 700 M Is this ok [y/d/N]: n One-third of the entire upgrade failed for dependencies or conflicts? I've just checked, and CR is not enabled, either. Was there a resolution for this? mark

1 0

OT - hardware - firmware update .iso to flash drive?
by m.roth＠5-cent.us 27 Dec '16

27 Dec '16

I tried dd'ing the .iso to /dev/sdb. I can mount it, and see the contents fine, but parted -l says unknown partition. Anyone have a clue it this will actually boot? mark

4 4

Re: [CentOS] Noise Cancellation of Server Noise
by Valeri Galtsev 26 Dec '16

26 Dec '16

On Mon, December 26, 2016 9:51 am, Valeri Galtsev wrote: > > On Mon, December 26, 2016 12:16 am, geo.inbox.ignored wrote: >> >> >> On 12/25/2016 09:25 PM, Always Learning wrote: >>> On Sun, 2016-12-25 at 13:38 -0600, geo.inbox.ignored wrote: >>>> On 12/25/2016 11:53 AM, Mark Woolfson (Notebook) wrote: >>>>> If the server decision makers had not gone for a server designed by accountants but a server designed by engineers then you would not have this problem. >>> >>>> maybe accountants in U.K., not is U.S.A.. >>>> >>>> accountants in U.S.A. only 'know' about spreadsheets because >>>> that is what they are paid for. >>>> >>>> engineering is by engineers because that is what they are paid for. >>>> >>>> neither is going to do something they are not paid for. >>>> >>>> long live the "American Way". >>> >>> Lack of vision and inspiration always hampers the betterment of our unique world. >> }} >> >> this is true, >> >>> Great people, all over our planet, usually do a bit more >>> than they are paid for. The resulting benefit for others is >>> incalculable. >>> >> }} >> >> 'great people' are usually the exception. >> >>> Just think of what the Centos founders did, unpaid, and their >>> hardworking successes achieved - never an eye on the clock and never restricting their efforts to make something not just work, but work well. >>> >> }} >> >> other exception as near all things connected FSF and Linux. > > There are other great systems the above will be true about. Also, many free software developers are actually paid for their software development work. Maybe not as much as one might be paid for commercial software. Great example is postfix (free open source software), architectured, written and developed under the hood of IBM (thank you, great guys!) by brilliant person Vietse Venema Wietse Venema (I don't know where to hide in shame) Valeri (thank you, Vietse!!). > > Valeri > >> >> both are 'given' "in a world with out fences". >> >> >> -- >> >> The important thing is not to stop questioning. >> - Albert Einstein >> >> >> CentOS GNU/Linux 6.8 >> KDE 4.3.4 >> >> peace out. >> >> tc,hago. >> >> g >> . >> >> =+= >> Tired of having your microsoft os hacked? >> Change to Linux os, used by microsoft hackers. >> =+= >> If Bill Gates got a dime for every time Windows crashes... >> ...oh, wait. He does. THAT explains it! >> =+= >> in a world with out fences, who needs gates. >> =+= >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> https://lists.centos.org/mailman/listinfo/centos >> > > > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

1 0

apcupsd-3.14.14
by TE Dukes 25 Dec '16

25 Dec '16

Hello, Looking for a apcupsd 3.14.14 rpm. Been getting communication lost errors. I read there was a problem with the 3.14.12 version regarding a usb connection which I'm using, but has been corrected in 3.14.14. I found a Fedora 25 Rawhide src version, but the link must be bad. Was hoping I could rebuild it for Cento 6. Looks like apcupsd no longer producing the rpms. I could build one from the source but would prefer to use an rpm. TIA

2 4

[OT] tis the season
by geo.inbox.ignored 25 Dec '16

25 Dec '16

Happy Holidays to all centos devs and users. -- The important thing is not to stop questioning. - Albert Einstein CentOS GNU/Linux 6.8 KDE 4.3.4 peace out. tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! =+= in a world with out fences, who needs gates. =+=

1 0

how to create a kick start file from an already installed system
by geo.inbox.ignored 25 Dec '16

25 Dec '16

greetings. need to create a kick start file from an already installed system so that i can reinstall system without having to go thru all the package selections. system also has packages install from other sources. read the centos wiki pages for kick start files, did not find info for such. either it is not there or i missed it. tia. -- The important thing is not to stop questioning. - Albert Einstein CentOS GNU/Linux 6.8 KDE 4.3.4 peace out. tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! =+= in a world with out fences, who needs gates. =+=

3 7

New laptop recomendation
by Tony Molloy 24 Dec '16

24 Dec '16

Hi, I'm recently retired from my university job. I am looking for a laptop to run CentOS 6/7. My university was a traditional Dell site so I've used Latitude laptops for years, currently E6500/E6510. Anybody got any experience of running CentOS on the newer Dell Latitudes E5000 or E7000. These are not certified according to Redhats' Hardware Guide. Alternatively Precision Workstations would do. These can be supplied with Ubuntu installed so they run Linux. Thanks, Tony -- Linux nogs.tonyshome.ie 2.6.32-642.11.1.el6.x86_64 #1 SMP Fri Nov 18 19:25:05 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

13 28

Alternative to cPanel
by FrancisM 24 Dec '16

24 Dec '16

Dear All, Im looking for alternative for cPanel and somehow I read that the 'cwp control web panel' (http://centos-webpanel.com) and Sentora ( http://www.sentora.ga) is the good alternative for cPanel. Is there someone using this application and what can you tell about or recommend. Thank you all.

9 10

monitor wifi
by geo.inbox.ignored 23 Dec '16

23 Dec '16

in not so distant past, 5.x, iirc, right clicking network connection icon in task bar brought up a window showing wifi signals in area. this is no longer and i would like to have ability again either with network connection icon or with another icon that can reside in task bar. any ideas or suggestions? tia. -- The important thing is not to stop questioning. - Albert Einstein CentOS GNU/Linux 6.8 KDE 4.3.4 peace out. tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! =+= in a world with out fences, who needs gates. =+=

4 12

yumex errs out on startup
by geo.inbox.ignored 23 Dec '16

23 Dec '16

greetings. on tower box, yumex errs out on startup with error message; Error in repository setup Cannot find a valid baseurl for repo: base You can try starting 'yumex -n' from a command line and deselecting the repositories causing problems and try again. file CentOS-Base.repo is line for line same on both tower box and laptop. no problems on laptop. what might be causing err? tia. -- The important thing is not to stop questioning. - Albert Einstein CentOS GNU/Linux 6.8 KDE 4.3.4 peace out. tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! =+= in a world with out fences, who needs gates. =+=

1 0

CentOS-announce Digest, Vol 142, Issue 9
by centos-announce-request＠centos.org 22 Dec '16

22 Dec '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2973 Important CentOS 5 thunderbird Security Update (Johnny Hughes) 2. CESA-2016:2973 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 3. CESA-2016:2972 Moderate CentOS 7 vim Security Update (Johnny Hughes) 4. CESA-2016:2973 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 5. CESA-2016:2972 Moderate CentOS 6 vim Security Update (Johnny Hughes) 6. CESA-2016:2975 Important CentOS 6 gstreamer-plugins-good Security Update (Johnny Hughes) 7. CESA-2016:2974 Important CentOS 6 gstreamer-plugins-bad-free Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 21 Dec 2016 13:43:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2973 Important CentOS 5 thunderbird Security Update Message-ID: <20161221134324.GA30894(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2973 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2973.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 68500438708f0e33a442e99c81208b99bd052055f291aaea4f696bdf271a79b8 thunderbird-45.6.0-1.el5.centos.i386.rpm x86_64: 0a95da3511990f72243293d5a4b3d3757234a8e6cf606af1dacae5a4237b212f thunderbird-45.6.0-1.el5.centos.x86_64.rpm Source: c10d0d72fce28dcde43d2c25e4b10965b4240bbf9700a8cf2dc77a2faa3f6ecf thunderbird-45.6.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 21 Dec 2016 16:04:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2973 Important CentOS 6 thunderbird Security Update Message-ID: <20161221160428.GA42307(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2973 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2973.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8c91c61dd852242bfbb5978e0a408507ec0350ba6c9bc8e4087f156ba1126497 thunderbird-45.6.0-1.el6.centos.i686.rpm x86_64: 1f871b22036c3d197a97d0ce3dfbacd0ffdd52098ecf1f4f1c1f836f5289263e thunderbird-45.6.0-1.el6.centos.x86_64.rpm Source: 9b4f296a73d6974bdbfd9491f16905bf3d6d34346ac3d3b4cec9d8121fde1833 thunderbird-45.6.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 21 Dec 2016 17:28:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2972 Moderate CentOS 7 vim Security Update Message-ID: <20161221172853.GA54252(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2972 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2972.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2f77332d8481b97bf7298c41c47113da8e1bc5d4f2169034459d4718c126d4c9 vim-common-7.4.160-1.el7_3.1.x86_64.rpm 68305225f41d8ba62f6c4125b1b587b8680e6383c15fa6a6594ccc1f8552ca08 vim-enhanced-7.4.160-1.el7_3.1.x86_64.rpm a442ab1cc41d3f35478e9c08328a8cd3e6caa27675282072d75b75e5dd6544c2 vim-filesystem-7.4.160-1.el7_3.1.x86_64.rpm 754c509c530ab13ce697da88badd3deeab2eafa76415759c25571f697c93ba7d vim-minimal-7.4.160-1.el7_3.1.x86_64.rpm 0044b3d80f8f81b4c5106b8539c94c5a21e648fad5b204ddced6ef0263fa6007 vim-X11-7.4.160-1.el7_3.1.x86_64.rpm Source: e1c0a71068f49a77a492f257e189a39371dfa56571ac6c44b9d4abbffd917565 vim-7.4.160-1.el7_3.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 21 Dec 2016 17:29:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2973 Important CentOS 7 thunderbird Security Update Message-ID: <20161221172919.GA54339(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2973 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2973.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ed7cb4c72670f67eb12f9e904a9529a8053a53cc5551f75719484923c71417a6 thunderbird-45.6.0-1.el7.centos.x86_64.rpm Source: 4e4035a33ea7dd337908115764760a5c35247118a769a29e1c24837070c4dd30 thunderbird-45.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 21 Dec 2016 17:40:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2972 Moderate CentOS 6 vim Security Update Message-ID: <20161221174022.GA54757(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2972 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2972.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b01b15ec916cbb7acfb4dae1d00536e3bd5454399fbc09882fb44c34ca59b6d8 vim-common-7.4.629-5.el6_8.1.i686.rpm 3a060bda378da2b2af4b315930c8ce0213e87ec029a30073925ede9cc971c1e6 vim-enhanced-7.4.629-5.el6_8.1.i686.rpm 595d628db770c874ea7619800c19d30932ff65ab01297acd7545318ccb9ba4b5 vim-filesystem-7.4.629-5.el6_8.1.i686.rpm 87ce30cd3daf01ec59d7045806fa2922e1ef7aed3930053194bbdc113cc5cb36 vim-minimal-7.4.629-5.el6_8.1.i686.rpm e8611c3461d8123d85487f7df569781a4653d361fb885d7a47763cce16613f82 vim-X11-7.4.629-5.el6_8.1.i686.rpm x86_64: cd20302f10166fda6893127fe11a31dfa90bee983d301e4a34a2b294d5d26b20 vim-common-7.4.629-5.el6_8.1.x86_64.rpm 4afc6bd8769e45f9ac7fb28a3fd8e8b00f957cb3b447786ff7fd996fe78dafa9 vim-enhanced-7.4.629-5.el6_8.1.x86_64.rpm 75cde310d030f1f537c54dcfa09511659f16c7ae2410aa3afe71bca800efc57d vim-filesystem-7.4.629-5.el6_8.1.x86_64.rpm f54c01ffaef043bcd108dd4bed4ba2dab7f36310d89ea8de3b200bd67b3a5826 vim-minimal-7.4.629-5.el6_8.1.x86_64.rpm 4704bc2cd890e12b96b6cea6f67994e494245eb83ec8632961a46da52ef0228d vim-X11-7.4.629-5.el6_8.1.x86_64.rpm Source: af0c0e885b4818927369afb5a33b62c8131b792733c39d5679aca4a625ca44ca vim-7.4.629-5.el6_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Wed, 21 Dec 2016 17:41:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2975 Important CentOS 6 gstreamer-plugins-good Security Update Message-ID: <20161221174100.GA54998(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2975 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2975.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7fbce3b08f6717fcae7fd0342ef9cb606a6b27e91f443b9bf1496fe7a191501a gstreamer-plugins-good-0.10.23-4.el6_8.i686.rpm 13f7099fe8d5f24a30cf93fecd70679c00ac4e49da5bcd89e235d3e4b90b56a5 gstreamer-plugins-good-devel-0.10.23-4.el6_8.i686.rpm x86_64: 7fbce3b08f6717fcae7fd0342ef9cb606a6b27e91f443b9bf1496fe7a191501a gstreamer-plugins-good-0.10.23-4.el6_8.i686.rpm bfaef702f494f3c22b26553d8a57ca7a639c371907c16436437406339471804c gstreamer-plugins-good-0.10.23-4.el6_8.x86_64.rpm 13f7099fe8d5f24a30cf93fecd70679c00ac4e49da5bcd89e235d3e4b90b56a5 gstreamer-plugins-good-devel-0.10.23-4.el6_8.i686.rpm 9a05f8ac86fe1d1be78d644e88027d02ea0698a11e6a723c4a9c8e1dcb3d65f9 gstreamer-plugins-good-devel-0.10.23-4.el6_8.x86_64.rpm Source: 1f3ad049215f2991999d07b4c5cee20bdbf59d12747e4bc81af22db132fde091 gstreamer-plugins-good-0.10.23-4.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Wed, 21 Dec 2016 17:41:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2974 Important CentOS 6 gstreamer-plugins-bad-free Security Update Message-ID: <20161221174128.GA55281(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2974 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2974.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 134c13f30ed4597dd42f5e5b917dfd365d7c8b43c7b1afa956c5e421506ac53a gstreamer-plugins-bad-free-0.10.19-5.el6_8.i686.rpm 768a9b4e37d55a1a9c0d0369b14158a6cd0da550419af5598604f029e1825b8d gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.i686.rpm db17e69599d5286b5d95a6051602e85f304eeba90d8392bd1c57abfac5698cac gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8.i686.rpm 49436aa5b15d337eedff3c6d53b1a64d6581fd9b5c025315311f5ec22730176d gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8.i686.rpm x86_64: 134c13f30ed4597dd42f5e5b917dfd365d7c8b43c7b1afa956c5e421506ac53a gstreamer-plugins-bad-free-0.10.19-5.el6_8.i686.rpm 773d8ca3084576493db216eecf93e7fb612ed66c8b0a5e31016ba376423c1582 gstreamer-plugins-bad-free-0.10.19-5.el6_8.x86_64.rpm 768a9b4e37d55a1a9c0d0369b14158a6cd0da550419af5598604f029e1825b8d gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.i686.rpm 0c484310f2d12f27e78adba4970d403d8773e78c92667f2a1698d5e9b3d6eccd gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.x86_64.rpm b17cc0700bda8b607a87612f3d30ca971e6f0a3d16976bac0cc3de0a410719aa gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8.x86_64.rpm 49436aa5b15d337eedff3c6d53b1a64d6581fd9b5c025315311f5ec22730176d gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8.i686.rpm 85f29473f691ccea8bdf506fefbe57dae053013de0f2459915bf6e199935790c gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8.x86_64.rpm Source: b6f8449eb86454b85bd84c2ff7bdcd651e7765b754e36609b5e1eb98ca738190 gstreamer-plugins-bad-free-0.10.19-5.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 142, Issue 9 ***********************************************

1 0

Centos 5 Log-in Screen
by Always Learning 21 Dec '16

21 Dec '16

I like Centos 5 so much I would like to use the same screen for log-on's in Centos 6. Is this possible? My desktop is Gnome. Thank you. Merry Christmas. -- Regards, Paul. England, EU. England's place is in the European Union.

3 2

firefox-45.6.0-1.el7.centos.x86_64 crashing... unusable
by ken 21 Dec '16

21 Dec '16

Last night installed the latest, firefox-45.6.0-1.el7.centos.x86_64. Fired it up this morning and within the first hour it's crashed three times. That comes to it being usable for about five minutes before it crashes. Anyone else getting this?

7 8

CentOS-announce Digest, Vol 142, Issue 8
by centos-announce-request＠centos.org 21 Dec '16

21 Dec '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2963 Important CentOS 5 xen Security Update (Johnny Hughes) 2. CESA-2016:2962 Important CentOS 5 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 20 Dec 2016 16:58:37 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2963 Important CentOS 5 xen Security Update Message-ID: <20161220165837.GA24603(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2963 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2963.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2f13f1c8b55429e9ed1e4652cbcdf32f10b611fe329e7d5e8722bf4183cc6e55 xen-3.0.3-148.el5_11.i386.rpm b4628bbdf7ce77a94d18412ba19e40da9b52a8ccd7358242f613cb125e4d5dde xen-devel-3.0.3-148.el5_11.i386.rpm 6676dc198f1e20aaf3022ba7febc18e618538b7d61f1d7554e5154741ab8e86e xen-libs-3.0.3-148.el5_11.i386.rpm x86_64: 7aebf9aa212e6289f89e28d9575a1ec83b319206d0ddda050f721fe19f1c0c04 xen-3.0.3-148.el5_11.x86_64.rpm b4628bbdf7ce77a94d18412ba19e40da9b52a8ccd7358242f613cb125e4d5dde xen-devel-3.0.3-148.el5_11.i386.rpm 10e915469aeaa3b177e939522cfe6c7ad8e4a3a90e2d2403b958f55798269a06 xen-devel-3.0.3-148.el5_11.x86_64.rpm 6676dc198f1e20aaf3022ba7febc18e618538b7d61f1d7554e5154741ab8e86e xen-libs-3.0.3-148.el5_11.i386.rpm 10711bb93f87c94e0933c5ad0f468f162471d4104b499bffe1313bb344ecdbb7 xen-libs-3.0.3-148.el5_11.x86_64.rpm Source: e09c3f66be0c6abb4935124d828bc50b256215451fcb3d9f673d790f298f2701 xen-3.0.3-148.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 20 Dec 2016 17:00:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2962 Important CentOS 5 kernel Security Update Message-ID: <20161220170055.GA24825(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2962 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2962.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5d69404633f8d2f60fc0e7d1a40ced26d37aa6c866da3ef1751ef82e389f7559 kernel-2.6.18-417.el5.i686.rpm 1d6969390c8c5db3f957d8960f5f4cd6877c0972121876837d0a2e3a04c8d6c9 kernel-debug-2.6.18-417.el5.i686.rpm ef7d5666bcfd989c9a6dd89da70bf8559596d9623e192acce921f0588b30a15d kernel-debug-devel-2.6.18-417.el5.i686.rpm b90d63c5ec0525016b0de727badee246b4eb3f58fb65d7789f722eab46c12d4d kernel-devel-2.6.18-417.el5.i686.rpm c3121e0532cb3333c202c7c904089a431e4cc5d40212ea3c98ec1d53f66e38c3 kernel-doc-2.6.18-417.el5.noarch.rpm a398a0c9b51012edbbb81ed99fad1240cf894fcb15e9b94dc4a0f6720fbb837c kernel-headers-2.6.18-417.el5.i386.rpm fe825154419eeea085da0bfbbd088fca9422a32ba5cdafb5b53a723dc2d2804d kernel-PAE-2.6.18-417.el5.i686.rpm 8f3f08be4c169e44c76a8307d21b52bd75b0f40fd5e4e35dc22a9547fc370250 kernel-PAE-devel-2.6.18-417.el5.i686.rpm acfe2b503ffcf5fb99b25f38ece409b7b855de03bae5213e6ed303c977f66c67 kernel-xen-2.6.18-417.el5.i686.rpm 5ca41d3cfa9d440176099dcbf7e71671e38905bad6294d08b145327bfea98a0a kernel-xen-devel-2.6.18-417.el5.i686.rpm x86_64: 0b49bdc656d4fa588bffb2a08db1f957218404a60330612637d977447fba543b kernel-2.6.18-417.el5.x86_64.rpm 5c8630c73e0184d846cc1351acd49243c4fc705b6fb469e4c378db4a5ddf217c kernel-debug-2.6.18-417.el5.x86_64.rpm b11bad75570b914c42e5b975b6305c8d2b7c433e3ed88e5008c54993541f0539 kernel-debug-devel-2.6.18-417.el5.x86_64.rpm 5a7631636c1117d114706d767c7fbef1f4254716df96455cc16570212d8a5f0d kernel-devel-2.6.18-417.el5.x86_64.rpm c3121e0532cb3333c202c7c904089a431e4cc5d40212ea3c98ec1d53f66e38c3 kernel-doc-2.6.18-417.el5.noarch.rpm 4a97652b4e507aa3b06a742b88a10f0de6aae540a33ba7f1ca3adfce40a3978c kernel-headers-2.6.18-417.el5.x86_64.rpm 02df536f2152ce88bd30a43ebe2abd6111461d6120803670a188cd8b6522dfd5 kernel-xen-2.6.18-417.el5.x86_64.rpm 5998dfa81bc41200a4562c587f7b21b7a7f2ea421c928b9629ce32891ea79c72 kernel-xen-devel-2.6.18-417.el5.x86_64.rpm Source: 7c1e80ff58a493f262c48dc80ba53d3276064ab22b5a9eb4e02713a3107d25c0 kernel-2.6.18-417.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 142, Issue 8 ***********************************************

1 0

OT: Blank mails from this list
by Sorin Srbu 21 Dec '16

21 Dec '16

Hi all, I apologise for this off-topic question, but wanted to hear from a third-party as well. Recently, like the last week or so, I've started getting blank emails from this list. Blank as in no message text is visible in the email. If I do a ctrl-A however, something does get marked. Evidently there is a message, just not visible. This particular list is the only one I've noticed this problem with. I use Outlook 2013 32b on Win7 x64. Our work mail server at work is Exchange. Has anybody else seen this, or is just me? -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu, Sysadmin # Uppsala University # Dept of Medicinal Chemistry # Div of Org Pharm Chem # Box 574 # SE-75123 Uppsala # Sweden # # Phone: +46 (0)18-4714482 # Visit: BMC, Husargatan 3, D5:512b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # O< ASCII ribbon campaign - Against html E-mail # http://tinyurl.com/ascii-ribbon-campaign # # This message was not sent from an iProduct! # # Please consider the environment before printing this email. # Join the campaign at http://thinkBeforePrinting.org # # MotD follows: A ship in the harbor is safe, but that is not what ships were built for.

10 24

networkmanager VS OpenConnect VPN
by Fred Smith 21 Dec '16

21 Dec '16

I have a VPN connection using the openconnect vpn, and it is managed by network manager. Works fine. It has been on my system since the original Centos 7.x release. Now that I have Centos 7.3, while it still works fine, I find that I can no longer add a new connection using openconnect. I also find that I am not allowed to edit the existing openconnect vpn definition. attempting to create a new one lists only ipsec-based VPN as a choice, along with "import a saved VPN configuration". Attempting to edit the existing one pops up a little window that says: Could not edit connection Could not find VPN plugin for 'org.freedesktop.networkmanager.openconnect'. yum says I have the following items installed: yum list installed \*openconnect\* Loaded plugins: fastestmirror, langpacks, nvidia Loading mirror speeds from cached hostfile * base: centos.mirror.constant.com * elrepo: mirrors.evowise.com * epel: mirrors.mit.edu * extras: mirror.cc.columbia.edu * nux-dextop: mirror.li.nux.ro * updates: mirrors.advancedhosters.com Installed Packages NetworkManager-openconnect.x86_64 0.9.8.6-2.el7 @epel openconnect.x86_64 7.06-1.el7 @epel this has worked for some long time, now, so what is wrong here? I don't think I"m missing any packages, because "yum list available" doesn't find anything else that seems to be needed, only -debuginfo and -devel. Anyone got a clue for me? thanks! Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

1 0

Looking for latest C7 kernel-plus SRPM
by Ian Pilcher 21 Dec '16

21 Dec '16

Where can I find the SRPM for the latest C7 kernel-plus package, i.e. kernel-plus-3.10.0-514.2.2.el7.centos.plus.x86_64? http://vault.centos.org/7.3.1611/centosplus/Source/SPackages/ is empty. -- ======================================================================== Ian Pilcher arequipeno(a)gmail.com -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================

2 1

Can't delete or move /home on 7.3 install
by Glenn E. Bailey III 20 Dec '16

20 Dec '16

Tried this in both AWS and GCE as I though it may be a specific cloud vendor issue. SELinux is disabled, lsof | grep home shows nothing, lsattr /home shows nothing. Simply get "Device or resource busy." Works just find on 7.2 so I'm kinda at a loss. Scanned over the RHEL release notes and didn't see anything. Anyone else have this issue? We move our /home to another mount point and symlink /home to it .. -- "replicants are like any other machine. They're either a benefit or a hazard. If they're a benefit, it's not my problem."

8 17

PulseAudio is streaming with an excessive latency.
by Michael Hennebry 20 Dec '16

20 Dec '16

I'm running centos 6, just did a yum update, and still cannot get sound from vlc. The entire message (reformatted): Potential PulseAudio version problem: PulseAudio is streaming with an excessive latency. Sound may be lost or quality degraded. To address that issue, upgrade the PulseAudio daemon to version 3.0, or disable the alternate sampling rate in its configuration I can find /etc/pulse/daemon.conf and its man page , but cannot figure out what to do. pulseaudio.x86_64 0.9.21-24.el6 @base vlc.x86_64 2.0.10-1.el6 @rpmfusion-free-updates Any ideas? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

4 7

SASL attacks and SPAM
by TE Dukes 19 Dec '16

19 Dec '16

I wanted to pass this along. I'm sure it may be nothing new to most of you, but it has greatly reduced sasl attacks and spam. I found most of it here: https://scottlinux.com/2011/05/26/prevent-postfix-brute-force/ I added the fail2ban rule and modified my postfix main.cf as follows: smtpd_client_connection_rate_limit = 3 smtpd_delay_reject = yes smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit smtpd_sender_restrictions = permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, permit smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, reject_unauth_destination, check_sender_access hash:/etc/postfix/access, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, check_policy_service unix:postgrey/socket, permit smtpd_client_connection_count_limit = 3 smtpd_client_message_rate_limit = 5 smtpd_client_recipient_rate_limit = 60 smtpd_client_event_limit_exceptions = $mynetworks smtpd_client_new_tls_session_rate_limit = 3 smtpd_error_sleep_time = 1s smtpd_soft_error_limit = 10 smtpd_hard_error_limit = 20 Has knocked down all the spam and about 99% of the sasl attacks. If anyone would like to add to this, please do so. TIA

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss