- Discuss - lists.centos.org

Power Cut
by Hadi Motamedi 02 Nov '16

02 Nov '16

Dear All I am using a centos server for cdr billing and mediation device on a remote network. I am experiencing problem that I am suspicious it comes from main supply power cut at the remote site. The power supply to the remote site comes from battery charger that will be automatically switched in circuit under main supply power cut but cannot provide adequate power for more than 2 hours . I am suspicious that the remote system is suffering from many frequent main supply power cut . Can you please do me favor and let me know if there is any log on my centos server that I can check to see if there would be many frequent power cut there ? Thank you for your time

9 15

NetworkManager icon not showing
by Nicolas Kovacs 02 Nov '16

02 Nov '16

Hi, I just installed CentOS 7 on my Asus S300 laptop. Wireless was working OK at first, but now for mysterious reasons the NetworkManager icon seems to have disappeared from the notification area. When I click on that area, there's only information showing about sound, brightness, battery status and the connected user. Which leaves me clueless. Any suggestions? Niki Kovacs -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 1

CVE-2016-5195 DirtyCOW: Critical Linux Kernel Flaw
by Valeri Galtsev 02 Nov '16

02 Nov '16

Dear All, I guess, we all have to urgently apply workaround, following, say, this: https://gryzli.info/2016/10/21/protect-cve-2016-5195-dirtycow-centos-7rhel7… At least those of us who still have important multi user machines running Linux. (Yes, me too, I do have a couple, thank goodness, the rest are already not ;-) Have a productive weekend, everybody. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

18 33

How to block routing/forwarding with firewalld
by Jeff White 02 Nov '16

02 Nov '16

On CentOS 7 with firewalld I have a box with numerous interfaces acting as a NAT gateway. This works but I noticed that it routes/forwards traffic not just from my internal zone to external zone but also between interfaces within the internal zone. How can I prevent that traffic? I've tried adding direct and rich rules to deny the traffic but it doesn't work. Direct: firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -s 10.110.4.0/22 -d 10.110.0.0/22 -j REJECT That command works, and I see it in `iptables -L` but traffic is still allowed. Rich: # firewall-cmd --zone=trusted --add-rich-rule='rule family=ipv4 source address=10.110.4.0/22 destination address=10.110.0.0/22 reject' Error: INVALID_RULE: destination action I can't find any explanation of what that error means. So, how do you tell firewalld to stop forwarding traffic between interfaces? # firewall-cmd --get-active-zones public interfaces: ens161 ens193 trusted interfaces: ens192 ens224 ens256 lo # firewall-cmd --list-all public (default, active) interfaces: ens161 ens193 sources: services: dhcpv6-client ssh ports: masquerade: yes forward-ports: icmp-blocks: rich rules: -- Jeff White HPC Systems Engineer Information Technology Services - WSU

3 2

Latest glusterfs 3.8.5 server not compatible with livbirt libgfapi access
by Radu Radutiu 02 Nov '16

02 Nov '16

Hi, After updating glusterfs server to 3.8.5 (from Centos-gluster-3.8.repo) the KVM virtual machines (qemu-kvm-ev-2.3.0-31) that access storage using libgfapi are no longer able to start. The libvirt log file shows: [2016-11-02 14:26:41.864024] I [MSGID: 104045] [glfs-master.c:91:notify] 0-gfapi: New graph 73332d32-3937-3130-2d32-3031362d3131 (0) coming up [2016-11-02 14:26:41.864075] I [MSGID: 114020] [client.c:2356:notify] 0-testvol-client-0: parent translators are ready, attempting connect on transport [2016-11-02 14:26:41.882975] I [rpc-clnt.c:1947:rpc_clnt_reconfig] 0-testvol-client-0: changing port to 49152 (from 0) [2016-11-02 14:26:41.889362] I [MSGID: 114057] [client-handshake.c:1446:select_server_supported_programs] 0-testvol-client-0: Using Program GlusterFS 3.3, Num (1298437), Version (330) [2016-11-02 14:26:41.890001] I [MSGID: 114046] [client-handshake.c:1222:client_setvolume_cbk] 0-testvol-client-0: Connected to testvol-client-0, attached to remote volume '/data/brick1/testvol'. [2016-11-02 14:26:41.890035] I [MSGID: 114047] [client-handshake.c:1233:client_setvolume_cbk] 0-testvol-client-0: Server and Client lk-version numbers are not same, reopening the fds [2016-11-02 14:26:41.917990] I [MSGID: 114035] [client-handshake.c:201:client_set_lk_version_cbk] 0-testvol-client-0: Server lk version = 1 [2016-11-02 14:26:41.919289] I [MSGID: 104041] [glfs-resolve.c:885:__glfs_active_subvol] 0-testvol: switched to graph 73332d32-3937-3130-2d32-3031362d3131 (0) [2016-11-02 14:26:41.922174] I [MSGID: 114021] [client.c:2365:notify] 0-testvol-client-0: current graph is no longer active, destroying rpc_client [2016-11-02 14:26:41.922269] I [MSGID: 114018] [client.c:2280:client_rpc_notify] 0-testvol-client-0: disconnected from testvol-client-0. Client process will keep trying to connect to glusterd until brick's port is available [2016-11-02 14:26:41.922592] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-gfapi: size=84 max=1 total=1 [2016-11-02 14:26:41.923044] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-gfapi: size=188 max=2 total=2 [2016-11-02 14:26:41.923419] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-gfapi: size=140 max=2 total=2 [2016-11-02 14:26:41.923442] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-client-0: size=1324 max=2 total=5 [2016-11-02 14:26:41.923458] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-dht: size=1148 max=0 total=0 [2016-11-02 14:26:41.923546] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-dht: size=3380 max=2 total=5 [2016-11-02 14:26:41.923815] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-read-ahead: size=188 max=0 total=0 [2016-11-02 14:26:41.923832] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-readdir-ahead: size=60 max=0 total=0 [2016-11-02 14:26:41.923844] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-io-cache: size=68 max=0 total=0 [2016-11-02 14:26:41.923856] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-io-cache: size=252 max=1 total=3 [2016-11-02 14:26:41.923877] I [io-stats.c:3747:fini] 0-testvol: io-stats translator unloaded [2016-11-02 14:26:41.924191] I [MSGID: 101191] [event-epoll.c:659:event_dispatch_epoll_worker] 0-epoll: Exited thread with index 2 [2016-11-02 14:26:41.924232] I [MSGID: 101191] [event-epoll.c:659:event_dispatch_epoll_worker] 0-epoll: Exited thread with index 1 2016-11-02T14:26:42.825041Z qemu-kvm: -drive file=gluster://s3/testvol/c7.img,if=none,id=drive-virtio-disk0,format=qcow2,cache=none: Could not read L1 table: Bad file descriptor The brick is available , runs on the same host and mounted in another directory using fuse (to confirm that it is indeed fine). If I downgrade the gluster server to 3.8.4 everything works fine. Anyone has seen this or has any idea how to debug? Regards, Radu

1 0

how to view a picture under shell?
by Glenn WANG 02 Nov '16

02 Nov '16

hi, all, is there any command(such asciiview) to view the picture under bash shell? I found the asciiview could meet my requirement, but how to install it on centos? thanks.

2 2

Download Centos 7.2 64 bit
by JEYARAJ 02 Nov '16

02 Nov '16

Hi All, How to download the Centos 7.2 64 bit.. If you see anyone please send me the link. Urgent. Regards, Jeyaraj. M

3 3

how to install amule in CertOS 7?
by Zhao Xiaoqi 01 Nov '16

01 Nov '16

I could find the amule package in CertOS7, is anyone know this? Thanks. Xiaoqi

1 0

Airprint to old printer using Centos server
by Gary Stainburn 31 Oct '16

31 Oct '16

Hi folks, I've found a number of articles on setting up a Linux / CUPS / Avahi server to allow airprinting, but they all seem to be quite old. Two questions: 1) Does anyone have a link for a more recent article, hopefully specifically for Centos7. 2) I'm on a structured, VLAN network. Will I have to put a WIFI card into my Centos server to give it a presence on the WIFI before this will work? Gary

4 4

Cannot boot CentOS 7 VM after updating Host CentOS 7 Kernel
by Paul R. Ganci 31 Oct '16

31 Oct '16

I have something very strange that occurred. After updating the kernel on my host CentOS 7 Dell 2950iii I have found that one of my CentOS 7 guest VMs will no longer boot... it just stops at the grub prompt (a second VM functions just fine). I have no idea why this problem occurred and have been unable to fix it. On google I have found several suggestions as to how to repair grub but so far none have worked. What I have found so far is this: grub> ls (hd0) (hd0,msdos2) (hd0,msdos1) grub> ls -l (hd0,1) (hd0,msdos2) (hd0,msdos1) Partition hd0,1: Filesystem type xfs, UUID 250008ab-9fde-4892-a8b7-a38882b1a1448 - Partition start at 1024KiB - Total size 512000Kib Partition hd0,msdos2: No known filesystem detected - Partition start at 513024KiB - Total size 12069888KiB Partition hd0,msdos1: Filesystem type xfs, UUID 250008ab-9fde-4892-a8b7-a38882b1a1448 - Partition start at 1024KiB - Total size 512000Kib So it appears that (hd0,1) and (hd0,msdos1) are the same partition containing the boot directory contents grub> set root=(hd0,1) grub> ls -l / DIR 20151002231139 grub/ DIR 20161013022100 grub2/ 10190975 20151219235512 initrd-plymouth.img 40655493 20150403032637 initramfs-0-rescue-6494b5d98adc4f66b0cf4c19a0f6ab66.img 4902656 20150403032703 vmlinuz0-rescue-6494b5d98adc4f66b0cf4c19a0f6ab66 252739 20161010232025 symvers-3.10.0-327.36.2.el7.x86_64.gz 29666884 20161013012551 initramfs-3.10.0-327.36.2.el7.x86_64.img 2965270 20161010231818 System.map-3.10.0-327.36.2.el7.x86_64 126431 20161010231818 config-3.10.0-327.36.2.el7.x86_64 5157936 20161010231819 vmlinuz-3.10.0-327.36.2.el7.x86_64 18119089 20161013022032 initramfs-3.10.0-327.36.2.el7.x86_64kdump.img Is that (hd0,msdos2) the root partition? If is, has it become corrupted somehow? Can I get this system to boot somehow so that I might fix the grub configuration? So far I have tried something along these lines with out success: grub> set root=(hd0,msdos2) grub> linux (hd0,1)/vmlinuz-3.10.0-327.36.2.el7.x86_64 root=(hd0,msdos2)/ grub> initrd initrd-plymouth.img grub> boot I just get this error: [ 2.128131] No filesystem could mount root, tried: [ 2.129038] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(1,0) [ 2.130537] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.10.0-327.36.2.el7.x86_64 #1 [ 2.132017] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 {remainder of stack dump} Does anyone have any ideas as to 1.) How to fix the problem? 2.) Why the problem occurred in the first place? 3.) How to go about debugging the problem? I would really like to know how this problem could have occurred on the 1 VM but the Host and 2nd Guest are just fine? Thanks for your help. -- Paul (ganci(a)nurdog.com) Cell: (303)257-5208

4 10

Disk near failure
by Alessandro Baggi 30 Oct '16

30 Oct '16

Hi list, on my workstation I've a md raid (mirror) for / on md1. This raid has 2 ssd as members (each corsair GT force 120GB MLC). This disks are ~ 5 years old. Today I've checked my ssds smart status and I get: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x000f 100 100 050 Pre-fail Always - 0/4754882 5 Retired_Block_Count 0x0033 100 100 003 Pre-fail Always - 0 9 Power_On_Hours_and_Msec 0x0032 000 000 000 Old_age Always - 17337h+11m+24.440s 12 Power_Cycle_Count 0x0032 099 099 000 Old_age Always - 1965 171 Program_Fail_Count 0x0032 000 000 000 Old_age Always - 0 172 Erase_Fail_Count 0x0032 000 000 000 Old_age Always - 0 174 Unexpect_Power_Loss_Ct 0x0030 000 000 000 Old_age Offline - 780 177 Wear_Range_Delta 0x0000 000 000 000 Old_age Offline - 3 181 Program_Fail_Count 0x0032 000 000 000 Old_age Always - 0 182 Erase_Fail_Count 0x0032 000 000 000 Old_age Always - 0 187 Reported_Uncorrect 0x0032 100 100 000 Old_age Always - 0 194 Temperature_Celsius 0x0022 033 042 000 Old_age Always - 33 (Min/Max 15/42) 195 ECC_Uncorr_Error_Count 0x001c 120 120 000 Old_age Offline - 0/4754882 196 Reallocated_Event_Count 0x0033 100 100 003 Pre-fail Always - 0 201 Unc_Soft_Read_Err_Rate 0x001c 120 120 000 Old_age Offline - 0/4754882 204 Soft_ECC_Correct_Rate 0x001c 120 120 000 Old_age Offline - 0/4754882 230 Life_Curve_Status 0x0013 100 100 000 Pre-fail Always - 100 231 SSD_Life_Left 0x0013 100 100 010 Pre-fail Always - 0 233 SandForce_Internal 0x0000 000 000 000 Old_age Offline - 6585 234 SandForce_Internal 0x0032 000 000 000 Old_age Always - 6885 241 Lifetime_Writes_GiB 0x0032 000 000 000 Old_age Always - 6885 242 Lifetime_Reads_GiB 0x0032 000 000 000 Old_age Always - 6244 The second ssd has very similar values. SSD_Life_Left is 0 since ~ 1years ago for each ssd. Today these disks are working without problems: # hdparm -tT /dev/md1 /dev/md1: Timing cached reads: 26322 MB in 2.00 seconds = 13181.10 MB/sec Timing buffered disk reads: 1048 MB in 3.00 seconds = 349.00 MB/sec # hdparm -tT /dev/sda /dev/sda: Timing cached reads: 26604 MB in 2.00 seconds = 13322.82 MB/sec Timing buffered disk reads: 1140 MB in 3.00 seconds = 379.87 MB/sec # hdparm -tT /dev/sdb /dev/sdb: Timing cached reads: 26258 MB in 2.00 seconds = 13148.38 MB/sec Timing buffered disk reads: 1140 MB in 3.00 seconds = 379.70 MB/sec # dd if=/dev/zero of=file count=2000000 2000000+0 record in 2000000+0 record out 1024000000 byte (1,0 GB) copied, 2,36335 s, 433 MB/s My ssds are failing? Thanks in advance.

8 22

Stupid vim question
by Alice Wonder 30 Oct '16

30 Oct '16

on very large files, vim will condense display - e.g. +-- 8 lines: static inline void php_openssl_rand_add_timeval() -------------------------------------------------------------------------------------------------------------------------------------------------- #endif +-- 29 lines: static int php_openssl_load_rand_file(const char * file, int *egdsocket, int *seeded) --------------------------------------------------------------------------------------------------------------- +-- 22 lines: static int php_openssl_write_rand_file(const char * file, int egdsocket, int seeded) ---------------------------------------------------------------------------------------------------------------- +-- 45 lines: static EVP_MD * php_openssl_get_evp_md_from_algo(zend_long algo) { ---------------------------------------------------------------------------------------------------------------------------------- +-- 42 lines: static const EVP_CIPHER * php_openssl_get_evp_cipher_from_algo(zend_long algo) { -------------------------------------------------------------------------------------------------------------------- How do I get it to stop doing that? It didn't use to do that as far as I remember, seems to be new to me in CentOS 7 - either that or I previously had something in me .vimrc that prevented it and I just forgot. I have tried searching but I just can't seem to get the proper search term to produce relevant results. using it in a terminal shell, the only way I ever use it.

3 6

Squid question
by paul.greene.va 29 Oct '16

29 Oct '16

I'm having issues getting squid to send traffic through a specific upstream gateway. I need for a MS WSUS server and a Symantec Endpoint Protection Manager to get through a squid proxy to get out to Microsoft and Symantec respectively to get MS patches and Symantec DAT files. The traffic needs to go through the squid proxy, through a firewall, and through an upstream McAfee gateway server. If it tries to take a path different than that upstream gateway to get out to the internet, it'll get dropped. However, once the traffic goes through the proxy, it tries to go directly to the vendor website and not go through the McAfee gateway, and therefore is getting blocked by the firewall. The traffic never reaches the McAfee gateway. If I configure a browser to use the proxy server and browse to some websites, it can get to http sites, but not https sites. Port 443 is what isn't getting through. I thought this line in squid.conf was supposed to send the traffic to an upstream cache_peer parent gateway, but I could easily be misunderstanding what its supposed to do. (I'm pretty new with squid) cache_peer <upstream gateway IP address> parent 8080 3130 proxy-only no-query no-netdb-exchange default login=<username>:<password> The Safe_ports and SSL_ports is the squid.conf default settings, and include both port 443 and port 80 traffic Thanks, PG

2 2

CentOS-announce Digest, Vol 140, Issue 10
by centos-announce-request＠centos.org 29 Oct '16

29 Oct '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2124 Important CentOS 5 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 28 Oct 2016 13:34:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2124 Important CentOS 5 kernel Security Update Message-ID: <20161028133409.GA23401(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2124 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2124.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 704498f1ec6f196882bf2dc25bf1f65d813ff84107a8476d5386663532f5206a kernel-2.6.18-416.el5.i686.rpm 0802fb601a7d1936e6607c747a0737c36791dcb2af156d6be30c81f2d0671465 kernel-debug-2.6.18-416.el5.i686.rpm bc8956c899a7fce81f371e15e9d4293297b1abb64da75c214ba086d046c6a9bd kernel-debug-devel-2.6.18-416.el5.i686.rpm db180509a4fa22d8e0151bed34f12dc1aa040b497f3ec0ba465388510a7b6df7 kernel-devel-2.6.18-416.el5.i686.rpm fcfabae71ac655ffaeaf5ab5f3a4c64d214684ef6f738ce2a5666c950ec9fdbd kernel-doc-2.6.18-416.el5.noarch.rpm 8489c9c93257895eb1b69ecebb173249fcf501ed10518bc2547222ec1c75f482 kernel-headers-2.6.18-416.el5.i386.rpm e7d00b03a37e0353c22343d3a996a33c893e220cccb1fb7f1981ba1d530b73ee kernel-PAE-2.6.18-416.el5.i686.rpm 36fefcec929f64c33b09d7e3f2924ce3c8b7d7a86d1272e7de731ad584a9b310 kernel-PAE-devel-2.6.18-416.el5.i686.rpm ad35ea63d8275960cafd5844f59babeb5199f2f7ba10df6e35f58f5cc63f3aa6 kernel-xen-2.6.18-416.el5.i686.rpm da05a5b93d8c3f1518ee7eb52792f655febc9b724301610bf7463fd91d14a41a kernel-xen-devel-2.6.18-416.el5.i686.rpm x86_64: cbedceb97046ac8274a6804c7da995dd8166c0d18f867e317e269091f197e68b kernel-2.6.18-416.el5.x86_64.rpm 31be4d5ec91c50abef7421dbdd3acd098d1d338b35a6b487cf4888071867852d kernel-debug-2.6.18-416.el5.x86_64.rpm 04a3c7d586ac2923ff1362cb1e72634cfe3aa54a5e84e175340043a51fa043ca kernel-debug-devel-2.6.18-416.el5.x86_64.rpm b0ce136908b8fb2575bdc11e882a705e494a0b1b423435f7f3d984556b7afd38 kernel-devel-2.6.18-416.el5.x86_64.rpm fcfabae71ac655ffaeaf5ab5f3a4c64d214684ef6f738ce2a5666c950ec9fdbd kernel-doc-2.6.18-416.el5.noarch.rpm 058216a53ff8b1bd75333ed1c700076f54365d209bfd4d54109299318edd1a49 kernel-headers-2.6.18-416.el5.x86_64.rpm 738534a54a6ca2d9b04e8116ec1147900eeff7b8a7b07f7fe6ca177ecaa51c66 kernel-xen-2.6.18-416.el5.x86_64.rpm 18a2ea3fe7513fd882ea8d9c84772bbfed55700e748a96fc0ebfacbab4da7380 kernel-xen-devel-2.6.18-416.el5.x86_64.rpm Source: 724e9e10418be6bbb6a1408b12344edcab9f745373013f337be3180d3877c7f4 kernel-2.6.18-416.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 140, Issue 10 ************************************************

1 0

NFS help
by Larry Martell 28 Oct '16

28 Oct '16

We have 1 system ruining Centos7 that is the NFS server. There are 50 external machines that FTP files to this server fairly continuously. We have another system running Centos6 that mounts the partition the files are FTP-ed to using NFS. There is a python script running on the NFS client machine that is reading these files and moving them to a new dir on the same file system (a mv not a cp). Almost daily this script hangs while reading a file - sometimes it never comes back and cannot be killed, even with -9. Other times it hangs for 1/2 hour then proceeds on. Coinciding with the hanging I see this message on the NFS server host: nfsd: peername failed (error 107) And on the NFS client host I see this: nfs: V4 server returned a bad sequence-id nfs state manager - check lease failed on NFSv4 server with error 5 The first client message is always at the same time as the hanging starts. The second client message comes 20 minutes later. The server message comes 4 minutes after that. Then 3 minutes later the script un-hangs (if it's going to). Can anyone shed any light on to what could be happening here and/or what I could do to alleviate these issues and stop the script from hanging? Perhaps some NFS config settings? We do not have any, so we are using the defaults. Thanks!

7 32

odd sendmail question
by Fred Smith 28 Oct '16

28 Oct '16

I've looked thru all the stuff at sendmail.org (or whatever its name is now, they seem to have gone corporate...) and don't see anything relating to this: I get a series of log entries in /var/log/maillog, once or twice a day at various times--not 12 or 24 hours apart. not always the identical series either. here's the latest one: Oct 27 21:28:55 fcshome sendmail[7939]: starting daemon (8.14.7): SMTP+queueing@01:00:00 Oct 27 21:28:56 fcshome sendmail[7980]: starting daemon (8.14.7): SMTP+queueing@01:00:00 Oct 27 21:28:56 fcshome sm-msp-queue[7992]: starting daemon (8.14.7): queueing@01:00:00 Oct 27 21:29:19 fcshome sendmail[8054]: starting daemon (8.14.7): SMTP+queueing@01:00:00 Oct 27 21:29:19 fcshome sm-msp-queue[8093]: starting daemon (8.14.7): queueing@01:00:00 Oct 27 21:29:19 fcshome sendmail[8095]: starting daemon (8.14.7): SMTP+queueing@01:00:00 Anyone have a clue what this is all about? and why so many? -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- Show me your ways, O LORD, teach me your paths; Guide me in your truth and teach me, for you are God my Savior, And my hope is in you all day long. -------------------------- Psalm 25:4-5 (NIV) --------------------------------

1 0

[OT] How to recover data from an IDE drive
by TE Dukes 27 Oct '16

27 Oct '16

Hello, As some may recall, I suffered a hardware failure of a 10 yr old IBM Netvista back in January. I was backing up my personal data, 'My Documents', to my CentOS server but I apparently didn't get my emails. It was a main board failure and I believe the data is still good on the hard drive. Only problem, its an IDE drive and my server and new PC have SATA drives. Is it possible to install the old drive as a secondary drive into a newer PC with SATA drives? If so, how do I do this? I need to access the emails. This was a Windows XP machine using Outlook as the mail client. TIA!!!!!!

6 8

python script from crontab - problems with proper execution
by Rafał Radecki 27 Oct '16

27 Oct '16

Hi All. I currently have a problem with proper invocation of a python script with cron. non-root $ crontab -l #Ansible: script_repo_scanner 55 11 * * * /usr/bin/python /path/script_repo_scanner.py --bb_user bb_user --bb_pass bb_pass --bd_log_dir /path/logs &> /path/script_repo_scanner.py.log And in /var/log/cron I see that cron executed the script but there is no log output in /path/script_repo_scanner.py.log and the script did not perform his job. So it looks like it has not been run despite entries in /var/log/cron ;) When I execute the command non-root$ /usr/bin/python /path/script_repo_scanner.py --bb_user bb_user --bb_pass bb_pass --bd_log_dir /path/logs &> /path/script_repo_scanner.py.log I get standard output (script logs to stdout) and script does its job. Any clue what I could be missing? BR, Rafal.

2 1

rpmbuild question
by m.roth＠5-cent.us 26 Oct '16

26 Oct '16

Hi, folks, Trying to build a package from a gzipped tarball of a python package. I'm trying to build it in /root/rpmbuild. Python has a way to build it, but it creates its own tree, with a clone of the rpmbuild tree under *that*. So, from the specfile, I'm trying to understand, after much googling, what I need to change the Source and BuildRoot to. My latest try for the latter is BuildRoot: %{_builddir}/BUILD/%{name}-%{version}-%{release} For Source0, I want to use the file in SOURCES. Anyone got a better example than what I've been googling? mark

3 2

SElinux suggestions needed: migrating backup service
by Leon Fauster 26 Oct '16

26 Oct '16

Hi folks, normally I have not so much to do with SElinux but I expected to get in touch sooner or later :-) I migrated a backup-system from El5 to EL6 and the rsync backup process is complaining about selinux attr's now. client <-> server (fetches via rsync -aHAX) client# sestatus SELinux status: disabled server# sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 24 Policy from config file: targeted for example, no label for this file on client side: client# ls -laZ /usr/share/zoneinfo/Africa/Bissau -rw-r--r-- root root /usr/share/zoneinfo/Africa/Bissau but on server side: rsync: rsync_xal_clear: lremovexattr("usr/share/zoneinfo/Africa/.Bissau.WaE4wj","security.selinux") failed: Permission denied (13) and server# ls -laZ /BACKUP/usr/share/zoneinfo/Africa/Bissau -rw-r--r--. root root unconfined_u:object_r:locale_t:s0 usr/share/zoneinfo/Africa/Bissau the local (server) destination is mounted like: server# cat /proc/mounts |grep BACKUP /dev/sdc1 /BACKUP ext3 rw,seclabel,nosuid,nodev,noatime,nodiratime,errors=continue,acl,barrier=1,data=ordered 0 0 this partition comes from the former system (EL5 productively used without labeling it and with SElinux disabled). I started to enable SElinux (permissive) on new systems and therefore disabling SElinux like it was done before on the former system is not an option. Any suggestions to avoid the default labeling "unconfined_u:object_r:locale_t:s0"? -- Thanks, LF

2 3

Anyone know anything about slurm on CentOS 7?
by m.roth＠5-cent.us 26 Oct '16

26 Oct '16

The recently-left programmer did *something*, and he didn't know what, and the guy who picked it up is working with me to find out why /var/log/messages is getting flooded with Oct 26 11:01:06 <servername> kernel: type=1105 audit(1477494066.569:642430): pid=108551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_krb5,pam_xauth acct="<user>" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' Oct 26 11:01:06 <servername> kernel: type=1106 audit(1477494066.620:642431): pid=108548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_krb5,pam_xauth acct="<user>" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' Oct 26 11:01:06 <servername> kernel: type=1104 audit(1477494066.620:642432): pid=108548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_rootok acct="<user>" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' Oct 26 11:01:11 <servername> su: (to <user>) root on none Oct 26 11:01:11 <servername> su: (to <user>) root on none Oct 26 11:01:11 <servername> systemd: Started Session c21839 of user <user>. Other folks can submit jobs to slurm, and we don't get anything like this. Feel free to contact me offlist.... mark Oct 26 11:01:11 <servername> systemd: Starting Session c21839 of user <user>.

4 4

Re: [CentOS] rpmbuild question
by James Hogarth 26 Oct '16

26 Oct '16

On 26 Oct 2016 6:17 pm, "Frank Cox" <theatre(a)melvilletheatre.com> wrote: > > On Wed, 26 Oct 2016 13:07:43 -0400 > m.roth(a)5-cent.us wrote: > > > I'm trying to build it in /root/rpmbuild. > > Don't do that. Install rpmdevtools so you build it under your home directory and avoid blowing up your system if there's an error. > First of all read up on how to properly build an RPM: https://www.hogarthuk.com/?q=node/11 Since this is python look up the Fedora python guidelines and follow those. Here's the spec for a recent python library I packaged: https://pkgs.fedoraproject.org/cgit/rpms/python-ntlm3.git/tree/python-ntlm3… If you don't need python3 you can strip that stuff out ... The Fedora python guidelines have a decent spec template you can crib, keep in mind the el6 caveats if you need to build for that with regards to macro definitions

1 0

CentOS-announce Digest, Vol 140, Issue 9
by centos-announce-request＠centos.org 26 Oct '16

26 Oct '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2098 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2016:2105 Important CentOS 6 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 25 Oct 2016 11:17:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2098 Important CentOS 7 kernel Security Update Message-ID: <20161025111710.GA35428(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2098 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2098.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: afb7e2a7c3a38185b99f092b70ec274888a5beb136a7e5077559cbd29b3f55d7 kernel-3.10.0-327.36.3.el7.x86_64.rpm 1b33324ee4de14c03dde2eefb91bdee83082dd4ced6c0b94f5ab3253690bce38 kernel-abi-whitelists-3.10.0-327.36.3.el7.noarch.rpm 000ccd89b45a28645202add878b5e37d9a482df68fd5cf12914611098724eea7 kernel-debug-3.10.0-327.36.3.el7.x86_64.rpm 430e59db8a03d01f25ff602e766b96b06157fb881db68ca0cb81f229ec2609d6 kernel-debug-devel-3.10.0-327.36.3.el7.x86_64.rpm 5522697d3b016509dd3744e714d61e5d177921d2a045588730c1cd41713ba2c1 kernel-devel-3.10.0-327.36.3.el7.x86_64.rpm b3fb9f23b5a2427d90e286350b1e7ded8ce6c3c2c5f7e191ee15bb8a70c981aa kernel-doc-3.10.0-327.36.3.el7.noarch.rpm ad0006f10828ff8890c5599982c57a5ed75a9fdc9aab90e0c8cba6422eb766ea kernel-headers-3.10.0-327.36.3.el7.x86_64.rpm 3639553b0daacf8b577a5576d732eadae1aeef30cf61ca15dd755e439b5a8578 kernel-tools-3.10.0-327.36.3.el7.x86_64.rpm b66a1c39f21081605dc3f19afc73236b5cb23a1de8d1bd1b14718165663de7ac kernel-tools-libs-3.10.0-327.36.3.el7.x86_64.rpm 97f1708f020dc0c19c9abead5cabdf813aa56ffdf6f8956811669019d74980d8 kernel-tools-libs-devel-3.10.0-327.36.3.el7.x86_64.rpm 6101abe377f9c3f96f9a0b32840ccde2d60835af96ffbb1c787841e0a98bb755 perf-3.10.0-327.36.3.el7.x86_64.rpm cd55f641ed83faeb33d35a7915c78f85f58a237612ffebdfd5f41e652472ce7b python-perf-3.10.0-327.36.3.el7.x86_64.rpm Source: fc7d9058db4d12308f80993c446175e0fd45e413ffafa7b9b2b0c38a432a4a3c kernel-3.10.0-327.36.3.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 26 Oct 2016 07:33:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2105 Important CentOS 6 kernel Security Update Message-ID: <20161026073313.GA49583(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2105 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2105.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: accab5355c8df90d69b9c0a510de38c8169f1ad3f68fb90a281a380bda814508 kernel-2.6.32-642.6.2.el6.i686.rpm 34f0fb180eb6366cfe4921bb2754cc5e1a71c653b4c8295f0d7c55b8fc2c5f22 kernel-abi-whitelists-2.6.32-642.6.2.el6.noarch.rpm f5ee02aae55cd82ffb76592f075ae17b867e45719664c0fbba58c2ddaaef42e5 kernel-debug-2.6.32-642.6.2.el6.i686.rpm bef23a94d5d10cbc9781973ccab1017608bc6fd4aaea4580e733291b4b1e5c0f kernel-debug-devel-2.6.32-642.6.2.el6.i686.rpm c174e85e65af3f6f3e58c91d5496ba442fce86a2069b67e888290ac4bb5ab979 kernel-devel-2.6.32-642.6.2.el6.i686.rpm a9b70c9690cd9cf1b3a5d8daf6405355d2fe036909702744a13c23aa6dadab24 kernel-doc-2.6.32-642.6.2.el6.noarch.rpm a718ceea93ff199e1be06ccbbaee1f9904185350d4c3dde7d5efddee95a8e17f kernel-firmware-2.6.32-642.6.2.el6.noarch.rpm a1390897ac937dfdc103e496723b3b46130d44b65f03661a9da7d923875d70ae kernel-headers-2.6.32-642.6.2.el6.i686.rpm 522934abb31cdcf2527d6be98e15c57f2d0449f3cb822d6f51fa8ab0ff802563 perf-2.6.32-642.6.2.el6.i686.rpm 8d26ca9e0f4274066d6f47a6444e53266398d1e2785c2ca7c30e782a930474a7 python-perf-2.6.32-642.6.2.el6.i686.rpm x86_64: e03a46c4ad13964946f4a0132514dd784718e64224318481449a9bac96c8a133 kernel-2.6.32-642.6.2.el6.x86_64.rpm 34f0fb180eb6366cfe4921bb2754cc5e1a71c653b4c8295f0d7c55b8fc2c5f22 kernel-abi-whitelists-2.6.32-642.6.2.el6.noarch.rpm 756b7fdf4e4c305ed0bcd5258b78333f2bd1dc0cc6183fcc7b49146237e50d6d kernel-debug-2.6.32-642.6.2.el6.x86_64.rpm bef23a94d5d10cbc9781973ccab1017608bc6fd4aaea4580e733291b4b1e5c0f kernel-debug-devel-2.6.32-642.6.2.el6.i686.rpm 06d0b2dbfe10f04f636faf37fd907111777ead7c406c386eeef4a7dc96a8896b kernel-debug-devel-2.6.32-642.6.2.el6.x86_64.rpm 0b8195fa45b0dff3af0a7bf6b77e0e320b4674aaf4b57cecc726457f02f208d7 kernel-devel-2.6.32-642.6.2.el6.x86_64.rpm a9b70c9690cd9cf1b3a5d8daf6405355d2fe036909702744a13c23aa6dadab24 kernel-doc-2.6.32-642.6.2.el6.noarch.rpm a718ceea93ff199e1be06ccbbaee1f9904185350d4c3dde7d5efddee95a8e17f kernel-firmware-2.6.32-642.6.2.el6.noarch.rpm f3f772ca476017a40222059108c2d2801ba6ea5ad3351cf03207fa2c99ce26f2 kernel-headers-2.6.32-642.6.2.el6.x86_64.rpm a817b22e777013c4757d8d27dbbc12478bca40b04ddfebc7129ea030870faa0d perf-2.6.32-642.6.2.el6.x86_64.rpm 49d01cc50bde501b650b9d50c4ae0da5a9a53c6e588531a0c4699c21f11ad643 python-perf-2.6.32-642.6.2.el6.x86_64.rpm Source: c53ef890315b8699634652e8520af16805ea4b9da607d336d22a7a971ecf486d kernel-2.6.32-642.6.2.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 140, Issue 9 ***********************************************

1 0

Ordering rich rules with firewalld
by Jeff White 26 Oct '16

26 Oct '16

Is there any way to order rich rules in firewalld? If I remove all rules and add them back in firewalld seems to put them in whatever order it feels like. Alternatively, how can I change the default policy of a firewalld zone? At the moment I don't see any way to have a zone accept traffic by default other than adding a rich rule allowing 0.0.0.0/0. -- Jeff White HPC Systems Engineer Information Technology Services - WSU

5 4

CVE-2016-5195
by aswathi.ok＠accenture.com 26 Oct '16

26 Oct '16

Hi Team, Could you please help us to know about the CVE-2016-5195 on CentOs. I have server running with CentOS Linux release 7.2.1511 (Core) , will this be effected? Thanks Aswathi ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com

3 2

"Shortcut" for creating a software RAID 60?
by Sorin Srbu 26 Oct '16

26 Oct '16

Hello all, Testing stuff virtually over here before taking it to the physical servers. I found a shortcut for creating a software RAID 10 ("--level=10"), device in CentOS 6. Looking at the below, I don't see anything about a shortcut for RAID 60. https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/htm l/Storage_Administration_Guide/s1-raid-levels.html Is RAID 60 an uncommon RAID-configuration, as compared to RAID 10, and this might be why it's missing? Not too cumbersome to first create two RAID 6-arrays, then add them to a RAID 0, but it does take some extra time. Besides, I haven't found any way to fail a member disk, as is possible to do when using RAID level 10. Am I missing something here? -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu, Sysadmin # Uppsala University # Dept of Medicinal Chemistry # Div of Org Pharm Chem # Box 574 # SE-75123 Uppsala # Sweden # # Phone: +46 (0)18-4714482 # Visit: BMC, Husargatan 3, D5:512b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # O< ASCII ribbon campaign - Against html E-mail # http://tinyurl.com/ascii-ribbon-campaign # # This message was not sent from an iProduct! # # Please consider the environment before printing this email. # Join the campaign at http://thinkBeforePrinting.org # # MotD follows: Pogo sticks make people jumpy.

3 7

Shutdown/Poweroff
by Chris Olson 25 Oct '16

25 Oct '16

Is there a good source of information about how Linux distributions and installers identify and interact with the hardware devices in a system? We are particularly interested in the shutdown process that leads to complete power-off. Thanks.

3 2

Problems with VPN Connection
by Macmor Mach 24 Oct '16

24 Oct '16

Good afternoon Best regard I'm having trouble with a CentOS server release 5.10, so that my users connect via VPN Intranet type, I could not find a solution, if I can collaborate appreciate them, attached logs when it worked and now. Log running: Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Re-using SSL/TLS context Mon Oct 10 13:50:02 2016 193.60.90.72:23683 LZO compression initialized Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Control Channel MTU parms [ L:1543 D:163 EF:66 EB:3 ET:3 EL:0 ] Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Data Channel MTU parms [ L:1543 D:1453 EF:43 EB:133 ET:3 EL:0 AF:3/1 ] Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Local Options hash (VER=V4): '31aebcbb' Mon Oct 10 13:50:02 2016 193.60.90.72:23683 Expected Remote Options hash (VER=V4): '3ebe1e45' Mon Oct 10 13:50:03 2016 193.60.90.72:23683 CRL CHECK OK: /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 VERIFY OK: depth=1, /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 CRL CHECK OK: /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 VERIFY OK: depth=0, /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 10 13:50:03 2016 193.60.90.72:23683 TLS: Username/Password authentication succeeded for username 'usuario6' Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Encrypt: Cipher 'DES-EDE-CBC' initialized with 128 bit key Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Decrypt: Cipher 'DES-EDE-CBC' initialized with 128 bit key Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 10 13:50:03 2016 193.60.90.72:23683 Control Channel: TLSv1, cipher TLSv3/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Mon Oct 10 13:50:03 2016 193.60.90.72:23683 [imawebs_common_cert] Peer Connection Initiated with 193.60.90.72:23683 Log no Operating: Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Re-using SSL/TLS context Mon Oct 24 10:46:31 2016 193.60.90.72:60903 LZO compression initialized Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Control Channel MTU parms [ L:1543 D:163 EF:63 EB:3 ET:3 EL:0 ] Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Data Channel MTU parms [ L:1543 D:1453 EF:43 EB:133 ET:3 EL:0 AF:3/1 ] Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Local Options hash (VER=V4): '31aebcbb' Mon Oct 24 10:46:31 2016 193.60.90.72:60903 Expected Remote Options hash (VER=V4): '3ebe1e45' Mon Oct 24 10:46:32 2016 193.60.90.72:60903 CRL CHECK OK: /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:32 2016 193.60.90.72:60903 VERIFY OK: depth=1, /C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWE ... mawebs.com </C=CO/ST=Valle/L=CALI/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=OpenVPN-CA/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:32 2016 193.60.90.72:60903 CRL CHECK OK: /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:32 2016 193.60.90.72:60903 VERIFY OK: depth=0, /C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=S ... mawebs.com </C=CO/ST=Valle/O=IMAWEBS_-_IMAWEBS/OU=Sistemas/CN=imawebs_common_cert/emailAddress=tecnologico(a)imawebs.com> Mon Oct 24 10:46:34 2016 193.60.90.72:60903 WARNING: Failed running command (--auth-user-pass-verify): external program exited with error status: 1 Mon Oct 24 10:46:34 2016 193.60.90.72:60903 TLS Auth Error: Auth Username/Password verification failed for peer Mon Oct 24 10:46:34 2016 193.60.90.72:60903 Control Channel: TLSv1, cipher TLSv3/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Mon Oct 24 10:46:34 2016 193.60.90.72:60903 [imawebs_common_cert] Peer Connection Initiated with 193.60.90.72:60903 -- MAch

2 1

Re: [CentOS] links browser update, now needs xWindows?
by Leonard den Ottolander 24 Oct '16

24 Oct '16

Hello Richard, On Mon, 2016-10-24 at 03:39 -0400, Richard Beels wrote: > The new update for links in EPEL takes it from 2.8-2 to 2.13-1. But > yum includes 21 xWindows dependencies that weren't required before. > > I'd rather not install them - it's a headless server. Was this intentional? Very valid question but you should direct your question at the EPEL maintainer of this package: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraprojec… Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

1 0

Re: [CentOS] CentOS on new Dell
by Michael B Allen 23 Oct '16

23 Oct '16

On Thu, Sep 29, 2016 at 9:18 PM, John R Pierce <pierce(a)hogranch.com> wrote: > On 9/29/2016 5:55 PM, Michael B Allen wrote: >> >> It seems optical drives are gone. Do I boot the iso from USB or what's >> the procedure now? > > yup, put iso on USB, go to town. Mmn, that didn't work. I dd'd the latest Fedora Live iso onto a USB drive, put it into a brand spanking new Dell Latitude E7470, hit F12 at Dell logo and got "Selected boot device failed". Do I need to make it bootable using fdisk or some such? Mike

5 5

I added my user to a group last week, and now the user isn't in the group
by Xuwen Fang 23 Oct '16

23 Oct '16

Hello everyone, I added my user account to a group called "www-pub" for easier manipulations on web files on my server. And today I found that my account was not in the group "www-pub" any longer..... What I did to add my account to the group is like "sudo usermod -a -G www-pub myaccount". Is there anything wrong? Thanks for any suggestions. Sincerely, Xuwen

2 1

CentOS-announce Digest, Vol 140, Issue 8
by centos-announce-request＠centos.org 22 Oct '16

22 Oct '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2093 Important CentOS 6 bind Security Update (Johnny Hughes) 2. CEBA-2016:2096 CentOS 6 tzdata BugFix Update (Johnny Hughes) 3. CEBA-2016:2096 CentOS 7 tzdata BugFix Update (Johnny Hughes) 4. CESA-2016:2093 Important CentOS 5 bind Security Update (Johnny Hughes) 5. CESA-2016:2094 Important CentOS 5 bind97 Security Update (Johnny Hughes) 6. CEBA-2016:2096 CentOS 5 tzdata BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 21 Oct 2016 21:24:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2093 Important CentOS 6 bind Security Update Message-ID: <20161021212440.GA50006(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2093 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2093.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 26593a0bc69f60721bfbe602702fed0b1b6a9052689c8a38c205d7990bcef96f bind-9.8.2-0.47.rc1.el6_8.2.i686.rpm 9fdf51a04607a7ae65ee4c1c6fd66baa8731dd46568cac59142dd058a2de36c3 bind-chroot-9.8.2-0.47.rc1.el6_8.2.i686.rpm 06815b94fb05c3aba8a7b46ceaf5d90cd9d7f218069e0692e657616976bf34e0 bind-devel-9.8.2-0.47.rc1.el6_8.2.i686.rpm ffd6cac5b2e46c019c85a7d542d0697bf1f879fb98220fccb63df83a287bee18 bind-libs-9.8.2-0.47.rc1.el6_8.2.i686.rpm 12ee83e91fc71dd47fee86b28919b3be06cbdd0c9b788aafd1616d4d64e60653 bind-sdb-9.8.2-0.47.rc1.el6_8.2.i686.rpm 32208e49b5afc026bb1c370aee1f19c76be6290b54ddfa530d9d1619f64b12d8 bind-utils-9.8.2-0.47.rc1.el6_8.2.i686.rpm x86_64: 80e27194242661a3531d16838ff345e8614418ead4367d74e8386f0a47eec445 bind-9.8.2-0.47.rc1.el6_8.2.x86_64.rpm 415c2f5ca5d5699973739f86bd7fc06dc3c05631c75fd3890acba9f3c48b7132 bind-chroot-9.8.2-0.47.rc1.el6_8.2.x86_64.rpm 06815b94fb05c3aba8a7b46ceaf5d90cd9d7f218069e0692e657616976bf34e0 bind-devel-9.8.2-0.47.rc1.el6_8.2.i686.rpm 647c07e08b0d72a9e272dbb2193c47e9f2a0402b9b4191bbeeef4b196f744919 bind-devel-9.8.2-0.47.rc1.el6_8.2.x86_64.rpm ffd6cac5b2e46c019c85a7d542d0697bf1f879fb98220fccb63df83a287bee18 bind-libs-9.8.2-0.47.rc1.el6_8.2.i686.rpm 9253860386f45cdb54a64f06b8622a0773923732993ccc0a75d23e1eb48d30e0 bind-libs-9.8.2-0.47.rc1.el6_8.2.x86_64.rpm 2d7c635a0b0d89d7802d6658397513fc949a739713be929ed8e7110869ddacb0 bind-sdb-9.8.2-0.47.rc1.el6_8.2.x86_64.rpm 312bbcea824c1bfe24d85dc0ba93cab754e516c726844a6fecbc83b44cff54e6 bind-utils-9.8.2-0.47.rc1.el6_8.2.x86_64.rpm Source: 2b06618b10b7afb41bd17f9c270f45254cfe447ba815187915caed02dc07399c bind-9.8.2-0.47.rc1.el6_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 21 Oct 2016 21:25:01 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:2096 CentOS 6 tzdata BugFix Update Message-ID: <20161021212501.GA50096(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:2096 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-2096.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0052e3c0edefe1f8915fc34e779b24606c127af41012674831c14f87d51f7e16 tzdata-2016h-1.el6.noarch.rpm ddbc1f33f59568dd99138f53deb8eb029383ec68d015461eeb63903afd05267e tzdata-java-2016h-1.el6.noarch.rpm x86_64: 0052e3c0edefe1f8915fc34e779b24606c127af41012674831c14f87d51f7e16 tzdata-2016h-1.el6.noarch.rpm ddbc1f33f59568dd99138f53deb8eb029383ec68d015461eeb63903afd05267e tzdata-java-2016h-1.el6.noarch.rpm Source: b0fb605d1e065f012f89b608e61a6ef121c5a73552f6dbce2be2c448b3370944 tzdata-2016h-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 21 Oct 2016 21:58:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:2096 CentOS 7 tzdata BugFix Update Message-ID: <20161021215806.GA50572(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:2096 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-2096.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 81adad4d2e47225ac0063c0cb9cd0466fc625cb76098c9427ade10b6ad2b4ada tzdata-2016h-1.el7.noarch.rpm 6502b4d41d55440d0f706c6bb31b56e2bf480cfc9a0a207c190d7f1b22c5771c tzdata-java-2016h-1.el7.noarch.rpm Source: 9dc0352fae7e07c4c56cc878ee3abef747ec79f67c837089ea6dfba607dbca9d tzdata-2016h-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Fri, 21 Oct 2016 22:00:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2093 Important CentOS 5 bind Security Update Message-ID: <20161021220043.GA28805(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2093 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2093.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1c7927fec6b2966dd9e0b8c9c28bc8e384638db4dabea4f216f5fe649b65424e bind-9.3.6-25.P1.el5_11.10.i386.rpm f05787e1d6d3824b875923a91f9b71c73342190fcacdf34ed7e426f88eda16d1 bind-chroot-9.3.6-25.P1.el5_11.10.i386.rpm 8328c709e2ac7203f2a33f5bc591262900fa4c3a4715f5224ed3fbe1848bc2d3 bind-devel-9.3.6-25.P1.el5_11.10.i386.rpm ac09b6c1a8368ed464a8bae61f4a2025b2e617c8f77bdd90b14ce5a3cd5010c3 bind-libbind-devel-9.3.6-25.P1.el5_11.10.i386.rpm 73318c5eb63ea15dc6e31cf23fbb23e0012d860e9e3726c18a9bbec99df7a485 bind-libs-9.3.6-25.P1.el5_11.10.i386.rpm 1b06ccd1b79c863c7459cb4cfa1a6d5cf18b06b20d141dbceac8be23275c3606 bind-sdb-9.3.6-25.P1.el5_11.10.i386.rpm e5f0a486cb2b6808f3f1d5b81f42ebab2927d5e2d12abcf21a22d44106cac52e bind-utils-9.3.6-25.P1.el5_11.10.i386.rpm 592201761602a121208cefad75f7d955df9a89d58be06c0b9db978322f47fb94 caching-nameserver-9.3.6-25.P1.el5_11.10.i386.rpm x86_64: 3cff5f207d927f99e5d342397badeb1513485699ae0aefda9a5562f99a51f560 bind-9.3.6-25.P1.el5_11.10.x86_64.rpm 5d41ef95a0fc3a3635421def7792c4971aef60fa968e31f050805998bdf530f6 bind-chroot-9.3.6-25.P1.el5_11.10.x86_64.rpm 8328c709e2ac7203f2a33f5bc591262900fa4c3a4715f5224ed3fbe1848bc2d3 bind-devel-9.3.6-25.P1.el5_11.10.i386.rpm 73ea232936f464e5eb90aff556e7b72d5fc43809596b7ba3edf006fa0c8ffd37 bind-devel-9.3.6-25.P1.el5_11.10.x86_64.rpm ac09b6c1a8368ed464a8bae61f4a2025b2e617c8f77bdd90b14ce5a3cd5010c3 bind-libbind-devel-9.3.6-25.P1.el5_11.10.i386.rpm 6f7dfba454de9f05434380cfc30dc19558d7b5ea1b2e68688cd642140858b793 bind-libbind-devel-9.3.6-25.P1.el5_11.10.x86_64.rpm 73318c5eb63ea15dc6e31cf23fbb23e0012d860e9e3726c18a9bbec99df7a485 bind-libs-9.3.6-25.P1.el5_11.10.i386.rpm a8233281551c9185260b88df6c0b5c0279986edfbf68042b46d2e023595f41ed bind-libs-9.3.6-25.P1.el5_11.10.x86_64.rpm c503f14920c2853330733ab283c2e9099fc77a0815f6264f554fb61f77825f90 bind-sdb-9.3.6-25.P1.el5_11.10.x86_64.rpm a4e2bc74b6044ce313b9897c2d9f2fbd1ebe372426e54db186125ac08669d2ef bind-utils-9.3.6-25.P1.el5_11.10.x86_64.rpm 47ca6185600538c59be505ecdbf0dd837344ca19ff68bef651a988b20f71cde4 caching-nameserver-9.3.6-25.P1.el5_11.10.x86_64.rpm Source: a87cf41ad9e8b99cd2f3fa1641d82d570b4b9ff81a35ca92c64549a08b7ef16a bind-9.3.6-25.P1.el5_11.10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 5 Date: Fri, 21 Oct 2016 22:01:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2094 Important CentOS 5 bind97 Security Update Message-ID: <20161021220110.GA28943(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2094 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2094.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bbb7a04f44606083f62ae69cea90bb29360a7e75716b3cc05f681d34b8e907a7 bind97-9.7.0-21.P2.el5_11.8.i386.rpm 01a297bc02856208edd495ef3eb03a754b8d63a4944547150a75a3293ec2cdb7 bind97-chroot-9.7.0-21.P2.el5_11.8.i386.rpm 339429fe3711f3a9f3f8cb00b5486286fc76c519eae1fa8c8f1bf52b62591aba bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm 908f02de2180a6c483046992fafd710f7361c3785d3606a479ba74e4b27f1ee8 bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm 9787163334d94a88b3cea8f1fb434ea0395787edb61307510a1aa0d249bcdb45 bind97-utils-9.7.0-21.P2.el5_11.8.i386.rpm x86_64: 1b2296acb71cb6ee456daeb7a957aaa9bc3c573ba7151778f8132b466c80752e bind97-9.7.0-21.P2.el5_11.8.x86_64.rpm aa9f002b79ce397438391b00c945cca4124bb70f034fd774572d771f14ee182f bind97-chroot-9.7.0-21.P2.el5_11.8.x86_64.rpm 339429fe3711f3a9f3f8cb00b5486286fc76c519eae1fa8c8f1bf52b62591aba bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm 61ce23c7b9f3765239a389a1543c3f85ac862084325e6f6c10297de933294630 bind97-devel-9.7.0-21.P2.el5_11.8.x86_64.rpm 908f02de2180a6c483046992fafd710f7361c3785d3606a479ba74e4b27f1ee8 bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm 18771645ae922c3bebe44aaf1e9376105509432713eaa37d6fcc07fd87dbeb1a bind97-libs-9.7.0-21.P2.el5_11.8.x86_64.rpm f9526dbaa32e4d74e071d72255363b4fa53a92fabd5d8af00765c5f435fae840 bind97-utils-9.7.0-21.P2.el5_11.8.x86_64.rpm Source: 4ddc9ccf10398546bfd8ed635e531368e4d02030de807b355f0b53f28bff1784 bind97-9.7.0-21.P2.el5_11.8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 6 Date: Fri, 21 Oct 2016 22:01:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:2096 CentOS 5 tzdata BugFix Update Message-ID: <20161021220141.GA29044(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:2096 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-2096.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5f017688459d59931f6c59681406b5a2b064a12fa713668a487f62e039b32d3e tzdata-2016h-1.el5.i386.rpm 5dfb4fb30451fe97d0b897615d3cafd3d6e0893dd8d5ec88bcd6253778b9d90f tzdata-java-2016h-1.el5.i386.rpm x86_64: 3d8b6021853f1f6b10da37209f7a27405118bd479aeb6e1f6a2f5b73da023dcf tzdata-2016h-1.el5.x86_64.rpm 94f250609aa3c4ef1a0f24e4dba952bb116664392878e9f9833ae2a0880de426 tzdata-java-2016h-1.el5.x86_64.rpm Source: 5a7f8a9b948ad2fba327aebeec1bb4e6d894c104f83ae540e4f1a65802fcce30 tzdata-2016h-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 140, Issue 8 ***********************************************

1 0

Announcement: new yum repos
by Richard Grainger 22 Oct '16

22 Oct '16

Hi I've created a couple of new public yum repos suitable for CentOS 7: ergel (Extra Ruby Gems for Enterprise Linux) repo: https://harbottle.gitlab.io/ergel/7/x86_64/ homepage: https://gitlab.com/harbottle/ergel epmel (Extra Perl Modules for Enterprise Linux) repo: https://harbottle.gitlab.io/epmel/7/x86_64/ homepage: https://gitlab.com/harbottle/epmel The repos are designed to work in conjunction with EPEL, so you will need this installed first and they should be "safe" (they don't upgrade packages in base). Feedback and requests for additions welcome! Cheers Richard

2 1

Re: [CentOS] NFS help
by m.roth＠5-cent.us 21 Oct '16

21 Oct '16

Larry Martell wrote: > On Fri, Oct 21, 2016 at 11:42 AM, <m.roth(a)5-cent.us> wrote: >> Larry Martell wrote: >>> On Fri, Oct 21, 2016 at 11:21 AM, <m.roth(a)5-cent.us> wrote: >>>> Larry Martell wrote: >>>>> We have 1 system ruining Centos7 that is the NFS server. There are 50 external machines that FTP files to this server fairly continuously. >>>>> >>>>> We have another system running Centos6 that mounts the partition the files are FTP-ed to using NFS. >>>> <snip> >>>> What filesystem? >>> >>> Sorry for being dense, but I am not a sys admin, I am programmer and we have no sys admin. I don't know what you mean by your question. I am NFS mounting to what ever the default filesystem would be on a CentOS6 system. >> >> This *is* a sysadmin issue. > > I know it's a sysadmin issue. I wish we had one, but we don't and I am the one being asked to fix things. Seriously, get a really good book on doing sysadmin work. 10 years ago, I was recommending O'Reilly's one, "Essential Systems Administration", by Aeleen Frisch. It saved my butt, I assure you, 21 years ago, when I had the same thing happen. > >> Each partition is formatted as a specific type >> of filesystem. The standard Linux filesystems for Upsteam-descended have been ext3, then ext4, and now xfs. Tools to manipulate xfs will not work with extx, and vice versa. <snip> > I have no remote access to this system, only on site, so it will have to wait until Monday for me to check. (The system is in Japan and I traveled from NY to Japan, where I am now, just to fix this issue.) Oh, geez, they want you to fix this... but you can't ssh in? This is *so* stupid. Here, fix this, and before you start, let me put an eyepatch over one eye, ties one hand behind your back, and prevent you from using manpages.... Best of luck, guy. mark

2 1

photos on iPhone 6
by J Martin Rushton 21 Oct '16

21 Oct '16

A bit of a perennial I'm afraid. My wife has filled up her iPhone 6 with photos, and wants them moved onto my computer. I'm running CentOS 7 patched about 30 minutes ago. Needless to say the computer can't see the data on the iPhone, though it does recognise the phone as an iPhone. Any suggestions (well any that don't involve a steam roller, sledge hammer or GBH to the whole of Apple Inc)? $ uname -a Linux tamar.home 3.10.0-327.36.1.el7.x86_64 #1 SMP Sun Sep 18 13:04:29 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux Thanks, Martin

11 15

VM disk question
by Jerry Geis 21 Oct '16

21 Oct '16

I have VMPlayer 12 running a CentOS 7 disk. Works fine. However I wish to change the disk from UUID booting (fstab) to the old style LABEL. (so I can export it and use on another machine). fdisk -l /dev/sda Disk /dev/sda: 21.5 GB, 21474836480 bytes, 41943040 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x0001c6d3 Device Boot Start End Blocks Id System /dev/sda1 * 2048 20482047 10240000 83 Linux /dev/sda2 20482048 22530047 1024000 82 Linux swap / Solaris /dev/sda3 22530048 41943039 9706496 83 Linux however when I run: e2label /dev/sda1 / e2label: Bad magic number in super-block while trying to open /dev/sda1 Couldn't find valid filesystem superblock. Three questions: 1) Am I doing something wrong? 2) Is there a better way? 3) How do I support VM formats (VBox, VHD and VMWare) easily? Thanks, Jerry

4 3

CentOS-announce Digest, Vol 140, Issue 7
by centos-announce-request＠centos.org 21 Oct '16

21 Oct '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2079 Critical CentOS 6 java-1.8.0-openjdk Security Update (Johnny Hughes) 2. CESA-2016:2079 Critical CentOS 7 java-1.8.0-openjdk Security Update (Johnny Hughes) 3. CEEA-2016:2053 CentOS 7 qed Enhancement Update (Johnny Hughes) 4. CEEA-2016:2053 CentOS 7 qede Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Oct 2016 14:40:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2079 Critical CentOS 6 java-1.8.0-openjdk Security Update Message-ID: <20161019144038.GA1839(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2079 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2079.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 60cf77046bec5d09e30ac37298ae03030f7f12bdf1c85991e895164d43f23df1 java-1.8.0-openjdk-1.8.0.111-0.b15.el6_8.i686.rpm 16bee782dac78dcb28c9b193b93507e7dbcf3e4486fcefb31524c546939a32d8 java-1.8.0-openjdk-debug-1.8.0.111-0.b15.el6_8.i686.rpm 7eef730957fd3bda1f05b693c2d0c8db7b76b79efd55f8dd02a5f748a556ea38 java-1.8.0-openjdk-demo-1.8.0.111-0.b15.el6_8.i686.rpm e523ee91414bf1d2bc968549379ed5236c802b6033d9532f005e703f07d60390 java-1.8.0-openjdk-demo-debug-1.8.0.111-0.b15.el6_8.i686.rpm c2a8ce469379455489ca8244f24f0b746d42b3ecfbb053545daf7a322114ed5f java-1.8.0-openjdk-devel-1.8.0.111-0.b15.el6_8.i686.rpm 03f53cb8d4e9c68801459ee488874072965d2302229f98679ee12c42965f8b59 java-1.8.0-openjdk-devel-debug-1.8.0.111-0.b15.el6_8.i686.rpm 78838b4b92f42d353a1bd2c0b93f1e1680abd8e700cfb6ea87cda478d70a6a0a java-1.8.0-openjdk-headless-1.8.0.111-0.b15.el6_8.i686.rpm a9d5f8ec69fe74b5c2ca61844b708880a12a4c6a9fb02b8e47ab09e036075a3f java-1.8.0-openjdk-headless-debug-1.8.0.111-0.b15.el6_8.i686.rpm 39eb4adf71a189d04374ac6f334a8575e6305bd3f9740b28b4afaa09f0c3dea8 java-1.8.0-openjdk-javadoc-1.8.0.111-0.b15.el6_8.noarch.rpm d95e4b1f0f00548357f68bea0ba618ca57c05c83c6126801e7486f927505ed9d java-1.8.0-openjdk-javadoc-debug-1.8.0.111-0.b15.el6_8.noarch.rpm 75d481665ef258552464259d83abed1b217c156b4b6ff3e5f7dacea0f70643a3 java-1.8.0-openjdk-src-1.8.0.111-0.b15.el6_8.i686.rpm 341c0b2114349353d5ffd7259e203d84639364eadc7dbfac3c5f715ec06baf05 java-1.8.0-openjdk-src-debug-1.8.0.111-0.b15.el6_8.i686.rpm x86_64: f4499b1d6b31f133b89baa832794ff0c37f9ea9e87850172e71e08c1e0c438b6 java-1.8.0-openjdk-1.8.0.111-0.b15.el6_8.x86_64.rpm af76e86cf568bb3274b8ba6c62c48a8a856269264b036350591591575df15772 java-1.8.0-openjdk-debug-1.8.0.111-0.b15.el6_8.x86_64.rpm 1b0945e04fb8ffbadef61357bee914ee494988886eb91b2687601f4f763393e2 java-1.8.0-openjdk-demo-1.8.0.111-0.b15.el6_8.x86_64.rpm d5ec7926cdbb8bbbb3b25403e435082f8cbe14ee88fcb63f4aab01e8c24794cd java-1.8.0-openjdk-demo-debug-1.8.0.111-0.b15.el6_8.x86_64.rpm 33063935b9ff95f54b9d094503eba5f90dcfcc3c8041f3d7bbb9c7e61768ce07 java-1.8.0-openjdk-devel-1.8.0.111-0.b15.el6_8.x86_64.rpm c55e83f7ffff3cdf85dab61c716033b26739ee8c845178cee0aae54423305947 java-1.8.0-openjdk-devel-debug-1.8.0.111-0.b15.el6_8.x86_64.rpm bffd148c22ea1410222cf8542ce5c5ee2288db9510648a0fda8345d2abf9fbe7 java-1.8.0-openjdk-headless-1.8.0.111-0.b15.el6_8.x86_64.rpm 28f12d2c23f0e6f48f40a68f25ca5b8d87399b96139919a32f10a1c709148e16 java-1.8.0-openjdk-headless-debug-1.8.0.111-0.b15.el6_8.x86_64.rpm 39eb4adf71a189d04374ac6f334a8575e6305bd3f9740b28b4afaa09f0c3dea8 java-1.8.0-openjdk-javadoc-1.8.0.111-0.b15.el6_8.noarch.rpm d95e4b1f0f00548357f68bea0ba618ca57c05c83c6126801e7486f927505ed9d java-1.8.0-openjdk-javadoc-debug-1.8.0.111-0.b15.el6_8.noarch.rpm c02bf67c37e94832bcc73b9f5af6eca847ad56e318ffc39a77b2799354130afb java-1.8.0-openjdk-src-1.8.0.111-0.b15.el6_8.x86_64.rpm 393b67b81738b1cd12ca1d1b883759338ea6652264fe34f14afb2b5aa7a7fb5d java-1.8.0-openjdk-src-debug-1.8.0.111-0.b15.el6_8.x86_64.rpm Source: a23a87514ad0c6f825ebd5ff9e2d950521d8de88086d4abfc7a0b6eec29a4e30 java-1.8.0-openjdk-1.8.0.111-0.b15.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 19 Oct 2016 18:46:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2079 Critical CentOS 7 java-1.8.0-openjdk Security Update Message-ID: <20161019184608.GA10174(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2079 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2079.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 028b7d73cab8947df0f2fe08c028d6349aa7cb6a19ef01ac4ddc78939ab25f61 java-1.8.0-openjdk-1.8.0.111-1.b15.el7_2.x86_64.rpm 83fc734f15cd1891fb0c5fd5e692df9048cd7dc56ec468e7281eb2eaf6654e20 java-1.8.0-openjdk-accessibility-1.8.0.111-1.b15.el7_2.x86_64.rpm 84a58a7dab05f4230d4c30b35e0649de9e0f0acd1ea984428da31ca4d91dab92 java-1.8.0-openjdk-accessibility-debug-1.8.0.111-1.b15.el7_2.x86_64.rpm 02488f4200afbba9b86c6f3cbf6054778afaf24164675fe1a7e3eca113999999 java-1.8.0-openjdk-debug-1.8.0.111-1.b15.el7_2.x86_64.rpm 7c5e7dc04f1286a18c1c5df06fa73dd5640ef9f631c91c2a3cd6c883cb7acf68 java-1.8.0-openjdk-demo-1.8.0.111-1.b15.el7_2.x86_64.rpm 11b2902c6c4d7dfe82b869903c894b05c7b768c337469f36310fc43b5b4611df java-1.8.0-openjdk-demo-debug-1.8.0.111-1.b15.el7_2.x86_64.rpm 03433ad6c3f91643b9744acf870b875d7418593c60c31eb5cfe32f4619112a8f java-1.8.0-openjdk-devel-1.8.0.111-1.b15.el7_2.x86_64.rpm 70c0c17a4dced2896b0f1d4c622615e2e3bfce16042017d0e424496a1386d680 java-1.8.0-openjdk-devel-debug-1.8.0.111-1.b15.el7_2.x86_64.rpm ce6eed8d95c73553e83669594284cfb4d43959761499f1a2d90e040352eb8b1c java-1.8.0-openjdk-headless-1.8.0.111-1.b15.el7_2.x86_64.rpm b9f8e783b3f82a3fe567a6f343a3e7ab5acf3d838fb2bdf6670da3df52bc11bd java-1.8.0-openjdk-headless-debug-1.8.0.111-1.b15.el7_2.x86_64.rpm 5f2d8974a59c970489994bd9f74194122cfccd1d48e3078977e9840cccd4bae4 java-1.8.0-openjdk-javadoc-1.8.0.111-1.b15.el7_2.noarch.rpm 99764694bbfc61c98497d90f482f11b29edeb9a14ed583386e1fcd1f7685a003 java-1.8.0-openjdk-javadoc-debug-1.8.0.111-1.b15.el7_2.noarch.rpm 241163cc6cd5f82476b489dcaa3d02e2e97f71606de63af94178f0538648b9e2 java-1.8.0-openjdk-src-1.8.0.111-1.b15.el7_2.x86_64.rpm 749d9c3495ec107da97f6044016972877c75346e06f358559d8beb1dd0b013ad java-1.8.0-openjdk-src-debug-1.8.0.111-1.b15.el7_2.x86_64.rpm Source: 14dd2d91e721496277c119284a579fe2efd2433e3ee1841053bef94f5fb2f455 java-1.8.0-openjdk-1.8.0.111-1.b15.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 19 Oct 2016 18:47:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:2053 CentOS 7 qed Enhancement Update Message-ID: <20161019184706.GA10243(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:2053 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-2053.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d377a4d756626c36b06cba43245271483cde612665f7824c2dd4e92ce0a658bd kmod-qed-8.7.1.20-1.el7_2.x86_64.rpm 270416cf1eaa63e45787df70ea96e08b62fa9727617c90c2565db18ae29d06b0 kmod-qed-firmware-8.7.1.20-1.el7_2.x86_64.rpm Source: 9177a9008d81b6e116c7108382229015c9c2794581427d4f712fbab122ea05ad qed-8.7.1.20-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 19 Oct 2016 18:47:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:2053 CentOS 7 qede Enhancement Update Message-ID: <20161019184717.GA10299(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:2053 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-2053.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 134fd2c3fe3439169678c5c57518f9231804ee34098e7f169bca57b7179886ae kmod-qede-8.7.1.20-1.el7_2.x86_64.rpm Source: 0f176dc6e202d09ea6e200f17f6ae7f66ea66983c2f5ee5564faf17c99f5782e qede-8.7.1.20-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 140, Issue 7 ***********************************************

2 1

xdgurl
by Mark LaPierre 21 Oct '16

21 Oct '16

Has anyone figured out how to make Firefox 45.4.0 on CentOS 6 use xdgurl to handle xdg:// URLs? Google is full of suggestions that don't work. When I select a an xdg:// link I don't get a dialog asking me what to do like Google says I will. Instead I get a message that says Firefox doesn't have a clue how to handle this URL. Do you want to try again? I tried about:config I added: network.protocol-handler.external.xdg user set string /usr/bin/zdgurl Still no joy. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

3 4

SSH Weak Ciphers
by Clint Dilks 20 Oct '16

20 Oct '16

Hi, In a recent security review some systems I manage were flagged due to supporting "weak" ciphers, specifically the ones listed below. So first question is are people generally modifying the list of ciphers supported by the ssh client and sshd? On CentOS 6 currently it looks like if I remove all the ciphers they are concerned about then I am left with Ciphers aes128-ctr,aes192-ctr,aes256-ctr for both /etc/ssh/sshd_config and /etc/ssh/ssh_config. Is just using these three ciphers like to cause me any problems? Could having so few ciphers be creating a security concern itself? Thanks The following weak client-to-server encryption algorithms are supported by the remote service: rijndael-cbc(a)lysator.liu.se arcfour256 arcfour128 aes256-cbc 3des-cbc aes192-cbc blowfish-cbc cast128-cbc arcfour aes128-cbc The following weak server-to-client encryption algorithms are supported by the remote service: rijndael-cbc(a)lysator.liu.se arcfour256 arcfour128 aes256-cbc 3des-cbc aes192-cbc blowfish-cbc cast128-cbc arcfour aes128-cbc

9 18

Bacula Restore
by Alessandro Baggi 20 Oct '16

20 Oct '16

Hi list, another question about bacula, but this time about restoring backups. I've a server that I must backup every day. My plan is: from mon to sat incrimental backup and on sunday full backup. When I will perform a restore I must restore from last valid full backup and then all valid incremental backup from last backup to specific date. This server has aweb managed application where user can update data or delete data. Suppose that after a full backup, on monday the user upload a file and incrimental backup is performed. On tuesday the user remove the uploaded file and backup is performed. Suppose that I want perform a restore of these jobs. I restore full, mon-incr and I found on restore path file uploaded on monday. When restoring tuesday incr (where the uploaded file was not present), on restore path I will found the uploaded file or bacula remove it with tuesday incremental backup restore? Sorry but today I can't try this due to time issue. Thanks in advance.

3 4

port running but connection refused
by Jerry Geis 19 Oct '16

19 Oct '16

Hi All, I have a process running on port 5070... I'm using CentOS 7. iptables is running firewalld should be stopped and disabled. When I telnet localhost 5070 I get connection refused. When I stop iptables I still get connection refused. netstat -tnlv | grep 5070 tcp 0 0 192.168.1.8:5070 0.0.0.0:* LISTEN so the process is running and listening. ps ax | grep firewalld returns nothing except the grep command. What else could be blocking this connection? Thanks, Jerry

2 1

glxinfo problem
by Mahmoud A. A. Ibrahim 19 Oct '16

19 Oct '16

Dear Centos Users We are running centos on our HPC. Indeed, we have a problem with running some software using X11 server such as pymol. For your information, we are using cygwin to access to the hpc (using ssh -X -Y username(a)xxx.xxx.xxx.xxx) When we are testing glxinfo on my desktop, it gives us the following error: [username@hpc ~]# glxinfo name of display: localhost:10.0 X Error of failed request: BadValue (integer parameter out of range for operation) Major opcode of failed request: 149 (GLX) Minor opcode of failed request: 3 (X_GLXCreateContext) Value in failed request: 0x0 Serial number of failed request: 20 Current serial number in output stream: 23 The weird thing is that when we use another desktop computer running the same cygwin version and accessing with the same username, glxinfo works fine. Indeed, echo $DISPLAY on my desktop computer gives us localhost:10.0 , while it gives localhost:13.0 on the another desktop. If I set DISPLAY on my desktop to localhost:13.0, it doesn't work One more point, if we run glxinfo on the another desktop using my account and logging at the same time from my desktop with the same username and setting DISPLAY to 13:0, glxinfo works on my desktop. Any kind of help will be highly appreciated. Sincerely; M. Ibrahim

2 1

renaming mdadm name
by Phil Manuel 19 Oct '16

19 Oct '16

Hi I have a disk which two of the partitions are part of a RAID1 setup. I'm trying to rename the the second raided partition mdadm -E /dev/sdc4 /dev/sdc4: Magic : a92b4efc Version : 1.2 Feature Map : 0x1 Array UUID : 83d7657b:ebfddcb7:36b0fa14:d29a350c Name : oldname:2 Creation Time : Tue Aug 30 15:25:10 2016 Raid Level : raid1 Raid Devices : 2 Avail Dev Size : 486696960 (232.08 GiB 249.19 GB) Array Size : 243348480 (232.08 GiB 249.19 GB) Data Offset : 262144 sectors Super Offset : 8 sectors Unused Space : before=262056 sectors, after=0 sectors State : clean Device UUID : 97aba979:dd4cf85c:f6dbf4f6:f1e9ccab Internal Bitmap : 8 sectors from superblock Update Time : Fri Sep 23 14:21:00 2016 Bad Block Log : 512 entries available at offset 72 sectors Checksum : 749e26a8 - correct Events : 7319 Device Role : Active device 0 Array State : A. ('A' == active, '.' == missing, 'R' == replacing) For the first partition I stopped the RAID using mdadm --stop /dev/md127 and then reassembeld using mdadm --assemble /dev/md127 --name=newname_boot --update=name /dev/sdc2 The first partition was easy as the system had started the RAID, but the second parition the system does start, and when I try to assemble it, it tells me it's already active:- mdadm --assemble --uuid=83d7657b:ebfddcb7:36b0fa14:d29a350c --name=newname2 --update=name /dev/md2 /dev/sdc4 mdadm: Found some drive for an array that is already active: /dev/md/oldname:2 So any ideas on how i can rename this ? Thanks Phil.

1 0

Lockd: failed to reclaim lock for pid ...
by Dan Hyatt 18 Oct '16

18 Oct '16

My environment is "heterogeneous" my authentication and home server are currently stuck on a 1G shared network, the production servers and storage servers are on a bonded 40G network, all are in the same VLAN. I have about 100 servers on the 40GB bonded network each with 12cores and 128GB of memory. They are running centos 6.6 Except for my storage servers they are all just running large and small research jobs on a grid engine. Two questions: The errors she seems to spawn is lockd: spurious grace period reject?! lockd: failed to reclaim lock for pid 8225 (errno -37, status 4) lockd: spurious grace period reject?! lockd: failed to reclaim lock for pid 8225 (errno -37, status 4) and at some point, we start getting errors that the file locks are stuck.. you can write and read from the lockfile, but programs that depend on the C construct lock file throw filelock errors until we reboot. Why is dmesg, /var/log/dmesg, and /var/log/messages unique from each other? I thought dmesg was a representation of /var/log/messages/ Is there a way to get a date stamp for the dmesg? if a job failed in the last hour and the message is from yesterday...and I don't know that doesn't help. I think what I am troubleshooting is THAT user who REFUSES to follow direction... and is sending thousands of very large jobs which each might immediately spawn another 10-20 jobs to a grid of 100 servers in a matter of seconds overwhelming either the network or the home directory server or the authentication server... because when she strikes, sometimes users cannot get a response from LDAP or the home server within as much as 10 seconds. Thus she breaks the NFS because it gets hammered and I have to restart all the servers on my grid. We have had problems with "out of memory errors" due to her programs in the recent past and had to restart all 100 servers. */var/adm/messages gives this* Oct 18 13:26:08 blade5-2-1 nslcd[2520]: [dd5cc5] ldap_result() failed: Can't contact LDAP server Oct 18 13:26:08 blade5-2-1 nslcd[2520]: [dd5cc5] ldap_abandon() failed to abandon search: Other (e.g., implementation specific) error Oct 18 13:27:14 blade5-2-1 nslcd[2520]: [e01acb] ldap_result() failed: Can't contact LDAP server Oct 18 13:27:30 blade5-2-1 nslcd[2520]: [8c7a8f] ldap_result() failed: Can't contact LDAP server *dmesg gives these* lockd: server home not responding, still trying lockd: server home OK lockd: spurious grace period reject?! lockd: failed to reclaim lock for pid 8225 (errno -37, status 4) lockd: spurious grace period reject?! lockd: failed to reclaim lock for pid 8225 (errno -37, status 4) */var/log/dmesg gives this* pmi_si: probing via SMBIOS ipmi_si: SMBIOS: io 0xca8 regsize 1 spacing 4 irq 10 ipmi_si: Adding SMBIOS-specified kcs state machine ipmi_si: Trying SMBIOS-specified kcs state machine at i/o address 0xca8, slave address 0x20, irq 10 (NULL device *): The BMC does not support setting the recv irq bit, compensating, but the BMC needs to be fixed. IRQ 10/ipmi_si: IRQF_DISABLED is not guaranteed on shared IRQs ipmi_si ipmi_si.0: Using irq 10 ipmi_si ipmi_si.0: Found new BMC (man_id: 0x0002a2, prod_id: 0x0100, dev_id: 0x20) ipmi_si ipmi_si.0: IPMI kcs interface initialized ACPI: No handler for Region [SYSI] (ffff882029e57348) [IPMI] power_meter ACPI000D:00: Found ACPI power meter. ipmi device interface EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: EXT4-fs (dm-2): mounted filesystem with ordered data mode. Opts: EXT4-fs (dm-3): mounted filesystem with ordered data mode. Opts: EXT4-fs (dm-4): mounted filesystem with ordered data mode. Opts: EXT4-fs (dm-5): mounted filesystem with ordered data mode. Opts: Adding 121724924k swap on /dev/mapper/vg_server-lv_swap. Priority:-1 extents:1 across:121724924

3 2

Disabling sound chip
by Alice Wonder 18 Oct '16

18 Oct '16

01:00.1 Audio device [0403]: NVIDIA Corporation High Definition Audio Controller [10de:0be3] (rev a1) I don't want that seen by the sound software. That's the sound chip on my video card, probably there for the HDMI output. For some reason, that sound device takes preference over my USB headphones and it is really annoying I tried creating /etc/modprobe.d/blacklist with the following : blacklist snd_hda_intel blacklist snd_hda_codec_hdmi That didn't work. Those are not CentOS specific instructions, the only CentOS specific instructions I found are related to nVidia and are rather complex and I don't believe this is that complex - at least it shouldn't be. I'm 99% sure snd_hda_intel is the driver. It shows up as Intel HD Audio in the Mate Sound control panel. I just want it disabled so I don't have to constantly use the control panel. Any hints or suggestions appreciated, not sure why there isn't just a checkbox to disable things like sound devices.

2 2

CentOS 7/GNOME 3 customise top panel
by Toralf Lund 18 Oct '16

18 Oct '16

Hi, Is there any way to customise the top panel in CentOS 7 with GNOME 3 (which I recently tried for the first time)? Specifically, I want to add "application launchers", as it will make start-up faster than the standard alternatives. (Because you can move the mouse directly to the right place - you don't have to carry out another action, wait for icons or menu items to pop up, look for the right one etc first.) People on the web talk about a "context" menu that opens if you use some kind of weird combination of right mouse-click and Alt, Windows key, Ctrl, left click, Alt Gr or whatever, but there seems to be no way to make that happen on CentOS. I found an answer of sorts in https://www.centos.org/forums/viewtopic.php?t=47957 - > In straight Gnome Shell -- CentOS 7 defaults to a modified version > using extensions -- the panel *is* locked. Visit extensions.gnome.org > to see if something there is useful. - but I don't think I quite understand it. I mean, the ability to add extensions is nice, but if the panel is locked, isn't an "unlock" function what I should be looking for? This doesn't quite sound like an "extension". Or is the actual menu everyone talks about itself an extension? If that's the case, surely isn't there some other way to make the changes? If the standard panel allows stuff to be added, there must be a standard way to do it, right? Also, if I do need extensions, I'd prefer to install it via the package manager system rather than through a special web interface... Does anyone know more about this? Any help would be appreciated. - Except, that is, I don't really need anyone to suggest switching to MAME or some other alternative desktop. I might end up doing just that, but it really bugs me that I can't get functionality that's supposed to be there to work... - Toralf

4 7

Re: [CentOS] Is bind-9.8.2-0.47.rc1.el6_8.1.x86_64 vulnerable
by マスターズ　イアン 18 Oct '16

18 Oct '16

Folks Thanks for all the replies, especially the one with the rpm -q command in it (thanks Phil). I didn't know you could do that with rpm. Very useful indeed. Regards Ian

1 0

SELinux context not applied
by Bernard Fay 17 Oct '16

17 Oct '16

Hi, I tried to apply a security context on a directory with the following commands: [root@ local]# semanage fcontext -a -t httpd_sys_rw_content_t "netdot(/.*)?" [root@ local]# restorecon -R netdot/ When I list the contexts, it is part of the list.... [root@ local]# semanage fcontext -l | grep netdot ./netdot(/.*)? all files system_u:object_r:httpd_sys_rw_content_t:s0 ... but does not appear on the directory itself: [root@ local]# ls -ldZ netdot/ drwxr-xr-x. root root unconfined_u:object_r:*usr_t*:s0 netdot/ I am expecting to see something like: drwxr-xr-x. root root unconfined_u:object_r:*httpd_sys_rw_content_t*:s0 netdot/ What am I doing wrong or do not understand? Thanks,

2 3

Is bind-9.8.2-0.47.rc1.el6_8.1.x86_64 vulnerable
by マスターズ　イアン 17 Oct '16

17 Oct '16

Hi I'd like to know if the present version of Bind in CentOS 6 (bind-9.8.2-0.47.rc1.el6_8.1.x86_64) is vulerable to CVE-2016-2776. According to https://www.isc.org/downloads/, version 9.8.x is End-of-Life (EOL) as of Sep 2014. Regards ian

4 3

iptables on C5
by Jerry Geis 17 Oct '16

17 Oct '16

Hi all, I am trying to get iptables to work for me... I am running asterisk (11.23.0) on a C5 machine. Working fine on port 5060 udp. I have need to tcpenable=yes SIP and run that on port 5068. Since port 5060 is already running I was going to redirect 5068 to 5060. So I thought I could use iptables to do that - but does not seem to be working. 192.168.10.201 is my machine, 192.168.1.3 is the other machine. 1.3 should connect to 10.201 on port 5068. so I did: iptables -t nat -A PREROUTING -p tcp -d 192.168.10.201 --dport 5068 -j REDIRECT --to-port 5060 iptables -t nat -A POSTROUTING -p tcp -d 192.168.1.3 --dport 5060 -j REDIRECT --to-port 5068 This did not seem to work. iptable -t nat -L -n -v shows packets going out to 1.3 but "0" on the input for 5068. So then I added iptables -t nat -A OUTPUT -p tcp -d 192.168.10.201 --dport 5068 -j REDIRECT --to-port 5060 iptables -t nat -A OUTPUT -p tcp -d 127.0.0.1 --dport 5068 -j REDIRECT --to-port 5060 And still nothing on the input. What have I missed ? Thanks, Jerry

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss