- Discuss - lists.centos.org

Re: [CentOS] E-mail advice sought
by Richard 30 Apr '16

30 Apr '16

------------ Original Message ------------ > Date: Saturday, April 30, 2016 11:28:23 -0700 > From: Alice Wonder <alice(a)domblogger.net> > > I'm working on setting up an e-mail service. > > I've got the e-mail servers working beautifully and am presently > working on re-writing the parts of Roundcube I don't like (e.g. it > uses inline JavaScript in a few places so CSP breaks it) but - > > Is there any advice on characters to allow in usernames? > > I know there are some wacky characters that are legal in e-mail > addresses but are generally frowned upon - like > > "very.(),:;<>[]\".VERY.\"very@\ \"very\".unusual"@example.com > > is apparently a legal address - but I know I don't want to allow > ampersands and brackets etc. in an address. > > I don't think a whitelist alphabet is best approach because of > people with names that are not spelled with Latin characters. > > Is there an existing blacklist of characters that technically legal > but are generally avoided in e-mail addresses? > You should avoid straying from the mail standards (as defined in the IETF RFCs). If you do stray your users will encounter arbitrary/seemingly random failures that will waste everyones time to debug. The wikipedia page: <https://en.wikipedia.org/wiki/Email_address> gives a good summary -- look at the "local part" section and the examples lower down. You'll also want to review the RFCs. Depending on your user community you may also need to look at the RFCs related to the internationalization of email addressing sooner rather than later. Note, that wiki page has some references to non-RFC sources that are basically the authors' views/preferences. In at least one of these cases, many of the recommendations violate the RFCs. If there is doubt, the RFCs should be your guide.

1 0

tune2fs: Filesystem has unsupported feature(s) while trying to open
by Matt Garman 30 Apr '16

30 Apr '16

I have an ext4 filesystem for which I'm trying to use "tune2fs -l". Here is the listing of the filesystem from the "mount" command: # mount | grep share /dev/mapper/VolGroup_Share-LogVol_Share on /share type ext4 (rw,noatime,nodiratime,usrjquota=aquota.user,jqfmt=vfsv0,data=writeback,nobh,barrier=0) When I try to run "tune2fs" on it, I get the following error: # tune2fs -l /dev/mapper/VolGroup_Share-LogVol_Share tune2fs 1.41.12 (17-May-2010) tune2fs: Filesystem has unsupported feature(s) while trying to open /dev/mapper/VolGroup_Share-LogVol_Share Couldn't find valid filesystem superblock. This filesystem was created on this system (i.e. not imported from another system). I have other ext4 filesystems on this server, and they all work with "tune2fs -l". Basic system info: # rpm -qf `which tune2fs` e2fsprogs-1.41.12-18.el6.x86_64 # cat /etc/redhat-release CentOS release 6.5 (Final) # uname -a Linux lnxutil8 2.6.32-504.12.2.el6.x86_64 #1 SMP Wed Mar 11 22:03:14 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux I did a little web searching on this, most of the hits were for much older systems, where (for example) the e2fsprogs only supported up to ext3, but the user had an ext4 filesystem. Obviously that's not the case here. In other words, the filesystem was created with the mkfs.ext4 binary from the same e2fsprogs package as the tune2fs binary I'm trying to use. Anyone ever seen anything like this? Thanks!

8 12

new firefox upgrade, then crash
by ken 30 Apr '16

30 Apr '16

Earlier today I upgrade firefox, closed the old version, opened the new, and first it froze-- displayed a message about a script running and asking me if I wanted to stop it; I said no to let it run-- then it crashed and disappeared. # ps -ef|grep firefox root 3150 4904 0 14:08 pts/2 00:00:00 grep --color=auto firefox # uname -r 3.10.0-327.10.1.el7.x86_64 # cat /etc/centos-release CentOS Linux release 7.2.1511 (Core)

4 3

Semi-OT: awk
by m.roth＠5-cent.us 29 Apr '16

29 Apr '16

This is odd, and annoying. CentOS 6, current. Here's my awk script: { room = substr($0, 48, 10); arr[$2,room,$1] = $0; } END { for ( i in arr ) { for ( j in arr[i] ) { for ( k in arr[i][j] ) { print arr[i][j][k]; } } } } And when I run it, it complains awk -f awksort proplist7 awk: awksort:7: for ( j in arr[i] ) { awk: awksort:7: ^ syntax error awk: awksort:8: for ( k in arr[i,j] ) { awk: awksort:8: ^ syntax error awk: awksort:9: print arr[i][j][k]; awk: awksort:9: ^ syntax error which makes no sense - I've done this a million times. Am I missing something, or is this a bug? mark

3 2

C5: The Firefox ESR 45.1.0 Nighmare
by Always Learning 29 Apr '16

29 Apr '16

Centos replaced well-running customise Firefox with version ESR 45.1.0 * All the add-ons (language dictionaries, Adblock Plus, Classic Theme Restorer etc.) were disabled with no simple method of reactivating them. Reason given was they were "unsigned". * About:config xpinstall.signatures.required = false partially reduced the problem. * Then possible to reactivate some disabled add-ons, but others down-loaded OK but would not install * removing files in ~/.mozilla/firefox/.../extensions.* and restarting was supposed to help However the time-wasting problem remains, so too do the down-loaded extensions in /tmp, example tmp-xxx.xpi Would be really nice if Centos warned its loyal and grateful users of possible problems before those users trustingly replaced working programmes with considerable time-wasting problems. Time spent on trying to return Firefox to a useful and dependable working tool is unavailable for other tasks :-( -- Regards, Paul. England, EU. England's place is in the European Union.

9 14

OT, security: if you're in the US, and like your dentist, call them, *now*
by m.roth＠5-cent.us 29 Apr '16

29 Apr '16

If you like your dentist, *call* them, today. <http://krebsonsecurity.com/2016/04/dental-assn-mails-malware-to-members/>, and the URL says it all - they mailed a card with a USB key... and some of them have malware, and Krebs says not all virus scanners can detect it.... mark "got off the phone with my dentists' office a few minutes ago

1 0

Firefox 46.0 fails on CentOS 6.7 due to GTK3 requirement
by Phelps, Matthew 28 Apr '16

28 Apr '16

The latest version of firefox, 46.0 requires GTK3 and so it fails on CentOS 6.7. I know there is the ESR release supplied by upstream, but that is based on version 38. We have regularly installed the Mozilla "Linux" version of Firefox in a central location for our users, and this has worked just fine until 46.0. (I note from https://www.mozilla.org/en-US/firefox/organizations/faq/ that even that ESR release is due to stop being supported soon). I filed a bugzilla report at https://bugzilla.mozilla.org/show_bug.cgi?id=1267815. If this matters to you, please consider tagging onto that bug. Yes, yes we have to upgrade to CentOS 7. But in our shop, the amount of work required to get this done is huge, and won't happen soon. The whole idea of using RHEL/CentOS is to have a stable, supported version for a long period of time. How can we do this if even a web browser won't work? -- Matt Phelps System Administrator, Computation Facility Harvard - Smithsonian Center for Astrophysics mphelps(a)cfa.harvard.edu, http://www.cfa.harvard.edu

5 8

Where can I find the CentOS gpg keys?
by Albin Otterhäll 28 Apr '16

28 Apr '16

Hi! I'm currently using a non-CentOS system, and wondering where I can find the GPG keys so I can verify the checksum file? The page on the website (https://www.centos.org/keys/) only give information where I can find them on an already installed system. Regards, Albin

5 6

Centos hold me back from work - sshd ...bull
by Andreas Benzler 28 Apr '16

28 Apr '16

I don’t know what’s going on the sushi from the laptop always kick me out!!! Fresh installation. packet_write_wait: Connection How can that be! Andy

6 8

useradd -r doesn't work right in some contexts
by Florin Andrei 28 Apr '16

28 Apr '16

"useradd -r testuser" run as root from an interactive ssh session does the right thing: it creates a user account with a UID in the system users range (< 400). Running the same command as a cron job (just for testing), also does the right thing. Now I'm trying to accomplish the same result via chef-client. I'm trying to run "useradd -r" as a simple command, as a bash command, or as a script, from chef-client. It does create the user account, but the UID is in the normal range (> 600), not the system range. It can't be a Chef bug, because it is actually running "/usr/sbin/useradd -r username", I'm not using the Chef user resource (although I've tried that with "system true" and it also fails to put the UID in the correct range). There's something about the context where chef-client is running that triggers different results. BTW, chef-client is running as a service via /etc/init.d/chef-client Adding SYS_UID_MAX to /etc/login.defs doesn't help. Any clue what's going on? Why useradd has different behaviors depending on how it's launched? -- Florin Andrei http://florin.myip.org/

1 0

About mysql upgrade
by Sergio Belkin 28 Apr '16

28 Apr '16

Hi, I've found some issues upgrading mysql, some people recommends run mysql_upgrade. I wonder why such a script is not run from scriptlet of mysql-server rpm. Thanks in advance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

5 5

DNSSEC deployment stats
by Alice Wonder 28 Apr '16

28 Apr '16

Since it was discussed earlier, I thought some might find this link interesting : http://secspider.verisignlabs.com/stats.html It is a spider that crawls DNS servers counting both DNSSEC and TLSA records.

1 0

Re: [CentOS] Any CentOS 6 Issues on Lenovo Y700?
by Brian Bernard 28 Apr '16

28 Apr '16

Oh, I wouldn't flame you. Hmm, I didn't think of using a virtual machine. The Lenovo has a NVidia 960MX, so I wonder if it would fully work under a virtual machine. The reason why I ask is that I do systems adminstration with meteorological software that requires OpenGL 2.0 and at least 2GB of video ram. Thank you for your reply, Mike. Brian Bernard On Apr 27, 2016 10:43 PM, "Mike Mohr" <akihana(a)gmail.com> wrote: > > Don't flame me, but I really recommend using Ubuntu on laptops. If you > really want CentOS, you should go with version 7. Many new laptops won't > work well with that either though. > > CentOS 6 only works well these days on older hardware or on virtual > machines. > On Apr 27, 2016 7:27 PM, "Brian Bernard" <brian.brianbernard(a)gmail.com> > wrote: > > Hi all, > > I'm looking at buying a Lenovo Y700 Notebook, and wondering if it would > work with CentOS 6. Or if anyone has experience with using it under CentOS > 6. I assume that the WiFi could be an issue as it uses an Intel 8260 card. > I want to make the correct decision. > > Thank you, > > Brian Bernard > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos

4 6

Re: [CentOS] Centos hold me back from work - sshd ...bull
by Andreas Benzler 28 Apr '16

28 Apr '16

what is wrong with the default sshd server. after retry to connect sshd - key changed from known hosts???? grrr

6 11

system-config-printer samba broken
by Andreas Benzler 28 Apr '16

28 Apr '16

Hello guys… while i was working with special printer setup fallow problems are there: samba: 1. system-config-printer 1.4.1 - printers not browsable. Fixed by fedora. can be found here. Patch included http://centos.cms4all.org/centos/7/printing/SRPM/ <http://centos.cms4all.org/centos/7/printing/SRPM/> system-config-printer-1.4.1-20.el7.centos.src.rpm <http://centos.cms4all.org/centos/7/printing/SRPM/system-config-printer-1.4.…> 2. system-config-printer Verify … works as expected 3. "Prompt user if authentication is required“ - never happens 4. Set authentication details now: Fail because of realm Only User - fail WORKGROUP\User fail How to fill the username to get realm passed? Thanks for advice Andy In the meantime i update my gutenprint for more printers. needs to be tested.

1 1

Any CentOS 6 Issues on Lenovo Y700?
by Brian Bernard 28 Apr '16

28 Apr '16

Hi all, I'm looking at buying a Lenovo Y700 Notebook, and wondering if it would work with CentOS 6. Or if anyone has experience with using it under CentOS 6. I assume that the WiFi could be an issue as it uses an Intel 8260 card. I want to make the correct decision. Thank you, Brian Bernard

2 1

systemctl enable httpd failure
by Michael H 28 Apr '16

28 Apr '16

Hi List, [root@mail1 ~]# systemctl enable httpd Failed to execute operation: Invalid argument I can disable and re-enable other services without issue, I'm also seeing the same error when I run [root@mail1 ~]# systemctl enable mailman Failed to execute operation: Invalid argument Any suggestions? Michael

1 1

CentOS-announce Digest, Vol 134, Issue 15
by centos-announce-request＠centos.org 28 Apr '16

28 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0695 Critical CentOS 5 firefox Security Update (Johnny Hughes) 2. CESA-2016:0695 Critical CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 27 Apr 2016 15:22:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0695 Critical CentOS 5 firefox Security Update Message-ID: <20160427152207.GA28572(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0695 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 72c6e8cc275f769961ec0e7349e27cd04a850cf2b446c87be3199f30bebf83e6 firefox-45.1.0-1.el5.centos.i386.rpm x86_64: 72c6e8cc275f769961ec0e7349e27cd04a850cf2b446c87be3199f30bebf83e6 firefox-45.1.0-1.el5.centos.i386.rpm 6c47031dd9e2de144e681e433f01aee9c58913b829ac00f8189d933a010b8088 firefox-45.1.0-1.el5.centos.x86_64.rpm Source: 1cf7031e1734831a5cfcdcb95c11af0447e427cced104533bf6f5ac07d4e2b7f firefox-45.1.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 27 Apr 2016 15:34:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0695 Critical CentOS 6 firefox Security Update Message-ID: <20160427153455.GA19503(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0695 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1b99b117160ab472b6f7b02e7daa067de60820352c24b30f9b0d6da90a21a148 firefox-45.1.0-1.el6.centos.i686.rpm x86_64: 1b99b117160ab472b6f7b02e7daa067de60820352c24b30f9b0d6da90a21a148 firefox-45.1.0-1.el6.centos.i686.rpm ef5c69545d39336f0e84ea7588841f770dbffde26cfdde9192fd009e2a614a11 firefox-45.1.0-1.el6.centos.x86_64.rpm Source: 5d2602205b09daa7e5f1fbde0c84131ceabfcb34a11f5fb3ed43844f652adf71 firefox-45.1.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 15 ************************************************

1 0

Bourne shell deprecated?
by Jack Bailey 28 Apr '16

28 Apr '16

Hello List, Today someone in a meeting claimed the Bourne shell is deprecated, one of the reasons being it supposedly has security issues. Well that's all news to me, and I cannot find anything online to corroborate the claim. Is this true, is it a bash vs. Bourne FUD, or something else? Thanks, Jack

16 26

Apache logs missing
by Adrian Jenzer 28 Apr '16

28 Apr '16

Hi all I just saw that I miss some log files in /var/log/httpd. There is a gap in January/February2016, no logs are available for this period. It seemed to work fine with the earlier logs as you can see. Has someone an explanation for this? It's a Centos 7.2 VM with Apache 2.4 running ownCloud only. Default logrotate config. -rw-r--r-- 1 root root 3367604 Apr 20 16:12 ssl_access_log -rw-r--r-- 1 root root 67982 Jul 12 2015 ssl_access_log-20150712.gz -rw-r--r-- 1 root root 43515 Jul 18 2015 ssl_access_log-20150719.gz -rw-r--r-- 1 root root 36096 Jul 26 2015 ssl_access_log-20150727.gz -rw-r--r-- 1 root root 25088 Aug 1 2015 ssl_access_log-20150802.gz -rw-r--r-- 1 root root 12733 Aug 9 2015 ssl_access_log-20150810.gz -rw-r--r-- 1 root root 89873 Aug 15 2015 ssl_access_log-20150816.gz -rw-r--r-- 1 root root 70627 Aug 23 2015 ssl_access_log-20150823.gz -rw-r--r-- 1 root root 91576 Aug 31 2015 ssl_access_log-20150831.gz -rw-r--r-- 1 root root 218188 Sep 6 2015 ssl_access_log-20150906.gz -rw-r--r-- 1 root root 181084 Sep 14 2015 ssl_access_log-20150914.gz -rw-r--r-- 1 root root 247666 Sep 20 2015 ssl_access_log-20150920.gz -rw-r--r-- 1 root root 221203 Sep 28 2015 ssl_access_log-20150928.gz -rw-r--r-- 1 root root 173962 Oct 4 2015 ssl_access_log-20151004.gz -rw-r--r-- 1 root root 131480 Oct 11 2015 ssl_access_log-20151011.gz -rw-r--r-- 1 root root 141485 Oct 19 2015 ssl_access_log-20151019.gz -rw-r--r-- 1 root root 89379 Oct 25 03:37 ssl_access_log-20151025.gz -rw-r--r-- 1 root root 149943 Nov 1 13:30 ssl_access_log-20151102.gz -rw-r--r-- 1 root root 150219 Nov 8 03:11 ssl_access_log-20151108.gz -rw-r--r-- 1 root root 131524 Nov 14 20:13 ssl_access_log-20151115.gz -rw-r--r-- 1 root root 153841 Nov 22 03:42 ssl_access_log-20151122.gz -rw-r--r-- 1 root root 134209 Nov 29 23:41 ssl_access_log-20151130.gz -rw-r--r-- 1 root root 336448 Dec 6 03:11 ssl_access_log-20151206.gz -rw-r--r-- 1 root root 357256 Dec 14 03:15 ssl_access_log-20151214.gz -rw-r--r-- 1 root root 354106 Dec 20 03:38 ssl_access_log-20151220.gz -rw-r--r-- 1 root root 204874 Dec 28 03:41 ssl_access_log-20151228.gz -rw-r--r-- 1 root root 13621 Jan 3 03:05 ssl_access_log-20160103.gz -rw-r--r-- 1 root root 4385823 Mar 27 04:19 ssl_access_log-20160327 -rw-r--r-- 1 root root 4345075 Apr 4 03:40 ssl_access_log-20160404 -rw-r--r-- 1 root root 4743540 Apr 10 03:04 ssl_access_log-20160410 -rw-r--r-- 1 root root 6065044 Apr 17 03:20 ssl_access_log-20160417 Regards Adrian Jenzer

3 3

Re: [CentOS] Any CentOS 6 Issues on Lenovo Y700?
by Mike Mohr 28 Apr '16

28 Apr '16

Don't flame me, but I really recommend using Ubuntu on laptops. If you really want CentOS, you should go with version 7. Many new laptops won't work well with that either though. CentOS 6 only works well these days on older hardware or on virtual machines. On Apr 27, 2016 7:27 PM, "Brian Bernard" <brian.brianbernard(a)gmail.com> wrote: Hi all, I'm looking at buying a Lenovo Y700 Notebook, and wondering if it would work with CentOS 6. Or if anyone has experience with using it under CentOS 6. I assume that the WiFi could be an issue as it uses an Intel 8260 card. I want to make the correct decision. Thank you, Brian Bernard _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos

3 2

CentOS CI Testing Prior to Releasing Packages
by Johnny Hughes 27 Apr '16

27 Apr '16

In another thread I talked about running CI testing on a packge before release. I thought I would explain that a bit more AND ask for tests, if they are needed. Prior to pushing newly released packages into the main CentOS os, updates, extras, cr, or fasttrack repositories, we run our t_functional CI test suite on the entire repo set. So if we are releasing an update, it would be against the os and updates repositories. Or if we release fasttrack package, it would be os, updates, fasttrack repositories. We also run this test suite on the final OS repository during point release upgrades. Here is information on the t_functional suite. https://wiki.centos.org/QaWiki/AutomatedTests/WritingTests/t_functional And here is where I actually run the suite prior to releasing updates: https://ci.centos.org/view/CentOS-Core/ The reason I bring this up is we will accept updates to the tests to check for things that should be tested prior to release of a repository. If you know of something that we sometimes get wrong and create a test that returns exit code other than 0 for a fail, and if you can convince us (on the CentOS-Devel mailing list) that it should be included, then you can help us release better updates to CentOS Linux. Thanks, Johnny Hughes

1 0

where, if at all, is my virtual printer output?
by Michael Hennebry 27 Apr '16

27 Apr '16

I recently installed the package that allows having virtual printers under CUPS. I used the localhost:631 GUI to add a virtual pdf printer. I do not remember what I did. Now there are two virtual printers, one named Cups-PDF and the one I named pdfprinter. I cannot find the output from either. I do not know how to ask them. >From firefox, print to file still works, but does not do what I want. Even if it did, I'd still want to know what's going on with my virtual printers. >From an error log: Unable to create avahi client: Resource temporarily unavailable" -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

Mod_radius_auth for apache?
by Eero Volotinen 27 Apr '16

27 Apr '16

Any package with srpm available for radius auth on apache? Eero

1 0

Re: [CentOS] Bourne shell deprecated?
by Gordon Messmer 27 Apr '16

27 Apr '16

On 04/27/2016 05:20 AM, Joerg Schilling wrote: > While older versions of the Bourne Shell are not POSIX compliant, recent > versions only miss the feature "arithmetic expansion" and are otherwise > probably closer to POSIX than bash or dash. Note that "dash" does not support > multi-byte characters and thus cannot be certified for a full UNIX system but > only for embedded UNIX systems. That's good to know. But, since there seem to be several forks of Bourne shell, currently, is there a reference for the differences between them? > As far as I can see, this was related to "mailx" and not to the shell. I looked for substantiation of the original claim that the bourne shell had security problems. Apparently I should have looked closer. Thanks for catching that.

1 0

Semi-OT: very weird vi behaviour
by m.roth＠5-cent.us 27 Apr '16

27 Apr '16

This is weird. As in, *deeply* weird. I ssh as root from one box to another (there are keys involved), and I go to vi a file, such as # line 1 # # line 2 # # line 3 # line 4 And what I see in vi is # line 3 # line 4 BUT, if I scroll the cursor over each line with the arrow key... I see all four lines. I've also looked at another file, and same thing. Just checked it out on the server I ssh'd in from, and no problem. And now, I just ssh'd in from another windows, same way... and the weirdness isn't there. Anyone have any clues as to what's going on with that one session? mark file

6 7

Re: [CentOS] Apache/PHP Installation - opinions
by m.roth＠5-cent.us 27 Apr '16

27 Apr '16

Alice Wonder wrote: > On 04/27/2016 01:21 AM, Brandon Vincent wrote: >> On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen <rkampen(a)kampensonline.com> wrote: >>> Sounds good, but how many domain MX servers have set up these >>> fingerprint keys - 1%, maybe 2%, so how do you code for that? I guess I'm thinking >>> it uses it if available. So even if you do post it on your DNS, how many clients out there are using DANE on their set up? By the time it becomes more than a tiny % and generally useful, it will be in CentOS 8. It >>> also requires certificates to be implemented more ubiquitously than at present - although we do now have affordable solutions, so this one may resolve >>> more quickly. >> > Security and Privacy on the Internet are both severely broken. > > If you read the white papers from when the Internet was first being designed, security was rarely even mentioned. <snip> Just as a point of information, when those RFCs were written, the Internet was *only* for US gov't, and selected research and educational organizations, and NO ONE else. The open 'Net only came in in the nineties - so security wasn't broken and insecure, back then there was physical security and careful selection as to who was allowed on, at all. mark

3 3

Re: [CentOS] Bourne shell deprecated?
by m.roth＠5-cent.us 27 Apr '16

27 Apr '16

Scott Robbins wrote: > On Tue, Apr 26, 2016 at 07:27:26PM -0700, Alice Wonder wrote: >> >> Some of the BSDs use to have a bourne shell and maybe some do, I don't know. >> > Yup. > >> bash is mostly compatible with bourne (can run most bourne scripts) which is why /bin/sh is a symlink to /bin/bash on GNU and most other *nix systems. > > Bash can run Bourne, but not necessarily vice versa, which can be problematic if, say, moving a Linux script to a BSD or AIX box. I remember something I'd done which used, IIRC, $UID, without realizing it was a bashism, instead of using id -u. I'll also note that all *production* scripts were once required to be bourne, but by the mid-ninties, management was starting to mandate that they be Korn shell, instead, for many reasons - capabilities, etc. Bash - I don't think I saw that till I started running RH 5.1, I think it was, about 18 years ago.... mark

2 1

Apache/PHP Installation - opinions
by Tim Dunphy 27 Apr '16

27 Apr '16

Hey guys, I tend to work on small production environments for a large enterprise. Never more than 15 web servers for most sites. But most are only 3 to 5 web servers. Depends on the needs of the client.I actually like to install Apache and PHP from source and by hand. Although I know that's considered sacrilege in some shops. I do this because on RH flavored systems like CentOS the versions of Apache, php and most other software are a little behind the curve in terms of versions. And that's intentionally so! Because the versions that usually go into the various repos are tested and vetted thoroughly before going into the repos. I like to use the latest, stable versions of apache and php for my clients without having to create a custom RPM every time a new version comes out. So what I'd like to know is it better in your opinion to install from repos than to install by source as a best practice? Is it always better to use puppet, chef, ansible etc even if the environment is small? I'm sure this is a matter preference, but I would like to know what your preferences are. Thanks, Tim Sent from my iPhone

10 17

DNSSEC / Security stats (forked from php thread)
by Alice Wonder 27 Apr '16

27 Apr '16

I don't have a source, I'd have to dig through my browser history, but I looked at some of these stats just last month. Roughly 2% of the top 1000 domains in the United States had deployed DNSSEC - which I *think* is double what it was a year ago. Roughly 7% of ISP recursive DNS servers enforce DNSSEC. Comcast does and Google's public DNS does. Those are the big ones that enforce DNSSEC on their recursive servers. I do not see any statistics for DANE adoption, either on port 443 or port 25 (the two where it is most common currently) Roughly 20% of all e-mail traffic in the United States was not encrypted. Of the e-mail traffic that was not even encrypted, a large percentage of it was spam. What wasn't spam was often sent by scripting languages (e.g. php) running blogs or other web services. Only a small percentage of e-mail sent by clients through a SMTP server was not encrypted in the MTA to MTA transfer. -=-=- What we can do as sysadmins, we can run unbound on our local machines, it defaults to DNSSEC enforcing. That way we don't have to worry if the recursive resolver our ISP uses is part of the 7%. Linode enforced last time I checked, but I don't know about other hosting services. Still safer to just run unbound listening only on the localhost, and configure /etc/resolv.conf to point to ::1 (or 127.0.0.1) If at all possible, deploy DNSSEC on any zones you have control over. Even without DANE, DNSSEC greatly improves security for the 7% (and growing) recursive resolvers that enforce DNSSEC. Before deploying DNSSEC do a lot of reading on it, because if you screw it up, those 7% enforcing recursive resolvers won't resolve your zone. I personally use a 2048-bit KSK and a 1024-bit ZSK. The KSK is what you have to get the DS record for uploaded to your TLS, and it should be rotated once a year. The ZSK is just in your zone, best practice says to rotate once a month but I rotate once a week, every Sunday. It should be automated, so it doesn't hurt to do it more often than the once a month. Doing it once a week means if my zone signing server is down or under DDoS when the signing happens, it isn't a big deal, because it happens 4X the best practices recommended anyway. With our web applications that send e-mail, don't use the SMTP services of the scripting language. Yes it is cool that you can play SMTP server with PHP etc. and yes, if PHP is built against a TLS library it can encrypt, but don't use PHP to play SMTP. Run postfix on the web server and have your web applications connect to the SMTP on the local host. This isn't just for the benefit of encrypting, it also lets you do things like sign the message with DKIM and if your postfix is new enough, check the DANE records of the MX record the message is being sent to. I don't know why so many web applications try to play SMTP themselves, it is a very bad habit and usually results in mail being sent without TLS and sometimes rejected by spam filters if the domain it allegedly comes from uses DKIM but the web application doesn't. -=-=- Hope I didn't bore too many people, or offend anyone, these are just my opinions and this is a topic I am passionate about. I think system administrators need to do a better job at securing Internet infrastructure.

1 0

CentOS-announce Digest, Vol 134, Issue 14
by centos-announce-request＠centos.org 27 Apr '16

27 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0695 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 26 Apr 2016 23:59:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0695 Critical CentOS 7 firefox Security Update Message-ID: <20160426235906.GA46943(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0695 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7ad87030365ab1016abb60f1e290685ad331c5a5f1562bde57106a7ccacaf69b firefox-45.1.0-1.el7.centos.i686.rpm 9d5a9f3245ea81a0750082d056031816b6d1d05fe278641a0aad4fd44f367c05 firefox-45.1.0-1.el7.centos.x86_64.rpm Source: ea6c6ab0a63372cae9b1c76d642de69e23866e790dc41d5a91f56b99d352ec34 firefox-45.1.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 14 ************************************************

1 0

Storage cluster advise, anybody?
by Valeri Galtsev 27 Apr '16

27 Apr '16

Dear Experts, I would like to ask everybody: what would you advise to use as a storage cluster, or as a distributed filesystem. I made my own research of what I can do, but I hit a snag with my seemingly best choice, so I decided to stay away from it finally, and ask clever people what they would use. My requirements are: 1. I would like to have one big (say, comparable to petabyte) filesystem, accessible on more than one machine, composed of disk space leftovers on a bunch of machines having 1 gigabit per second ethernet connections 2. It can be a bit slow, as filesystem one would need for backups onto it (say, using bacula or bareos), and/or for long term storage of large datasets, portions of which can be copied over to faster storage for processing if necessary. I would be thinking in 1-2 TB of data written to it daily. 3. It would be great to have it single machine failure/reboot resilient 4. metadata machines should be redundant (or at least backup medatada host should be manually convertible into master metadata host if fatal failure to master or corruption of its data happens) What I would like to avoid/exclude: 1. Proprietary commercial solutions, as: a. I would like to stay on as minimal budget as possible b. I want to be able to predict that it will exist for long time, and I have better experience with my predictions of this sort about open source projects as opposed to proprietary ones 2. Open source solutions using portions of proprietary closed source binaries/libraries (e.g., I would like to stay away from google proprietary code/binaries/libraries/modules) 3. Kernel level modifications. I really would like to have this independent of OS as much as I can, or rather available on multiple OSes (though I do not like Java based things - just my personal experience with some of them). I have a bunch of Linux boxes and a bunch of FreeBSD boxes, and I do not want to exclude neither of them if possible. Also, the need to have custom Linux kernel specifically scares me: Linux kernels get critical updates often, and having customizations lagging behind the need of critical update is as unpleasant as rebooting the machine because of kernel update is. I'm not too scared of a "split nature" projects: proprietary projects having open source satellite. I have mixed experience with those, using open source satellite I mean. Some of them are indeed not neglected, and even though you may be missing some features commercial counterpart has, some are really great ones: they are just missing commercial support, and maybe having a bit sparse documentation, thus making you to invest more effort into making it work, which I don't mind: I can earn my sysadmin's salary here. I would say I more often had good experience with those than bad one (and I have a list of early indications of potential bad outcome, so I can more or less predict my future with this kind of projects). <rant> I really didn't mean to write this, but I figure it probably will surface once I start getting your advices, so here it is. I did my research having my requirements in mind and came up with the solution: moosefs. It is not reviewed much, no reviews with criticism at all, and not much you can ("I could" I should say) find howtos about customizations, performance tuning etc. It installs without a hitch. It runs well, until you start stress writing a lot to it in parallel, then it started performing exponentially badly for me. Here is where extensive attempts to find performance tuning documentation faces lack of success. What made my decision to never ever use it in a future was the following. I started migrating data back from moosefs to local UFS (that is FreeBSD box) filesystem using rsync command. What I observed was: source files after they have been touched by rsync changed their timestamps. As if instead of creation timestamp it is an access timestamp on moosefs. This renders rsync from moosefs useless, as you can not re-run failed rsync, and you obliterate some of metadata of the source ("creation" timestamp). I wrote e-mail to sourceforge moosefs mail list, mentioning all this and the fact that I am using open source moosefs. Next day they replied asking whether I use version 3."this" or version 3."that", as they want to know in which of them they have a bug. Whereas latest open source version they have everywhere, including sourceforge is older version: 2.0.88. Basically, my decision was made. Sorry for venting it out here, but I figured, it will happen some moment when I will get your advises. </rant> Thanks a lot for all your advises! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

6 7

username.pem
by m.roth＠5-cent.us 26 Apr '16

26 Apr '16

Hi, folks, Our system gets/creates /var/lib/ssh-x509-auth/<username>,pem, then deletes it when the log out. selinux (in permissive mode) complains. First, I changed the context to cert_t, and *now* it complains that ksh93 wants write, etc access on the directory. grep ssh-x509-auth /var/log/audit/audit.log | audit2allow offers me this: #============= sshd_t ============== allow sshd_t cert_t:dir write; allow sshd_t var_lib_t:file { write getattr create open ioctl }; So: first, is this an expected behavior; second, is that the correct fcontext, and, finally, is it safe for me to create this as a local policy? Thanks in advance. mark

2 1

cron
by Marcin Trendota 26 Apr '16

26 Apr '16

What the heck is wrong with cron? */1 * * * * nobody /usr/bin/php /var/www/html/osticket/api/cron.php in /etc/cron.d doesn't get executed at all (ran from console works of course!). But the SAME file in /tmp runs flawlessly: */1 * * * * nobody /usr/bin/php /tmp/cron.php It's CentOS7 on VPS with no SELinux. I've noticed similiar behavior before (on bare metal server with SELinux). -- Over And Out MoonWolf

13 23

evolution libsoup and samba bug 765106
by Andreas Benzler 26 Apr '16

26 Apr '16

Hello everyone, while i was play around with winhq install winbind-clients. After this I never can open evolution with exchange ews connector. https://bugzilla.gnome.org/show_bug.cgi?id=765106 I patches libsoup by my self diff -up ./libsoup/soup-auth-ntlm.c.prev ./libsoup/soup-auth-ntlm.c --- ./libsoup/soup-auth-ntlm.c.prev 2016-04-15 14:18:02.680276592 +0200 +++ ./libsoup/soup-auth-ntlm.c 2016-04-15 15:20:00.337116508 +0200 @@ -359,6 +359,7 @@ soup_auth_ntlm_update_connection (SoupCo conn->state = SOUP_NTLM_SSO_FAILED; success = FALSE; } else if (!g_ascii_strcasecmp (response, "PW")) { + conn->state = SOUP_NTLM_SSO_FAILED; priv->sso_available = FALSE; g_free (response); } else { @@ -489,7 +490,7 @@ soup_auth_ntlm_get_connection_authorizat priv->sso_available = FALSE; } } else { - g_warning ("NTLM single-sign-on using %s failed", NTLM_AUTH); + g_debug ("NTLM single-sign-on using %s failed", NTLM_AUTH); } } /* If NTLM single-sign-on fails, go back to original @@ -525,7 +526,7 @@ soup_auth_ntlm_get_connection_authorizat #ifdef USE_NTLM_AUTH case SOUP_NTLM_SSO_FAILED: /* Restart request without SSO */ - g_warning ("NTLM single-sign-on by using %s failed", NTLM_AUTH); + g_debug ("NTLM single-sign-on by using %s failed", NTLM_AUTH); priv->sso_available = FALSE; header = soup_ntlm_request (); conn->state = SOUP_NTLM_SENT_REQUEST; and rebuild mock SRPMS/libsoup-2.48.1-4.el7.centos.src.rpm Now I can open evolution with winbind-cients installed. http://centos.cms4all.org/centos/7/other/SRPMS/libsoup-2.48.1-4.el7.centos.… Hopefully without any other side effect. Sincerely Andy

1 0

CentOS-announce Digest, Vol 134, Issue 13
by centos-announce-request＠centos.org 26 Apr '16

26 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0684 Moderate CentOS 5 nspr Security Update (Johnny Hughes) 2. CESA-2016:0684 Moderate CentOS 5 nss Security Update (Johnny Hughes) 3. CESA-2016:0685 Moderate CentOS 7 nspr Security Update (Johnny Hughes) 4. CESA-2016:0685 Moderate CentOS 7 nss-util Security Update (Johnny Hughes) 5. CESA-2016:0685 Moderate CentOS 7 nss-softokn Security Update (Johnny Hughes) 6. CESA-2016:0685 Moderate CentOS 7 nss Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 25 Apr 2016 13:19:01 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0684 Moderate CentOS 5 nspr Security Update Message-ID: <20160425131901.GA13582(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0684 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0684.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2542e599e93d78a8b51ee1e9ad58b24edf8d70029defc49f8b032e4b5782c6bf nspr-4.11.0-1.el5_11.i386.rpm 5dedec41a954bc0562095cd6d5c43165056c256a66cf1389df0d8414e7c96105 nspr-devel-4.11.0-1.el5_11.i386.rpm x86_64: 2542e599e93d78a8b51ee1e9ad58b24edf8d70029defc49f8b032e4b5782c6bf nspr-4.11.0-1.el5_11.i386.rpm f54f893419cc8223d491056a96e33c327a1a6b3e6585c9d91edcaf227a546dc3 nspr-4.11.0-1.el5_11.x86_64.rpm 5dedec41a954bc0562095cd6d5c43165056c256a66cf1389df0d8414e7c96105 nspr-devel-4.11.0-1.el5_11.i386.rpm d0bc78381c24c31a38ea4297e6ec8f6b2dceb676fa83be84d07d8213f9b1c441 nspr-devel-4.11.0-1.el5_11.x86_64.rpm Source: 27c20b9b8a0d828b87cf67ca091669580d1506904edac211c643a8ab5f2fcaa6 nspr-4.11.0-1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 25 Apr 2016 13:20:12 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0684 Moderate CentOS 5 nss Security Update Message-ID: <20160425132012.GA13713(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0684 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0684.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 22a25171db9d8a514be909e7a8eef944e73b3194d6dc51c1e4e351adfb62035e nss-3.21.0-6.el5_11.i386.rpm 28ae63c316cc4f13f29e8cb0dfcf13b004dd591386eeed974b5721adf1b62f5d nss-devel-3.21.0-6.el5_11.i386.rpm bd69e9a3c779a8fc3a9c5f1d2db5cecc2c30b92fbb7a3d1f65cdc86f4cf04339 nss-pkcs11-devel-3.21.0-6.el5_11.i386.rpm d70335c291e0b4b34b7e7e4294a284b59d26617edb92d601b2e281c3e48995aa nss-tools-3.21.0-6.el5_11.i386.rpm x86_64: 22a25171db9d8a514be909e7a8eef944e73b3194d6dc51c1e4e351adfb62035e nss-3.21.0-6.el5_11.i386.rpm 891293a24f0e8664504d9bf777844c333efb8f77d7bed69163857dea240e0425 nss-3.21.0-6.el5_11.x86_64.rpm 28ae63c316cc4f13f29e8cb0dfcf13b004dd591386eeed974b5721adf1b62f5d nss-devel-3.21.0-6.el5_11.i386.rpm c442280aab2f2064a0ef4b0794ac1f926422eb44a1e8c0759a54f6f0f71e9cce nss-devel-3.21.0-6.el5_11.x86_64.rpm bd69e9a3c779a8fc3a9c5f1d2db5cecc2c30b92fbb7a3d1f65cdc86f4cf04339 nss-pkcs11-devel-3.21.0-6.el5_11.i386.rpm f412a80e0611d89981d883653a2bb309afbd20dd825770d45ef0d267e6ee18e7 nss-pkcs11-devel-3.21.0-6.el5_11.x86_64.rpm ae5698473b4847dc48f6e13ed0747c092487843889f88df8741692076fd6ff25 nss-tools-3.21.0-6.el5_11.x86_64.rpm Source: 4813046342f6562e761c0d1f6c782de5cebaa62fa06523482498dcd1b2c2e8ea nss-3.21.0-6.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 25 Apr 2016 17:49:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nspr Security Update Message-ID: <20160425174911.GA16668(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: daf7526f2f1ccc56ec97e57940cde39049a4a111951b01197b2c18b4bc7ec1cb nspr-4.11.0-1.el7_2.i686.rpm d784f223e384f756a5c594925512c5fd6d46aaad66f85936b51453a0dc2dbd8a nspr-4.11.0-1.el7_2.x86_64.rpm 56037499e8d01dd812e5ff3a2752c9aa108dd45fd816269abae28fd6eaa751b1 nspr-devel-4.11.0-1.el7_2.i686.rpm 5b3fbd8326f1249e287423a753d2b249e4d7281c669943c367a62d6f839dfde5 nspr-devel-4.11.0-1.el7_2.x86_64.rpm Source: 6520f99cd5afa95d605bcc653f47c828e2fb491a548e057d0c99e91a57a1dac3 nspr-4.11.0-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 25 Apr 2016 17:49:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nss-util Security Update Message-ID: <20160425174924.GA16739(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 73472239f7a39dfce534c7a7d354a0c47c56d4164bd751e9709285dc52526a52 nss-util-3.21.0-2.2.el7_2.i686.rpm ebe0bba24d7b4477830fe4dbb025e91ca30a619e5806241a84c7e4c420bab53c nss-util-3.21.0-2.2.el7_2.x86_64.rpm e512d5a51c14dca89b2207be8a6aa792cf3e5e549f4f525f5d26800b705b8a72 nss-util-devel-3.21.0-2.2.el7_2.i686.rpm 2013f4efb5ccdee9431259c717c2f473dff61f0b26f39a2e46012764f7a127c5 nss-util-devel-3.21.0-2.2.el7_2.x86_64.rpm Source: e90e5e5834289fae968dd2d04f9d563d7a67e3c733ebc2291b7ab131f93c5e14 nss-util-3.21.0-2.2.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Mon, 25 Apr 2016 17:49:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nss-softokn Security Update Message-ID: <20160425174935.GA16820(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3119ce33b30bd2aee2e386f0a3f2f01c90c9869ae2cb39a685f913e7a4d0e14a nss-softokn-3.16.2.3-14.2.el7_2.i686.rpm d207816db9a598d15c0856a925b28221f4166968fba76d09aa01aa9ea6c44170 nss-softokn-3.16.2.3-14.2.el7_2.x86_64.rpm e544515243939f744d849b645cfb308bf0d4f73e57c29d52d4023fb264b61298 nss-softokn-devel-3.16.2.3-14.2.el7_2.i686.rpm 5e8c6639e808aaa869b50e9c1c5b827ab6960c5dcc371c1ba42b4dddbae6888e nss-softokn-devel-3.16.2.3-14.2.el7_2.x86_64.rpm c579edfa53c72797701474fbbbc1c19d90ed7c407046d7718e25234b0887acb7 nss-softokn-freebl-3.16.2.3-14.2.el7_2.i686.rpm 9253b359efea3686548eeb043ed0e0bf5e859a677c98452e1bec39d500756e94 nss-softokn-freebl-3.16.2.3-14.2.el7_2.x86_64.rpm 871ddd52d4894f9a515683607b009e206dd7c181158f5a7bb1f88349236fbbc8 nss-softokn-freebl-devel-3.16.2.3-14.2.el7_2.i686.rpm bccc6cb31656273c92f1288717bcc7f8578b3c42670433812f68e9164dd326f2 nss-softokn-freebl-devel-3.16.2.3-14.2.el7_2.x86_64.rpm Source: 698e112d5ce13a9e9703bac655fe9d2a75fa85bc828af64a965bbc0e880c62d2 nss-softokn-3.16.2.3-14.2.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Mon, 25 Apr 2016 17:49:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0685 Moderate CentOS 7 nss Security Update Message-ID: <20160425174947.GA16905(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: acc0e05d8f247791db76ab9b21359abc7908c1ab9ead506964b52955287fe25b nss-3.21.0-9.el7_2.i686.rpm 33e2a1aa657f809c53449627200616b683de444300a5b2c2a79510e3e5912b00 nss-3.21.0-9.el7_2.x86_64.rpm bce90a8604496832d35d0cfefa05a552f9f3e1d866d5f6dfb0c1763d5ad34009 nss-devel-3.21.0-9.el7_2.i686.rpm ab4370a426efcdbf15bc1730f3a077150a597edb103ebbabaceb39d84f0fb96c nss-devel-3.21.0-9.el7_2.x86_64.rpm 87f7e4956ae9aeff3821b2b28b9f3500b94b0037d9280b10149833b3e4a65902 nss-pkcs11-devel-3.21.0-9.el7_2.i686.rpm e1ac83844836b6605c439bb5fa70be50163b9154d27ffcb45fc01c183fdc9c29 nss-pkcs11-devel-3.21.0-9.el7_2.x86_64.rpm 2a0881f7703e23a95aa8db53858285793eb30ceb198a7a20fa816c60e472a15d nss-sysinit-3.21.0-9.el7_2.x86_64.rpm abb98d8a2a2737ab4031c145c1503cf31bb3b2b54983547e2675b0b08805eaf6 nss-tools-3.21.0-9.el7_2.x86_64.rpm Source: 7b8295c752cbd420b5ae52a8b4aa8fa9b6979c57f9caa8279c14e3865ce62883 nss-3.21.0-9.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 13 ************************************************

1 0

what does firefox have against sans-serif
by Michael Hennebry 24 Apr '16

24 Apr '16

I've been struggling to get Firefox to render text in a sans-serif font. So far, I've only been able to do that by setting the default font as sans-serif. DejaVu Sans Mono and DajaVu Sans are the only other listed fonts that I'm reasonalbly sure are sans-serif. Helvetica and Arial are not there. sans-serif does work on Konqueror. Does anyone know how to affect the font-family on Firefox 38.7.0 ? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

CentOS-announce Digest, Vol 134, Issue 12
by centos-announce-request＠centos.org 23 Apr '16

23 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2016:0682 CentOS 6 qla2xxx Enhancement Update (Johnny Hughes) 2. CEEA-2016:0683 CentOS 5 tzdata Enhancement Update (Johnny Hughes) 3. CEEA-2016:0683 CentOS 6 tzdata Enhancement Update (Johnny Hughes) 4. CEEA-2016:0683 CentOS 7 tzdata Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 22 Apr 2016 17:30:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0682 CentOS 6 qla2xxx Enhancement Update Message-ID: <20160422173059.GA52900(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0682 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0682.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: beb8bae27284f3d614fc06a783956a67bdf4954962014a9e79e6dca337a4d65f kmod-qla2xxx-8.07.00.26.06.8_k-1.el6_7.i686.rpm x86_64: 913727d84d304f885ac611a8205e8e4783400d0769146cb63794bf9148645e10 kmod-qla2xxx-8.07.00.26.06.8_k-1.el6_7.x86_64.rpm Source: 5bf20afc610114f1aacc3163db44e1c9789775f29edc191e30055ba505028fc6 qla2xxx-8.07.00.26.06.8_k-1.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 22 Apr 2016 17:36:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0683 CentOS 5 tzdata Enhancement Update Message-ID: <20160422173627.GA1517(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0683 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 54d05bf911d8ee5756581ca4a6f680a17331a8ad81a78a4c2fab444eef4ae4a4 tzdata-2016d-1.el5.i386.rpm 3ba460b1fc6d3e5087a34f29d94b02d80b0cfb96291e4325d5dade203120279c tzdata-java-2016d-1.el5.i386.rpm x86_64: a3f76a48da798cf6074da566312ef38d3453f1bc4f47e57650bd4d8287ac2147 tzdata-2016d-1.el5.x86_64.rpm b85b0e326c82dc3ed6cc03ea4d555662977fd3ff169a31f3c6113320a9b445dd tzdata-java-2016d-1.el5.x86_64.rpm Source: f50acf35e30f529551db9e8d38ffa214a3b5f518e52195e5ffc96d04ec8fb796 tzdata-2016d-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 22 Apr 2016 17:38:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0683 CentOS 6 tzdata Enhancement Update Message-ID: <20160422173821.GA53191(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0683 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 648b5c1c0dc0890ee3194aad413b0d952e28cc0325247548f24092d2cfef222a tzdata-2016d-1.el6.noarch.rpm a3aa69f440c5d5ff03192f8b14bd80903232c52bf61533d5d54423fac7b382be tzdata-java-2016d-1.el6.noarch.rpm x86_64: 648b5c1c0dc0890ee3194aad413b0d952e28cc0325247548f24092d2cfef222a tzdata-2016d-1.el6.noarch.rpm a3aa69f440c5d5ff03192f8b14bd80903232c52bf61533d5d54423fac7b382be tzdata-java-2016d-1.el6.noarch.rpm Source: 69641ac33c2b4de7bf4ad934fd885e90d13efbf377f0a12e2b9001666c67dd82 tzdata-2016d-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Fri, 22 Apr 2016 17:58:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0683 CentOS 7 tzdata Enhancement Update Message-ID: <20160422175814.GA10802(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0683 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 57d7e4c3f03b35ab0b95808de779bede15909718a3a3c09637ec82e9eb9ad53d tzdata-2016d-1.el7.noarch.rpm 43bf52c3c30e55eb107bbde5235c12d9afd1009ae6f12c5310c76fd4145a00da tzdata-java-2016d-1.el7.noarch.rpm Source: daa340cc9b6340c361d5feb3b1dc93e7ef0c19719738aa29d4d4a6e3b74bf528 tzdata-2016d-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 12 ************************************************

1 0

FirewallD issue
by Marcin Trendota 23 Apr '16

23 Apr '16

Hello everybody. Recently i moved external interface to zone "external" on my home server/router. And something strange is hapening. From my router (chamber, CentOS7) everything is fine: [root@chamber ~]# firewall-cmd --list-all home (default, active) interfaces: enp3s0 tun0 virbr0 sources: services: dhcp dhcpv6-client dns http https imaps ipp-client mdns nfs samba samba-client vnc-server ports: 143/tcp 26666/tcp masquerade: no forward-ports: icmp-blocks: rich rules: [root@chamber ~]# firewall-cmd --list-all --zone=external external (active) interfaces: enp1s0 sources: services: ports: 26666/tcp masquerade: yes forward-ports: icmp-blocks: rich rules: [root@chamber ~]# nmap 10.0.49.14 Starting Nmap 6.40 ( http://nmap.org ) at 2016-04-21 11:57 CEST Nmap scan report for 10.0.49.14 Host is up (0.00045s latency). Not shown: 997 closed ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https MAC Address: 52:54:00:D6:6D:4A (QEMU Virtual NIC) Nmap done: 1 IP address (1 host up) scanned in 0.18 seconds But from host in another location (connected through VPN): moonwolf  ~  nmap 10.0.49.14 Starting Nmap 7.12 ( https://nmap.org ) at 2016-04-21 11:59 CEST Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn Nmap done: 1 IP address (0 hosts up) scanned in 0.06 seconds moonwolf  ~  nmap 10.0.49.14 -Pn -p22 Starting Nmap 7.12 ( https://nmap.org ) at 2016-04-21 11:59 CEST Nmap scan report for svn.karakkhaz.dwarfs (10.0.49.14) Host is up (0.015s latency). PORT STATE SERVICE 22/tcp filtered ssh Nmap done: 1 IP address (1 host up) scanned in 0.05 seconds moonwolf  ~  ping 10.0.49.14 PING 10.0.49.14 (10.0.49.14) 56(84) bytes of data. 64 bytes from 10.0.49.14: icmp_seq=1 ttl=62 time=9.45 ms 64 bytes from 10.0.49.14: icmp_seq=2 ttl=62 time=26.0 ms ^C --- 10.0.49.14 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 9.459/17.754/26.050/8.296 ms What could cause this behavior? Before interface move everything was working as expected. -- Over And Out MoonWolf

3 6

Dual boot C7 with Window 10
by Jerry Geis 22 Apr '16

22 Apr '16

I have a laptop with windows 10. I went into the Windows disk manager and shrunk the volume to make room for C7. That worked. I also changed the BIOS from secure boot to "both" (secure/legacy) I installed C7, went fine. About the time it was done I realized I never saw anything about "other" boot options (seems I saw that in the past). Anyway sure enough, got done and C7 boots fine - no option there for Windows. I did searching and found I needed to add to the /etc/grub.d/40_custom the following: menuentry "Windows 10" { set root='(hd0,1)' chainloader +1 } then re-run the grub2-mkconfig -o /boot/grub2/grub.cfg I then rebooted and sure enough I got the menu item for "Windows 10" however when I select it it does not boot. How do I get Windows 10 to boot again ? Thanks, Jerry

5 9

Suddenly increased my hard disk
by Chandran Manikandan 22 Apr '16

22 Apr '16

Hi All, I have running Centos 6.5 32 bit machine. This machine is running qmailtoaster packages and mailbox size is 385 GB. if i run the df -h command it show 385 GB out of 1TB I have run the same command today suddenly shows 576 GB out of 1 TB. I didn't update any bulk file and mail transaction is not very high. How do i check this issue and fix it. how do i find out and why suddenly showing this much of increasing the size of hard disk. Could anyone help me -- *Thanks,* *Manikandan.C* *System Administrator*

13 38

Fwd: EPEL-ANNOUNCE Re: Upcoming OwnCloud changes in EPEL
by James Hogarth 22 Apr '16

22 Apr '16

In the event that there are CentOS users making use of the EPEL owncloud packages, but not following the EPEL mailing lists, please read the mail below with regards to your installations. Thanks James ---------- Forwarded message ---------- From: "James Hogarth" <james.hogarth(a)gmail.com> Date: 22 Apr 2016 16:21 Subject: EPEL-ANNOUNCE Re: Upcoming OwnCloud changes in EPEL To: "EPEL Development List" <epel-devel(a)lists.fedoraproject.org> Cc: <epel-announce(a)lists.fedoraproject.org> > > > On 5 April 2016 at 09:22, James Hogarth <james.hogarth(a)gmail.com> wrote: >> >> Hi all, >> >> Following on the process of bringing OwnCloud up to date in Fedora we're turning our attention to the EPEL users. >> >> Unfortunately EL6's use of php53 means we cannot update any further there given the minimum requirement of php54. >> >> As such the maintenance update of 7.0.13 that is in epel-testing now for EPEL6 will be the final one there to be followed by the retiring of the package. >> >> If you wish to update from that please either migrate to an EL7 base system or switch to the OwnCloud upstream packages which make use of SCL to satisfy the php54+ requirement. >> >> On the EPEL7 side of things 8.1.6 is due to hit testing very shortly. This is a mandatory update as a precursor to the 8.2.3 update in due course. Once this reaches live please ensure that updates are carried out and your OwnCloud installation is fully tested prior to the 8.2.3 update. >> >> This is due to a requirement from upstream that updates follow the path 8.0 -> 8.1 -> 8.2 -> 9.0. >> >> Related to this when updating the EL6 install from the 7.0 version to an EL7 or upstream SCL version please do make sure you follow the upgrade chain correctly - it is not possible to skip a step. >> >> Once the 8.2 goal is reached a discussion will be had then for EPEL as to whether to provide owncloud82 and owncloud90 packages or to just stay on the current major update - but that discussion is some time away as of yet. >> >> The reason for picking owncloud82 as the possible base for this is that this is the first version that has no php libraries bundled so will be the easiest to provide the long term maintained base from in a clean fashion complying to guidelines as closely as possible. >> >> Kind regards, >> >> James >> >> > > Following on from the previous message EPEL6 has it's final update with the EOL message. Please arrange to move to the upstream SCL packages or to migrate to EL7 if you are using owncloud on EPEL6 - be aware when you do migrate off of this that it is important to follow the chain through 8.0->8.1->8.2 checking your installation at each step. > > EPEL7 has had some time in testing and received a positive test so the 8.1.6 update there is being pushed today. > > When that has gone stable an 8.2.3 update will be pushed to epel-testing. Please ensure that your installation is updated to 8.1.6 and fully tested before applying the 8.2.3 update. > > Kind regards, > > James > > > > _______________________________________________ > epel-announce mailing list > epel-announce(a)lists.fedoraproject.org > http://lists.fedoraproject.org/admin/lists/epel-announce@lists.fedoraprojec… >

1 0

Postgrey on CentOS 6
by Gabriele Pohl 22 Apr '16

22 Apr '16

Hi, I administer a postfix mail server on CentOS 6. Now I want to setup another with similar configuration. But the postgrey package is no longer available in Epel for this CentOS release as I have seen now: https://admin.fedoraproject.org/pkgdb/package/rpms/postgrey/ 1. Will I have to make an upgrade of the existing mail server to get security patches again or is it not critical to use the old package? 2. Can you give advice for an alternative setup of greylisting for postfix on CentOS 6? Cheers, Gabriele

3 4

CentOS-announce Digest, Vol 134, Issue 11
by centos-announce-request＠centos.org 22 Apr '16

22 Apr '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0675 Critical CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) 2. CESA-2016:0651 Critical CentOS 6 java-1.8.0-openjdk Security Update (Johnny Hughes) 3. CESA-2016:0650 Critical CentOS 7 java-1.8.0-openjdk Security Update (Johnny Hughes) 4. CESA-2016:0676 Critical CentOS 5 java-1.7.0-openjdk Security Update (Johnny Hughes) 5. CESA-2016:0676 Critical CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 21 Apr 2016 14:18:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0675 Critical CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20160421141859.GA46055(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0675 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0675.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4d7fe6563d5abaffc6bc24e370fe27fd4eb25060eea9f52aa5e8c367e99b398c java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el6_7.i686.rpm d2e9fc1a261d8f71385e3d93090d57f28d5b89ad26b3124a14eb6a6bf24bf4a1 java-1.7.0-openjdk-demo-1.7.0.101-2.6.6.1.el6_7.i686.rpm c270494b809b58f94e93ec07c3a7a1b2377255cf68f40164302e155bb963a85c java-1.7.0-openjdk-devel-1.7.0.101-2.6.6.1.el6_7.i686.rpm 9a94c4e451d56b8f7a8363f7a0fd13fb9277dbe464828fe8aefba51ce3879c6a java-1.7.0-openjdk-javadoc-1.7.0.101-2.6.6.1.el6_7.noarch.rpm 8cea06d4dc92ed544c60e8f3228c7f7bf9435c3375ca206c08d11b21b3603cd1 java-1.7.0-openjdk-src-1.7.0.101-2.6.6.1.el6_7.i686.rpm x86_64: c365b92ebe7bbf48db5b5f8aa6893ff422f534151e390feb6c3a384489ba2469 java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el6_7.x86_64.rpm 606fd51bc502852109daf5a88161343fed7da91ecb534403858324ec89dc6dcc java-1.7.0-openjdk-demo-1.7.0.101-2.6.6.1.el6_7.x86_64.rpm 1549f4f78ff836862e0e515948c16742f5aec9e18a7b87de86177a6223dc3a9b java-1.7.0-openjdk-devel-1.7.0.101-2.6.6.1.el6_7.x86_64.rpm 9a94c4e451d56b8f7a8363f7a0fd13fb9277dbe464828fe8aefba51ce3879c6a java-1.7.0-openjdk-javadoc-1.7.0.101-2.6.6.1.el6_7.noarch.rpm bac440cd4f429012cace2379e4750e9b88156b509eafd3c76b1524777b6b81ff java-1.7.0-openjdk-src-1.7.0.101-2.6.6.1.el6_7.x86_64.rpm Source: 2aa58427b351e93de62debf349a20b67f50a5e15066965d969012d6084c0894f java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 21 Apr 2016 14:19:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0651 Critical CentOS 6 java-1.8.0-openjdk Security Update Message-ID: <20160421141929.GA46225(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0651 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0651.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ec77472b2a77fc9a4458be55eb2bbf7f396d456507d3649a8fba0f5e407f14d1 java-1.8.0-openjdk-1.8.0.91-0.b14.el6_7.i686.rpm c28c0fed0d99ae32577d90bb53415ee075bf023a4ebafd5bf21c87b069905b5f java-1.8.0-openjdk-debug-1.8.0.91-0.b14.el6_7.i686.rpm fd0e9b42fe2a0edef4d1ff4a61cc59fbb90950d2bc3a22459ed5157c47c8b7c4 java-1.8.0-openjdk-demo-1.8.0.91-0.b14.el6_7.i686.rpm 83310d34063167bbb09913670f15e7781fba758a0505508845293ef6bfc4e49f java-1.8.0-openjdk-demo-debug-1.8.0.91-0.b14.el6_7.i686.rpm e2e62894d0447762494e076850fe42708be7318dcac4c93a6a609dc4aac01bbb java-1.8.0-openjdk-devel-1.8.0.91-0.b14.el6_7.i686.rpm 68ce9d186eb542af29f3d83a7f2ef872a01c900921aa479e189f51820f4ead25 java-1.8.0-openjdk-devel-debug-1.8.0.91-0.b14.el6_7.i686.rpm 4b806fbda3cf31dca4991c7d68d818588a2687a0808ce1ce664b3240071c475a java-1.8.0-openjdk-headless-1.8.0.91-0.b14.el6_7.i686.rpm eddf216af8c4fce5c981173951e8ecdd81f8e4f2e2b90a0e3cac15b6ccae410f java-1.8.0-openjdk-headless-debug-1.8.0.91-0.b14.el6_7.i686.rpm 9b3c9adc2fb2649b914439a1bd265bc3e3e5a80974cd44bdeeb3f74851faeb31 java-1.8.0-openjdk-javadoc-1.8.0.91-0.b14.el6_7.noarch.rpm 044dfe70937f165d125ce89701b6a465eab224fbae44014f1710a68b1e457b7a java-1.8.0-openjdk-javadoc-debug-1.8.0.91-0.b14.el6_7.noarch.rpm 2072a00050e3129eb95d5bf9b3625f9d1b586de42e60f8bf20f6fc24213b57ab java-1.8.0-openjdk-src-1.8.0.91-0.b14.el6_7.i686.rpm 2ff98f403211f45b9a23f5d09f0cf85f5306f6fdc56c6a8bd16fb5c8d2cab21e java-1.8.0-openjdk-src-debug-1.8.0.91-0.b14.el6_7.i686.rpm x86_64: ce3fbeb5f1b94caefd59eaaaf1e89590f7af1bd8a3565747ed01844aa84e09b6 java-1.8.0-openjdk-1.8.0.91-0.b14.el6_7.x86_64.rpm 9f8a7fdfdf7a54ef758864fa7f8a7286178a23c0110e6fb56ebeccecccecb161 java-1.8.0-openjdk-debug-1.8.0.91-0.b14.el6_7.x86_64.rpm b53edef51ae2c2ea49478802d5c97aea52ebff9e43c4adaae7da4809e6df12a8 java-1.8.0-openjdk-demo-1.8.0.91-0.b14.el6_7.x86_64.rpm dcbf177eac9c033616353f41b3665d7031d9a28acd7c6c61447115c634929e09 java-1.8.0-openjdk-demo-debug-1.8.0.91-0.b14.el6_7.x86_64.rpm ad091bcaeeab336c4edd416eedb6322c412ca09a4397900dc93d7b8e2423fc82 java-1.8.0-openjdk-devel-1.8.0.91-0.b14.el6_7.x86_64.rpm 4e22c136e7d70c84c250ecb4dc87a08310200d3d4fb5ca81f7921c721e0f1eb3 java-1.8.0-openjdk-devel-debug-1.8.0.91-0.b14.el6_7.x86_64.rpm 180a4c15040750a21e415c08df931e40ed381fca7dc3bd1da9c11d873d040dc2 java-1.8.0-openjdk-headless-1.8.0.91-0.b14.el6_7.x86_64.rpm 65d67b3bb951e7338386d77baf25aa0ca5f397504e78899ec0379cfdba09d78b java-1.8.0-openjdk-headless-debug-1.8.0.91-0.b14.el6_7.x86_64.rpm 9b3c9adc2fb2649b914439a1bd265bc3e3e5a80974cd44bdeeb3f74851faeb31 java-1.8.0-openjdk-javadoc-1.8.0.91-0.b14.el6_7.noarch.rpm 044dfe70937f165d125ce89701b6a465eab224fbae44014f1710a68b1e457b7a java-1.8.0-openjdk-javadoc-debug-1.8.0.91-0.b14.el6_7.noarch.rpm a10de8998789257af1091892aab877d92e63778c391acc525075fa0669dfae94 java-1.8.0-openjdk-src-1.8.0.91-0.b14.el6_7.x86_64.rpm 3445b7ad563a83cf2874a3c1c05d9b62e49ba0231df8b938dc76eec2913392cc java-1.8.0-openjdk-src-debug-1.8.0.91-0.b14.el6_7.x86_64.rpm Source: a45b5d9b98510294db26132d3b070ce9d32598809681e6a6deaae007ab132f92 java-1.8.0-openjdk-1.8.0.91-0.b14.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 21 Apr 2016 15:30:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0650 Critical CentOS 7 java-1.8.0-openjdk Security Update Message-ID: <20160421153055.GA5164(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0650 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0650.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 10cdd2b46d8df0b3b14bbf21d31c5effab729dc78cdf8e4094efcfd7c6a58684 java-1.8.0-openjdk-1.8.0.91-0.b14.el7_2.x86_64.rpm 16088422e7951d489c36a93522073d18b5384ec165f86c36dd58f119e543659b java-1.8.0-openjdk-accessibility-1.8.0.91-0.b14.el7_2.x86_64.rpm a9d2fd6435430cda790ef3861659a5426c6a59807025ea2dbb49a11cb758ec8b java-1.8.0-openjdk-accessibility-debug-1.8.0.91-0.b14.el7_2.x86_64.rpm c4b65ecb0e28e5c83a66974d77f7f9b0875976e7488266c0da0e7319c031eac6 java-1.8.0-openjdk-debug-1.8.0.91-0.b14.el7_2.x86_64.rpm f10dcf9f965c10566996fc01912077b1f782222df7e9cb2cbb505efa3cf6f55c java-1.8.0-openjdk-demo-1.8.0.91-0.b14.el7_2.x86_64.rpm 5c828161cd50425d91a5b68ee7a04878aaa0d340f097aed3d0f9cade2ba6428f java-1.8.0-openjdk-demo-debug-1.8.0.91-0.b14.el7_2.x86_64.rpm 0b9c66624ab2d1d828564406d0e09ef878aa88c092c916361b75fffd2a3a0b6d java-1.8.0-openjdk-devel-1.8.0.91-0.b14.el7_2.x86_64.rpm fcb33d6345882bdd2e0fa635c4ba259d9e1a864716164958f660a4357cc0c57a java-1.8.0-openjdk-devel-debug-1.8.0.91-0.b14.el7_2.x86_64.rpm 63b9ef748b8a6529dccc9ffc8fb599c6dd26744825e1d85903ae574a8502766a java-1.8.0-openjdk-headless-1.8.0.91-0.b14.el7_2.x86_64.rpm 6a49ec6cf4625f777f6b68b2b430c4dd7dafa1ff239729a887d0bfefe145d727 java-1.8.0-openjdk-headless-debug-1.8.0.91-0.b14.el7_2.x86_64.rpm 87731530386c655226c6ceaf61e6d0ddc33ef253ba92d90369bf83213915a830 java-1.8.0-openjdk-javadoc-1.8.0.91-0.b14.el7_2.noarch.rpm e5d945bc8b31c946a7f75eb582558fa91c0d954c367607845bf1235afc934c1f java-1.8.0-openjdk-javadoc-debug-1.8.0.91-0.b14.el7_2.noarch.rpm bb1e61cabe761af30c79bb32a3ca2d4f2fe45719c8f44af9ca73b9c7730a0509 java-1.8.0-openjdk-src-1.8.0.91-0.b14.el7_2.x86_64.rpm 3ec13ccd3f2cb10d096ea822b53f8ee765a272ed559425a5db49bb48c9af44a2 java-1.8.0-openjdk-src-debug-1.8.0.91-0.b14.el7_2.x86_64.rpm Source: c72d1aee021472de0e09f2cb63478ca825d76c499c4c5c15adcb318bdf75cfab java-1.8.0-openjdk-1.8.0.91-0.b14.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 21 Apr 2016 15:42:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0676 Critical CentOS 5 java-1.7.0-openjdk Security Update Message-ID: <20160421154231.GA24331(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0676 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0676.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 741aa2d0fce5f7052bb6f107b028bb2d7e79923b74e285f8c8f44187b5debfa2 java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el5_11.i386.rpm 8789dcdb717d350a963398acd676416dd99ae814df84d86d2ebf72de42c3f0aa java-1.7.0-openjdk-demo-1.7.0.101-2.6.6.1.el5_11.i386.rpm 2811e48ffdcb9f834462b9b98efa60161fd5cbf9b2fa9afd971cfa2e899f2665 java-1.7.0-openjdk-devel-1.7.0.101-2.6.6.1.el5_11.i386.rpm c6f2fc106ff51395818c29969d227c0f1880d01cdd28ca0f0379586e2ed2d7c3 java-1.7.0-openjdk-javadoc-1.7.0.101-2.6.6.1.el5_11.i386.rpm e19da7d8c52f1dc585cbf5a1b9fedbef29a2b7f4771db9f2b640dd83f7f461d0 java-1.7.0-openjdk-src-1.7.0.101-2.6.6.1.el5_11.i386.rpm x86_64: 04bf47a89df7a394ddf19aebaaee0bbe04b0a71d25640718c3dea2635895aeeb java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el5_11.x86_64.rpm 0ebdc7d44b9785d61d65374a5910fdba85733cb76e85d128f05253965921d5b4 java-1.7.0-openjdk-demo-1.7.0.101-2.6.6.1.el5_11.x86_64.rpm 38b6488ac9628847d06dfafd82178155b164a264c2a18c52f7f888d83b1b5ecb java-1.7.0-openjdk-devel-1.7.0.101-2.6.6.1.el5_11.x86_64.rpm 48f9ec52431c06cd0be85044df5664eccc43233e6145dde6ddd6699f7ef69afc java-1.7.0-openjdk-javadoc-1.7.0.101-2.6.6.1.el5_11.x86_64.rpm 1bba5b7f6d1e5c1570beaa45368b2f17ebe7149f0edae106bee4faff54fabc10 java-1.7.0-openjdk-src-1.7.0.101-2.6.6.1.el5_11.x86_64.rpm Source: a19a7c7670a722130028f4b25cb06a26994d311e57c142106dffcebafc84daef java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 21 Apr 2016 16:45:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0676 Critical CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20160421164532.GA6714(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0676 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0676.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b8144199bc7bbde4ea2d71ceb9d404e203dbe706e52d9749cb2e614d163b5248 java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el7_2.x86_64.rpm b062507c9caa1c63d4a1e32c5983e6395534ae04808f6bb5d1fb980860ea68a2 java-1.7.0-openjdk-accessibility-1.7.0.101-2.6.6.1.el7_2.x86_64.rpm 6732ffa1dddf6ccdecef74d2f031e6fdeb7ee16603551ea7ac5b97b09a09ab27 java-1.7.0-openjdk-demo-1.7.0.101-2.6.6.1.el7_2.x86_64.rpm decc2e8e20926d6114d1b48031e4bfa766244f0e6a485bc84218f8e04f748bc6 java-1.7.0-openjdk-devel-1.7.0.101-2.6.6.1.el7_2.x86_64.rpm bcac630ec66d36bb522bb931cc5a4fa7f74dd6b4a0e5033f70a5825b1b7d0d4b java-1.7.0-openjdk-headless-1.7.0.101-2.6.6.1.el7_2.x86_64.rpm 4518178bfd8b28a27eebe031c17a2adff74628b51edeaeecdac9f67598e14034 java-1.7.0-openjdk-javadoc-1.7.0.101-2.6.6.1.el7_2.noarch.rpm 7a6697f32e59aa76bb976b593994cfa7d2a2a285b558711332895a45c52a767a java-1.7.0-openjdk-src-1.7.0.101-2.6.6.1.el7_2.x86_64.rpm Source: 5011bfb82063770512895b291f6f9f56effb9b4483244d92ece315c73a55f7f2 java-1.7.0-openjdk-1.7.0.101-2.6.6.1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 134, Issue 11 ************************************************

1 0

Re: [CentOS] Dual boot C7 with Window 10
by m.roth＠5-cent.us 21 Apr '16

21 Apr '16

Jerry Geis wrote: > Thanks... > I added the "insmod ntfs" re-ran config no boot... > I change the hd1 to hd3 re-ran config no boot... > This is what my partition table looks like. > # Start End Size Type Name > 1 2048 534527 260M EFI System EFI system partition 2 534528 567295 16M Microsoft reser Microsoft reserved > partition > 3 567296 525326335 250.2G Microsoft basic Basic data partition 4 998166528 1000214527 1000M Windows recover Basic data partition 5 525326336 525330431 2M BIOS boot parti > 6 525330432 965732351 210G Microsoft basic > 7 965732352 982509567 8G Linux swap > Thoughts? I haven't been following this, and perhaps I'm being dense... but I see BIOS boot partition, and I see 8G of Linux swap... where's the Linux /boot and / partitions? mark PS: *FSCK* ix.manitu

2 1

Security patches list not showing
by Selvin Durai Masilamani 21 Apr '16

21 Apr '16

Hi team, Security patches isn't not showing from Centos 5,6 and 7. Tried Steps: First I installed yum install yum-security package Then I tried yum update --security But getting these message No need to update for security patches , 80 available Thanks, Selvin

3 3

Problem updating ddclient
by Timothy Murphy 21 Apr '16

21 Apr '16

when I ran "sudo yum update" on my CentOS-7.2.1511 today, ddclient was updated to ddclient-3.8.3-1.el7.noarch (from 3.7.3), and ddclient.conf was moved to ddclient.conf.rpmsave . When I move it back, "sudo systemctl restart ddclient" fails with the error (in "sudo journalctl -xe | grep ddclient") Apr 21 13:05:39 alfred.gayleard.eu.localdomain touch[8590]: /bin/touch: cannot touch ‘/var/cache/ddclient/ddclient.cache’: Permission denied I see that when updating ddclient a new group ddclient was created. I've tried various methods, eg deleting ddclient.cache, re-installing ddclient, creating a new ddclient.cache owned by root.ddclient, etc, but without success. Running "sudo systemctl restart ddclient" either fails, or hangs. Any advice gratefully received. Is there a way to go back to the previous version of ddclient? when I try "sudo yum downgrade ddclient-3.7.3" I'm told "No package ddclient-3.7.3 available" -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

1 1

how to debug authconfig execution
by Bernard Fay 21 Apr '16

21 Apr '16

Hello group, Does anyone have an idea how to debug the execution of authconfig? I try to do many changes with authconfig but no files are modified. It seems authconfig does not have a verbose mode or any other way to know what is going wrong with it? Someone have an idea to find out what is going on with authconfig? Thanks,

1 0

xorg-x11-drv-ati 7.7.0
by Andreas Benzler 21 Apr '16

21 Apr '16

I have recently installed the xorg-11-drv-ati-7.7.0 on my iMac 2010. sources can found at. https://lists.x.org/archives/xorg-announce/2016-April/002684.html <https://lists.x.org/archives/xorg-announce/2016-April/002684.html> http://centos.cms4all.org/centos/7/drivers/ <http://centos.cms4all.org/centos/7/drivers/> http://centos.cms4all.org/centos/7/drivers/SRPM/xorg-x11-drv-ati-7.7.0-1.el… <http://centos.cms4all.org/centos/7/drivers/SRPM/xorg-x11-drv-ati-7.7.0-1.el…> Don’t forget that i use a newer mesa 11.1.2 and kernel 4.4.8 its. The kernel 3.10 was not build for that „new“ graphic cards“. Only small tests are done, but works pretty much. Sincerely Andreas Benzler

1 0

xorg-x11-drv-amdgpu 1.1.0
by Andreas Benzler 21 Apr '16

21 Apr '16

I have recently installed the xorg-11-drv-amdgpu 1.1.0 on my laptop. sources can found at. http://centos.cms4all.org/centos/7/drivers/ http://centos.cms4all.org/centos/7/drivers/SRPM/xorg-x11-drv-amdgpu-1.1.0-1… Don’t forget that i use a newer mesa 11.1.2 and kernel 4.4.8 its. The kernel 3.10 was not build for that „new“ graphic cards“. Sincerely Andy Benzler

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss