Discuss

discuss@lists.centos.org

34753 discussions

compilers a security risk?
by Dave Stevens 21 Jul '10

21 Jul '10

I manage a web hosting server that we've recently upgraded, in part so we could accommodate a domain that will enable community mapping. In a recent exchange of mails one developer said: "I could build the package directly on the server machine you have, provided that the potential security risk posed by having compilers installed is not an issue." and another said: "What sort of security risk is there in having compilers installed on a working server? "Obviously we can remove the compilers, however when Mapserver or postgis get updated, we will need to build new packages somewhere. One option: create a second VM for mapchat. We'll put the build environment on it, and only turn it on to make new packages." I don't have enough experience to assess the security issues. Does anyone have an opinion on this? It would be simple and feasible to allocate another domain as suggested above. Dave -- "It is no measure of health to be well adjusted to a profoundly sick society." Krishnamurti

13 14

samba upgrade 3.0 - 3.x problem convert passdb.tdb
by camun 20 Jul '10

20 Jul '10

Hello after several days of searching, I have not found a definitive answer to the problem samba Migrating from 3.0.x to 3.3.x. (Migrating from 3.0.x to 3.3.x Can Fail to Update passdb.tdb Correctly (bug # 6195) . passdb.tdb break occurs in the file where the new samba starts. Any suggestions or someone going through the same problem? (I'm running samba 3.0.28 with upgrade to 3.5.4 (Sernet repo) []´s Camun.

1 0

freetype bytecode interpreter
by Frank Cox 20 Jul '10

20 Jul '10

It may yet be too early to get a definite answer about this, but I'm wondering what the status of the formerly patented bytecode interpreter in freetype will be in RHEL/Centos 6 and possibly future updates to RHEL/Centos 5. The patent on the technology has apparently now expired. http://freetype.sourceforge.net/patents.html and http://apple.slashdot.org/story/10/07/19/1524250/FreeType-Project-Cheers-Tr… Effective with freetype 2.4 the technology will enabled by default at the freetype website. I just checked and the version in the RHEL 6 beta appears to be 2.3.11 -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

3 9

Re: [CentOS] boot process glitch due to missing 2nd disk
by Miguel Medalha 20 Jul '10

20 Jul '10

This is not a "Dell-specific BIOS hack". Dear child, ask your folks about PCs. I think it was only this decade that PCs would actually boot *without* a keyboard. EVERY PC EVER MADE before would not. Nah! Every BIOS since I remember (at least from 1990) had a choice on the first page, Standard BIOS Setup. "Halt on all errors, Halt on keyboard/video errors, Halt on no errors". At least these three were always present. Of course the default is always "Halt on all errors". Unless you modify the settings on purpose, that's what happens.

2 1

Odd fsck problem
by m.roth＠5-cent.us 20 Jul '10

20 Jul '10

In the last month - definitely after going to 5.5 - I've tried to fsck a drive (340 days, or some such, unchecked). 960G RAID 5, I *think*, possibly serial port attachment to a JetStore RAID array. Every time I try, it gets to 70.0%, and stops. As in, I left it run last night, having started it late afternoon, and around 23:00, it was still exactly there, not even .1% more. On that, I also had a -dd flag, since running it the other day with a -d gave me nothing at all of debugging info; neither did the dd. Note that my manager tried to run one on another server, also attached to a JetStore, and it also stopped at the exact same point. This has never happened before, and fsck has handled these in the past. Anyone seen anything like this, and/or have ideas as to what I can do to fsck to at least *tell* me why it was gagging? mark

4 5

Kickstart User Guide in PDF & DVI format
by Keith Roberts 20 Jul '10

20 Jul '10

Hi all. I have uploaded a PDF and DVI version of the Kickstart manual for anyone to download and use. I created this for my own personal use when learning to write kickstart files. You can grab the bits from here: http://www.karsites.net/centos/anyuser/kickstart-PDF-manual.php Feedback or any errata welcomed so I can keep this up to date. Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.php-debuggers.net http://www.karsites.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

2 2

"Cannot allocate memory" java exception - apache still returns "200 OK"
by Sean Carolan 20 Jul '10

20 Jul '10

I'm configuring some monitoring for a particular java/tomcat application. We have noticed the occasional "Cannot allocate memory" error. When this occurs apache still seems to return a "200 OK" status code. Anyone know how to configure this so that when java has an error, apache will also return some kind of error?

1 0

kernel mod compilation frustration
by m.roth＠5-cent.us 20 Jul '10

20 Jul '10

I want to add a sleep() to a module. It tells me it can't find <time.h>; if I tell it "/usr/include/time.h", it gives me a ton of errors (I *have* put the #include just above where I call sleep, not up at the top). Any clues as to what I'm doing wrong? With kernel /vmlinuz-2.6.18-194.3.1.el5, I just added the line extern unsigned int sleep( unsigned int seconds ); and everything was wonderful; with the current kernel, it complains sleep is undefined. ?? mark

2 2

GFS performance issue
by Fred Wittekind 20 Jul '10

20 Jul '10

Two web servers, both virtualized with CentOS Xen servers as host (residing on two different physical servers). GFS used to store home directories containing web document roots. Shared block device used by GFS is an ISCSI target with the ISCSI initiator residing on the Dom-0, and presented to Dom-U webservers as drives. Also, providing a second shared block device for quorum disk. If I hit the web site on just one of the nodes, it behaves as expected. If I try to load the websites from both nodes at the same time (two web browser instances), the load average on both nodes spikes, and page loads very slowly. The site I am trying to host is very high traffic, and if the servers can be nearly brought to there knees with two web browser instances running on a single workstation, that's not going to work. I am not seeing any error messages in the logs regarding the cluster. Any help or suggestions on how to troubleshoot this issue would be greatly appreciated. [root@www3 www]# find ./ | wc -l 64815 [root@www3 www]# gfs2_tool df /home/www /home/www: SB lock proto = "lock_dlm" SB lock table = "Web:homewww" SB ondisk format = 1801 SB multihost format = 1900 Block size = 4096 Journals = 2 Resource Groups = 316 Mounted lock proto = "lock_dlm" Mounted lock table = "Web:homewww" Mounted host data = "jid=1:id=393217:first=0" Journal number = 1 Lock module flags = 0 Local flocks = FALSE Local caching = FALSE Type Total Blocks Used Blocks Free Blocks use% ------------------------------------------------------------------------ data 20707148 4347237 16359911 21% inodes 16426386 66475 16359911 0% [root@www3 www]# gfs2_tool gettune /home/www new_files_directio = 0 new_files_jdata = 0 quota_scale = 1.0000 (1, 1) logd_secs = 1 recoverd_secs = 60 statfs_quantum = 30 stall_secs = 600 quota_cache_secs = 300 quota_simul_sync = 64 statfs_slow = 0 complain_secs = 10 max_readahead = 262144 quota_quantum = 60 quota_warn_period = 10 jindex_refresh_secs = 60 log_flush_secs = 60 incore_log_blocks = 1024 [root@www3 www]# cat /etc/cluster/cluster.conf |egrep '(dlm)|(gfs)' <dlm plock_ownership="1" plock_rate_limit="0"/> <gfs_controld plock_rate_limit="0"/> Fred Wittekind

2 1

acl and chmod interaction
by Markus Falb 20 Jul '10

20 Jul '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 #$ setfacl -m u:mf:r bla #$ getfacl bla # file: bla # owner: root # group: root user::rw- user:mf:r-- group::r-- mask::r-- other::r-- It is readable by mf like intended. #$ chmod go-rwx bla #$ getfacl bla # file: bla # owner: root # group: root user::rw- user:mf:r-- #effective:--- group::r-- #effective:--- mask::--- other::--- It is not readable no more by mf which was not intended. Obviously the mask:: is cleared, but why ? OTOH group::r ? Confused am i - -- Regards, markus -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkxE6wEACgkQYoWFBIJE9eVXMwCfRWhN2OKvi4WyJUumB7leuCGY v3UAoIEAzpq+m96IQeilRIXSAdNEU6km =FOj6 -----END PGP SIGNATURE-----

1 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss