Discuss

discuss@lists.centos.org

34753 discussions

sendmail and relaying
by Jerry Geis 27 May '10

27 May '10

I think my sendmail is not correctly set. It says the default is to disallow relaying. I am running centos 4.8 and I think sendmail is relaying for anything. Based on this: http://www.sendmail.org/~ca/email/chk-89f.html#RELAYING I added|: FEATURE(relay_hosts_only) to my sendmail.mc file and restarted sendmail. I am still seeing connects that get relayed and are not in my /etc/mail/access file. Is there something else I am missing? Thanks, |Jerry

3 2

Re: [CentOS] sandbox complaint
by m.roth＠5-cent.us 27 May '10

27 May '10

Daniel wrote: > On 05/27/2010 04:12 PM, m.roth(a)5-cent.us wrote: >> Daniel wrote: >>> On 05/27/2010 02:38 PM, m.roth(a)5-cent.us wrote: >>>> Daniel wrote: >>>>> On 05/27/2010 12:19 PM, m.roth(a)5-cent.us wrote: >>>>>> Daniel wrote: >>>>>>> On 05/27/2010 12:00 PM, m.roth(a)5-cent.us wrote: >>>>>>>> Daniel wrote: >>>>>>>>> On 05/27/2010 11:49 AM, m.roth(a)5-cent.us wrote: >>>>>>>>>> Updating a system from CentOS 5.4 (current) to 5.5, and I see: >>>>>>>>>> >>>>>>>>>> libsepol.scope_copy_callback: zosremote: Duplicate declaration >>>>>>>>>> in >>>>>>>>>> module: >>>>>>>>>> type/attribute zos_remote_t >>>>>>>>>> libsemanage.semanage_link_sandbox: Link packages failed >>>>>>>>>> semodule: Failed! >>>>>> <snip> >>>>> Remove all audispd-zos-remote.pp and zos_remote.pp >>>>> >>>>> We ship zosremote.pp >>>> >>>> Ok... I can do that, but are you saying to just rm it, and not >>>> whatever package it came in? <snip> >>> I think you will find that it does not happen for everyone else and >>> that these files do not belong to other packages. I have a feeling that >>> something went wrong on an update that left these files around. >>> >> Hmmm...but I don't know if rm'ing them will work, if they're in the d/b. >> So I suppose I'll have to find the package that put them there... >> <time passes> >> Ok, anyone on the CentOS list: does *anyone* know where this came from? >> It' sin the directory provided by >> selinux-policy-targeted-2.4.6-279.el5.noarch, but there's no zos_remote >> in the package. >> > Trust me on this, I know what I am talking about. > > Just remove them. They were put there by previous versions of audit and > maybe selinux-policy. If you are concerned you can squirrel them away. > > selinux-policy takes all pp files in the active directory and compiles > them into a policy module. Ok, I believe you. I also found the same .pp in .../previous/, and diff said no difference, so no problem rm'ing them. mark

1 0

Re: [CentOS] sandbox complaint
by m.roth＠5-cent.us 27 May '10

27 May '10

Daniel wrote: > On 05/27/2010 02:38 PM, m.roth(a)5-cent.us wrote: >> Daniel wrote: >>> On 05/27/2010 12:19 PM, m.roth(a)5-cent.us wrote: >>>> Daniel wrote: >>>>> On 05/27/2010 12:00 PM, m.roth(a)5-cent.us wrote: >>>>>> Daniel wrote: >>>>>>> On 05/27/2010 11:49 AM, m.roth(a)5-cent.us wrote: >>>>>>>> Updating a system from CentOS 5.4 (current) to 5.5, and I see: >>>>>>>> >>>>>>>> libsepol.scope_copy_callback: zosremote: Duplicate declaration in >>>>>>>> module: >>>>>>>> type/attribute zos_remote_t >>>>>>>> libsemanage.semanage_link_sandbox: Link packages failed >>>>>>>> semodule: Failed! >>>> <snip> >>>>>>> Do you have multiple pp files definitin zosremote? >>>> <snip> >>>>> locate -r zos.*remote >>>>> >>>>> Might find the bad pp file. >> <snip> >>>> I don't believe they want me to remove it. Doing the locate, I find: >>>>> locate -r zos.*remote | grep .pp >>>> /etc/selinux/mls/modules/active/modules/zosremote.pp >>>> /etc/selinux/mls/modules/previous/modules/zosremote.pp >>>> /etc/selinux/targeted/modules/active/modules/zos_remote.pp >>>> /etc/selinux/targeted/modules/previous/modules/zos_remote.pp >>>> /old/etc/selinux/targeted/modules/active/modules/zos_remote.pp >>>> /old/etc/selinux/targeted/modules/previous/modules/zos_remote.pp >>>> /old/usr/share/selinux/mls/audispd-zos-remote.pp >>>> /old/usr/share/selinux/strict/audispd-zos-remote.pp >>>> /old/usr/share/selinux/targeted/audispd-zos-remote.pp >>>> /usr/share/selinux/mls/zosremote.pp >>>> /usr/share/selinux/targeted/zosremote.pp >>>> >>>> So, which should I get rid of, that was not cleaned up during the >>>> update? >>> >>> Remove all audispd-zos-remote.pp and zos_remote.pp >>> >>> We ship zosremote.pp >> >> Ok... I can do that, but are you saying to just rm it, and not whatever >> package it came in? >> >> And if it's not correct, why is it here, anyway? Anyone on the CentOS >> list? I don't want to screw around with this as "oh, it's only his weird >> problem", I figure that it's happening to a lot of other folks, and I'd >> like to make the problem go away for everyone. That, of course, means it >> the incorrect stuff needs to be removed from whatever package it's >> in.... >> > I think you will find that it does not happen for everyone else and that > these files do not belong to other packages. I have a feeling that > something went wrong on an update that left these files around. > Hmmm...but I don't know if rm'ing them will work, if they're in the d/b. So I suppose I'll have to find the package that put them there... <time passes> Ok, anyone on the CentOS list: does *anyone* know where this came from? It' sin the directory provided by selinux-policy-targeted-2.4.6-279.el5.noarch, but there's no zos_remote in the package. mark

1 0

Re: [CentOS] sandbox complaint
by m.roth＠5-cent.us 27 May '10

27 May '10

Daniel wrote: > On 05/27/2010 12:19 PM, m.roth(a)5-cent.us wrote: >> Daniel wrote: >>> On 05/27/2010 12:00 PM, m.roth(a)5-cent.us wrote: >>>> Daniel wrote: >>>>> On 05/27/2010 11:49 AM, m.roth(a)5-cent.us wrote: >>>>>> Updating a system from CentOS 5.4 (current) to 5.5, and I see: >>>>>> >>>>>> libsepol.scope_copy_callback: zosremote: Duplicate declaration in >>>>>> module: >>>>>> type/attribute zos_remote_t >>>>>> libsemanage.semanage_link_sandbox: Link packages failed >>>>>> semodule: Failed! >> <snip> >>>>> Do you have multiple pp files definitin zosremote? >> <snip> >>> locate -r zos.*remote >>> >>> Might find the bad pp file. <snip> >> I don't believe they want me to remove it. Doing the locate, I find: >>> locate -r zos.*remote | grep .pp >> /etc/selinux/mls/modules/active/modules/zosremote.pp >> /etc/selinux/mls/modules/previous/modules/zosremote.pp >> /etc/selinux/targeted/modules/active/modules/zos_remote.pp >> /etc/selinux/targeted/modules/previous/modules/zos_remote.pp >> /old/etc/selinux/targeted/modules/active/modules/zos_remote.pp >> /old/etc/selinux/targeted/modules/previous/modules/zos_remote.pp >> /old/usr/share/selinux/mls/audispd-zos-remote.pp >> /old/usr/share/selinux/strict/audispd-zos-remote.pp >> /old/usr/share/selinux/targeted/audispd-zos-remote.pp >> /usr/share/selinux/mls/zosremote.pp >> /usr/share/selinux/targeted/zosremote.pp >> >> So, which should I get rid of, that was not cleaned up during the >> update? > > Remove all audispd-zos-remote.pp and zos_remote.pp > > We ship zosremote.pp Ok... I can do that, but are you saying to just rm it, and not whatever package it came in? And if it's not correct, why is it here, anyway? Anyone on the CentOS list? I don't want to screw around with this as "oh, it's only his weird problem", I figure that it's happening to a lot of other folks, and I'd like to make the problem go away for everyone. That, of course, means it the incorrect stuff needs to be removed from whatever package it's in.... mark

1 0

vinyl sign letter cutter
by Frank Cox 27 May '10

27 May '10

I am looking for a recommendation for a vinyl sign letter cutter that is supporrted under Linux, specifically Centos. My knowledge of these machines is nil, but a bit of googling makes it appear that at least some of them can be made to work using Inkscape. Does anyone have any recommendations? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

1 0

Re: [CentOS] question on CPU
by Jerry Geis 27 May '10

27 May '10

lists-centos wrote: > ------------ Original Message ------------ > >> Date: Thursday, May 27, 2010 10:38:34 AM -0400 >> From: Jerry Geis <geisj(a)pagestation.com> >> >>> On 05/27/2010 03:47 PM, Jerry Geis wrote: >>> >>>> / I have centos 5.4 on an HP laptop, as below the /proc/cpuinfo >>>> shows Dual >>>> >>> />/ core, >>> />/ however, there is only 1 processor listed in /proc/cpuinfo. >>> />/ >>> />/ Is the OS only using a single core? >>> / >>> Check the BIOS, I have seen HP desktops that have option in BIOS >>> to turn off multicore support. Then only single core is exposed >>> to the OS. >>> >>> >>> >> Looked in the BIOS and there was no setting. >> >> Top is only showing 1 CPU. >> > > look in /var/log/dmesg, that will show what was found during the > boot process (and perhaps provide other insights). > > - Richard > > > > powernow-k8: Found 1 AMD Turion(tm) X2 Ultra Dual-Core Mobile ZM-86 processors (1 cpu cores) (version 2.20.00) powernow-k8: 0 : fid 0x0 gid 0x0 (2400 MHz) powernow-k8: 1 : fid 0x0 gid 0x0 (1200 MHz) powernow-k8: 2 : fid 0x0 gid 0x0 (600 MHz) Did they give me a "bad" processor. jerry

1 3

Re: [CentOS] Having trouble with LDAP Authentication.
by Steve Glasser 27 May '10

27 May '10

Message: 11 Date: Tue, 25 May 2010 16:16:45 -0500 From: Andy Akins <andy(a)egovtn.org> Subject: [CentOS] Having trouble with LDAP Authentication... To: CentOS mailing list <centos(a)centos.org> Message-ID: <C821A86D.754B%andy(a)egovtn.org> Content-Type: text/plain; charset="iso-8859-1" I?ve google and searched, and have had very little luck... I have: 1. Installed all the packages. 2. Configured and have running OpenLDAP. 3. Migrated my passwd/shadow/group/hosts files into the directory 4. Tested the directory using ldapsearch 5. Installed LAM (web interface to LDAP authentication) 6. Added a user using LAM. 7. Confirmed user is in directory. 8. Confirmed user is not in /etc/passwd 9. Confirmed using ?getent passwd | grep username? that the user is listed. 10. Confirmed using ?getent passwd? shows two records for each user except ldap-only users (one for /etc/passwd, one for LDAP). However, ?id username? Returns unknown user <snip> Assuming you have set up both server and client, I would try the following: 1) Don't use nscd until you can confirm basic auth to the Ldap server is working. 2) Enable logging on the Ldap server. Afair, CentOS defaults to loglevel 0, which is no logs. Try something like loglevel 256. 3) Try to authenticate from a client while tailing the server logs. That should give you an idea of whether the client is even reaching the server, and if so what sort of error is occurring. Btw you didn't mention if you were doing Ldap over tls, but that adds another point of failure. See here for a step-by-step test procedure for ssl/tls: http://aput.net/~jheiss/krbldap/howto.html Cheers, -- Steve Glasser sgla9347(a)gmail.com

1 0

Re: [CentOS] Odd failure of smbd to start from init.d - CentOS 5.4 - it's that fine SELinux
by Ross Walker 27 May '10

27 May '10

On May 25, 2010, at 8:25 PM, Whit Blauvelt <whit(a)transpect.com> wrote: > On Tue, May 25, 2010 at 07:55:12PM -0400, Whit Blauvelt wrote: >> On Tue, May 25, 2010 at 04:33:53PM -0700, Jerry Franz wrote: >> >>> Are you running with SELinux on? > > You were right Jerry! > > echo 0 > /selinux/enforce > > and then /etc/init.d/smb restart works! Thank you much Jerry! > > Now why doesn't that fine piece of government work, selinux, do > something > standard and useful like log when it's instituting breakage?? I get > that > it's doing it "for your own good," but what good is it if it doesn't > tell > you what it's doing? The _first place_ I looked when we ran into this > problem was the logs. Nada. Zilch. > > Programs that try to be smarter than the root user are annoying > enough. > Programs that do that and don't try to educate the root user while > they're > doing it are worse. There are standards for logging. Selinux is > ignoring > them. If it's going to be breaking stuff by default, and failing to > log the > breakage by default, that's not remotely good. Yet that's how CentOS > installs it. Are we downstream of some Redhat brilliance here? Selinux alerts are in /var/log/audit/audit.log The problem is if smbd doesn't create the messages.tdb file then it won't have the selinux rights. That file can be deleted and will be recreated on smbd start, it's just a cache file. -Ross

11 21

Re: [CentOS] sandbox complaint
by m.roth＠5-cent.us 27 May '10

27 May '10

Daniel wrote: > > On 05/27/2010 11:49 AM, m.roth(a)5-cent.us wrote: >> Updating a system from CentOS 5.4 (current) to 5.5, and I see: >> >> libsepol.scope_copy_callback: zosremote: Duplicate declaration in >> module: >> type/attribute zos_remote_t >> libsemanage.semanage_link_sandbox: Link packages failed >> semodule: Failed! >> >> Any ideas as to what's going on, or why? >> >> mark "glad selinux is disabled on that box" >> > Do you have multiple pp files definitin zosremote? Well, after I googled zosremote, and found it's zos-remote, and where its config file was, in /etc/audisp I see: -rw-r----- 1 root root 210 Mar 31 02:26 audispd.conf -rw-r----- 1 root root 620 Mar 31 02:26 audisp-remote.conf drwxr-x--- 2 root root 4096 May 27 11:42 plugins.d -rw-r----- 1 root root 246 Mar 31 02:26 zos-remote.conf And I *guarantee* I have *never* done anything other than just upgrade this system, and that this system has had selinux disabled all along, so if there are, they were installed with a yum update from whatever the upstream has packaged. mark

1 0

CentOS-announce Digest, Vol 63, Issue 4
by centos-announce-request＠centos.org 27 May '10

27 May '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010-0410 CentOS 5 i386 vsftpd Update (Karanbir Singh) 2. CEBA-2010-0410 CentOS 5 x86_64 vsftpd Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 26 May 2010 12:31:25 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010-0410 CentOS 5 i386 vsftpd Update To: centos-announce(a)centos.org Message-ID: <20100526123125.GA28163(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010-0410 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0410.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: acc3dbc8de0744fc10887b5b97994f89 vsftpd-2.0.5-16.el5_5.1.i386.rpm Source: b18ba6cb5952d4cd648c2bbb0b8c8b30 vsftpd-2.0.5-16.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 26 May 2010 12:31:25 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010-0410 CentOS 5 x86_64 vsftpd Update To: centos-announce(a)centos.org Message-ID: <20100526123125.GA28177(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010-0410 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0410.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: d970499effd032897c90099750df1bac vsftpd-2.0.5-16.el5_5.1.x86_64.rpm Source: b18ba6cb5952d4cd648c2bbb0b8c8b30 vsftpd-2.0.5-16.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 63, Issue 4 **********************************************

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss