Discuss

discuss@lists.centos.org

34758 discussions

Best way to secure apache web root
by Stephen Nelson-Smith 30 Nov '09

30 Nov '09

I have a site running drupal. The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which apache must be able to write. What is the most secure way to implement this? I am thinking: chown -R root:apache /var/www/html chmod -R 0750 /var/www/html chown apache:apache for where need to write Is there a better way? S.

4 4

startssl and CA autority
by fakessh 29 Nov '09

29 Nov '09

> hi all > > hi postfix list > > I worked all day to develop my certificates > with certificates free of startssl > > I based this document > http://translate.google.fr/translate?js=y&prev=_t&hl=fr&ie=UTF-8&u=http%3A%… > > I realized correctly signed certificates > > I read in the doc startssl the need to import this document among the > certificates > to import the document https://www.startssl.com/certs/sub.class1.client.ca.pem > > how to incorporate the certificates in postfix? > > > thanks for all your feedback > > thanks all your > > thanks >

2 1

again, nic driver order
by Gordon McLellan 29 Nov '09

29 Nov '09

I have two servers with identical hardware ... TYAN i3210w system boards with dual intel gigabit interfaces, and a PCI intel gigabit nic. I'm running Centos 5.4, x86_64, 2.6.18-164.6.1.el5 Every other time I reboot, the nics initialize in a different order. anaconda had setup /etc/modprobe.conf with alias lines for the cards: alias eth0 e1000 alias eth1 e1000e alias eth2 e1000e However, introducing the bonding driver into the mix seems to have thrown a wrench in the works. alias bond0 bonding options bond0 miimon=80 mode=5 #or something like that, can't get to the machine right now - no console and the network is down So, I read about the ifcfg options and try assigning each config script an HWADDR line. after rebooting, /var/log/messages announces that hardware address for eth1 does not match, skipping ... same for eth2 Reading the archives seems to indicate modprobe.conf doesn't do much and is made obsolete by udev, and that hwaddr is discouraged because it's a band-aid. The archives seem to suggest fiddling with udev to be the answer. So I modify /etc/udev/rules.d/60-net (or something) and add a few rules found in an ancient example (those aren't my mac addresses): KERNEL=="eth?", SYSFS{address}=="00:37:e9:17:64:af", NAME="eth0" # MAC of first NIC in lowercase KERNEL=="eth?", SYSFS{address}=="00:21:e9:17:64:b5", NAME="eth1" # MAC of second NIC in lowercase Now, all three network cards get assigned as eth0! eth1 and eth2 are no longer found. The pci-express nics (onboard) get detected first, and the pci nic is last, so it ends up "owning" the eth0 alias. I don't really care which alias gets assigned to which nic, but I want that assignment to be constant. All suggestions are appreciated! Gordon

6 17

CentOS-announce Digest, Vol 57, Issue 12
by centos-announce-request＠centos.org 28 Nov '09

28 Nov '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update (Karanbir Singh) 2. CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update (Karanbir Singh) 3. CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update (Karanbir Singh) 4. CEBA-2009:1600 CentOS 5 i386 kexec-tools Update (Karanbir Singh) 5. CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update (Karanbir Singh) 6. CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update (Karanbir Singh) 7. CEBA-2009:1612 CentOS 5 x86_64 openswan Update (Karanbir Singh) 8. CEBA-2009:1612 CentOS 5 i386 openswan Update (Karanbir Singh) 9. CEBA-2009:1611 CentOS 5 i386 xterm Update (Karanbir Singh) 10. CEBA-2009:1611 CentOS 5 x86_64 xterm Update (Karanbir Singh) 11. CEBA-2009:1610 CentOS 5 i386 metacity Update (Karanbir Singh) 12. CEBA-2009:1610 CentOS 5 x86_64 metacity Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 27 Nov 2009 23:09:54 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230954.GA20939(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 25503455a83968e82bddb5bad50b3b36 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 24abb566a75e1186b8cc47ac3b883808 kdelibs-3.5.4-25.el5.centos.1.x86_64.rpm 4f29862576be6cd8f777c3fa02b39b6f kdelibs-apidocs-3.5.4-25.el5.centos.1.x86_64.rpm ef5c485ca5cd72aac5f4d11015a2d946 kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm a6ec2f3c18bb9f659f847058411d4c1b kdelibs-devel-3.5.4-25.el5.centos.1.x86_64.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 27 Nov 2009 23:09:53 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230953.GA20924(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 69f420e91ae49efb936b7ac6bafc4447 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 9e10d4c1ba5770f61a9a415d302663f7 kdelibs-apidocs-3.5.4-25.el5.centos.1.i386.rpm 2d16f3725afc68fd2256b2d0b62426bb kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21015(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 2b21645feba164d62f646dc3eeeb4a06 kexec-tools-1.102pre-77.el5.3.x86_64.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 i386 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21000(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 01fb1c1596d2f18e3922d9d1bf2c3c0c kexec-tools-1.102pre-77.el5.3.i386.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21084(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e6335c49b8f3329e402e5d3e53611897 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21099(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 292e68d92156b38cc296d6043b2f0215 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 27 Nov 2009 23:17:10 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 x86_64 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231710.GA21199(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: c2888e684a30c8f7f015256fb8a7bba6 openswan-2.6.21-5.el5_4.1.x86_64.rpm f04a532ddf2eb134b597a775f7bdfc24 openswan-doc-2.6.21-5.el5_4.1.x86_64.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 27 Nov 2009 23:17:09 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 i386 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231709.GA21184(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c520e1798d11cd5ac40ae47cce9fa1a5 openswan-2.6.21-5.el5_4.1.i386.rpm d38b53762fea5d27a8ae40b8e2d28768 openswan-doc-2.6.21-5.el5_4.1.i386.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 i386 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21261(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: eb5d68779ddaecc22ddb519d83915979 xterm-215-8.el5_4.1.i386.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 x86_64 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21276(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: be2bf3c90ab6ea34ebe31351da16f78d xterm-215-8.el5_4.1.x86_64.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 11 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 i386 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21345(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: bc0cb5c70d74cf7a6965afc0dce1d53e metacity-2.16.0-12.el5_4.1.i386.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 12 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 x86_64 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21360(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a62304689380340ad45682704f2cbdd6 metacity-2.16.0-12.el5_4.1.i386.rpm 43f8ba25d93dd969d7bc7c5aa82093e8 metacity-2.16.0-12.el5_4.1.x86_64.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 57, Issue 12 ***********************************************

1 0

SNAT question
by Peter Peltonen 28 Nov '09

28 Nov '09

Hi, I am unable to get my LAN masqueraded using SNAT with CentOS 5.3 and iptables. I have the following setup: eth0: connects to internet with static public IP 1.2.3.1 (obscured here for privacy) eth1: connects to DMZ with static public IP 1.2.3.2 (obscured here for privacy) eth2: connects to LAN with static private IP 192.168.0.1 Traffic to hosts in the DMZ/Internet through eth0/1 work fine. I tried masqueradig the LAN with following: ptables -A FORWARD -i eth2 -j ACCEPT iptables -A FORWARD -o eth2 -j ACCEPT iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 1.2.3.1 After this I can ssh to a server in the Internet from the LAN using the server's IP address but not its name. The w command on the server tells me that my address has not been masqueraded (its 192.168.0.2, the LAN client's private IP). What am I doing wrong? Best, Peter

3 5

read only sftp access
by Andrei F 28 Nov '09

28 Nov '09

Hi, I'm trying to setup read-only SFTP repo. The directory that I'm planning to make available via sftp needs to have only read-only access. My issue is that this specific directory is already available for read & write access but under different credentials. When I try to login via my read-only account, openssh spits out an error about incorrect permissions. Any idea how can I share the same directory via sftp under two different usernames under the same filesystem permissions?

3 2

IPTABLES and Hi-Risk blocking
by James B. Byrne 27 Nov '09

27 Nov '09

We are considering whether or not to block internal access to social networking and private entertainment web sites. This not a policy decision as of yet, just an exploratory exercise. Our gateways run CentOS-5.4 and use iptables to enforce firewall rules. The information that we wish to determine is whether or not it is feasible to block sites such as facebook, youtube, twitter, etc. using iptables. Is there a superior method? Does there exist already a generally accepted utility or method for accomplishing this? At the present time we only block outgoing traffic for a handful of internal hosts that should never have any reason to generate traffic destined outside the lan. But, now we are advised by some authorities that facebook and similar sites are considered security risks to hosts that are used to access them. Without debating the merits of such claims, how would one proceed to block internal network access to specific domain names using CentOS? Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 5

PHP updates
by Craig White 27 Nov '09

27 Nov '09

For the 2 threads going on about PHP 5.2/5.3... CentOS tracks upstream whose version is... php-5.1.6-23.2.el5_3 If you want something newer, you have to go off the beaten path. try this...(as root) wget http://dev.centos.org/centos/5/CentOS-Testing.repo mv CentOS-Testing.repo /etc/yum.repos.d yum --enablerepo=c5-testing check-update and this would allow to update to version 5.2.9-2.el5.centos if you then... yum --enablerepo=c5-testing update php and if enough people actually convinced the developers that 5.2.9-2.el5.centos were feasible, then they would probably move it into the 'Extras' repository. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

8 8

Xen 3.4.1/3.4.2 and newer libvirt for Centos 5.4
by For＠ll 27 Nov '09

27 Nov '09

Hi, Is ther any repo wher I find xen 3.4.1 or 3.4.2 and newer libvirt for Centos 5.4 i386. For@ll

2 1

Re: [CentOS] Docx format ?
by Sorin Srbu 27 Nov '09

27 Nov '09

>-----Original Message----- >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf >Of Sorin Srbu >Sent: Friday, November 27, 2009 9:22 AM >To: 'CentOS mailing list' >Subject: Re: [CentOS] Docx format ? > >>> What about Powerpoint presentations, ie .pptx-files? Do they look anywhere >>> near the original look when opened in MS Office? >>> >>No clue - haven't run into one of those yet. >> >Anyway, I'll continue to look into OOO and pptx. Downloaded and installed OOO3.1 on a CentOS 5.4 i386 I had here. After some initial foul ups on my part (had OOO2 already installed, and had to first uninstall the older one and then do a forced manual rpm-install of OOO3.1), this is what I've found. I got a pptx-file from my boss with pictures and formatting and whatnot. It opened fine in CentOS. Some formatting was plain lost, but the pictures were all there, as far as I can tell. Some graphics, like arrows and such did not get through and looked like something from the 80s block graphics era. Some text got printed over other parts of the text, however I've a inkling this might be due to the screen size maybe? I also opened the same pptx with OOO3.1 on my WinXP-machine, and got a blank white screen, in slide show-mode. So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS and OOO teams! -- /Sorin

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss