Discuss

discuss@lists.centos.org

34758 discussions

Inotify or equivalent
by Joseph L. Casale 01 May '09

01 May '09

I installed inotify and incrond to watch a directory and set the job as '/mnt/dir IN_ATTRIB chmod 0660 $@/$#' which worked very well except that as expected, IN_ATTRIB is to broad of a watch class as it caused an enormous amount of contention with the filemonitor and/or db server and the client side app was less than happy. Not to mention top showed it working away like mad... Is there any way to look for permission changes only, or something else that might work? Thanks! jlc

6 8

list of packages with dual licenses
by Jerry Geis 01 May '09

01 May '09

Hi all, There are many packages in centos. Does there exist a "listing" of packages that have the dual licensing? By dual license I mean packages not just GPL licensing in a commercial setting. Thanks, Jerry

2 1

.htaccess
by Matt 01 May '09

01 May '09

I use the following .htaccess file to restrict access to certain web folders to only my IP pool. Options +Indexes order allow,deny allow from x.x.x. Is there anyway to allow a user right in if there in that IP pool but require a password if there not? Matt

3 2

Server test suite
by Russell Miller 01 May '09

01 May '09

Hi, I have an interest in software that will allow me to define test suites for servers. We have several thousand Linux systems, and after we build or rebuild each one, we have a checklist. I am trying to automate this checklist, and ideally have it run against all of our servers on a regular basis and report inconsistencies. Is anyone aware of open-source software that will do this, or do I need to write my own? --Russell

2 3

Re: [CentOS] eth0 killed when adding virtual interface and multiple NICs are present
by Kai Schaetzl 01 May '09

01 May '09

JohnS wrote on Mon, 27 Apr 2009 11:09:56 -0400: > If you don't mind when you come to an answer would you please let me > know. I am interested to know. I could not find a real solution. I had to go to another way of creating the network setup for this machine (and maybe others, I will see) and disable the network-bridge script from xen. That new solution is documented on the xen-users mailing-list. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 4

CentOS-announce Digest, Vol 51, Issue 1
by centos-announce-request＠centos.org 01 May '09

01 May '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:0297-03: Low CentOS 2 i386 end of life notice (John Newbigin) 2. CESA-2009:0459 Important CentOS 4 x86_64 kernel security update (Karanbir Singh) 3. CESA-2009:0459 Important CentOS 4 i386 kernel security update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 01 May 2009 10:02:18 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2009:0297-03: Low CentOS 2 i386 end of life notice To: centos-announce(a)centos.org Message-ID: <49FA3C0A.6030508(a)ict.swin.edu.au> Content-Type: text/plain; charset=ISO-8859-1; format=flowed As per the upstream vendors errata support policy, updates for CentOS 2 will also end on May 31, 2009. It is recommended that any system still running CentOS 2 should be upgraded to a more recent version of CentOS before this date to ensure continued security and bug fix support. More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html -- John Newbigin ITS Senior Analyst / Programmer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Fri, 1 May 2009 06:39:18 -0400 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0459 Important CentOS 4 x86_64 kernel security update To: centos-announce(a)centos.org Message-ID: <20090501103918.GA12764(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0459 Important https://rhn.redhat.com/errata/RHSA-2009-0459.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: kernel-2.6.9-78.0.22.EL.x86_64.rpm kernel-devel-2.6.9-78.0.22.EL.x86_64.rpm kernel-doc-2.6.9-78.0.22.EL.noarch.rpm kernel-largesmp-2.6.9-78.0.22.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-78.0.22.EL.x86_64.rpm kernel-smp-2.6.9-78.0.22.EL.x86_64.rpm kernel-smp-devel-2.6.9-78.0.22.EL.x86_64.rpm kernel-xenU-2.6.9-78.0.22.EL.x86_64.rpm kernel-xenU-devel-2.6.9-78.0.22.EL.x86_64.rpm src: kernel-2.6.9-78.0.22.EL.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ Message: 3 Date: Fri, 1 May 2009 06:39:17 -0400 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0459 Important CentOS 4 i386 kernel security update To: centos-announce(a)centos.org Message-ID: <20090501103917.GA12751(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0459 Important https://rhn.redhat.com/errata/RHSA-2009-0459.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: kernel-2.6.9-78.0.22.EL.i586.rpm kernel-2.6.9-78.0.22.EL.i686.rpm kernel-devel-2.6.9-78.0.22.EL.i586.rpm kernel-devel-2.6.9-78.0.22.EL.i686.rpm kernel-doc-2.6.9-78.0.22.EL.noarch.rpm kernel-hugemem-2.6.9-78.0.22.EL.i686.rpm kernel-hugemem-devel-2.6.9-78.0.22.EL.i686.rpm kernel-smp-2.6.9-78.0.22.EL.i586.rpm kernel-smp-2.6.9-78.0.22.EL.i686.rpm kernel-smp-devel-2.6.9-78.0.22.EL.i586.rpm kernel-smp-devel-2.6.9-78.0.22.EL.i686.rpm kernel-xenU-2.6.9-78.0.22.EL.i686.rpm kernel-xenU-devel-2.6.9-78.0.22.EL.i686.rpm src: kernel-2.6.9-78.0.22.EL.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 51, Issue 1 **********************************************

1 0

esata
by Jerry Geis 01 May '09

01 May '09

I am trying to get esata working. my lspci is below. When I plug in the disk an turn it on - dmesg reports nothing. Is it supposed to report anything like a usb disk does? Is there a module to load? My motherboard is GA-MA78GM-US2H. Jerry --------- 00:00.0 Host bridge: Advanced Micro Devices [AMD] RS780 Host Bridge 00:01.0 PCI bridge: Advanced Micro Devices [AMD] RS780 PCI to PCI bridge (int gfx) 00:0a.0 PCI bridge: Advanced Micro Devices [AMD] RS780 PCI to PCI bridge (PCIE port 5) 00:11.0 SATA controller: ATI Technologies Inc SB700/SB800 SATA Controller [AHCI mode] 00:12.0 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller 00:12.1 USB Controller: ATI Technologies Inc SB700 USB OHCI1 Controller 00:12.2 USB Controller: ATI Technologies Inc SB700/SB800 USB EHCI Controller 00:13.0 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller 00:13.1 USB Controller: ATI Technologies Inc SB700 USB OHCI1 Controller 00:13.2 USB Controller: ATI Technologies Inc SB700/SB800 USB EHCI Controller 00:14.0 SMBus: ATI Technologies Inc SBx00 SMBus Controller (rev 3a) 00:14.1 IDE interface: ATI Technologies Inc SB700/SB800 IDE Controller 00:14.2 Audio device: ATI Technologies Inc SBx00 Azalia (Intel HDA) 00:14.3 ISA bridge: ATI Technologies Inc SB700/SB800 LPC host controller 00:14.4 PCI bridge: ATI Technologies Inc SBx00 PCI to PCI Bridge 00:14.5 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI2 Controller 00:18.0 Host bridge: Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] HyperTransport Configuration 00:18.1 Host bridge: Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] Address Map 00:18.2 Host bridge: Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] DRAM Controller 00:18.3 Host bridge: Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] Miscellaneous Control 00:18.4 Host bridge: Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] Link Control 01:05.0 VGA compatible controller: ATI Technologies Inc Radeon HD 3200 Graphics 01:05.1 Audio device: ATI Technologies Inc RS780 Azalia controller

2 4

Defaults of CentOS Install not working with SELinux
by Dan Roberts 30 Apr '09

30 Apr '09

Following a hard drive corruption I have reinstalled the latest version of CentOS and all current patch files. For most applications I selected the default options. By doing this I expected that the packages would play nice with one another and I could customize as necessary. Setting SELinux to enforce I encountered all sorts of problems - but most were resolvable, save for Dovecot, Procmail (for spamc), and an odd one with Apache. Given that these were all installed with the CentOS install defaults, I can't believe I am the only one with these issues but finding a solution has not been self evident. Hoping someone here can help. For Dovecot I get the following: SELinux is preventing dovecot (dovecot_t) "create" to <Unknown> (dovecot_t). For complete SELinux messages. run sealert -l e1b070ab-586a-4c5a-befe-b6a46b9ab992 For procmail I get the following: SELinux is preventing procmail (procmail_t) "execute" to ./spamc (spamc_exec_t). For complete SELinux messages. run sealert -l 0a554689-4948-4edf-9964-dddbfe6a2492 SELinux is preventing sh (procmail_t) "read" to ./spamc (spamc_exec_t). For complete SELinux messages. run sealert -l 1f1ebd83-412d-4e93-a36f-6f3d34c663df For Apache it's even more strange - When started I get: Syntax error on line 283 of /etc/httpd/conf/httpd.conf DocumentRoot must be directory But it is a directory, has the correct permissions and I have even run chcon -R -h -t httpd_sys_content_t /web/www/ in an effort to correct the problem. I run a virtual server too, and in trying to find a fix for this that may be a problem - but first things first. All the other issues I had I could resolve when I ran the specified "sealert" tag and followed the suggested instructions - but those above don't budge. When I go to the fedora.redhat.com/docs/selinux-fq- fc5 site to take on making a local policy module I am quickly getting lost . The option to simply disable SElinux with respect to Apache, Dovecote or anything else is suggested - but not something I see in the GUI window, and I have not figured out how to do it from the command line. Again, because these are default packages, I hope that someone else knows how to resolve these. With respect to the to reports from SELinux regarding Dovecot and promail, here is a bit more info: The info and Raw Audit message for dovecot_t is: Source Context system_u:system_r:dovecot_t:s0 Target Context system_u:system_r:dovecot_t:s0 Target Objects None [ socket ] Source dovecot Source Path /usr/sbin/dovecot Port <Unknown> Host trailrunner Source RPM Packages dovecot-1.0.7-7.el5 Target RPM Packages Policy RPM selinux-policy-2.4.6-203.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall Host Name trailrunner Platform Linux trailrunner 2.6.18-128.1.6.el5xen #1 SMP Wed Apr 1 10:38:05 EDT 2009 i686 athlon Alert Count 2 First Seen Wed Apr 29 15:39:51 2009 Last Seen Wed Apr 29 15:47:31 2009 Local ID e1b070ab-586a-4c5a-befe-b6a46b9ab992 Line Numbers Raw Audit Messages host=trailrunner type=AVC msg=audit(1241041651.976:33): avc: denied { create } for pid=3884 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=socket host=trailrunner type=SYSCALL msg=audit(1241041651.976:33): arch=40000003 syscall=102 success=no exit=-13 a0=1 a1=bf851070 a2=9e45030 a3=3e1 items=0 ppid=3883 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) The Raw Audit Message for Procmail is: Source Context system_u:system_r:procmail_t:s0 Target Context system_u:object_r:spamc_exec_t:s0 Target Objects ./spamc [ file ] Source procmail Source Path /usr/bin/procmail Port <Unknown> Host trailrunner Source RPM Packages procmail-3.22-17.1.el5.centos Target RPM Packages Policy RPM selinux-policy-2.4.6-203.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall_file Host Name trailrunner Platform Linux trailrunner 2.6.18-128.1.6.el5xen #1 SMP Wed Apr 1 10:38:05 EDT 2009 i686 athlon Alert Count 29 First Seen Wed Apr 29 15:40:40 2009 Last Seen Wed Apr 29 16:25:40 2009 Local ID 0a554689-4948-4edf-9964-dddbfe6a2492 Line Numbers Raw Audit Messages host=trailrunner type=AVC msg=audit(1241043940.918:166): avc: denied { execute } for pid=3344 comm="procmail" name="spamc" dev=dm-0 ino=18762675 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=file host=trailrunner type=SYSCALL msg=audit(1241043940.918:166): arch=40000003 syscall=11 success=no exit=-13 a0=8ef1d90 a1=8ef1020 a2=8ef32d8 a3=1 items=0 ppid=3343 pid=3344 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)

4 7

ps error
by P.A 30 Apr '09

30 Apr '09

Hi does anyone know what the problem here is [root@dnstest lib]# ps ps: error while loading shared libraries: libproc-3.2.3.so: cannot open shared object file: No such file or directory [root@dnstest lib]# ln -s libproc-3.2.7.so libproc-3.2.3.so [root@dnstest lib]# ps ps: /lib/libproc-3.2.3.so: version `_3_1_14' not found (required by ps) as far as I know only ps is giving me this error. CentOS release 5.3 (Final)

3 3

Directory and File Perms
by Joseph L. Casale 30 Apr '09

30 Apr '09

I have a directory shared out via Samba for Quickbooks and seem to have some issues with permissions. The directory being shared is a subdirectory in an ext3 partition being mounted with the acl option. It has been setup as follows: chown root:DOMAIN\AD_Group /mnt/Intuit_Data/ chmod 2770 /mnt/Intuit_Data/ And the Samba share config is has: create mask = 0660 directory mask = 0770 So when a user creates a file from their Windows box through Explorer or any other app, it gets perms as you might expect: -rw-rw---- 1 Domain+jcasale DOMAIN+AD_Group 0 Apr 29 14:24 test.txt and it can be deleted by anyone. Problem is QB uses gamin and this file monitoring daemon runs as root and all sorts of changes take place as you work with the data, from creating the company file to editing it in QB, it ends up slowly changing to 0400? Here is what I am seeing now: User creates a new company file through QB (this is already fubar'ed): # ll -rw------- 1 Domain+jcasale DOMAIN+AD_Group 7647232 Apr 29 14:37 Company.QBW -rw-r--r-- 1 root DOMAIN+AD_Group 420 Apr 29 14:36 Company.QBW.ND -rw-r--r-- 1 Domain+jcasale DOMAIN+AD_Group 1114112 Apr 29 14:36 Company.QBW.TLG drwx------ 2 root root 16384 Apr 24 09:34 lost+found -rw-rw---- 1 root DOMAIN+AD_Group 300 Apr 24 10:17 qbdir.dat Now after working with the company in QB, this is what happens: # ll -rw------- 1 Domain+jcasale DOMAIN+AD_Group 7331840 Apr 29 14:37 Company.QBW -rw-r--r-- 1 root DOMAIN+AD_Group 420 Apr 29 14:37 Company.QBW.ND -rw------- 1 Domain+jcasale DOMAIN+AD_Group 1245184 Apr 29 14:37 Company.QBW.TLG drwx------ 2 root root 16384 Apr 24 09:34 lost+found -rw-rw---- 1 root DOMAIN+AD_Group 300 Apr 24 10:17 qbdir.dat What are my options to control this here? Edit init scripts for that daemon? I don't know what would happen if it doesn't run as root, but maybe as a user that has GID of DOMAIN+AD_Group? Thanks for any ideas! jlc

5 7

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss