Discuss

discuss@lists.centos.org

34753 discussions

Completeley disabling SELinux?
by Kevin Thorpe 26 Jan '09

26 Jan '09

Hi all, I've set SELinux to disabled using the security and firewall widget but I'm still getting a lot of messages in Logwatch.... NULL security context for user, but SELinux in permissive mode, continuing () So it looks like SELinux is still operating. Can anyone tell me how to turn it off completely? It's my development server under my desk so I reallly don't care about security. thanks

10 13

I may have been rooted - but I may not!?
by Nigel Kendrick 26 Jan '09

26 Jan '09

Morning, I am going to treat this as a rooted box and reinstall from scratch, but any thoughts appreciated: This is a Trixbox Server based on Centos, running kernel 2.6.18-53.1.4.el5 SMP The phone system stopped working but this was traced to a configuration error with a replacement switch (it did not get added to the vlan properly), which meant that Trixbox could not see any DNS servers and this b0rks TB. Anyway, during debugging I went to reboot the server and got the following: /dev/kmem missing IDT table read failed I have run rkhunter, which turns up nothing If have forced a filesystem check - all clean I have checked the logs and history file and cannot see anything The server is behind a hardware firewall and the only ports open are those needed for RTP, IAX2 and SIP - there is no other public access and no user accounts. Having fixed the vlan issue, Asterisk is running fine. I re-created /dev/kmem, but it's missing at subsequent reboots. I have Googled many references to the IDT table problem being associated with the SuckIT rootkit, but I can find no evidence that it's installed. OK, bearing in mind that I will go ahead and reinstall the server (no biggie as I have Trixbox config backups and installing TB is not a big task), I just wanted to check whether there were any IDT table issues that may *NOT* be rootkit related and if there are any simple fixes I can try on the box while it's isolated on the bench? In the other direction, has anyone seen this type of behaviour with any rootkit that is not detected by rkhunter and doesn't leave any obvious footprints? Anything to look for? Happy Monday! Thanks Nigel

2 3

Ping and traceroute...
by John Doe 26 Jan '09

26 Jan '09

Hi everybody, Right now, we are blocking pings and traceroutes to our website. But, in order for our members to test the connection when they are experiencing slow browsing, we are thinking about unblocking them... Are there still any security issues (flooding, etc...) in enabling them or is that an old problem fixed a long time ago? Thanks, JD

6 7

e-sata
by centos＠911networks.com 26 Jan '09

26 Jan '09

Hi, Does anybody has any experience with e-sata on CentOS5.2? - How fast is it? Same as an internal sata? - Does it support sata-2? - Does it "hot-plug" like a USB? -- Thanks http://www.911networks.com When the network has to work

5 5

OT? File order on CentOS/Samba server
by Miguel Medalha 25 Jan '09

25 Jan '09

I hope someone familiar with the way Linux processes files can enlighten me on the following: I recently replaced an old Windows 2000 server with a new machine running CentOS 5.2. It uses Samba 3.2.7 to serve a network of Windows XP clients. We are a newspaper. We use Acrobat Distiller to batch-convert a folder of single-page PostScript files (for print) to a multipage PDF file (for electronic distribution). Running on a workstation, Distiller watches the folder on a Samba share and does the conversion, automatically creating bookmarks, indexes and other information. On the Windows server, Distiller processes the files by filename order: M09010901A001C.ps M09010901A002C.ps M09010901A003C.ps ... and so on. On the Linux server, Distiller processes the files in an order that seems arbitrary, for example: M09010901A021C.ps M09010901A005C.ps M09010901A015C.ps ... and so on. The order Distiller uses is NOT related to the time stamp of the files. I tried to copy the files to the watched folder one by one in the correct order; the result is the same. This creates the need to open the final PDF and reshuffle the pages by hand, which is very time consuming and prone to error. There is a workaround to this: use the runfilex script that comes with Acrobat: it can contain a list of files to convert, in the order you want. Unfortunately, this is not acceptable for us since the process then takes about 40 minutes (irrespective of platform or filesystem), instead of 3 or 4 minutes. My question is: how is the order of files determined by Linux when a particular order is not explicitly required by a program? I noted the following: I have 4 files in a folder: file1.ps, file2.ps, file3.ps, file4.ps. When I order them by date, they appear in Windows Explorer in, say, the following order: 3, 4, 1, 2 If I copy them to a new folder one by one in the order 1, 2, 3, 4, they will still appear in the order 3, 4, 1, 2 when ordered by date. So, what information is transported with the files that makes the Linux server present them to the world in this order? Does someone know a workaround to this situation or can someone point me to information about file ordering with Linux? By the way, I am using the EXT3 file system. I tried the same on a VFAT file system and the result is the same. It seems to be a Linux thing, not a file system thing. Thank you for your patience.

12 49

replacing a line in a file
by Jerry Geis 25 Jan '09

25 Jan '09

I have a large file that has a line like: bindaddr=0.0.0.0 ; some other text I want to replace the 0.0.0.0 with my address 192.168.1.8 and remove everything else on the line to get: bindaddr=192.168.1.8 How can I do that? Thanks, jerry

3 3

Problem detecting HP Tape Drive
by Mehdi Sarmadi 24 Jan '09

24 Jan '09

Hello I do have problem using Linux with an external HP tape drive. The server platform is also an HP Server; the server is an HP ML350 G4, and the Tape drive is a HP Storage Works Ultrium 448 - 1U Rack-mountable. HP Ultrium documentation says two drivers should be automatically up, sym53c8xx for LSI SCSI interface "st" for tape and /proc/scsi/scsi should contain information about tape drive, e.g. SCSI ID. However none of them happened in my case! (document: "UP LTO Ultrium 2-3 - Unix Config Guide") The SCSI adapter is an LSI53C1030. The system has another the same adapter which is used for hard disk drives. The interesting part is, the hard disk are detected and even OS boots from them, but I can't make the tape drive work. Moreover, in system boot up, LSI SCSI BIOS displays informations saying there is a tape drive connected! Any one has same experience, suggestion, comments or clues? I've place a zip file here: http://msarmadi.googlepages.com/report_files.zip which contains: - dmesg - lshal - lsmod - lspci -vv - cat /proc/scsi/scsi > proc.scsi.scsi - cat /proc/modules > proc.modules - uname -a > uname Also, below there are detailed information about devices and OS config/log files. ===== System info: Operating System: Redhat Enterprise Linux AS 5(the same thing happened using CentOS 5.2) Sever System: HP ML530 G4 SCSI Adapter: LSI 1030 Tape Drive: HP Storage Works Ultrium 448 - 1U Rack-mountable SCSI Cable: P/N 313375002 Rev R (coming with tape drive) *Note that, no other SCSI devices are connected to the cable. ===== Here is some parts of boot up messages on the screen of HP ML350 G4 ==== System BIOS D17 (14/04/2005) ... MPTBIOS-5.05.18 ... Slot 3 HP Smart Array 6400 Controller (192MB, v.2.26) 1 Logic Drive Detected 1794-Slot 3 Drive Arraye - Array Accelerator Battery Charge low Array Accelerator Posted-Write Cache is temporarilty Disabled Array Accelerator batteries hace failed to charge and should be replaced Slot 3 HP Smart Array 6400 EM Controller (192MB, v.2.26) 1 Logic Drive Detected Tape or CD-ROM Drive(s) Detected: SCSI Port 2: SCSI ID 1 1785-Slot 3 Drive Arraye Not Configured No Drives Detected ... [Followed by GRUB and Linux boot up] ========================= -- Mehdi Sarmadi

5 8

CentOS-announce Digest, Vol 47, Issue 9
by centos-announce-request＠centos.org 24 Jan '09

24 Jan '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:0004 Important CentOS 4 i386 openssl security update (Karanbir Singh) 2. CESA-2009:0004 Important CentOS 4 x86_64 openssl security update (Karanbir Singh) 3. CESA-2009:0057 Important CentOS 5 i386 squirrelmail Update (Karanbir Singh) 4. CESA-2009:0057 Important CentOS 5 x86_64 squirrelmail Update (Karanbir Singh) 5. CESA-2009:0057 Important CentOS 4 i386 squirrelmail security update (Karanbir Singh) 6. CESA-2009:0057 Important CentOS 4 x86_64 squirrelmail security update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 23 Jan 2009 21:39:53 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0004 Important CentOS 4 i386 openssl security update To: centos-announce(a)centos.org Message-ID: <20090123213953.GA10367(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0004 Important https://rhn.redhat.com/errata/RHSA-2009-0004.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: openssl-0.9.7a-43.17.el4_7.2.i386.rpm openssl-0.9.7a-43.17.el4_7.2.i686.rpm openssl-devel-0.9.7a-43.17.el4_7.2.i386.rpm openssl-perl-0.9.7a-43.17.el4_7.2.i386.rpm src: openssl-0.9.7a-43.17.el4_7.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ Message: 2 Date: Fri, 23 Jan 2009 21:39:54 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0004 Important CentOS 4 x86_64 openssl security update To: centos-announce(a)centos.org Message-ID: <20090123213954.GA10380(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0004 Important https://rhn.redhat.com/errata/RHSA-2009-0004.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: openssl-0.9.7a-43.17.el4_7.2.i686.rpm openssl-0.9.7a-43.17.el4_7.2.x86_64.rpm openssl-devel-0.9.7a-43.17.el4_7.2.i386.rpm openssl-devel-0.9.7a-43.17.el4_7.2.x86_64.rpm openssl-perl-0.9.7a-43.17.el4_7.2.x86_64.rpm src: openssl-0.9.7a-43.17.el4_7.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ Message: 3 Date: Sat, 24 Jan 2009 06:16:17 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 5 i386 squirrelmail Update To: centos-announce(a)centos.org Message-ID: <20090124061617.GA12131(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 2509185832b13f153462b6aad4eceb40 squirrelmail-1.4.8-5.el5.centos.3.noarch.rpm Source: 16b0a61a00c16c7a6b8f49123a0a7172 squirrelmail-1.4.8-5.el5.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Sat, 24 Jan 2009 06:16:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 5 x86_64 squirrelmail Update To: centos-announce(a)centos.org Message-ID: <20090124061618.GA12147(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 700a7599bab0d434eeb9ea714b029cf0 squirrelmail-1.4.8-5.el5.centos.3.noarch.rpm Source: 16b0a61a00c16c7a6b8f49123a0a7172 squirrelmail-1.4.8-5.el5.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Sat, 24 Jan 2009 06:18:34 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 4 i386 squirrelmail security update To: centos-announce(a)centos.org Message-ID: <20090124061834.GA12197(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: squirrelmail-1.4.8-5.el4.centos.3.noarch.rpm src: squirrelmail-1.4.8-5.el4.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ Message: 6 Date: Sat, 24 Jan 2009 06:18:35 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 4 x86_64 squirrelmail security update To: centos-announce(a)centos.org Message-ID: <20090124061835.GA12210(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: squirrelmail-1.4.8-5.el4.centos.3.noarch.rpm src: squirrelmail-1.4.8-5.el4.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 47, Issue 9 **********************************************

1 0

file: /etc/sysconfig/clock
by chloe K 24 Jan '09

24 Jan '09

Hi I modify this file /etc/sysconfig/clock How can I restart the service to have update clock? Thank you --------------------------------- All new Yahoo! Mail - Get a sneak peak at messages with a handy reading pane.

2 1

Single Session VNC
by karl balsmeier 24 Jan '09

24 Jan '09

Currently most machines I connect to use a display, but I want to run vncserver such that the display is always 0. Is this possible.

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss