Discuss

discuss@lists.centos.org

34758 discussions

Re: [CentOS] Antivirus for CentOS? (yuck!)
by Les Bell 22 Jan '09

22 Jan '09

Ian Forde <ian(a)duckland.org> wrote: >> Yep - on the wikipedia page you referenced, look in the "Requirements" section, section 5. It says: "Use and regularly update anti-virus software on all systems commonly affected by malware" << I doubt Amos's QSA is using Wikipedia as his reference, unfortunately. The PCI DSS Ver 1.2 standard (of Oct. 2008 - get it from https://www.pcisecuritystandards.org/security_standards/pci_dss_download.ht…) actually states: 5.1 Deploy anti-virus software on all systems commonly affected by malicious software (particularly personal computers and servers). but then goes on, under "Testing Procedures" to state: 5.1 For a sample of system components including all operating system types commonly affected by malicious software, verify that anti-virus software is deployed if applicable anti-virus technology exists. Unfortunately, both open-source and commercial anti-virus software that will run on Centos do exist, which gives the assessor some wiggle-room. Even worse, the Summary of Changes from 1.1 to 1.2 says: Requirement & Testing Procedure: Clarified requirement applies to all operating systems types commonly affected by malicious software, if applicable anti-virus technology exists. Besides use of the term "anti-virus software", changed the term "virus" to "malicious software". Deleted note stating "Systems commonly affected by viruses typically do not include UNIX-based operating systems or mainframes." That last sentence is a killer, unfortunately - it means they have been tightening up on *ix systems. Looks like you could be in for a battle if the QSA is an intransigent sort. You could argue that while anti-virus programs do exist, their purpose is to detect infected files which could harm connected Windows systems, and are therefore not applicable in your specific case, particularly since you are using proprietary protocols and not running Windows file-sharing software (e.g. Samba, FTP, etc.) It really comes down to whether your Assessor is clueful, or a box-ticking droid. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

CentOS4 pam_tally2 config
by Jim Perrin 22 Jan '09

22 Jan '09

Okay, it's been a while since I've messed with EL4, and apparently I've gone stupid with respect to pam and properly enabling pam_tally2 in an appropriate fashion. My notes are for EL5, so if someone would be so kind as to smack me in the right direction, I'd appreciate it. -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell

2 3

Web pages time out after server rebuild
by Rob Kampen 21 Jan '09

21 Jan '09

Hi All, I have an old (2004) Intel based server with 4G of ram running Linux ndgonline.net 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux fully up to date using centOS rpms for apache, php, and mysql. I have just changed from dmraid to md raid for the OS on mirrored 80Gb SATA drives. (long story for another time) Mysql lives on a Intel hardware raid 5 controlled array - as is has for four years. My application has not changed and also runs just fine on another server (although this one is 64 bit) that has a mirrored mysql database replication from this one. I have compared apache conf files, my.cnf and all appears well. The page that times out on our firefox browsers after 30 seconds does have a series of complex mysql queries. There are no log messages other than ssl_error_log that shows: PHP Fatal error: Maximum execution time of 30 seconds exceeded in /var/www/htdocs/ndg/includes/customHandler.inc on line 87 the line number varies as does the file name it reports. It will serve pages that only have a few records, yet on my functioning server even the large pages return over the internet in less than 2 seconds. So I'm thinking not enough memory? - but it was working well last Monday. something slowing mysql?? - all other queries in this app appear just fine php having issues? How do I get some extra log info to track this down? Kind regards Rob

3 5

error installing Twinkle - libresolv.so.2(GLIBC_PRIVATE)
by Mr.Vandeley 21 Jan '09

21 Jan '09

Hello, I have an error while try to install twinkle: # yum install twinkle [...] Resolving Dependencies --> Running transaction check ---> Package twinkle.i386 0:1.2-1.el5.rf set to be updated --> Processing Dependency: libresolv.so.2(GLIBC_PRIVATE) for package: twinkle --> Finished Dependency Resolution Error: Missing Dependency: libresolv.so.2(GLIBC_PRIVATE) is needed by package twinkle [...] But libresolv.so.2 is there: # locate libresolv.so.2 /lib/libresolv.so.2 Any idea what is happening? cheers,

2 1

Help with find
by Matt 21 Jan '09

21 Jan '09

This finds all files modified 5 minutes ago. find /home/*/ -cmin 5 -type f -mindepth 1 -maxdepth 1 I want to find all files modified 5 or less minutes ago. How do I do that? "find -mtime -1" only works in 24 hour increments. Matt

2 2

Status of PostgreSQL and PHP in Testing
by Peter Hopfgartner 21 Jan '09

21 Jan '09

Dear CentOS developers I would like to have ask some questions about the PostgreSQL and PHP packages in the current Testing repository for CentOS 5. In http://wiki.centos.org/QaWiki/TestingRepo there is a note, that the testing period is about 3 weeks. Currently, the PostgreSQL and PHP packages in http://dev.centos.org/centos/5/testing/SRPMS were created in September 08. Do the developers need more feedback about the packages in testing? Is there something (a wiki page, a ticket in the bug tracker or something else) where the feedback can be collected? Is there a testing plan for the packages (works with this and that software, upgrade from base works)? What is the best way I can help? Simply sending feedback to the ML? Is there a kind of policy for the upstream version, something like: version is expected to be in the next major Red Hat release, must be part of Upstream Web Stack or another Upstream product. Casting this to a concrete question: Can upgrades to PHP 5.2.8 or PostgreSQL 8.2.11 be expected to happen. And is there already a concrete plan to move those 2 packages to Plus [http://mirror.centos.org/centos/5/centosplus/]? Regards and thank you for this great distribution. The more I work with it the more I like it. Peter -- Dott. Peter Hopfgartner R3 GIS Srl - GmbH Via Johann Kravogl-Str. 2 I-39012 Meran/Merano (BZ) Email: peter.hopfgartner(a)r3-gis.com Tel. : +39 0473 494949 Fax : +39 0473 069902 www : http://www.r3-gis.com

1 1

Compile Problem
by Joseph L. Casale 21 Jan '09

21 Jan '09

I am trying to follow a solution that states "edit apache's libtool and change the following option to "yes": build_libtool_libs=no" which begs the question, how? :) Anyone care to show me the light? Thanks! jlc

3 8

combining kickstart and DVD on a USB thumbdrive
by Jerry Geis 21 Jan '09

21 Jan '09

Hi all, I am trying to find information on taking a DVD of centos 5.2 x86_64 and putting it AND my kickstart file on a USB8G thumbdrive. Note - I am not INSTALLING linux on the USB disk just trying to make installation media for it. I am not taking just the bootdisk.img file to make the USB bootable but the entire DVD content on the USB and my kickstart files. I'd like to just be able to plug in a USB disk that I have made that has all the kickstart information and the machine is just setup based on WHICHEVER usb thumbdrive in place in the machine. Is there something out there that explains this that I have not found? Thanks for any pointers. Jerry

2 1

SquirrelMail Oddity SSL error
by John Hinton 20 Jan '09

20 Jan '09

I have two users only under one virtual domain which after sending an email are returned to a screen which says: Secure Connection Failed An error occurred during a connection to replacedrealdomainnamehere.org:80. SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) The page you are trying to view can not be shown because the authenticity of the received data could not be verified. * Please contact the web site owners to inform them of this problem. First, this seems to be happening only with two users under one domain on the server. SSL for SquirrelMail is not enabled. I can't find a thing unique to these two users which would cause this error. I can't find anything in the logs to help. Has anybody else seen anything like this and perhaps have a cure? John Hinton

2 2

CentOS failover cluster
by Giuseppe Fuggiano 20 Jan '09

20 Jan '09

What should I use to configure a failover cluster under CentOS? Is there Red Hat Cluster Suite or something like that? Thank you in advance. -- Giuseppe Fuggiano

4 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss