Discuss

discuss@lists.centos.org

5 participants
34752 discussions

OVAL content
by Gaurav Kumar 01 Feb '19

01 Feb '19

Hi all, Much like Ubuntu and Debian teams have OVAL content published for detecting vulnerabilities, are there plans of publishing such content? e.g. https://people.canonical.com/~ubuntu-security/oval/ On a related note, has anybody looked into using RHEL oval content on CentOS?

1 0

C7, firewalld and rich rules
by mark 01 Feb '19

01 Feb '19

Hi, again, folks, I'm trying to convert a number of iptables rules to firewalld rich rules. I need to do this, because this is, in fact, a firewall, to protect access to servers with sensitive data. It will limit access to the servers behind it to a specific network, and nobody else, and allow only certain services through. What I've been trying to find is a script/program that converts the output of iptables-save to something I can feed to firewall-cmd. Anyone have a link to such? I admit this is annoying. Why is it, when some New Kewl thing is introduced, it *always* expects you to start anew, rather than giving you a tool to convert what you had. I ran into this 15 years ago, trying to put an existing website into bricolage (early CMS), and here I am, trying to do this. Anyway, any links would be appreciated. mark

5 11

Centos 7 and backup solution
by Alessandro Baggi 01 Feb '19

01 Feb '19

Hey there, what type of backup solution do you use on C7? Thanks in advance

17 32

centos dfcp send hostname to microsoft dhcp/dns
by Ralf Prengel 31 Jan '19

31 Jan '19

Hallo, I try to configure my dhcp-client to send the hostname to a microsoft dns/dhcp server. It doesn t work. Nothing happens. A debian system works fine so it seems that the microsoft-side isn t the problem this time. I found some hints but nothing works. Thansk for hints. Ralf

4 9

EPEL repo problem
by SternData 31 Jan '19

31 Jan '19

This keeps logging: Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64 error was 14: HTTPS Error 503 - Service Unavailable I've removed the epel-release package, done a "yum clean all", then reinstalled it, but still get the same error. -- -- Steve

4 7

Applying changes to route-eth0
by Robert Moskowitz 31 Jan '19

31 Jan '19

I have a series of static routes in route-eth0 Recently I had to made changes and could not find an effective way to get the old routes out and the new routes in. ifdown-route seems to apply the content of route-eth0 to take down the routes listed and ifup-route brings up routes based on route- So what ends up is that the old routes never go away, just new routes added. ifdown eth0; ifup eth0 works, but is a bit heavy-handed for only changing routes. So how do I clear out the routing table and have it rebuilt based on ifcfg-eth0 and route-eth0 without bouncing the interface completely?

2 2

Bacula 9.4.1 Dbdriver issue
by Alessandro Baggi 31 Jan '19

31 Jan '19

Hi list, I created my rpm for Bacula 9.4.1 reading centos srpm spec files. I made a single package and not split in several packages because this is my first rpm so I created my spec file taking a cue from bacula-5.3 spec file. All works as intended, an rpm was created and installed without any not fixable issue. After installing my bacula rpm I run a test to see if all works as expected. After bacula-dir and bacula-sd configuration I run bacula-dir -t to check error in config file and get this message: bacula-dir: dird.c:1206-0 Dbdriver field within director config file "dbi:PostgreSQL" mismatched with the Database argument "PostgreSQL" passed during Bacula compilation. I don't know what it is referring because I don't pass any argument like "PostgreSQL" during configure. The only option about postgresql is --with-postgresql. This is caused by this line in catalog statement: dbdriver = "dbi:postgresql"; I tried also using "dbi:PostgreSQL" but I got the same issue. I searched online but found only one fedora bugreport with the same problem related to fedora29 but for a different bacula version. Over this I tried to run bacula and all works like expected. How I can fix this warning? Hope in help. Thanks in advance. Alessandro.

2 2

C7, mdadm issues
by mark 31 Jan '19

31 Jan '19

I've no idea what happened, but the box I was working on last week has a *second* bad drive. Actually, I'm starting to wonder about that particulare hot-swap bay. Anyway, mdadm --detail shows /dev/sdb1 remove. I've added /dev/sdi1... but see both /dev/sdh1 and /dev/sdi1 as spare, and have yet to find a reliable way to make either one active. Actually, I would have expected the linux RAID to replace a failed one with a spare.... Clues for the poor? I *really* don't want to freak out the user by taking it down, and building yet another array. mark

3 16

kernel boot issues
by RC 31 Jan '19

31 Jan '19

Hello, I run CentOS release 6.10 (Final) on a Dell Inspiron M6700. 2.6.32-754.el6.x86_64 boots, and is whaat I am running now none of these, updated ones, won't boot: 2.6.32-754.3.5.el6.x86_64 2.6.32-754.6.3.el6.x86_64 2.6.32-754.9.1.el6.x86_64 2.6.32-754.10.1.el6.x86_64 They all show the same 'symptom', grub says it is booting that kernel, screen blanks, solid corned in the left-top corner... and that's whee it stays. I know this is vague, but any ideas? thanks, Ron

3 4

SELinux policy vs. static web content
by Nicolas Kovacs 31 Jan '19

31 Jan '19

Hi, Some time ago I wrote an introductory article about SELinux on my blog. I'm currently updating it for my new blog, and I found a curious change in SELinux policy. Here goes. For demonstration purposes, I'm using some static webpages, more exactly the default pages found in /usr/share/httpd/noindex, which I simply copied over to /var/www/html. As a first practical example, I'm copying this stuff over to /tmp/backup and then move it back again. A vaguely similar example has been given by Thomas Cameron in his presentation "SELinux for mere mortals", and I'm reproducing it here with some minor modifications. $ cd /var/www/html/ $ mkdir /tmp/backup $ cp -R * /tmp/backup/ $ rm -rf * $ mv /tmp/backup/* . $ find . -type d -exec chmod 0755 {} \; $ find . -type f -exec chmod 0644 {} \; When I wrote the article back in november 2017, this resulted in a classic "Forbidden" error, since the SELinux context of these files is not httpd_sys_content_t as it should be, but user_tmp_t. But when I try to repeat the experiment now, Apache shows no error. Which seems strange. Any idea what's going on ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss