Discuss

discuss@lists.centos.org

3 participants
34748 discussions

BIND server getting DDOS
by Robert Moskowitz 04 Aug '22

04 Aug '22

I just, maybe, figured out why I have been having problems with my CentOS DNS server with BIND 9.11.4. Aug 2 15:47:19 onlo named[6155]: client @0xaa3cad80 114.29.194.4#11205 (.): view external: query (cache) './A/IN' denied Aug 2 15:47:19 onlo named[6155]: client @0xaa3cad80 114.29.216.196#64956 (.): view external: query (cache) './A/IN' denied Aug 2 15:47:19 onlo named[6155]: client @0xaa3cad80 64.68.114.141#39466 (.): view external: query (cache) './A/IN' denied Aug 2 15:47:19 onlo named[6155]: client @0xaa3cad80 209.197.198.45#13280 (.): view external: query (cache) './A/IN' denied Aug 2 15:47:19 onlo named[6155]: client @0xaa3cad80 114.29.202.117#41955 (.): view external: query (cache) './A/IN' denied Aug 2 15:47:19 onlo named[6155]: client @0xaa3cad80 62.109.204.22#4406 (.): view external: query (cache) './A/IN' denied Aug 2 15:47:49 onlo named[6155]: client @0xa9420720 64.68.104.9#38518 (.): view external: query (cache) './A/IN' denied Aug 2 15:47:50 onlo named[6155]: client @0xaa882dc8 114.29.202.117#9584 (.): view external: query (cache) './A/IN' denied grep -c denied messages 46038 And that is since Jul 31 3am. Anyone have recommendations on how to stop this? thanks

6 7

Missing devel packages?
by Jean-Paul Chaput 27 Jul '22

27 Jul '22

Hello CentOS, After performing an update on July 23, on 9 stream, I did notice problems with egl-wayland. In the AppStream repository, the package: * egl-wayland-1.1.9-2.el9.x86_64.rpm is present, but it's "-devel" counterpart seems missing. So, if you have an older version of egl-wayland-devel installed, it complains that it cannot upgrade "egl-wayland". Same problem seems also to occurs with: * python3-greenlet-1.1.2-3.el9.x86_64.rpm Did I make a mistake or those "-devel" packages are really missing? Best, -- .-. J e a n - P a u l C h a p u t / Administrateur Systeme /v\ Jean-Paul.Chaput(a)lip6.fr /(___)\ work: (33) 01.44.27.53.99 ^^ ^^ cell: 06.66.25.35.55 home: 09.65.29.83.38 S U Sorbonne Université (former UPMC) L I P 6 Laboratoire d'Informatique de Paris VI C I A N Circuits Intégrés Analogiques & Numériques

1 0

bash script input password automatically.
by Kaushal Shriyan 26 Jul '22

26 Jul '22

Hi, I have the below commands to generate keystore.pkcs12 and keystore.jks files on CentOS Linux release 7.9.2009 (Core) openssl pkcs12 -export -clcerts -in fullchain1.pem -inkey privkey1.pem -out keystore.pkcs12 -name javasso keytool -importkeystore -srckeystore keystore.pkcs12 -srcstoretype pkcs12 -destkeystore keystore.jks -deststoretype jks -alias javasso I have created a small shell script to generate both keystore.pkcs12 and keystore.jks files. It prompts for a password. Is there a way to key in a password without prompt or non-interactive way? For example password is stored in a file and the bash script will source it instead of manually typing the password. Please suggest. Thanks in advance. Best Regards, Kaushal

3 2

selinux / duplicate subject to a custom named one
by Leon Fauster 22 Jul '22

22 Jul '22

Hey everyone, I wonder if I could copy an selinux subject (processes / httpd) to a local named one. So that it gets the same configuration as the source e.g.: httpd_exec_t -> httpd_microservice_exec_t The problem here: Some http microservices written in golang do get the same label as apache httpd (this is intentional for having a confined service): # ls -laZ /usr/libexec/myservice -rwxr-xr-x. 1 root root system_u:object_r:httpd_exec_t:s0 5168952 22. Jul 17:11 /usr/libexec/myservice Unfortunately, these webservices need access to /proc (e.g. for enumerating the sending queue via /proc/sys/net/core/somaxconn). Instead installing a module that allows this for all "httpd_t" allow httpd_t sysctl_net_t:file read; I would like to have a custom configuration thats a duplication of the http_t one. The module would then only allow read access for applications that really need it. Is that possible? Any other straight approach available? -- Thanks Leon

1 0

how to wild-card autofs mount - ?
by lejeczek 16 Jul '22

16 Jul '22

Hi guys. any autofs wizadm reading this and can tell how to "wild-card" this: /home/e23/U: -fstype=nfs4,acl 10.3.3.1:/USER-HOME/e23 I tried $USER in obvious place but it did not mount. many thanks, L.

2 1

Special characters in bash strings
by H 12 Jul '22

12 Jul '22

I have run into a bash variable string problem that I think I have nailed down to the variable string containing a tilde (~). Not sure if my conclusion is correct and could use some help. To make a long(er) story short, an associative array variable was created: p[work_path]="~/projects/test/" and referenced in the following format in the shell script: "${p[work_path]}" To my consternation this worked fine in some places but not in others. I tried to use the above construct when piping output, as part of a file reference when calling psql from the command line and when referencing an xslt file with xsltproc. In some places it worked, in others it did not but when I substituted the variable reference above with the path in clear text itself it then worked. It looks like there are some nuances on variable substitution that I have yet to learn, perhaps tied to the use of the tilde since using the variable p[work_path]="/home/user/projects/test/" seemed to work in all places. Pointers welcome!

4 5

PHP 7.4 from the Appstream repo
by Valere Binet 09 Jul '22

09 Jul '22

Hi, Tenable is complaining that our CentOS Stream release 8 system is vulnerable because it has php 7.2.24-1.module_el8.2... and it should have php 7.4.19-1.module_el8.5 On the mirror, I can see the PHP 7.4.19-1 and 7.4.19-2 in <mirror>/centos/8-stream/Appstream/x86_64/os/packages However, dnf list is stuck at 7.2.24-1 dnf clean all didn't help. How do I get my systems to "see" the 7.4 packages? The remi repo is not a good option for my company, we'd rather use the Appstream package since it is there. Are there reasons not to upgrade? If yes, does RedHat plan to apply the security updates to 7.2? Thank you in advance for any feedback Valère Binet

3 3

Re: [CentOS] Special characters in bash strings
by H 08 Jul '22

08 Jul '22

On 07/06/2022 11:27 PM, Chris Schanzle wrote: > Agree with Gordon's other response having specific examples of where it worked and didn't work would help us help you, but these things can get messy quickly. > > Since you quoted the tilde path, it is not expanded when assigned to your array. Take out the quotes to have it expanded at the time of assignment. If instead you want it expanded later, use eval. > > x="~/.bashrc" > $ echo "$x" $x; ls -l $x > ~/.bashrc ~/.bashrc > ls: cannot access '~/.bashrc': No such file or directory > > $ eval ls -l $x > -rw-r--r-- 1 schanzle mygroup 8720 Mar 4 15:46 /home/schanzle/.bashrc > > $ (ls -l $x) > ls: cannot access '~/.bashrc': No such file or directory > > $ bash -c "ls -l $x" > -rw-r--r-- 1 schanzle mygroup 8720 Mar 4 15:46 /home/schanzle/.bashrc > > > # no quotes = expansion at assignment > $ x=~/.bashrc > $ echo "$x" $x; ls -l $x > /home/schanzle/.bashrc /home/schanzle/.bashrc > -rw-r--r-- 1 schanzle mygroup 8720 Mar 4 15:46 /home/schanzle/.bashrc > > > Hope that helps, > Chris > > On 7/6/22 9:41 PM, H wrote: >> I have run into a bash variable string problem that I think I have nailed down to the variable string containing a tilde (~). Not sure if my conclusion is correct and could use some help. >> >> To make a long(er) story short, an associative array variable was created: >> >> p[work_path]="~/projects/test/" >> >> and referenced in the following format in the shell script: >> >> "${p[work_path]}" >> >> To my consternation this worked fine in some places but not in others. I tried to use the above construct when piping output, as part of a file reference when calling psql from the command line and when referencing an xslt file with xsltproc. >> >> In some places it worked, in others it did not but when I substituted the variable reference above with the path in clear text itself it then worked. >> >> It looks like there are some nuances on variable substitution that I have yet to learn, perhaps tied to the use of the tilde since using the variable p[work_path]="/home/user/projects/test/" seemed to work in all places. >> >> Pointers welcome! >> >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> https://lists.centos.org/mailman/listinfo/centos Thank you, I read up on bash expansion of tilde and realized substituting $HOME for ~ would be the best and would avoid any other unforeseen complications. Once I had done that the script worked.

1 0

install php version 8.0 on CentOS Linux release 7.9.2009
by Kaushal Shriyan 30 Jun '22

30 Jun '22

Hi, I am running ius-release-2-1.el7.ius.noarch on CentOS Linux release 7.9.2009 (Core). I am unable to locate the php 8.0 ius package as per https://www.php.net/supported-versions.php. Is there a way to install php version 8.0? Please guide me. Thanks in advance. Best Regards, Kaushal

2 1

R from EPEL
by lejeczek 29 Jun '22

29 Jun '22

Hi guys. Does anybody use R from EPEL on centOS 8 Stream? Is it just me or R 4.1.3 became/is single-threaded now? r25 benchmark - https://mac.r-project.org/benchmarks/ in part where is used to be, should be multi-threaded now is not. Total result from the benchmark does not look bad but it's just one benchmark and I wonder about everything else if indeed it is EPEL's R problem. many thanks, L.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss