Discuss

discuss@lists.centos.org

34753 discussions

Hardening CentOS by removing "hacker" tools
by Filipe Brandenburger 09 Jun '08

09 Jun '08

Hi, My boss asked me to harden a CentOS box by removing "hacker" tools, such as nmap, tcpdump, nc (netcat), telnet, etc. I would like to know which list of packages would you remove from a base install. I would appreciate if someone could point me to a "standard" way of doing this. I know there are procedures for hardening a machine (I remember reading about Bastille Linux) but I don't know how effective they are and if they include the removal of such tools in their procedures. Any advice would be very appreciated! Thanks, Filipe

13 17

Regd: Linux Boot-Up Front-end show details and hide details configuration files
by Balaji 09 Jun '08

09 Jun '08

Dear All, During CentOS Boot-Up user can See all of the standard messages within this front-end by clicking on the 'show details' link. and hide the standard messages within this front-end by clicking on the 'hide details' link. I need to implement my own software like this, so i need yours help I tried to google-out and i can't find out the show details and hide details configuration files Please, do the needful. Regards -S.Balaji

1 0

RE-export nfs mounted share
by whoami i 09 Jun '08

09 Jun '08

Hi Is there any way to re-export an nfs mounted directory? I am having three servers runnning on centos4.5 and i am trying to implement nfs share in an below manner [bcoz there is no alternative way for me to setup nfs share] HOST A--->>>EXPORTS /prod/data ------->>>HOST B HOST B ---->>MOUNTED ------>>> /prod/data-----UNDER---/PROD1 [working fine] HOST B EXPORTS /PROD1 ------>>>>HOST C HOST C ----->>TRY MOUNTING ----->>>RESULT IN BELOW ERROR BUT WHEN I TRY TO MOUNT THE ALREADY MOUNTED NFS SHARE IN "HOST C " I AM GETTING BELOW ERROR. #################MOUNT ERROR########################################## mount: 10.65.64.30:/PROD1 failed, reason given by server: Permission denied ########################################################################## Can anyone suggest me the way to work out aboVE scenario. Note: I find no -r(-re-export) option in rpc.mountd REGARDS LINGU

4 3

syslog - python
by David Hláčik 09 Jun '08

09 Jun '08

Hello , i want all my log messages from python to have in /var/log/python Now they are in /var/log/messages: Jun 9 12:10:51 sx1 kernel: klogd 1.4.1, log source = /proc/kmsg started. Jun 9 12:11:01 sx1 python: MM_MEMBERS [it] Nothing to do. Jun 9 12:11:02 sx1 python: MM_MEMBERS [research] Nothing to do. Jun 9 12:12:01 sx1 python: MM_MEMBERS [it] Nothing to do. Jun 9 12:12:01 sx1 python: MM_MEMBERS [research] Nothing to do. So i have added to the end of the syslog.conf # Python python.* /var/log/python and restarted syslog, then i have created /var/log/python and for sure addedd u+rw, g +rw, o+rw permissions But, nothing, /var/log/python is empty What am i doing wrong? (Centos 5.1) Thanks

5 8

Change from gnome to KDE desktop
by Kai Schaetzl 09 Jun '08

09 Jun '08

What's the best way to do this? Remove the yum group gnome (does this set default init to 3?), install the yum group KDE and then set default init to 5 again (as I assume installing KDE not during the setup will not automatically set the system to start the gui?). Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 4

Cluster RPM Installation Failed
by Balaji 09 Jun '08

09 Jun '08

Dear All, I am new Itanium server Installation and I have installed all the CentOS4.4 ia64 CDs and I have try to install cluster suite package and i am getting the following error messages like warning: ccs-1.0.7-0.x86_64.rpm: V3 DSA signature: NOKEY, key ID 443e1821 error: Failed dependencies: libc.so.6()(64bit) is needed by ccs-1.0.7-0.x86_64 libc.so.6(GLIBC_2.2.5)(64bit) is needed by ccs-1.0.7-0.x86_64 libc.so.6(GLIBC_2.3)(64bit) is needed by ccs-1.0.7-0.x86_64 libdl.so.2(GLIBC_2.2.5)(64bit) is needed by ccs-1.0.7-0.x86_64 libm.so.6()(64bit) is needed by ccs-1.0.7-0.x86_64 libpthread.so.0(GLIBC_2.2.5)(64bit) is needed by ccs-1.0.7-0.x86_64 Can some one throw light on this. Regards -S.Balaji

2 1

Re: [CentOS] Slow gfs performance
by James Thompson 09 Jun '08

09 Jun '08

You don't mention it but I assume you are running on Fiber Channel not iSCSI? I am running GFS using CentOS 5.1 from two servers using iSCSI. I have Device Mapper Multipath setup so that makes my performance characteristics a little different but I have tuned the servers with the following commands: gfs_tool settune <mountpoint> demotes_secs 600 gfs_tool settune <mountpoint> scand_secs 10 gfs_tool settune <mountpoint> statfs_slots 128 The first two I have set until 5.2 drops which will contain an additional GFS tuning parameter, glock_purge. Update 5 of CentOS 4 may already have the glock_purge parameter available. Run the command 'gfs_tool gettune <mountpoint>' and see if glock_purge is listed. It should be set to zero by default. If it is there you can refer to this brief write up on tuning with glock_purge since you will not want to use the demote_secs and scand_secs settings I am using: http://open-sharedroot.org/Members/marc/blog/blog-on-gfs/glock-trimming-pat… Also, as a further note, your particular usage scenario will dictate what tunings are appropriate. I am not familiar with Oracle's usage of I/O but will both servers be accessing the same data on disk (particularly with regards to writing) at the same time? -James Thompson ----- Original Message ----- From: "lingu" <hicheerup(a)gmail.com> To: centos(a)centos.org Sent: Monday, June 9, 2008 4:54:44 AM GMT -05:00 US/Canada Eastern Subject: [CentOS] Slow gfs performance HI, Sorry for repeating same mail ,while composing that mail i mistakenly typed the send button.I am facing problem with my gfs and below is the running setup. My setup Two node Cluster[only to create shared gfs file system] with manual fencing running on centos 4 update 5 for oracle apps. Shared gfs partition are mounted on both the node[active-active] Whenever i type df -h command it will take some delay to print my shared gfs partition,it is happening even if i continuously typing df -h command . Shared GFS file system storage is from IBM STORAGE.I don't know what parameter to be fine tuned,bcoz of that may be i feel my oracle apps is also very slow. In syslog i am getting following error continuously in one of the node less /var/log/messages test2 kernel: 493 [RAIDarray.mpp]AHA-SN01:1:0:10 Cmnd failed-retry the same path. vcmnd SN 7147770 pdev H2:C0: T0:L10 0x00/0x00/0x00 0x00020000 mpp_status:2 Any one help me to get rid of this slow gfs performance. Regards lingu _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

wpa_supplicant and machine freezes
by Timothy Kesten 09 Jun '08

09 Jun '08

Hi Folks, I'd like to install my USB-WLAN-Stick Netgear WG111v3. Ndiswrapper works correct after installing Kernel-Modules from atrpm ndiswrapper-kmdl-2.6.18-53.1.19.el5.centos.plus-1.52-16.el5.i686.rpm. But by calling wpa_supplicant with wpa_supplicant -i wlan0 -D wext -c /etc/wpa_supplicant/wpa_supplicant.conf -d machine freezes. My wpa_supplicant.conf: ctrl_interface=/var/run/wpa_supplicant eapol_version=1 ap_scan=1 network={ ssid="MyNet" scan_ssid=1 proto=WPA key_mgmt=WPA-PSK pairwise=TKIP group=TKIP #psk="MyPSK" psk=9050ec6fe020b1738fce16c93c33b3809b9e62d5e6bf955518076eb2d7263 } With this configuration it works correct with Sidux (a debian clone). But with CentOS 5.1 ....??? No hints in /var/log/messages or dmesg available. Has somebody an advice/ a solution for me? More information needed? Thx Timothy

2 1

RE
by Pro Green European 09 Jun '08

09 Jun '08

> Maybe if you trust DNS resolution names to make the connection to the > Database servers could be a problem. Did you try to use IP addresses > directly in the code? > Yes, I have tried that too, no difference. I've even tried running MySQL with a database populated with identical data on localhost (even tried 127.0.0.1), but there is no difference in performance. Delays in the connection to the db server is still around 20-30 seconds. So, the problem has to be with either the php-mysql module, PHP itself, MySQL or then it may be hardware related. Thx, /mysteron

1 0

[CentOS] Network problems on new CentOS 5 install on P35, ICH9R mobo
by Dick Roth 09 Jun '08

09 Jun '08

Had to replace dying cpu and mobo, so also replaced IDE with new SATA drive. Installed from latest ISO onto SATA and can't get networking to lease an IP address from my ISP (Comcast). The network utility always comes up with a private address (192.168.0.2) instead of Comcast IP. To add to confusion, if I boot into old IDE drive, I get proper network connection to internet, but lose my swap! Particulars: mobo=Gigabyte P35-DS3R SATA Controller=AHCI PATA Controller=JMicron 20360 new drive=ATA WDC WD1600AAJS-2 old drive=WDC WD400JB-00JJA0 DVD-RW=Pioneer DVR-112D (PATA) NICs=eth0=Realtek RTL-8029(AS) (DHCP) eth1=Realtek RTL-8029(AS) (Static) Has anyone seen this? Will 5.2 help with this situation? Been working on this for days! Thanks, Dick -- "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." --Benjamin Franklin 1775

4 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss