Discuss

discuss@lists.centos.org

34758 discussions

Disabling shutdown and suspend for normal users
by Henk van Lingen 19 Sep '07

19 Sep '07

Hi, [CentOS 5] What is the best way to remove the shutdown and suspend options from menu's for normal users? After googling around, I added "SystemMenu=false" to the greeter section in /etc/gdm/custom.conf. After that the GDM login screen still shows the options, but 'restart' indeed doesn't work anymore. However, the gnome menu's when logged in, still have the 'suspend' options, which still leads to a hanging (unwakeble) machine. BTW: I prefer editing config files instead of stupid gui's, as I have to change a lot of machines :-) Regards, -- Henk van Lingen, Systems Administrator & DBA (o- -+ Dept. of Computer Science, Utrecht University. /\ | phone: +31-30-2534107 v_/_ http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/

4 5

CentOS-4.5 and LG cd-rom/dvd burner
by James B. Byrne 19 Sep '07

19 Sep '07

I would like to burn the cd-rom iso's of CentOS-5.0 on my desktop machine, which is running CentOS-4.5. Is there a site or other reference that can provide me with a detailed, hand held, step-by-step, blow-by-blow description on how to do this for my installation? Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] filtering ssh regardless of the port
by David G. Miller 19 Sep '07

19 Sep '07

David Hrb?c( <hrbac.conf(a)seznam.cz> wrote: > Bazy napsal(a): >> > And yes... I will use layer 7 filtering. >> > http://l7-filter.sourceforge.net/protocols >> > >> > Patch my kernel, my iptables, and "iptables -A INPUT -m layer7 --l7proto >> > ssh -j DROP" ;) >> > > Yes, the only way. > D. Silly question. If you're just going to drop all ssh connection attempts, wouldn't it be easier to just not start sshd? Ditto for telnet, etc? No service means nothing to connect to. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

2 1

rebuilding rpmdevtools from epel5 SRC has fc7 dependent
by mark pryor 19 Sep '07

19 Sep '07

hello, I'm suprised that an SRC.RPM from the rhel5 repo needs a file from FC7. I grabbed rpmdevtools from http://download.fedora.redhat.com/pub/epel/5/ it rebuilds fine as EL5, but when I go to install it, it requires a version of rpm-build higher than the C5 base version (4.4.2-37) --------------------- grab dependencies ------------- $ rpm -qpR rpmdevtools-6.1-0.1.noarch.rpm ... config(rpmdevtools) = 6.1-0.1 cpio diffutils fakeroot ... perl(File::Spec) perl(File::Temp) perl(FileHandle) perl(Getopt::Long) perl(strict) redhat-rpm-config rpm-build >= 4.4.2.1 rpm-python rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(VersionedDependencies) <= 3.0.3-1 ... --------------------- end snip --------------- I reverted to the lower version 5.3.xxx and it works fine. -- Mark --------------------------------- Yahoo! oneSearch: Finally, mobile search that gives answers, not web links.

3 2

CentOS-announce Digest, Vol 31, Issue 7
by centos-announce-request＠centos.org 19 Sep '07

19 Sep '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0848 Important CentOS 3 i386 openoffice.org - security update (Tru Huynh) 2. CESA-2007:0848 Important CentOS 3 x86_64 openoffice.org - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 18 Sep 2007 18:25:22 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2007:0848 Important CentOS 3 i386 openoffice.org - security update To: centos-announce(a)centos.org Message-ID: <20070918162522.GA25391(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2007:0848 openoffice.org security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2007-0848.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/openoffice.org-1.1.2-40.2.0.EL3.i386.rpm updates/i386/RPMS/openoffice.org-i18n-1.1.2-40.2.0.EL3.i386.rpm updates/i386/RPMS/openoffice.org-libs-1.1.2-40.2.0.EL3.i386.rpm source: updates/SRPMS/openoffice.org-1.1.2-40.2.0.EL3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update openoffice.org\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

How to mount a remote file system to another linux box
by Indunil Jayasooriya 19 Sep '07

19 Sep '07

Hi, I have applied traffic shaping on firewall running CentOS 4.5. eth1 is the device where I have done traffic shaping. I am now running some monitoring tools such as polltc and tc-graph.pl. They generate graphs. These graphs are updated every 10 seconds. They have been saved on the firewall it self. To view thsese graphs, I have to enable apache on firewall it self. But I do not need to run apache on firewall as I will have to open port 80. I only have opened port 22 to the WORLD. I want to go that way. I have a web server running CentOS 4.4 @ LAN. I can view those graphs via this web server , if I can mount those graphs to this web server. my firewall has 3 nics. eth2 is 192.168.101.254 connected to the LAN. my web server @ LAN is 192.168.101.35 How can I achieve this ? Hope to hear from you. -- Thank you Indunil Jayasooriya

2 6

Re: [CentOS] How to mount a remote file system to another linux box (SLOVED)
by Indunil Jayasooriya 19 Sep '07

19 Sep '07

> > > [root@host ~]# mkdir /graphs > > Now, The question is how to mount it. Do i need to reboot both machines? > > Or without rebooting, How to get it worked. > > Thnaks ALL, > I got it up and running. -- Thank you Indunil Jayasooriya

1 0

filtering ssh regardless of the port
by Bazy 19 Sep '07

19 Sep '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello gentlemen and lady's, I am trying to filter ssh traffic regardless of the port the connection is opened on. I want to do the same for rlogin and telnet. I know it would be easier to use a proxy server and only allow users to access the web... but it's more complicated... they also need other ports open... and they use public IP addresses. Is there any way that I can do it with iptables without having to patch the kernel and iptables with l7-filter.sourceforge.net? Thank you for your time. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFG8DOe7nEMcIvWOSIRAuQNAJ9+0iQZf0GFEioN/6vRuCHxz7+6TACgharb j9rK16LXwIudeBj/oryLXNI= =650a -----END PGP SIGNATURE-----

5 6

Postfix Questions
by John Hinton 19 Sep '07

19 Sep '07

I've been running sendmail since the beginning of my online time. 1. Did I see that postfix can run sendmail milters? 2. If so, did I read that postfix can run these separately for inbound vs. outbound? 3. Can it run like a rbl blacklist on inbound and not outbound? 4. If the above is true, does this require separate configurations of postfix or is it already set to allow this out of the box? My reasoning... I've added a few milters which has drastically cut spam due to the extra time spent at the smtp level. For instance, running spamassassin takes a couple or few seconds. This bit of delay does in fact seem to stop many of the slamming spambots sort of like the design of milter-greylist. Except, I don't have to send a temp fail. So, this is a good thing. The negative is it also takes longer for my users to send mail as it is processed the same way during outgoing. Also, we run the SpamHaus blacklist. This works pretty good for inbound, but from time to time one of our hosting clients winds up on the blocklist because they are on a dynamic IP and someone else has recently used it for spamming. One could argue that my client should then go remove their IP from the blacklist to better insure their email actually makes it through any other level of spam filtering on other ISPs. But, that's a rosey concept! So, I would prefer to do it at the smtp level inbound so I can actually reject that mail while not having the embarrassing blocking going on with our users. Yes, this might sound like a double standard, but we do not provide connection service so only very rarely (never so far) does any virus actually send spam through our systems from client applications and I do actually monitor email all the time and stop any spamming immediately. Thanks for any input. John Hinton <who still keeps eyeballing postfix but is so comfortable with sendmail>

3 2

Segmentation fault YUM
by Daniel Bruno 18 Sep '07

18 Sep '07

Hi, today in yum update show this problem: Segmentation fault Any idea about this problem?

5 11

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss