Discuss

discuss@lists.centos.org

34758 discussions

ISPConfig: Secure on Centos?
by karl＠klxsystems.net 10 Sep '06

10 Sep '06

Just wanted to see if this tool was approved or disapproved of in the centos community as far as security is concerned. http://www.ispconfig.org/ I have noted that anything that is not a centos package is probably suspect, -so feel free to assure, or warn, at your leisure. Basically we are looking for a secure GUI based DNS admin tool, (I myself prefer an openbsd or centos dns machine and tyo just edit by hand.) Most of the GUI tools still need for you to change the serial or not forget a dot at the end, so the GUI case is not as compelling to me as it is our firm and it's customer base. -karl

5 5

CentOS 4.4, libstdc++ 3.4.6 and NPTL
by Tim Jackson 10 Sep '06

10 Sep '06

Hi, I have been using CentOS 4 on a UML (User-Mode Linux) box for some time (>1 year) and have kept up to date with updates. I think I started on CentOS 4.1 and have progressively "yum update"'d since. User-Mode Linux, or at least the version of it that my hosts use, doesn't support NPTL. This hasn't been a problem to date; I've just moved /lib/tls out of the way, as described in http://www.mythic-beasts.com/umlwiki/wiki.pl?2.6_And_TLS . No problems at all, until a recent libstdc++ update. The old version was: libstdc++-3.4.5-2 but with an update to CentOS 4.4 the new version is: libstdc++-3.4.6-3 Now, with the 3.4.6-3 version, when I restart Apache, I get: Cannot load /etc/httpd/modules/libphp4.so into server: libstdc++.so.6: cannot handle TLS data. Reverting back to the old libstdc++ makes things work fine again. In both instances my /lib/tls is empty. Can anyone offer any advice? Is this a bug in the libstdc++ package? Is there a likely workaround? I'm afraid I don't know enough about NPTL/libstdc++ to really understand the details of what's going on here. Thanks, Tim

2 1

NPTL problem on Centos 4.4
by fredex 09 Sep '06

09 Sep '06

Not sure where to ask this, I've been googling and not finding much that is helpful. At work I've got a multi-threaded program targeted at Linux. It compiles on RHEL 2.1 and 3, and is targeted at 2.1, 3, and 4. UP until today, the binary built on 3 has worked fine on 4. But on RHEL4 update 4 it dies a horrible death in pthread_create. I have reproduced the problem on Centos 4.4, where I am tyring to debug it. I thought it might be some newly-introduced binary incompatibility in the U4 update, so I recompiled it on Centos 4.4, and it does the same thing. This code has been running for 5 years both in-house and at dozens of customers, on versions of RH linux ranging from 6.2, and 7.x, as well as RHEL 2.1 and 3, so I'm leaning toward something that is not a blatant bug in the code. Anyway, on the either the 2nd or the 3rd (doesn't seem to be consistently one or the other) call to pthread_create we get a SIGSEGV, and looking at a stack backtrace the stack appears to be trashed, or at least the backtrace does not reflect reality. Single-stepping into the call doesn't get you anywhere except a sigsegv. I'm about to delve into it at the instruction level, but I must admit I'm not very knowledeable about 32-bit intel assembly language. Needless to say I've read and re-read and re-re-read the man page for pthread_create(), and have been tweaking the calling sequence in subtle ways to see if I can change the behavior, but so far to no avail. Has anyone here any knowledge of possible problems or incompatibilities in the NPTL implementation in 4.4? Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- The Lord is like a strong tower. Those who do what is right can run to him for safety. --------------------------- Proverbs 18:10 (niv) -----------------------------

4 7

CentOS-announce Digest, Vol 19, Issue 5
by centos-announce-request＠centos.org 09 Sep '06

09 Sep '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0600 Moderate CentOS 4 s390(x) mailman - security update (Pasi Pirhonen) 2. CESA-2006:0661 Important CentOS 4 s390(x) openssl - security update (Pasi Pirhonen) 3. CESA-2006:0600 Moderate CentOS 3 s390(x) mailman - security update (Pasi Pirhonen) 4. CESA-2006:0661 Important CentOS 3 s390(x) openssl - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Sat, 9 Sep 2006 02:46:18 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0600 Moderate CentOS 4 s390(x) mailman - security update To: centos-announce(a)centos.org Message-ID: <20060908234617.GP17774(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0600 https://rhn.redhat.com/errata/RHSA-2006-0600.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/mailman-2.1.5.1-34.rhel4.5.s390.rpm s390x: updates/s390x/RPMS/mailman-2.1.5.1-34.rhel4.5.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

php 5.1 or 5.2
by mbneto 09 Sep '06

09 Sep '06

Hi, The regular php distributed with centos 4.x is 4.x with php 5.0.x provided from extras/plus. It seems that we are weeks (a month?) away from 5.2.0. Are there any plans to upgrade those packages to 5.1 or 5.2? Thanks.

3 2

openssl package possibly different in CentOS and RHEL
by Aleksandar Milivojevic 09 Sep '06

09 Sep '06

I've just had a problem on one of my x86_64 boxes with openssl package. I have an 32-bit only application that requires openssl libraries. When I attempted to install openssl.i686 (in addition to already present openssl.x86_64), it failed. The rpm complained about conflicting files (they were all manpages), and I needed to use --force option to install the thing. The good folks at Red Hat were not able to reproduce it, and I don't have a spare x86_64 box to test it with original RHEL4 myself. Would be nice if somebody could test installing openssl.i686 (in parallel to openssl.x86_64) on x86_64 box, both under CentOS 4 and under original RHEL4. It could be just something wrong with my installation, or there might be discrepancy between CentOS and RHEL openssl packages. -- NOTICE: If you are not intended recipient, you are hereby notified that by reading this message you agreed not to disturb frogs during mating season. For more info, visit http://www.8-P.ca/

6 6

Restarting mouse services
by Robert Moskowitz 08 Sep '06

08 Sep '06

I move my notebook around my office. Sometimes I am using the internal pointers, sometimes a USB mouse, and sometimes a USB keyboard/mouse adapter that is plugged into a kvm (actually two of them). With one of these USB k/m adapters, when I plug in, the system fails to recognize the mouse (but no problem with the keyboard). The 2 adapters are the same brand/model (Aten), but the KVMs are different Aten masterviews. Of course I would like to figure out why this is happening and get it to stop, but meanwhile is there a way to restart the mouse services.

4 11

Mdadm Dependancies - Centos 4.3
by centos＠bathnetworks.com 08 Sep '06

08 Sep '06

Hiya, I have a mail server (Qmail) and just tried to install mdadm to monitor the raid arrays via Yum and it tried to install exim. Is this correct? I guess that it is looking for an MTA so why is it not finding Qmail (linked to /usr/lib/sendmail). One possibility is that I used yum to actually uninstall sendmail, but installed qmail from source as it needed patching. Any way out of this apart from installing mdadm from an rpm with no deps/ Rob

3 2

SELinux targeted + httpd + suexec
by Leonardo Vilela Pinheiro 08 Sep '06

08 Sep '06

Hi, I have read: http://lists.centos.org/pipermail/centos/2005-March/003429.html, http://fedora.redhat.com/docs/selinux-apache-fc3/sn-using-other-types.html RedHat Selinux Documentation (PDF) (some parts) and they helped me solve a some difficulties, including the necessity to mount /var/www with -o suid. Now I'm getting these 2 errors in /var/log/messages whenever I execute a cgi: %-------------------------- avc: denied { create } for pid=17995 comm="suexec" scontext=root:system_r:httpd_suexec_t tcontext=root:system_r:httpd_suexec_t tclass=netlink_route_socket avc: denied { read } for pid=17995 comm="suexec" name="cert.pem" dev=dm-0 ino=520402 scontext=root:system_r:httpd_suexec_t tcontext=system_u:object_r:usr_t tclass=lnk_file %-------------------------- This is independent of the script being perl or sh, and despite the errors the cgi executes correctly. 'sestatus' reports: httpd_builtin_scripting active httpd_disable_trans inactive httpd_enable_cgi active httpd_enable_homedirs inactive httpd_ssi_exec inactive httpd_tty_comm inactive httpd_unified inactive Either httpd_ssi_exec or httpd_unified have made no difference in those errors. When I deactivate mod_suexec and comment SuexecUserGroup in Apache configs, those errors stop appearing. So I think this problem has to do directly with selinux policy and mod_suexec. Could this be a bug on selinux-policy-targeted, that doesn't bring 100% support for the "native" mod_suexec? -- Vilela

1 0

Sudo Build Parameters
by Camron W. Fox 08 Sep '06

08 Sep '06

Alle, I know this is available somewhere and I've read it before but I can't seem to find it know that I need it (age is definitely catching up to me). I'm trying to find out the build parameters used with the current installation of sudo-1.6.7p5-30.1.3, specifically, whether "--with-ldap" was used. Sorry for the inconvenience. Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu America, INC. E-mail: cwfox(a)us.fujitsu.com

4 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss