Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Internet Storm Center blogpost on rootcheck (a system auditor)
by Gilbert Sebenste 26 Feb '16

26 Feb '16

Hello everyone, If you haven't seen it: https://isc.sans.edu/forums/diary/Quick+Audit+of+NIX+Systems/20771/ I just compiled and ran it on CentOS 5 and 6. The audit came up clean for me. It's worth a run to see if you have anything blatant wrong...or to see if you have been rooted. Gilbert ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

1 0

Skylake Installs on CentOS-7
by Johnny Hughes 26 Feb '16

26 Feb '16

We were informed that many people were having issues on newer intel (Skylake) platforms installing the latest CentOS-7 and asked if we could find/fix the problem. We found that the latest kernel, kernel-3.10.0-327.10.1.el7, fixes this issue on some machines, so we rebuilt the installer for people having issues. Please see this mail for the new isos: https://lists.centos.org/pipermail/centos-devel/2016-February/014444.html If you are not having issues, you will want to continue to use the standard installers as they provide better support for 3rd party kernel modules, etc. Thanks, Johnny Hughes

1 0

CentOS install disable USB keyboard on Acer AXC 603G UW13
by Juan De Mola 26 Feb '16

26 Feb '16

Hi. I am triying to set up CentOS 5 on an Acer AXC 603G UW13. The install turn off my USB keyboard between /sbin/loader and the media check prompt screen. What I can do to get the install working with the USB keyboard? Thanks. Juan De Mola molaxp(a)aol.com

5 13

IPtables block user from outbound ICMP
by John Cenile 26 Feb '16

26 Feb '16

Hello, Is it possible at all to block all users other than root from sending outbound ICMP packets on an interface? At the moment we have the following two rules in our IPtables config: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP But this still allows ICMP for some reason (but *does* block other TCP/UDP packets, which is what we want, as well as ICMP). Thanks.

7 8

CentOS 7 SELinux issue
by Alice Wonder 25 Feb '16

25 Feb '16

Trying to add SELinux support to my bitcoin package. Keep getting this on install: SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.29, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.29: No such file or directory /sbin/load_policy: Can't load policy: No such file or directory libsemanage.semanage_reload_policy: load_policy returned error code 2. I Tried yum reinstall selinux-policy selinux-policy-targeted restorecon -R -v /etc/selinux as suggested on some mailing lists. Didn't work, same issue. How can I troubleshoot what is causing this? The policy.29 file exists. The RPM responsible for it verifies (and was reinstalled) I don't ordinarily run SELinux and do not have it enabled. Things like that are why, it always ALWAYS got in the way of productivity and when I did run it and I was never hacked without it, so... but I need to figure out what the problem is here.

4 4

Bitcoin for CentOS 7
by Alice Wonder 24 Feb '16

24 Feb '16

For those interested I have a working spec file for Bitcoin 0.12.0 https://github.com/AliceWonderMiscreations/bitcoin/blob/master/contrib/rpm/… I believe the only BuildRequires that isn't in CentOS/EPEL is miniupnpc-devel but that's trivial to build as well. With Bitcoin 0.12.0 the ECC stuff that Red Hat ripped out of OpenSSL doesn't matter anymore. -=- That spec file is somewhat based on what https://www.ringingliberty.com/bitcoin/ does for Fedora / CentOS with a couple noted differences - A) I don't have SELinux stuff (yet). His SELinux stuff is broken on CentOS 7. Only matters for the bitcoin-server package, the GUI client doesn't seem to matter. B) He uses system BerkeleyDB. I build BerkeleyDB when building bitcoin because BerkeleyDB is fragile enough that changes to it can cause a wallet that can't be read by other clients. C) He adds a patch that adds functionality needed by a very small demographic - hardware machines that sell bitcoins. I prefer to not add that patch because I prefer pristine source rather than modifying what the devs produced for a feature 99.9% of the population doesn't need. So I prefer to stick with the precise version that bitcoin.org uses in the binary builds they distribute. Happens to be same version CentOS 7 has now but that may not always be the case. It isn't with CentOS 6. Anyway if anyone one this list has interest, figured I'd share the spec file. Adding SELinux to the server package I will work on. Oh the referenced patch that is there is only needed for LibreSSL, you can comment it out to build against OpenSSL. 0.12.0 seems much faster at indexing than previous versions, and catches up faster when it is behind on blocks.

3 8

CentOS 7, odd message from nfsdcltrack
by m.roth＠5-cent.us 23 Feb '16

23 Feb '16

Is this normal, or a bug, perhaps a mismatch in two pieces (and this server was just updated late yesterday afternoon, and rebooted this morning): <timestamp> <servername> nfsdcltrack[12128]: sqlite_insert_client: insert statement prepare failed: table clients has 2 columns but 3 values were supplied mark

2 1

Substitute pdftk with other command
by Dario Lesca 22 Feb '16

22 Feb '16

Hi, I must migrate a Centos5 server on Centos7 On server Centos5 there is a shell procedure witch add to PDF a timestamp like this example: http://i.stack.imgur.com/OBsqX.png with this command: $ pdftk input.pdf stamp overlay.pdf output stamped.pdf Into Centos7 pdftk it is no longer allowed Someone knows some other command to replace it or other ways to do this? Or how I can install pdftk on Centos7. Many thanks for your help. -- Dario Lesca (inviato dal mio Linux Fedora 23 Workstation)

3 4

Network hangs after several hours (Centos 6 recently upgraded kernel/glibc)
by Ian B 22 Feb '16

22 Feb '16

Hi all, We have a development server we have just tried updating the kernel & glibc after recent recommendations. Its been stable previously for a few years with only scheduled reboots. Its running Centos 6.6(final) 2.6.32-573.18.1.el6.x86_64 GNU libc 2.12 Upgraded via YUM, rebooted, all fine for several hours, and then network seemed to hang. Not much happening as its a dev server we are testing before moving to production. Googling, I see there is some history of e100e driver having issues, and I'm wondering if it could be related. Does anyone have any thoughts on where to do with it, as I'm assuming it will hang again later. Thanks, Ian Feb 18 05:04:36 kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) Feb 18 05:04:36 kernel: Hardware name: X9SCL/X9SCM Feb 18 05:04:36 kernel: NETDEV WATCHDOG: eth0 (e1000e): transmit queue 0 timed out Feb 18 05:04:36 kernel: Modules linked in: ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables ipv6 ext4 jbd2 e1000e serio_raw i2c_i801 i2c_core sg iTCO_wdt iTCO_vendor_support shpchp ext3 jbd mbcache raid1 sd_mod crc_t10dif ahci dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan] Feb 18 05:04:36 kernel: Pid: 0, comm: swapper Not tainted 2.6.32-220.4.2.el6.x86_64 #1 Feb 18 05:04:36 kernel: Call Trace: Feb 18 05:04:36 kernel: <IRQ> [<ffffffff81069a17>] ? warn_slowpath_common+0x87/0xc0 Feb 18 05:04:36 kernel: [<ffffffff81069b06>] ? warn_slowpath_fmt+0x46/0x50 Feb 18 05:04:36 kernel: [<ffffffff8144a4fd>] ? dev_watchdog+0x26d/0x280 Feb 18 05:04:36 kernel: [<ffffffff8108b3fd>] ? insert_work+0x6d/0xb0 Feb 18 05:04:36 kernel: [<ffffffff8144a290>] ? dev_watchdog+0x0/0x280 Feb 18 05:04:36 kernel: [<ffffffff8107c7f7>] ? run_timer_softirq+0x197/0x340 Feb 18 05:04:36 kernel: [<ffffffff810a0a10>] ? tick_sched_timer+0x0/0xc0 Feb 18 05:04:36 kernel: [<ffffffff8102ad6d>] ? lapic_next_event+0x1d/0x30 Feb 18 05:04:36 kernel: [<ffffffff81072001>] ? __do_softirq+0xc1/0x1d0 Feb 18 05:04:36 kernel: [<ffffffff81095610>] ? hrtimer_interrupt+0x140/0x250 Feb 18 05:04:36 kernel: [<ffffffff8100c24c>] ? call_softirq+0x1c/0x30 Feb 18 05:04:36 kernel: [<ffffffff8100de85>] ? do_softirq+0x65/0xa0 Feb 18 05:04:36 kernel: [<ffffffff81071de5>] ? irq_exit+0x85/0x90 Feb 18 05:04:36 kernel: [<ffffffff814f4d70>] ? smp_apic_timer_interrupt+0x70/0x9b Feb 18 05:04:36 kernel: [<ffffffff8100bc13>] ? apic_timer_interrupt+0x13/0x20 Feb 18 05:04:36 kernel: <EOI> [<ffffffff812c49de>] ? intel_idle+0xde/0x170 Feb 18 05:04:36 kernel: [<ffffffff812c49c1>] ? intel_idle+0xc1/0x170 Feb 18 05:04:36 kernel: [<ffffffff813f9ef7>] ? cpuidle_idle_call+0xa7/0x140 Feb 18 05:04:36 kernel: [<ffffffff81009e06>] ? cpu_idle+0xb6/0x110 Feb 18 05:04:36 kernel: [<ffffffff814d40ca>] ? rest_init+0x7a/0x80 Feb 18 05:04:36 kernel: [<ffffffff81c1ff76>] ? start_kernel+0x424/0x430 Feb 18 05:04:36 kernel: [<ffffffff81c1f33a>] ? x86_64_start_reservations+0x125/0x129 Feb 18 05:04:36 kernel: [<ffffffff81c1f438>] ? x86_64_start_kernel+0xfa/0x109 Feb 18 05:04:36 kernel: ---[ end trace 21915186e9d87b29 ]--- modinfo e1000e | grep version version: 3.2.5-k srcversion: 8CCA78B3C15DE6229299348 vermagic: 2.6.32-573.18.1.el6.x86_64 SMP mod_unload modversions 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 Processor Family DRAM Controller (rev 09) 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #2 (rev 05) 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 1 (rev b5) 00:1c.4 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 5 (rev b5) 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #1 (rev 05) 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a5) 00:1f.0 ISA bridge: Intel Corporation C202 Chipset Family LPC Controller (rev 05) 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family SATA AHCI Controller (rev 05) 00:1f.3 SMBus: Intel Corporation 6 Series/C200 Series Chipset Family SMBus Controller (rev 05) 02:00.0 Ethernet controller: Intel Corporation 82574L Gigabit Network Connection 03:03.0 VGA compatible controller: Matrox Electronics Systems Ltd. MGA G200eW WPCM450 (rev 0a)

5 8

where did SCL go?
by jason welsh 22 Feb '16

22 Feb '16

monsterjam:/etc/letsencrypt/archive/monsterjam # yum --enablerepo=extras install centos-release-SCL Loaded plugins: fastestmirror, remove-with-leaves Setting up Install Process Loading mirror speeds from cached hostfile * base: mirror.dattobackup.com * epel: mirror.us.leaseweb.net * extras: distro.ibiblio.org * updates: mirror.netdepot.com No package centos-release-SCL available. Error: Nothing to do monsterjam.org:/etc/letsencrypt/archive/monsterjam # cat /etc/centos-release CentOS release 6.7 (Final) monsterjam:/etc/letsencrypt/archive/monsterjam # any ideas?

3 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss