Discuss

discuss@lists.centos.org

2 participants
34758 discussions

CentOS-6.6 SELinux questions
by James B. Byrne 27 Oct '15

27 Oct '15

we have remote server running as a guest instance on a kvm host. This server acts as a public MX service for our domains along with providing a backup for our Mailman mailing lists. It also has a slave named service. while tracking down a separate problem I discovered these avc anomalies and ran audit2allow to see what was required to eliminate them. All the software is either from CentOS or EPEL. #============= amavis_t ============== allow amavis_t sysfs_t:dir open; #============= clamd_t ============== allow clamd_t sysctl_vm_t:dir search; #============= mailman_mail_t ============== #!!!! The source type 'mailman_mail_t' can write to a 'dir' of the following types: # mailman_log_t, mailman_data_t, mailman_lock_t, mailman_archive_t, var_lock_t, tmp_t, mailman_mail_tmp_t, var_log_t, root_t allow mailman_mail_t lib_t:dir write; #============= named_t ============== allow named_t sysctl_vm_t:dir search; #============= postfix_postdrop_t ============== allow postfix_postdrop_t fail2ban_tmp_t:file { read write }; #============= syslogd_t ============== allow syslogd_t sysctl_vm_t:dir search; Is there an epel/selinux forum to report these for repair or are they caused by something I am doing wrong? If so then what do I need to do to eliminate them? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 128, Issue 9
by centos-announce-request＠centos.org 27 Oct '15

27 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1930 Important CentOS 6 ntp Security Update (Johnny Hughes) 2. CESA-2015:1930 Important CentOS 7 ntp Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 26 Oct 2015 15:51:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1930 Important CentOS 6 ntp Security Update Message-ID: <20151026155106.GA2645(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1930 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1930.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3cd9b3811298e411dfa65eb67a74b61bdee315640dfc11d1f02c28c8953af6aa ntp-4.2.6p5-5.el6.centos.2.i686.rpm bda06af5dda320b811acf25e26950eec6476b9e2ed91cf40f32b95d8432f1780 ntpdate-4.2.6p5-5.el6.centos.2.i686.rpm 5a68ef2c168fc52f5064d75124fda27a2e0b4992242f0458ffe0207fb6164019 ntp-doc-4.2.6p5-5.el6.centos.2.noarch.rpm 74aa10fbcafbeab0d5e5fe57d7d5ac9177a175f7133eb6d84e7663796eedf700 ntp-perl-4.2.6p5-5.el6.centos.2.i686.rpm x86_64: 24982d48079999e8be273feeda4725067c9bf74ae335aa4a18d67a7300435ffa ntp-4.2.6p5-5.el6.centos.2.x86_64.rpm 5228dc4b5af2f98f18198928fc4354484154ee1f01cc3a96d1732ed018d7bcbf ntpdate-4.2.6p5-5.el6.centos.2.x86_64.rpm 5a68ef2c168fc52f5064d75124fda27a2e0b4992242f0458ffe0207fb6164019 ntp-doc-4.2.6p5-5.el6.centos.2.noarch.rpm ad4b6c9ca483d3e31687b730d7772df73b728a2de04c7152d470394203d48ec5 ntp-perl-4.2.6p5-5.el6.centos.2.x86_64.rpm Source: d32ee87acc861f4c4adeff99b7f8cdca4407173739d50b60fb3a691147fcbb32 ntp-4.2.6p5-5.el6.centos.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 26 Oct 2015 16:40:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1930 Important CentOS 7 ntp Security Update Message-ID: <20151026164024.GA9625(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1930 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1930.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 8f073bb7d81834cf898ba2a8561962cbc16c881b6c2738e25e487da29f00abfe ntp-4.2.6p5-19.el7.centos.3.x86_64.rpm c8cfd910fd3a75503f31b2f923d419eb1e56b37cd6f565d512cc5c45ed06f50c ntpdate-4.2.6p5-19.el7.centos.3.x86_64.rpm d640161a23a1bbcfd5186be2b6cad1fcf03003a165b32717bd208ceefc943d92 ntp-doc-4.2.6p5-19.el7.centos.3.noarch.rpm d4926c9306439e023b3d5d9bfd2d38077971ac0030b0a05ec3fdc3d4ded92071 ntp-perl-4.2.6p5-19.el7.centos.3.noarch.rpm fbfe6b88e16c8f1bab9ca194d2b234652d016c995330a5aa22cd4f39349f9de2 sntp-4.2.6p5-19.el7.centos.3.x86_64.rpm Source: 3f2c2f3b1af0b94d01702d85e55442fb517e8747779a40339be96747650246ac ntp-4.2.6p5-19.el7.centos.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 9 ***********************************************

1 0

Re: [CentOS] PHP version not enough for developers
by James B. Byrne 27 Oct '15

27 Oct '15

On Thu, October 22, 2015 17:25, Valeri Galtsev wrote: > . . . Still, disregarding the part some of us dislike personally > (plus often reboots necessary to install some vital updates > - which all Linuxes are prone to beginning somewhere around > 2.6 kernel) . . . I am glad to discover that I am not losing my mind. I too have been rather dismayed at the perceived increase in frequency with which I must reboot my servers. I wondered whether this was simply a misconception on my part or an actual change in the environment. Apparently it is the later. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

12 19

ssh freezes
by Michael Hennebry 27 Oct '15

27 Oct '15

All too often, my ssh session will freeze. I'm fairly certain the problem is at my end. None of the tilde commands work. In particular, ~# and ~. are nonfunctional. I can write to ssh's terminal window from another terminal window. If I kill the ssh process, I can ssh in again. The next time it happens, I will try another ssh session without killing the first one. dmesg did not show me anything interesting. Any suggestions on how to diagnose? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

4 7

USB drive is "read-only file system" and cannot umount - how to fix
by Robert Moskowitz 27 Oct '15

27 Oct '15

I 'just' noticed that at some point, my USB backup drive on my server is mounted as read-only and all of my background sync cron jobs have been failing. So I need to fix this without rebooting the server. I can VNC into the server and running "mount" shows: /dev/sdc1 on /media/HD103SI type ext4 (rw,nosuid,nodev,uhelper=udisks) and umount gets: # umount /dev/sdc1 umount: /media/HD103SI: device is busy. (In some cases useful info about processes that use the device is found by lsof(8) or fuser(1)) How can I get this drive r/w?

2 3

CentOS-6 reboots
by James B. Byrne 26 Oct '15

26 Oct '15

I am now in receipt of an update to qemu-img and qemu-kvm. My practice up to now has been to restart the virtual host after applying qemu updates. This in turn implies that all of the virtual guests on that host also will need restarting since suspending them takes much, much longer than a restart. The issue of whether or not the requirement to reboot servers based on CentOS was increasing or not was recently raised. My question then: Is a restart of the host following applying these updates actually necessary? If not then what is the procedure to get them to take effect on existing virtual guests? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

semi-OT: HW
by m.roth＠5-cent.us 26 Oct '15

26 Oct '15

Running CentOS 6.7, on an older HP DL580 G5. We've got a Dell 12-bay RAID box plugged into a PERC H800 (aka LSI Liberator) that we put in the HP, and that works fine. We've got a new RAID (a JetStor), and are trying to plug it in. The layout is that the Dell RAID is dual-pathed DAS. Each PERC has two DAS ports. We've got the Dell RAID in the top port of each PERC. I *thought* I could just plug the new RAID, which also has two ports, into the bottom two ports on the PERC. TRied rescanning the SCSI bus, /sys/class/scsi_host/host[0-5]/scan, with no apparent sight of the new RAID. Can I do this the way I've got it, or do I need to daisy-chain the new RAID through the old RAID? mark

3 5

virt-manager
by John R Pierce 26 Oct '15

26 Oct '15

so... I've been tinkering with KVM again. my desktop is windows, the linux server is remote, so I have a ssh X tunnel running, and XMing running locally, and launch virt-manager. opens fine, shows the VM I created some time ago. I select that VM (which is running centos 6), and 'open', a window opens for a few seconds, then blam, virt-manager exits before I can click on the 'details' lightbulb. if I run virt-manager --debug, I get the following output after clicking on 'open'... 2015-10-22 16:08:36,377 (engine:471): window counter incremented to 2 2015-10-22 16:08:36,379 (console:1150): Starting connect process for proto=vnc trans=None connhost=localhost connuser=None connport=None gaddr=127.0.0.1 gport=5900 gsocket=None 2015-10-22 16:08:36,381 (console:378): VNC connecting to localhost:5900 2015-10-22 16:08:37,009 (console:1061): Viewer connected [xcb] Extra reply data still left in queue [xcb] This is most likely caused by a broken X extension library [xcb] Aborting, sorry about that. python: xcb_io.c:576: _XReply: Assertion `!xcb_xlib_extra_reply_data_left' failed. Aborted (core dumped) -- john r pierce, recycling bits in santa cruz

5 7

Crash in gnome-terminal on New Profile
by Leonard den Ottolander 26 Oct '15

26 Oct '15

Hi, Anyone else seeing this? C7 Gnome Desktop, opened a gnome-terminal, click File -> New Profile and gnome-terminal-server gets killed. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

2 2

how to unrar
by Michael Hennebry 25 Oct '15

25 Oct '15

I'm looking for a means to unrar some files. Google keeps giving references to rmpforge which I'm told I ought not use. Any other ideas? I'm running centos 6. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss