Re: [CentOS] Help: Server security compromised?
On Wed, Aug 6, 2008 at 8:29 AM, Noob Centos Admin <[EMAIL PROTECTED]> wrote: > Since I followed some of the rules about SSH and used a non-standard port > for SSH and disable SSHD listening on the default port 22, I've no way back IMNSHO that's not particularly effective - much better to set up SSH keys and either set 'PermitRootLogin without-password' in /etc/ssh/sshd_config; or set 'PermitRootLogin no', and then su or sudo from your regular user - I know the latter IS more secure, but it's also more annoying to work with > So I'm now prepping for a long ride to the IDC if a reboot doesn't help my > stupidity. Remember to reinstall from scratch if your server has been compromised - there are thousands of dark dusty corners for the bugs to hide, once they're inside, so don't expect to be able to flush them out. Good luck! /Bent ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Help: Server security compromised?
If server is not compromised, just edit the smtp configs to deny acceptance from that ip block Why doesn't the server have an ILO port or something to that effect? - rh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Yum
On Tue, Aug 5, 2008 at 7:01 PM, Mohsen Pahlevanzadeh <[EMAIL PROTECTED]> wrote: > Dear All, > When i install CentOS, it doesn't install yum package. > How i do it? > when i haven't yum, it is like that i haven't apt-get. > Please help me > Yours, > Mohsen > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > Sounds like you need to talk to the support staff where you bought the VPServer - after all, they're the ones responsible for creating your problem. Alternatively, you could try 'rpm --upgrade http://mirror.centos.org/centos-5/5.2/updates/i386/RPMS/yum-3.2.8-9.el5.centos.2.1.noarch.rpm"; - add dependencies ad nauseam. BR Bent ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
On Wed, Aug 6, 2008 at 3:06 PM, Bent Terp <[EMAIL PROTECTED]> wrote: > On Wed, Aug 6, 2008 at 8:29 AM, Noob Centos Admin > <[EMAIL PROTECTED]> wrote: > > Since I followed some of the rules about SSH and used a non-standard port > > for SSH and disable SSHD listening on the default port 22, I've no way > back > > IMNSHO that's not particularly effective - much better to set up SSH > keys and either set > 'PermitRootLogin without-password' in /etc/ssh/sshd_config; or > set 'PermitRootLogin no', and then su or sudo from your regular user - > I know the latter IS more secure, but it's also more annoying to work > with I did that too, no root login and everytime I have to su from normal user. It is a pain to work with especially with having to use full pathnames for commands instead of say just doing a "service httpd restart". But I figured it was better safe than sorry and as well as I can do since I could not figure out how to properly create a self-sign SSL cert. Remember to reinstall from scratch if your server has been compromised > - there are thousands of dark dusty corners for the bugs to hide, once > they're inside, so don't expect to be able to flush them out. > Well, the thing is I'm not sure if it's compromised since now it became obvious that the iptables is just being reset by the apf settings.. which is at the moment a good thing since on reboot, apf re-added the lines to disable the firewall every 5 minutes so I'm able to get back into the server. Now I just have to figure out where exactly can I add the block for the offending VNSL IP address and have it work without choking up. However, I decided to try whatever it is on Saturday so clients won't be hopping mad why everything's dead. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
On Wed, 2008-08-06 at 15:14 +0800, Noob Centos Admin wrote: > .. snip > I did that too, no root login and everytime I have to su from normal > user. It is a pain to work with especially with having to use full > pathnames for commands instead of say just doing a "service httpd > restart". If you use su only, you assume root privileges without the root environment. Rather do su - which gives you the full root environment, including path. The same holds for other users, i..e su - joe switches the user to the user joe with full environment. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
Hi, On Wed, Aug 6, 2008 at 3:07 PM, Robert - elists <[EMAIL PROTECTED]>wrote: > If server is not compromised, just edit the smtp configs to deny acceptance > from that ip block > The EXIM configurations are even more nightmarish than iptables, which at least made some sort of sense. I've been plugging the ip address into the various bad_sender bad_host etc files in the exim configuration directory but it's still not ignoring it. The EXIM smpt/MTA will still accept the connection, then check and realize hey something's not quite right, then issue a reject before the VNSL machine terminates the connection. So the server's still wasting resources handling tens of thousands of such transaction and chewing up log space at the same time. Hence I have to resort to just blocking from iptables. Of course, it could very well be my own admitted incompetence that I'm doing something wrong here so Exim is not working the way I expect. I'm very very wary about messing any deeper with the mail settings because a server that's obviously dead to the world is much easier to notice than client emails mysteriously disappearing for days due to bad config before they realize it. Why doesn't the server have an ILO port or something to that effect? > Well, my boss's a cheapskate and his clients are cheapskate so a couple of years back I was assigned the server administration job on top of my regular day role to setup the server with OTS parts. Hence the half baked setup based on a tight budget and whatever information I can glean from the internet and the good folks on forums and mailing lists. So for the ILO? Well, only today did the term enter my mind. Although I did vaguely remember suggestions for a remote reboot button but it was beyond my know how to setup. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
Hi, If you use > su > only, you assume root privileges without the root environment. > Rather do > su - > which gives you the full root environment, including path. > The same holds for other users, i..e > su - joe > switches the user to the user joe with full environment. > Thanks a million for that! Going to save me a ton of time from issuing whereis command to find commands when I need to follow instructions off a website! ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
Noob Centos Admin wrote: Hi, If you use su only, you assume root privileges without the root environment. Rather do su - which gives you the full root environment, including path. The same holds for other users, i..e su - joe switches the user to the user joe with full environment. Thanks a million for that! Going to save me a ton of time from issuing whereis command to find commands when I need to follow instructions off a website! Plus we have a Wiki page that explains in some detail here: http://wiki.centos.org/TipsAndTricks/BecomingRoot It's a common mistake/misunderstanding most people make to start with :) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.2 -- how do I choose a wireless network?
Aleksey Tsalolikhin wrote: Good answer. Thanks, Spiro! I'll try Ubunto. Aleksey On Tue, Aug 5, 2008 at 9:53 PM, Spiro Harvey, Knossos Networks Ltd <[EMAIL PROTECTED]> wrote: CentOS is aimed as a server distribution, and I don't recommend it for a home machine. You would do better to look at Fedora or Ubuntu. They are designed as home distributions and are far better for getting going on a home network. OK ... this is silly CentOS is an Enterprise distro and works great as a workstation. In fact, it is just as good as Ubuntu for a desktop. I would argue that a stable, supported for several year desktop is much better than a distro that upgrades every 6 months. I am not in the business of tearing down other distros, so I won't ... and if you want to use Ubuntu, great. But, there are millions of users of CentOS and many people use it on the desktop and on their wireless laptops. WRT wireless on CentOS, use NetworkManager to find and connect to networks ... You can see if it is installed with the command: rpm -qa | egrep "NetworkManager|wpa_supplicant" If installed, the output is similar to this: NetworkManager-0.6.4-8.el5 NetworkManager-glib-0.6.4-8.el5 NetworkManager-gnome-0.6.4-8.el5 wpa_supplicant-0.4.8-10.2.el5 If not, install with thsi command: yum install NetworkManger\* wpa_supplicant The run NetworkManager from the command line. You will see a NetworkManager applet beside the clock and you should be able to click it and pick a network. Here are more details for how to setup NetworkManager: http://fedoraproject.org/wiki/Tools/NetworkManager Thanks, Johnny Hughes signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RPM Uninstall
Hello, run # rpm -qa | grep caching-nameserver it shows the whole package name. Uninstall it using # rpm -e or remove it using yum (recommended) yum remove On Wed, Aug 6, 2008 at 1:24 AM, R P Herrold <[EMAIL PROTECTED]> wrote: > On Tue, 5 Aug 2008, Matt wrote: > > I am wanting to uninstall an rpm off my CentOS 4.6 box. Namely >> caching-nameserver. Is there anywhere I can look at the uninstall >> script to see what it all does on its way out? >> > > Run as an unpriv'd user: > >rpm -q --scripts caching-nameserver > > will show them to you, without running them > > -- Russ herrold > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Thanks and Regards, Kapil Singh Kushwah Linux System Administrator Hotwax Media Inc. Indore,(M.P) INDIA ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.2 -- how do I choose a wireless network?
On Wed, Aug 6, 2008 at 3:57 AM, Johnny Hughes <[EMAIL PROTECTED]> wrote: > > WRT wireless on CentOS, use NetworkManager to find and connect to networks > ... > > You can see if it is installed with the command: > > rpm -qa | egrep "NetworkManager|wpa_supplicant" > > If installed, the output is similar to this: > > NetworkManager-0.6.4-8.el5 > NetworkManager-glib-0.6.4-8.el5 > NetworkManager-gnome-0.6.4-8.el5 > wpa_supplicant-0.4.8-10.2.el5 > > If not, install with thsi command: > > yum install NetworkManger\* wpa_supplicant > > The run NetworkManager from the command line. > > You will see a NetworkManager applet beside the clock and you should be able > to click it and pick a network. > > Here are more details for how to setup NetworkManager: > > http://fedoraproject.org/wiki/Tools/NetworkManager Although not quite as extensive as the Fedora Wiki page, we have our own CentOS Wiki for NetworkManager at: http://wiki.centos.org/HowTos/Laptops/NetworkManager At the bottom of the page it says "There is nothing more to it !" :-D Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS-announce Digest, Vol 42, Issue 2
Send CentOS-announce mailing list submissions to [EMAIL PROTECTED] To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0612 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2008:0612 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) -- Message: 1 Date: Wed, 6 Aug 2008 10:53:20 +0100 From: Karanbir Singh <[EMAIL PROTECTED]> Subject: [CentOS-announce] CESA-2008:0612 Important CentOS 5 i386 kernel Update To: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0612 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 0e96a5c5648375bca4f54f290d3a2247 kernel-2.6.18-92.1.10.el5.i686.rpm 5336a850aa30b5a55cdb3788a14a9f28 kernel-debug-2.6.18-92.1.10.el5.i686.rpm 3c78e714d11c2c2b6910cdcc47a694bf kernel-debug-devel-2.6.18-92.1.10.el5.i686.rpm 1404c810d7571d722436fba2dbe86445 kernel-devel-2.6.18-92.1.10.el5.i686.rpm f4990d57aed66cd66b86cb0193032981 kernel-doc-2.6.18-92.1.10.el5.noarch.rpm bc9b2a65df26736b6dfd8ed731f50209 kernel-headers-2.6.18-92.1.10.el5.i386.rpm 5aa251d478ff3d43fae595e008087f0a kernel-PAE-2.6.18-92.1.10.el5.i686.rpm d76a3f8d837b82f0ddb3d9b06537898f kernel-PAE-devel-2.6.18-92.1.10.el5.i686.rpm 4a0c9a6c14ade7cbf7e2701cfdfa22a8 kernel-xen-2.6.18-92.1.10.el5.i686.rpm 743d9f204512f83a73e46ae126733371 kernel-xen-devel-2.6.18-92.1.10.el5.i686.rpm Source: 1b05a0525efa915022c16d741764325e kernel-2.6.18-92.1.10.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, [EMAIL PROTECTED] -- Message: 2 Date: Wed, 6 Aug 2008 10:53:21 +0100 From: Karanbir Singh <[EMAIL PROTECTED]> Subject: [CentOS-announce] CESA-2008:0612 Important CentOS 5 x86_64 kernel Update To: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0612 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 1457356856ffe82848877a6f08457dea kernel-2.6.18-92.1.10.el5.x86_64.rpm 7cd3f0234fb117b11298281bdb5f4d0c kernel-debug-2.6.18-92.1.10.el5.x86_64.rpm c79e31719719d3b732f0f62248c2186e kernel-debug-devel-2.6.18-92.1.10.el5.x86_64.rpm ff0631c0ff8325ae2162ee811090193a kernel-devel-2.6.18-92.1.10.el5.x86_64.rpm b1d78ee9d4a2b15052584d1a55733325 kernel-doc-2.6.18-92.1.10.el5.noarch.rpm 53917fdfdbabc3e34983b9cf073983ae kernel-headers-2.6.18-92.1.10.el5.x86_64.rpm 3726883410bb2de3d7b124bf68439e72 kernel-xen-2.6.18-92.1.10.el5.x86_64.rpm a8ce18b06b43a0e586347ba5e9f0ad8c kernel-xen-devel-2.6.18-92.1.10.el5.x86_64.rpm Source: 1b05a0525efa915022c16d741764325e kernel-2.6.18-92.1.10.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, [EMAIL PROTECTED] -- ___ CentOS-announce mailing list [EMAIL PROTECTED] http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 42, Issue 2 ** ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Slightly OT
> OK ... this is silly > > CentOS is an Enterprise distro and works great as a workstation. In > fact, it is just as good as Ubuntu for a desktop. I would argue that a > stable, supported for several year desktop is much better than a distro > that upgrades every 6 months. I've been starting to ascribe to your opinion. For several years now, I've used CentOS on my servers and fedora on my laptop and desktop computer. However, F6 and onwards have been a bit flaky to install, with myriad little things going wrong which needed some TLC which no beginner could possibly do. And just last month when I went to install F8 on my laptop since F7 was EOL, the darned thing consistently segfaulted, despite the media passing OK, and my laptop being a bog-standard 4 year old HP corporate centrino-powered which is certified RH3-compatible. The only way I could do it was via the LiveCD :/ And then I had lots of little things going wrong on the install like vital rpms not being installed by yum which I had to do by hand since yum refused to even acknowledge they were available. :-X In 6 months time I'll have to do it all again to install F9 which by many accounts is a POS, freezing up for several minutes at a time for no apparent reason. So IMO, having used Fedora since about FC3, stability is getting worse - each version is more and more on the bleeding edge, too unpolished, too unfinished - definitely not suitable for beginners unless they have someone to hold their hand and pick up the pieces. Ubuntu has its own problems. While it is slightly less cutting-edge than F9 and thus easier to install, the forums are huge and unwieldy. Every problem that one can possibly have, has already been answered by 100,000 + people in 10,000+ threads. The noobs outnumber the proficient users by 100 to 1, so finding the right solution to your problem is a real challenge in that 95% (my estimate) of the answers are wrong. So you'll spend a lot of time doing (and undoing) the advice given and backtracking from dead-ends. In stark contrast, this list has one of the highest signal-to-noise ratios I have ever encountered, and the standard of contributors makes me feel inadequate :/ However, IMO, CentOS is still slightly too old to be used on a modern laptop, but probably fine for use on a desktop where standby and power conservation is less important. Stability of CentOS is outstanding, but still not perfect - I remember one problem from last year when I was using CentOS on a desktop and Evolution refused to start after an update. It needed a small tweak which was supplied on-list. But this problem came from upstream so also affected RedHat. FWIW, I don't know what version of NetworkManager that CentOS uses, but the one used by F8 not only doesn't require wpa-supplicant to connect via WPA/WPA2 but many 'puters (such as my laptop) don't even need the network service running, since NW is now managing wired connections as well as wireless. It even integrates with OpenVPN now, although I am yet to try this. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Slightly OT
D Steward wrote: OK ... this is silly CentOS is an Enterprise distro and works great as a workstation. In fact, it is just as good as Ubuntu for a desktop. I would argue that a stable, supported for several year desktop is much better than a distro that upgrades every 6 months. I've been starting to ascribe to your opinion. For several years now, I've used CentOS on my servers and fedora on my laptop and desktop computer. However, F6 and onwards have been a bit flaky to install, with myriad little things going wrong which needed some TLC which no beginner could possibly do. And just last month when I went to install F8 on my laptop since F7 was EOL, the darned thing consistently segfaulted, despite the media passing OK, and my laptop being a bog-standard 4 year old HP corporate centrino-powered which is certified RH3-compatible. The only way I could do it was via the LiveCD :/ And then I had lots of little things going wrong on the install like vital rpms not being installed by yum which I had to do by hand since yum refused to even acknowledge they were available. :-X In 6 months time I'll have to do it all again to install F9 which by many accounts is a POS, freezing up for several minutes at a time for no apparent reason. So IMO, having used Fedora since about FC3, stability is getting worse - each version is more and more on the bleeding edge, too unpolished, too unfinished - definitely not suitable for beginners unless they have someone to hold their hand and pick up the pieces. Ubuntu has its own problems. While it is slightly less cutting-edge than F9 and thus easier to install, the forums are huge and unwieldy. Every problem that one can possibly have, has already been answered by 100,000 + people in 10,000+ threads. The noobs outnumber the proficient users by 100 to 1, so finding the right solution to your problem is a real challenge in that 95% (my estimate) of the answers are wrong. So you'll spend a lot of time doing (and undoing) the advice given and backtracking from dead-ends. In stark contrast, this list has one of the highest signal-to-noise ratios I have ever encountered, and the standard of contributors makes me feel inadequate :/ However, IMO, CentOS is still slightly too old to be used on a modern laptop, but probably fine for use on a desktop where standby and power conservation is less important. Stability of CentOS is outstanding, but still not perfect - I remember one problem from last year when I was using CentOS on a desktop and Evolution refused to start after an update. It needed a small tweak which was supplied on-list. But this problem came from upstream so also affected RedHat. FWIW, I don't know what version of NetworkManager that CentOS uses, but the one used by F8 not only doesn't require wpa-supplicant to connect via WPA/WPA2 but many 'puters (such as my laptop) don't even need the network service running, since NW is now managing wired connections as well as wireless. It even integrates with OpenVPN now, although I am yet to try this. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos I agree with both posters 100% [especially about the Ubuntu Forums - sometimes bigger isn't always better :-) ] I started using linux with Red Hat 6.2 and I stayed w/ Fedora until around FC3, and that's when things started going downhill. I ended up being the classical distro-hopper for some time trying to find what would work for me, and I ended up using CentOS on my desktop workstation, and I use a small lesser-known distro called Foresight Linux on my Laptop - it's very up-to-date, has a unique and wonderful package manager and is far more stable than either Fedora or Ubuntu. That combination works very well for me. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
Hi, the more completely you lock down a server, the harder it will be for you to do some useful work on it. These matters require a balance between security and ease-of-use for the admins. Its especially important not to cut your bridges when administering a remote server. Despite many people advising to use keys and change ports etc etc, you really only need to do 3 things to stop dead any unauthorised SSH logins: 1. prevent direct root logins 2. create a user account (just for SSH logins) with an unusual name and give that account a very good password (20 character alphanumeric). Only allow that user to login via SSH. 3. give root a password of similar complexity. Doing just these three will ensure that not only will no-one ever be likely to get in via SSH, but you will be able to SSH in from anywhere from any computer. Furthermore, when doing any work with firewalls or ssh on a remote server, you must *always* have more than one SSH shell open. Don't close the last shell until you have tested your changes and are confident you won't lock yourself out. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
Rainer Duffner wrote: > Am 06.08.2008 um 01:00 schrieb Lanny Marcus: > > > > > John: Thank you. I'm not sure how we will capture the video from the > > camera. If it's > > via Firewire, I will need to buy something to install in one of our > > PCs Last resort is doing > > it on Windows XP, with whatever comes with that or is > available free.. > > > > > Only Macs come with a good, free DV-Editor (iMovie), IIRC. > Some people claim the Mac is worth iMovie alone - but I don't > know, I only do digital still-pictures. > > With the Mac, there would at least be a Unix underneath. ;-) > > One thing: my co-worker has a PC he edits videos with where he > disables antivirus stuff during the edit. > He said he really only got on the internet once in that state > (antivirus disabled) - but that was enough to infect the PC > so he had to spend hours to clean it up. > If you can do it with kinodv - good for you. > Otherwhise, consider getting a Mac, if your time is worth > something I have to second the Mac suggestion. Having just bought a Mac coming from a PC/Windows desktop I had no idea how good an environment it was for media processing, but I have to say it is the best for video/still image editing and if iMovie or iPhoto don't cut it then Aperature or Final Cut would get the job done for a reasonable price (compared to say Photoshop and Premiere). -Ross __ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Help: Server security compromised?
A possible remote reboot can be setup from a on that server obscure web page URL to a privileged script that is password protected Inexpensive reset button - rh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
Thanks Steward and Robert for those suggestions, they make plenty of sense!. About the two SSH terminal, if I activate a wrong firewall change that blocks the SSH port, would it not also terminate the existing terminals since new packets going in would be rejected, or does it not affect already established TCP connections? Probably also going to make a script to shutdown the firewall as well as one for reboot. Since so far all 3 times my noobness involves firewalling myself out, although in a slightly different way each time! ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] I'm Stuck
Dear List, I have an older Sony Vaio that I would like to install CentOS on. The unit has a USB CD that can _not_ be used as a boot device (the Sony one could, but mine is an aftermarket CD and can't be used to boot). It does have a floppy drive that it can boot from. The only network install method for CentOS that I can find uses a CD, not a floppy. Is there anyway to get CentOS on this machine? Thanks! -- Bob Smither, PhD Circuit Concepts, Inc. = - Ubi libertas habitat, ibi nostra patria est - "Where liberty dwells, there is my country" = [EMAIL PROTECTED] http://www.C-C-I.Com 281-331-2744(office) -4616(fax) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] I'm Stuck
Bob Smither wrote: Dear List, I have an older Sony Vaio that I would like to install CentOS on. The unit has a USB CD that can _not_ be used as a boot device (the Sony one could, but mine is an aftermarket CD and can't be used to boot). It does have a floppy drive that it can boot from. The only network install method for CentOS that I can find uses a CD, not a floppy. Is there anyway to get CentOS on this machine? You can write floppy, boot from it and continue install from CD. I hope... ;) If your Sony can boot from network by PXE, so you can use that way too (and it's one I prefer), but you have to have appropriate server for this type of install. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.2 -- how do I choose a wireless network?
On Wed, Aug 6, 2008 at 3:57 AM, Johnny Hughes <[EMAIL PROTECTED]> wrote: > > WRT wireless on CentOS, use NetworkManager to find and connect to networks > ... > > You can see if it is installed with the command: > > rpm -qa | egrep "NetworkManager|wpa_supplicant" > > If installed, the output is similar to this: > > NetworkManager-0.6.4-8.el5 > NetworkManager-glib-0.6.4-8.el5 > NetworkManager-gnome-0.6.4-8.el5 > wpa_supplicant-0.4.8-10.2.el5 > > If not, install with thsi command: > > yum install NetworkManger\* wpa_supplicant > > The run NetworkManager from the command line. > > You will see a NetworkManager applet beside the clock and you should be able > to click it and pick a network. > > Here are more details for how to setup NetworkManager: > > http://fedoraproject.org/wiki/Tools/NetworkManager > The OP was wondering if this was possible from the live CD - I'm wondering if installing a (missing?) package is the right solution in /that/ case. For (normal) CentOS, I have used a USB plugin wireless adapter on my laptop with excellent success, although it is not as easy as (okay, I won't name that other excuse for an OS) 1-2-3 - it takes some looking to find the whole enchilada, but it /is/ find-able. mhr ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Help: Server security compromised?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noob Centos Admin Sent: Wednesday, August 06, 2008 5:31 PM To: CentOS mailing list Subject: Re: [CentOS] Help: Server security compromised? Thanks Steward and Robert for those suggestions, they make plenty of sense!. About the two SSH terminal, if I activate a wrong firewall change that blocks the SSH port, would it not also terminate the existing terminals since new packets going in would be rejected, or does it not affect already established TCP connections? Probably also going to make a script to shutdown the firewall as well as one for reboot. Since so far all 3 times my noobness involves firewalling myself out, although in a slightly different way each time! Seen this? http://www.askbjoernhansen.com/2007/09/18/safely_change_firewall_rules_remotel y.html smime.p7s Description: S/MIME cryptographic signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] I'm Stuck
Hi, On Wed, 2008-08-06 at 11:36 -0500, Bob Smither wrote: > Dear List, > > I have an older Sony Vaio that I would like to install CentOS on. The > unit has a USB CD that can _not_ be used as a boot device (the Sony one > could, but mine is an aftermarket CD and can't be used to boot). It > does have a floppy drive that it can boot from. > > The only network install method for CentOS that I can find uses a CD, > not a floppy. > > Is there anyway to get CentOS on this machine? Can you boot from USB stick? You then could use the Live CD, converted to USB or use another bootable linux on it. As long as you have a bootable partition where you can put a vmlinuz, initrd.img and grub, you're in business. regards, Michel ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
Akemi Yagi wrote: I almost forgot to tell you that firewire support is disabled in the distro kernel. This is upstream's decision. wow :-( Why did they do that? -- Florin Andrei http://florin.myip.org/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
John R Pierce wrote: bad news is, you really should have a separate drive just for video capture to reduce disk contention as the streaming rate of the capture can't be interrupted. its only around 3MB/sec, so its not /that/ bad with today's faster drives, but still. Well, it depends. If you're just browsing and reading email, a separate drive is really quite unnecessary. I got away with a single drive for everything, I just bumped up the buffers in dvgrab to like 200 frames or so (about 7 seconds for NTSC) and everything was fine. dvgrab will tell you if it drops frames. If it does, you know you have to either: - increase the buffer even more - stop messing around with the system - should the previous fail, then get a dedicated drive -- Florin Andrei http://florin.myip.org/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei <[EMAIL PROTECTED]> wrote: > Akemi Yagi wrote: >> >> I almost forgot to tell you that firewire support is disabled in the >> distro kernel. This is upstream's decision. > > wow :-( > > Why did they do that? Well, this is just my guess -- enterprise class Linux is (used to be) primarily for servers and therefore there is not much demand for things like firewire and wireless and... The situation *might* change if/when upstream start pushing toward the desktop world. Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] I'm Stuck
On Wed, 2008-08-06 at 20:03 +0200, Michel van Deventer wrote: > Hi, > > On Wed, 2008-08-06 at 11:36 -0500, Bob Smither wrote: > > Dear List, > > > > I have an older Sony Vaio that I would like to install CentOS on. The > > unit has a USB CD that can _not_ be used as a boot device (the Sony one > > could, but mine is an aftermarket CD and can't be used to boot). It > > does have a floppy drive that it can boot from. I think someone mentioned a floppy. Last I checked, the ISO image had some sub-directories that contained floppy images. If they're still included, you should be able to make a bootable floppy and then use the USB CD as the install media. Or get the image from a network location (IIRC). > > > > The only network install method for CentOS that I can find uses a CD, > > not a floppy. Give the floppy method a try. If it let's you get either the CD or to a network, you should be able to install. > > > > Is there anyway to get CentOS on this machine? > Can you boot from USB stick? You then could use the Live CD, converted > to USB or use another bootable linux on it. As long as you have a > bootable partition where you can put a vmlinuz, initrd.img and grub, > you're in business. > > regards, > > Michel > HTH -- Bill ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Yum
On Wed, Aug 6, 2008 at 2:10 AM, Bent Terp <[EMAIL PROTECTED]> wrote: > On Tue, Aug 5, 2008 at 7:01 PM, Mohsen Pahlevanzadeh > <[EMAIL PROTECTED]> wrote: >> Dear All, >> When i install CentOS, it doesn't install yum package. >> How i do it? >> when i haven't yum, it is like that i haven't apt-get. >> Please help me >> Yours, >> Mohsen >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos > > Sounds like you need to talk to the support staff where you bought the > VPServer - after all, they're the ones responsible for creating your > problem. > > Alternatively, you could try 'rpm --upgrade > http://mirror.centos.org/centos-5/5.2/updates/i386/RPMS/yum-3.2.8-9.el5.centos.2.1.noarch.rpm"; > - add dependencies ad nauseam. Hosts normally advertise a VPS as being almost like a Dedicated Server. Lots of resources and lots of options. In this case, without being able to use yum, it starts as a Security problem, because he cannot update the packages that are installed. His second problem is that he cannot install new software with yum, which eliminates a lot of options. Unlike Shared Hosting, which is Managed, someone with a VPS must Manage their VPS, as if it was a Dedicated Server, or, pay someone to do that. But, how would they manage it, without yum? It's much more difficult, without yum. IMHO, he should look for a VPS with another provider, that allows him to use yum, etc. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
n Tue, Aug 5, 2008 at 10:47 PM, Akemi Yagi <[EMAIL PROTECTED]> wrote: > On Tue, Aug 5, 2008 at 7:57 PM, Lanny Marcus <[EMAIL PROTECTED]> wrote: >> On Tue, Aug 5, 2008 at 6:58 PM, Florin Andrei <[EMAIL PROTECTED]> wrote: >>> Akemi Yagi wrote: I have been using kino to import from our miniDV camcorder and do some simple editing -- but all on FC6. As I wrote in my post earlier in this thread, I have been unable to do this on CentOS 5. Were you able to get kino to recognize the firewire port ? If so, would you mind sharing your experience in this forum thread? >> After we get the camcorder and a PCI Firewire card, I will try this in >> CentOS 5.2 and let you know if it works on our HW. >> Possibly it has to do with the HW Akemi is using, but, probably not, >> because it works there on FC6. Probably you are correct that >> something is broken in CentOS for Firewire. > > I almost forgot to tell you that firewire support is disabled in the > distro kernel. This is upstream's decision. Fortunately, we have > centosplus kernel which has firewire enabled. This is briefly > mentioned in the forum thread I referred to. Thank you for advising me about that very critical detail! I would have wondered why it didn't work, with the standard kernel! ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
On Tue, Aug 5, 2008 at 11:05 PM, John R Pierce <[EMAIL PROTECTED]> wrote: > Lanny Marcus wrote: >> I will need to buy a PCI card for Firewire and put it into one of our >> Desktop boxes.. Probably my wife's, because it has the biggest HD. If >> it doesn't work on CentOS 5.2, we will need to use M$ Windows. > > good news is, firewire cards are quite cheap. note that DV uses firewire > 100, which is compatible with 100-400 but NOT 800 (sigh). so don't get a > card which has only firewire 800 ports. also, you'll need a 1394 cable > that has the standard firewire 100-400 connector on one end and the little > tiny camcorder connector on the other (this is similar to but VERY DIFFERENT > than the miniUSB connector) > > bad news is, you really should have a separate drive just for video capture > to reduce disk contention as the streaming rate of the capture can't be > interrupted. its only around 3MB/sec, so its not /that/ bad with today's > faster drives, but still. John: Thank you, for all of the above information! If I can't buy the card here in our town, there is something like Ebay and I can probably order it there. Very useful data to have,, *before* I buy the card, and not after. I have a couple of spare HDs, in a box, so I can install one, if there is a spare bay. I will check out the specs on our 3 Desktops, to see which of them can handle a 2nd HD. Lanny ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Re: OT: Digital Video Editor for CentOS 5.2 - Suggestions?
on 8-6-2008 11:33 AM Akemi Yagi spake the following: On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei wrote: Akemi Yagi wrote: I almost forgot to tell you that firewire support is disabled in the distro kernel. This is upstream's decision. wow :-( Why did they do that? Well, this is just my guess -- enterprise class Linux is (used to be) primarily for servers and therefore there is not much demand for things like firewire and wireless and... The situation *might* change if/when upstream start pushing toward the desktop world. Akemi I also believe there are firewire exploits that can allow unauth. access since firewire has direct DMA access. But that may or may not be upstreams motivation. It could be as simple as they didn't want to support it. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Re: I'm Stuck
on 8-6-2008 11:34 AM William L. Maltby spake the following: On Wed, 2008-08-06 at 20:03 +0200, Michel van Deventer wrote: Hi, On Wed, 2008-08-06 at 11:36 -0500, Bob Smither wrote: Dear List, I have an older Sony Vaio that I would like to install CentOS on. The unit has a USB CD that can _not_ be used as a boot device (the Sony one could, but mine is an aftermarket CD and can't be used to boot). It does have a floppy drive that it can boot from. I think someone mentioned a floppy. Last I checked, the ISO image had some sub-directories that contained floppy images. If they're still included, you should be able to make a bootable floppy and then use the USB CD as the install media. Or get the image from a network location (IIRC). The only network install method for CentOS that I can find uses a CD, not a floppy. Give the floppy method a try. If it let's you get either the CD or to a network, you should be able to install. Is there anyway to get CentOS on this machine? Can you boot from USB stick? You then could use the Live CD, converted to USB or use another bootable linux on it. As long as you have a bootable partition where you can put a vmlinuz, initrd.img and grub, you're in business. regards, Michel HTH Floppy is probably out per this info in the /images directory; This directory contains image files that can be used to create media capable of starting the CentOS installation process. The boot.iso file is an ISO 9660 image of a bootable CD-ROM. It is useful in cases where the CD-ROM installation method is not desired, but the CD-ROM's boot speed would be an advantage. To use this image file, burn the file onto CD-R (or CD-RW) media as you normally would. The diskboot.img file is a VFAT filesystem image that can be written to a USB pendrive or other bootable media larger than a floppy. Note that booting via USB is dependent on your BIOS supporting this. It should be written to the device using dd. But if you can boot from USB you are all set. If you can only boot from floppy, you would need to use a bootable floppy linux that supports your network card to copy some stuff to the system and get it to boot the pxe images by whatever you can use like grub, or syslinux. Or you can remove the hard drive and copy files to it from another system or install from that system. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Yum
On Wed, August 6, 2008 13:40, Lanny Marcus wrote: > Hosts normally advertise a VPS as being almost like a Dedicated > Server. Lots of resources and lots of options. In this case, > without being able to use yum, it starts as a Security problem, > because he cannot update the packages that are > installed. His second problem is that he cannot install new software > with yum, which eliminates a lot of options. Unlike Shared Hosting, > which is Managed, someone with a VPS must Manage their VPS, as if it > was a Dedicated Server, or, pay someone to do that. But, how > would they manage it, without yum? It's much more difficult, without > yum. IMHO, he should look for a VPS with another provider, that allows > him to use yum, etc. FTP? Rpm? Ftp up a suitable yum rpm and install it. (Maybe it's really part of an active attempt to keep people from installing software, but on a virtual private server that'd be amazingly stupid; so I'm guessing, from a great distance and very little information, that it's something simpler like just not having installed yum.) -- David Dyer-Bennet, [EMAIL PROTECTED]; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
On Wed, August 6, 2008 13:33, Akemi Yagi wrote: > On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei <[EMAIL PROTECTED]> > wrote: >> Why did they do that? > > Well, this is just my guess -- enterprise class Linux is (used to be) > primarily for servers and therefore there is not much demand for > things like firewire and wireless and... Firewire is a sensible interface for external backup devices in some configurations. Then again, is it hard to add back in? -- David Dyer-Bennet, [EMAIL PROTECTED]; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] rsyslog and imuxsocks
Hi folks, I have installed rsyslog and rsyslog-mysql from the base repository, but the loadable module "imuxsocks" seems not to be part of these packages. Does this have a certain reason? And is there any other way to get this module besides compiling rsyslog on my own? Any hint or help is appreciated. Dirk ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of David Dyer-Bennet > Sent: Wednesday, August 06, 2008 3:36 PM > To: CentOS mailing list > Subject: Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 > - Suggestions? > > > On Wed, August 6, 2008 13:33, Akemi Yagi wrote: > > On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei > > <[EMAIL PROTECTED]> > > wrote: > > >> Why did they do that? > > > > Well, this is just my guess -- enterprise class Linux is > (used to be) > > primarily for servers and therefore there is not much demand for > > things like firewire and wireless and... > > Firewire is a sensible interface for external backup devices > in some configurations. Then again, is it hard to add back in? I was under the impression that firewire hard drives worked it was the libraw firewire stuff that was yanked. I could have sworn that I have used a centos cd to do a hd clone using firewire on my laptop. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100- - +1 (443) 269-1555 x333Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
On Thu, Aug 7, 2008 at 1:54 AM, Sorin Srbu <[EMAIL PROTECTED]> wrote: > Seen this? > > > http://www.askbjoernhansen.com/2007/09/18/safely_change_firewall_rules_remotely.html > Unfortunately, only after you pointed it out :( But thankfully whoever wrote APF apparently knows this, hence it does insert an automatic reset of the firewall after 5 minutes. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Re: I'm Stuck
Dear List, Many thanks for all the suggestions! I will see if the Vaio can boot from a pen drive. Being several years old, I'm not sure. If not, the suggestion to put the drive in another computer is intriguing. Best regards, -- Bob Smither <[EMAIL PROTECTED]> ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help: Server security compromised?
> About the two SSH terminal, if I activate a wrong firewall change that > blocks the SSH port, would it not also terminate the existing > terminals since new packets going in would be rejected, or does it not > affect already established TCP connections? It depends upon what you are doing and in which order you do it. Unfortunately, I'm not an expert in iptables - I refuse to spend time learning more than the basics on it, since I don't like it. IMO the structure and rules are byzantine and unnecessarily flexible/complex, so when fiddling about with the firewall, usually its just simple commands to open/close ports or do connection limiting/throttling, and I don't ever touch port 22. FWIW, when doing a complex task, instead of typing in commands in a terminal, I begin writing a script to do those commands. At the very same time I develop a 'rollback' script to undo those commands in case of error. Experimenting on a Centos 5.2 server which I have console access. Upon an error condition, I then modify the script, play the 'rollback' script, and reissue the script. So gradually the script and its 'antidote' are built to where I'm satisfied they work. Then and only then, do I use that script on production and remote servers which are also running CentOS 5.2 The only problem which my method is that getting these scripts to be 100% correct even in the face of malevolent conditions such as DNS timeouts and hardware errors makes them 2-3 times as long and yukky and hard to read. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] TSPC RPM for CentOS 5
Hi All, Before I go about building an RPM for TSPC (the IPv6 tunnel setup protocol client), I'm just wondering if someone has already done it? My Googling hasn't turned up anything, and I can't see any packages in the Dag, RpmForge, etc repositories. Regards Darryl ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Kernel 92.1.10 build issue
I pulled down the 2.6.18-92.1.10 source, installed it, built the package, copied the straight x86_64 config file from SOURCES into the build directory, redid make menuconfig to enable NTFS support, added the # x86_64 back into the .config file, copied .config back to the SOURCES directory and ran rpmbuild -ba --target=x86_64 (same as I always do with new kernels), but this time I'm getting this error in the build: Patch #0 (linux-2.6-rhel-version-h.patch): + patch -p1 -s + perl -p -i -e 's/^SUBLEVEL.*/SUBLEVEL = 18/' Makefile + perl -p -i -e 's/^EXTRAVERSION.*/EXTRAVERSION = -prep/' Makefile + perl -p -i -e 's/^RHEL_MAJOR.*/RHEL_MAJOR = 5/' Makefile + perl -p -i -e 's/^RHEL_MINOR.*/RHEL_MINOR = 2/' Makefile + cp /home/rpmbuild/SOURCES/COPYING.modules Documentation/ + mkdir configs + for cfg in 'kernel-2.6.18-x86_64*.config' + cp -f /home/rpmbuild/SOURCES/kernel-2.6.18-x86_64-debug.config /home/rpmbuild/SOURCES/kernel-2.6.18-x86_64-xen.config /home/rpmbuild/SOURCES/kernel-2.6.18-x86_64.config . + for i in 'kernel-2.6.18-x86_64*.config' + mv kernel-2.6.18-x86_64-debug.config kernel-2.6.18-x86_64-debug.config.tmp + /home/rpmbuild/SOURCES/merge.pl /home/rpmbuild/SOURCES/config-rhel-generic kernel-2.6.18-x86_64-debug.config.tmp + rm kernel-2.6.18-x86_64-debug.config.tmp + for i in 'kernel-2.6.18-x86_64*.config' + mv kernel-2.6.18-x86_64-xen.config kernel-2.6.18-x86_64-xen.config.tmp + /home/rpmbuild/SOURCES/merge.pl /home/rpmbuild/SOURCES/config-rhel-generic kernel-2.6.18-x86_64-xen.config.tmp + rm kernel-2.6.18-x86_64-xen.config.tmp + for i in 'kernel-2.6.18-x86_64*.config' + mv kernel-2.6.18-x86_64.config kernel-2.6.18-x86_64.config.tmp + /home/rpmbuild/SOURCES/merge.pl /home/rpmbuild/SOURCES/config-rhel-generic kernel-2.6.18-x86_64.config.tmp + rm kernel-2.6.18-x86_64.config.tmp + rm -f kernel-2.6.18-i686-kdump.config kernel-2.6.18-x86_64-kdump.config + rm -f kernel-2.6.18-i586.config + rm -f kernel-2.6.18-x86_64-debug.config + for i in '*.config' + mv kernel-2.6.18-x86_64-xen.config .config ++ head -1 .config ++ cut -b 3- + Arch=x86_64 + make ARCH=x86_64 nonint_oldconfig + echo '# x86_64' + cat .config + for i in '*.config' + mv kernel-2.6.18-x86_64.config .config ++ head -1 .config ++ cut -b 3- + Arch=x86_64 + make ARCH=x86_64 nonint_oldconfig CONFIG_MAX_RAW_DEVS make[1]: *** [nonint_oldconfig] Error 1 make: *** [nonint_oldconfig] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.53835 (%prep) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.53835 (%prep) Was there something I needed to tweak in the spec file, other than the build id and a few of the build switches I usually turn off (xen, debug, kdump)? Thanks. mhr ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos