Re: [CentOS] [CentOS-devel] [OT, partly]epel question (Mate problem)
On Sun, Jun 29, 2014 at 10:55:10AM +0100, Nux! wrote: > Hi, > > I don't think that is a problem related to systemd, its mate-session job to > start the necessary stuff. > I worked around this by adding caja to the Startup Applications. I imagine it > could be done relatively easy to add a script or something to enable that > globally. yes, that works. thanks for the hint. I had actually had fleeting thoughts in that neighborhood, but didn't actually try it becauase I was more interested in finding someone to whom to report it who was in a position to find and correct the problem. The reason I'm messing with C7 at all is to see if I can find reportable problems. thanks, again, for the hint! -- --- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 - The Boulder Pledge - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SELinux context for web application directories
On 06/27/2014 11:47 AM, James B. Byrne wrote: > CentOS-6.5 > > We deploy web applications written with the Ruby on Rails framework using > Capistrano (2.x). Each 'family' of web applications are 'owned' by a > dedicated user id. The present httpd service is Apache 2.2.15 and we use > Passenger 3.0.11. We are moving shortly to a new deployment host and at that > time we will be updating to Apache 2.4.9 and Passenger 4..0.25. > > Our deployment practice is to place the 'family' directory under /var/data/. > This is the home directory of the application user id. We place each > individual web application or component into its own directory underneath the > family root. So that things look like this: > > /var/data/hll_th > ├── backups > │ └── pgsql > ├── etc > │ └── database.yml > ├── hll_th_cc_edi_get > │ ├── current -> > /var/data/hll_th/hll_th_forex_rss/releases/20140519201615 > │ ├── releases > │ └── shared > ├── hll_th_forex_rss > │ ├── current -> > /var/data/hll_th/hll_th_forex_rss/releases/20131204193652 > │ ├── releases > │ └── shared > ├── hll_th_hp3000_billing > │ ├── current -> > /var/data/hll_th/hll_th_forex_rss/releases/20140214211431 > │ ├── releases > │ └── shared > ├── log > ├── lost+found > └── pgpass -> .pgpass > > The questions I have are: What is an appropriate SELinux context for such a > directory structure given it is used by a httpd service? Is the default user > home setting of system_u:object_r:home_root_t acceptable? Is > system_u:object_r:httpd_sys_content_t preferable instead? is some other > SELinux context preferred for RoR web applications using Apache with > mod-passenger? > > I would think that httpd_sys_content_t and httpd_sys_rw_content_t would be appropriate. These are not real user accounts, meaning normal users do not login to these systems. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [CentOS-devel] [OT, partly]epel question (Mate problem)
Hi, I don't think that is a problem related to systemd, its mate-session job to start the necessary stuff. I worked around this by adding caja to the Startup Applications. I imagine it could be done relatively easy to add a script or something to enable that globally. HTH Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro > So, I opened a terminal and started caja. Voila! not only did a caja > window open, but the desktop icons appeared, and the right-click menu. > however when I closed the terminal it all went away. :( > > so I did ALT-F2 and typed in "caja", hit enter, and there's the full > desktop again. and this time it stayed. > > from these symptoms I don't think I can tell if it's a caja problem, or an > issue with whoever starts up caja after login (something in systemd ???) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Admin business
On 06/27/2014 08:06 PM, m.r...@5-cent.us wrote: >You've never responded to my question about whitelisting. That asinine > nixspam did it to me again, and this time... seriously, I urge you, > personally, to go there and try to remove a site. They've "enhanced > their security", that is, mangling the capchas, to the point that it > took me about five minutes or more, and about a dozen or 15 challenges, > before I got one that I could read well enough to copy into the "I'm > human" field. This is *really* impossible now. I think we might need a bit more context here, the only conversation we had was about your email service provider having issues. You might want to consider using something like gmane.org for the lists if that is still the case. -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
