[CentOS-announce] CESA-2014:1293 Critical CentOS 5 bash Security Update
CentOS Errata and Security Advisory 2014:1293 Critical
Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1293.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
39f53e854969bb0bcbb280bf6581ec5857c086cdd727adc5eec9b7a9b7dcd0a6
bash-3.2-33.el5.1.i386.rpm
x86_64:
336202c14095622471275b4c4d55d49f16ee065d4f77dcef4ae5479cc67e11ad
bash-3.2-33.el5.1.x86_64.rpm
Source:
c8ccac8652d7b44531ab0a76c6eb9b0209dcd1dddf149fb182d0471206704217
bash-3.2-33.el5.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CESA-2014:1293 Critical CentOS 7 bash Security Update
CentOS Errata and Security Advisory 2014:1293 Critical
Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1293.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
4274e74893b2e3f31704befbd4c0968c68f153bfcd869c286d6df0a269280e87
bash-4.2.45-5.el7_0.2.x86_64.rpm
e1bddc9814dd79c97b6c7f04a94178cfae8fb4ece1fbdab8e36172db16e527b9
bash-doc-4.2.45-5.el7_0.2.x86_64.rpm
Source:
06e77611ff4bb3014a34300277d94f43ad2f281e42eb86ee609a71d4e2c06174
bash-4.2.45-5.el7_0.2.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CESA-2014:1292 Moderate CentOS 7 haproxy Security Update
CentOS Errata and Security Advisory 2014:1292 Moderate
Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1292.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
b5a830332d0a677758c3c1e8fef496c3aa9383dbe01ac9674ea58b0499fd3035
haproxy-1.5.2-3.el7_0.x86_64.rpm
Source:
9dfeabe07b065faf98255272c072d884bffcf27a59732c78314e9f73339287d7
haproxy-1.5.2-3.el7_0.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
Re: [CentOS-virt] vTPM manager for Xen
Those 2 other files give some other perspective of the things. Thanks. What I cannot find is the following: Compiling the Xen tree: --- Compile and install the Xen tree as usual; be sure that the vTPM domains are enabled when you run configure. I use the Citrix XEN 6.2 + measurement boot addon and I don't have the vtpm manager installed on it. I don't know how do I enable vTPM domains at this point. I am not sure where to look for the mini os for xen , I found this https://github.com/mirage/xen/blob/master/stubdom/vtpm/ which I think is the correct mini os + vtpm stubdomain. So what I don't understand is how to install/enable vtpm manager on the citrix xen dom0? Best regards, Jordan -Original Message- From: centos-virt-boun...@centos.org [mailto:centos-virt-boun...@centos.org] On Behalf Of R P Herrold Sent: Tuesday, September 23, 2014 4:37 PM To: Discussion about the virtualization on CentOS Subject: [CentOS-virt] vTPM manager for Xen On Tue, 23 Sep 2014, Jordan wrote: http://xenbits.xen.org/docs/unstable/misc/vtpm.txt http://xenbits.xen.org/docs/unstable/misc/vtpm.txt What I cannot find is the vTPM manager that distributes vTpms to domains. The other places to read are: 1. the primary site at Berlios (this has of course gone dark) http://tpm-emulator.berlios.de/ http://tpm-emulator.berlios.de/ I am not immediately sure where an external replacement now has moved to, but I have a mirror of that code about 2. the other two pieces of doco at the Xen site: http://xenbits.xen.org/docs/unstable/misc/vtpmmgr.txt http://xenbits.xen.org/docs/unstable/misc/vtpmmgr.txt http://xenbits.xen.org/docs/unstable/misc/vtpm-platforms.txt http://xenbits.xen.org/docs/unstable/misc/vtpm-platforms.txt The flow of data is well described. What question is not clear from those diagrams The final v 2 spec for tpm has recently been released, although 1.2 is still in deployment. see the TPM site http://www.trustedcomputinggroup.org/ http://www.trustedcomputinggroup.org/ -- Russ herrold ___ CentOS-virt mailing list mailto:CentOS-virt@centos.org CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt http://lists.centos.org/mailman/listinfo/centos-virt ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
[CentOS-virt] updating for XSA-108 -
So... it is theorized that XSA-108 is why amazon is rebooting. Is there any way for me to know when this update hits CentOS5 or xen4centos6?Do we know that it is *not* included in one of the centos patches? ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS-es] Sobre programacion del cron
*:: Muchisimas gracias, esto es mas de lo que esperaba. Guardare esa direccion como oro en paño. * *** Fin del mensaje *** Saludos Salvador Guzman Salman PSL Vigo, Galicia, España +34 986.21.30.27 +34 679-725-626 Salman.EU http://salman.es/ El 24/09/2014 3:37, Roger Pena Escobio escribió: Huh, este no es el ultimo email sobre el tema pero es que me queda en el inbox Una busqueda rapida en google por sunset sunrise time application , me dio varias paginas, una de ellas me llevo a: http://aa.usno.navy.mil/data/docs/RS_OneYear.php ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Sobre programacion del cron
Esa pagina no es la unica, la puse como ejemplo. Tambien hay algunas con calculadoras de la hora, por alli búscale. -Mensaje original- De: centos-es-boun...@centos.org [mailto:centos-es-boun...@centos.org] En nombre de Salvador - Salman PSL Enviado el: Martes, 23 de Septiembre de 2014 11:58 a.m. Para: centos-es@centos.org Asunto: Re: [CentOS-es] Sobre programacion del cron *:: Ok Rene, esa direccion que me das tendre que investigarla con calma, en una primera prueba, veo que genera una tabla en pantalla, que no se si me servira para crearme un fichero con los horarios, pero ya es un punto de partida, gracias. Para los de teclado rapido :D, se manejar el cron perfectamente :D Pero tambien gracias. Y si quereis ver las puestas de Sol sobre las Islas Cies en Galicia, ya sabeis donde lo podeis ver. Si, esas islas que segun una revista de no se de donde, que dicen que tienen la playa mas bonita del mundo ;) * *** Fin del mensaje *** -- -- Saludos Salvador Guzman Salman PSL Vigo, Galicia, España +34 986.21.30.27 +34 679-725-626 Salman.EU http://salman.es/ Mas que del cron creo que es cuestion de un sensor. A lo mejor hasta con una fotocelda lo pudes hacer, algo montado en un tubo delgado y con el largo suficiente. Lo fijas apuntas apuntado sobre la trayectoria del sol y con la elevacion adecuada para 10 min antes Claro requerirá ajustes de vez en cuando por la inclinacion del eje de la tierra, pero bueno, si buscabas diversion, ahí tienes un buen entrenenimeinto. :-) La otra es buscar esas estimaciones de puesta del sol http://www.sunrisesunset.com/ -Mensaje original- De: centos-es-boun...@centos.org [mailto:centos-es-boun...@centos.org] En nombre de Salvador - Salman PSL Enviado el: Martes, 23 de Septiembre de 2014 10:45 a.m. Para: centos-es@centos.org Asunto: [CentOS-es] Sobre programacion del cron *::Buenas tardes a tod@s. Tengo un problemilla y todavia no se me ha encendido la lucecita. Tengo que correr una tarea en cron todos los dias en un determinado espacio de tiempo. Ese espacio es de 10 minutos antes y 10 minutos despues de la puesta de sol en mi localizacion. ¿ Os preguntareis para que ? :D Pues para ajustar esto: http://salvador.guzman.es/PuestaSol/ ¿ Alguna sugerencia ? * *** Fin del mensaje *** -- -- Saludos Salvador Guzman Salman PSL Vigo, Galicia, España +34 986.21.30.27 +34 679-725-626 Salman.EU http://salman.es/ ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Sobre programacion del cron
No pude evitar compartir un recuerdo: Cuando niño, mis abuelos viviían en lugares bastante inaccesible, entre cerros y sin caminos para autos. Me parecía el fin del mundo, que no había nada mas allá. La hora la obtenían del radio (quien tenía) y si no, ajustaban su reloj consultando un librito (que todavía se edita!) http://www.calendariodelmasantiguogalvan.com.mx/ Alli venía el santoral, la salida y puesta del sol, las fases de la luna, etc Esto es México Allá debe haber otro librito equivalente! PD. Aunque la hora que se publicaba eraa para el horizonte plano, ellos tenian la experiencia de cuando debian ajustar por efecto de sus cerros cercanos! :-) ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Sobre programacion del cron
Que tal si haces tus propios calculos? http://en.wikipedia.org/wiki/Sunrise_equation ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Sobre programacion del cron
Tengo un problemilla y todavia no se me ha encendido la lucecita. Tengo que correr una tarea en cron todos los dias en un determinado espacio de tiempo. Ese espacio es de 10 minutos antes y 10 minutos despues de la puesta de sol en mi localizacion. ¿ Os preguntareis para que ? :D Pues para ajustar esto: http://salvador.guzman.es/PuestaSol/ ¿ Alguna sugerencia ? Debe haber un sitio para tu zona, que tenga los datos de la salida y puesta. Algo como esto: http://espanol.weather.com/climate/sunRiseSunSet/Mexico+City+DF+Mexico +MXDF0132:1:MX * *** Fin del mensaje *** Aqui una calculadora Computing Sunrise and Sunset in One Step http://www.esrl.noaa.gov/gmd/grad/solcalc/ Con ellas puedes comprobar tus calculos. Hay muchas paginas que lo ilustran: http://williams.best.vwh.net/sunrise_sunset_algorithm.htm http://users.electromagnetic.net/bu/astro/sunrise-set.php http://www.micromegacorp.com/downloads/documentation/AN038-Sunrise%20S unset.pdf ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS-es] Centos 7 squirrelmail...
con respecto a Squirrelmail, hacia rato que no tenia que buscar e instalar esto pero ahora no encuentro el paquete en los repositories, veo que la ultima version salio en el 2013 y hay fixes en el 2014 o sea que no es un proyecto abandonado. alguien de la lista que lo haya instalado y quiera hacer alguna avdertencia/sugerencia seria bienvenido. Sent from Windows Mail ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] CentOS 7 Clamav Clamd y SELinux
Por cierto las dificultades no terminan aqui. SELinux tampoco permite que exim
escriba sobre el socket de clamd.
Esta regla me resuelve el problema
module exim_clamav 1.0;
require {
type var_run_t;
type exim_t;
class sock_file { read write };
}
#= exim_t ==
allow exim_t var_run_t:sock_file { read write };
Sent from Windows Mail
From: William Alexander Brito Vinas
Sent: Tuesday, September 23, 2014 5:26 PM
To: centos-es@centos.org
El 23/09/14 19:20, William Alexander Brito Vinas escribió:
He instalado clamav y clamd en un host corriendo bajo centos 7 y por lo que
veo clamd no puede fucionar porque no puede crear los archivos en
/var/run/{clamd.pid,clamd.sock}… o sea una cuestion de permisos.
Los permisos para el usuario clamav le permiten escribir en /var/run y eso
resuelve creo la situacion de la creacion del pid file pero SELinux no le
permite crear el socket.
Como no puedo arrancar clamav no puedo ver en que contexto de seguridad esta
corriendo asi y por lo tanto no puedo modificar SELinux para pque le permita
crear sock_file…
Existe alguna informacion que me puedan brindar antes de pasar a modo
permisivo temporalmente?
Gracias
que paquetes has sinstalado y como inicializas el clamav en CentOS 7??
_
yum install clamd clamav
** por supuesto con todas las dependencias….
chkconfig clamd on
service clamd start
freshclam -v
Ahora despues de haber perdido tiempo revisando audit.log, creando un modulo de
politicas mas relajadas para el context antivirus_t y demas termine por poner
seLinux en modo permisivo y el problema persistia. Sencillamente clamd corre
con los privilegios del usuario clamav y este no tiene permiso de escritura
sobre /var/run y no lo hace aunque le diga a selinux que antivirus_t puede casi
que hacer lo que le de la gana con var_run_t.
Regrese selinux a su modo enforced y a continuacion hice la siguiente
chapuceria:
modifique el archive /etc/init.d/clamd y ahi vi que al detener el demonio el
script asumia que el archive con el PID y el socket estaban en el directorio
principal de clamav (/var/clamav).
Modifique la configuracion en /etc/clamd.conf para que los archivos apuntaran
hacia /var/clamd y fuciono sin problemas.
Despues regrese este cambio hacia atras, arregle las entradas en
/etc/init.d/clamd para que apuntaran nuevamente a /var/run/{clam.pid,
clamd.sock} y le meti la siguiente linea al comienzo del script
mkdir /var/run/clamav chown clamav:clamav /var/run/clamav
Hasta aqui todo funciona bien entre reinicios del sistema pero parece un poco
mediocre…y es que las ideas se me acabaron….
Espero una propuesta mas limpia
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es
[CentOS-es] Script reinicio tarjetas
Saludos @migos listeros, tengo un servidor centos 6.5 el cuál al parecer tiene mucha carga en la tarjeta de red eth1 y de repente se va la interfaz eth1, para que vuelva a funcionar debo reiniciar las interfaces y vuelve a funcionar, he cambiado de tarjeta pensando que era el problema pero continua el problema y no logro determinar el porque se cae, he estado monitoreando con iptraf haber si encuentro algo pero nada aún, entonces mientras encuentro donde esta el problema se me ocurrió ver si creo un script automático que permita hacer un service network restart de las tarjetas cuando pierda comunicación de ping, he googleado pero no logro encontrar una luz que me permita iniciar con este script, de pronto alguien de la lista he realizado esto y me pueda guiar como podría hacerlo, he creado otros scripts para respaldos copias etc pero nunca uno de este tipo. Agradezco a todos quienes puedan guiarme en este tema. -- Saludos Cordiales |César Martínez | Ingeniero de Sistemas | SERVICOM |Tel: (593-2)554-271 2221-386 | Ext 4501 |Celular: 0999374317 |Skype servicomecuador |Web www.servicomecuador.com Síguenos en: |Twitter: @servicomecuador |Facebook: servicomec |Zona Clientes: www.servicomecuador.com/billing |Blog: http://servicomecuador.com/blog |Dir. Av. 10 de Agosto N29-140 Entre |Acuña y Cuero y Caicedo |Quito - Ecuador - Sudamérica ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Script reinicio tarjetas
https://www.google.com.ar/search?q=restart+network+if+link+downoq=restart+network+if+link+downaqs=chrome..69i57.18816j0j7sourceid=chromees_sm=0ie=UTF-8 3er link: *Script to check connection (and restart network if down)* 2014-09-24 20:36 GMT-03:00 César Martinez cmarti...@servicomecuador.com: Saludos @migos listeros, tengo un servidor centos 6.5 el cuál al parecer tiene mucha carga en la tarjeta de red eth1 y de repente se va la interfaz eth1, para que vuelva a funcionar debo reiniciar las interfaces y vuelve a funcionar, he cambiado de tarjeta pensando que era el problema pero continua el problema y no logro determinar el porque se cae, he estado monitoreando con iptraf haber si encuentro algo pero nada aún, entonces mientras encuentro donde esta el problema se me ocurrió ver si creo un script automático que permita hacer un service network restart de las tarjetas cuando pierda comunicación de ping, he googleado pero no logro encontrar una luz que me permita iniciar con este script, de pronto alguien de la lista he realizado esto y me pueda guiar como podría hacerlo, he creado otros scripts para respaldos copias etc pero nunca uno de este tipo. Agradezco a todos quienes puedan guiarme en este tema. -- Saludos Cordiales |César Martínez | Ingeniero de Sistemas | SERVICOM |Tel: (593-2)554-271 2221-386 | Ext 4501 |Celular: 0999374317 |Skype servicomecuador |Web www.servicomecuador.com Síguenos en: |Twitter: @servicomecuador |Facebook: servicomec |Zona Clientes: www.servicomecuador.com/billing |Blog: http://servicomecuador.com/blog |Dir. Av. 10 de Agosto N29-140 Entre |Acuña y Cuero y Caicedo |Quito - Ecuador - Sudamérica ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- Diego - Yo no soy paranoico! (pero que me siguen, me siguen) ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Script reinicio tarjetas
Te agradezco Diego la verdad se me paso por alto buscar en inglés, cuando en inglés son los mejores resultados, gracias nuevamente -- Saludos Cordiales |César Martínez | Ingeniero de Sistemas | SERVICOM |Tel: (593-2)554-271 2221-386 | Ext 4501 |Celular: 0999374317 |Skype servicomecuador |Web www.servicomecuador.com Síguenos en: |Twitter: @servicomecuador |Facebook: servicomec |Zona Clientes: www.servicomecuador.com/billing |Blog: http://servicomecuador.com/blog |Dir. Av. 10 de Agosto N29-140 Entre |Acuña y Cuero y Caicedo |Quito - Ecuador - Sudamérica On 24/09/14 18:39, Diego Sanchez wrote: https://www.google.com.ar/search?q=restart+network+if+link+downoq=restart+network+if+link+downaqs=chrome..69i57.18816j0j7sourceid=chromees_sm=0ie=UTF-8 3er link: *Script to check connection (and restart network if down)* 2014-09-24 20:36 GMT-03:00 César Martinez cmarti...@servicomecuador.com: Saludos @migos listeros, tengo un servidor centos 6.5 el cuál al parecer tiene mucha carga en la tarjeta de red eth1 y de repente se va la interfaz eth1, para que vuelva a funcionar debo reiniciar las interfaces y vuelve a funcionar, he cambiado de tarjeta pensando que era el problema pero continua el problema y no logro determinar el porque se cae, he estado monitoreando con iptraf haber si encuentro algo pero nada aún, entonces mientras encuentro donde esta el problema se me ocurrió ver si creo un script automático que permita hacer un service network restart de las tarjetas cuando pierda comunicación de ping, he googleado pero no logro encontrar una luz que me permita iniciar con este script, de pronto alguien de la lista he realizado esto y me pueda guiar como podría hacerlo, he creado otros scripts para respaldos copias etc pero nunca uno de este tipo. Agradezco a todos quienes puedan guiarme en este tema. -- Saludos Cordiales |César Martínez | Ingeniero de Sistemas | SERVICOM |Tel: (593-2)554-271 2221-386 | Ext 4501 |Celular: 0999374317 |Skype servicomecuador |Web www.servicomecuador.com Síguenos en: |Twitter: @servicomecuador |Facebook: servicomec |Zona Clientes: www.servicomecuador.com/billing |Blog: http://servicomecuador.com/blog |Dir. Av. 10 de Agosto N29-140 Entre |Acuña y Cuero y Caicedo |Quito - Ecuador - Sudamérica ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS-es] Inyección de código a través de bash
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
hola
El día de hoy fue hecho público un anuncio de que el popular shell
bash contiene una falla de seguridad que permite a atacantes remotos
ejecutar código arbitrario en un sistema.
bash no solamente se utiliza de forma local, sino por poner dos
ejemplos: a través de ssh y para ejecutar aplicaciones web a través de
cgi.
Se puede verificar si su paquete bash presenta esta vulnerabilidad con
la ejecución de la siguiente prueba:
env x='() { :;}; echo vulnerable' bash -c echo this is a test
si al ejecutar el anterior código se imprimen las líneas
vulnerable
this is a test
El sistema es vulnerable y debe ser actualizado.
Si se imprime un mensaje de error parecido a este:
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
El sistema NO debe ser vulnerable.
Es imperioso se actualicen todos los sistemas operativos Linux y Mac
que son los que más uso hacen de bash.
al momento ubuntu, debian, RHEL y CentOS han publicado actualizaciones
de sus paquetes de bash. En el caso de CentOS o RHEL debe ejecutarse:
yum update bash (o podría usarse yum update para actualizar todos los
paquetes que requieran ser actualizados).
En el caso de ubuntu y debian podría utilizarse:
apt-get update; apt-get upgrade
Más información en
https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/
saludos
Ernesto Pérez
CSIRT-CEDIA
-BEGIN PGP SIGNATURE-
Version: GnuPG v1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=0kuj
-END PGP SIGNATURE-
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS] X, why did it have to be X
On 09/23/14 19:21, Jake Shipton wrote: On 22/09/14 22:37, m.r...@5-cent.us wrote: m.r...@5-cent.us wrote: I have one user. We've pretty much all got two monitors, but he insists on rotating both of them vertically - that is, they're taller than they are wide, and he's got a Radeon card. I always have X grief on his system when I update it I just did a full update. X comes up in both screens... but the left one is *not* rotated, while the right one is. And they're mirrored. I've logged in as root, looked at all the configuration snip Is this C6 or C7? If it's C7 I had the same issue with ignoring nvidia configuration, turns out it wasn't Xorg at all. It was GDM resetting everything when it loaded, switched to LightDM problem solved as it was using Xorg configuration again! Worth a shot if it's C7 :-). C6, and yep, that's probably what's happening anyway. I went to apologize yesterday morning for having left it that way, and he was fine: *after* he logged in, everything was the correct direction. I need to lok at the damn GDM (another reason to dislike gnome). mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Apache Atacks HELP ...
Hi Guys .. Had some attempted attacks on my Apache server has been blocked in firewall. But I'm still getting the messages below in /var/log/messages. httpd[2620] general protection ip:3bf3e06bdb sp:7f0b93ffd5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[15000] general protection ip:3bf3e06bdb sp:7f0b921fa5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[5082] general protection ip:3bf3e06bdb sp:7f0b93ffd5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[51964] general protection ip:3bf3e06bdb sp:7f0b92bfb5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[22943] general protection ip:7f0b9d5b8698 sp:7f0b6f1c3e78 error:0 in libapr- 1.so.0.5.0[7f0b9d591000+31000] httpd[32595] general protection ip:3bf3e06bdb sp:7f0b93ffd5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[64221] general protection ip:3bf3e06bdb sp:7f0b9abea5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[29063] trap stack segment ip:7f0b9d5a95fc sp:7f0b9bfed640 error:0 httpd[15530] general protection ip:3bf3e06bdb sp:7f0b921fa5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[44466] general protection ip:3bf3e06bdb sp:7f0b997e85c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[23080] general protection ip:3bf3e06bdb sp:7f0b98de75c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[42886] general protection ip:3bf3e06bdb sp:7f0b9b5eb5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[27568] general protection ip:3bf3e06bdb sp:7f0b917f95c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[7030] general protection ip:3bf3e06bdb sp:7f0b921fa5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[60528] general protection ip:3bf3e06bdb sp:7f0b997e85c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[41597] general protection ip:3bf3e06bdb sp:7f0b921fa5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[19705] general protection ip:3bf3e06bdb sp:7f0b93ffd5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[44412] general protection ip:3bf3e06bdb sp:7f0b9b5eb5c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] httpd[39649] general protection ip:3bf3e06bdb sp:7f0b9a1e95c0 error:0 in libpthread- 2.12.so[3bf3e0+17000] TCP: Peer 186.218.135.23:39270/80 unexpectedly shrunk window 3452381837:3452385970 (repaired) TCP: Peer 189.102.77.211:49948/80 unexpectedly shrunk window 3478909007:3478933827 (repaired) TCP: Peer 189.102.77.211:49948/80 unexpectedly shrunk window 3478909007:3478933827 (repaired) Can anyone tell me what does this mean? Researched but I not found. Thank you ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos 7 + SystemD + Predictable Network Interface Names
Hi list, I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] X, why did it have to be X
On 24/09/14 13:02, mark wrote: On 09/23/14 19:21, Jake Shipton wrote: On 22/09/14 22:37, m.r...@5-cent.us wrote: m.r...@5-cent.us wrote: I have one user. We've pretty much all got two monitors, but he insists on rotating both of them vertically - that is, they're taller than they are wide, and he's got a Radeon card. I always have X grief on his system when I update it I just did a full update. X comes up in both screens... but the left one is *not* rotated, while the right one is. And they're mirrored. I've logged in as root, looked at all the configuration snip Is this C6 or C7? If it's C7 I had the same issue with ignoring nvidia configuration, turns out it wasn't Xorg at all. It was GDM resetting everything when it loaded, switched to LightDM problem solved as it was using Xorg configuration again! Worth a shot if it's C7 :-). C6, and yep, that's probably what's happening anyway. I went to apologize yesterday morning for having left it that way, and he was fine: *after* he logged in, everything was the correct direction. I need to lok at the damn GDM (another reason to dislike gnome). mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Yeah.. I'm not a fan of gnome either. I had XFCE during the lifetime of my C6 Install, and now have XFCE on my C7 install. I know XFCE isn't exactly very modern or hip cool etc. But it does the job, and works for me :). I like it. I had issues getting the sort order of my 3 monitors correct, the third monitor would overlap onto the second monitor and the first monitor was detected to be in position 2, so the mouse had to go the other way to reach it. (Basically, all wrong) I resolved all display issues using the following method on C6: 1) Install LightDM 2) Set LightDM as default display manager 3) Remove any display configuration set by Gnome/XFCE.. in case of XFCE remove ~/.config/xfce4/xfconf/xfce-perchannel-xml/display.xml I'm sure gnome has a similar file around somewhere. 4) Reboot 5) Done, you should now be using xorg.conf only. Hope this helps :-). Kind Regards, Jake Shipton (JakeMS) GPG Key: 0xE3C31D8F GPG Fingerprint: 7515 CC63 19BD 06F9 400A DE8A 1D0B A5CF E3C3 1D8F ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
On 09/24/2014 09:44 AM, Alessandro Baggi wrote: On 09/24/2014 10:20 AM, Reindl Harald wrote: Am 24.09.2014 um 16:04 schrieb Alessandro Baggi: I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? nothing, hence net.ifnames=0 biosdevname=0 as kernel params and use eth0, eth1 as all the decades before From your answer seems to be better avoid this. It's entirely personal opinion. Some avoid it, others use it with no problems. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
On 09/24/2014 10:20 AM, Reindl Harald wrote: Am 24.09.2014 um 16:04 schrieb Alessandro Baggi: I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? nothing, hence net.ifnames=0 biosdevname=0 as kernel params and use eth0, eth1 as all the decades before From your answer seems to be better avoid this. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
On Wed, Sep 24, 2014 at 10:04:39AM -0400, Alessandro Baggi wrote: Hi list, I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? For what its worth, there was a change in device naming in CentOS 6 (going from eth0 - em1, for example) which affected a subset of hardware out there (We saw it on Dell hardware, mostly). We had already managed to deal with the fact tha 'eth0' is no longer guarenteed (in scripts, usually by looking in /sys/class/net/), so dealing with non-eth0-naming wasn't a huge surprise, however, the way devices are named changed. For what it's worth, I am not thrilled with the incredibly complex names but I understand their utility. There are a couple of ways to disable it listed here: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ -- Jonathan Billings billi...@negate.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
On Wed, Sep 24, 2014 at 9:04 AM, Alessandro Baggi alessandro.ba...@gmail.com wrote: Hi list, I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? No experience yet, but it will be very valuable to us if, in fact, the names really are predictable in terms of matching up with the physical connections on similar hardware. Moving an installed disk to a different chassis or restoring a backup on a different box can be painful on systems with a large number of nics that are named in essentially random order like the older systems. So, I think it is a great idea and should have been done that way from the start, but I'm not convinced yet that it will really work on most hardware. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Critical update for bash released today.
You should 'yum update' as soon as possible to resolve this issue. Here's why you should care: https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Links to the centos updates: CentOS-5: http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html CentOS-6: http://lists.centos.org/pipermail/centos-announce/2014-September/020585.html CentOS-7: http://lists.centos.org/pipermail/centos-announce/2014-September/020583.html -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] chromium-33.0.1750.152-3.el6
Am 07.04.2014 um 15:04 schrieb Johnny Hughes joh...@centos.org: On 04/07/2014 06:37 AM, Phelps, Matt wrote: Is this legit? Anyone try this build? It is legit in that it seems possible to build via the DevTool Set 1.0 ... and also DevTool Sets 2.0/2.1.: http://people.centos.org/tru/devtools-2/ There are custom patches in the source code that I have not completely validated and I have also not looked at the flash handling completely in the sources. I do plan to look at this code a bit more and make it build in mock and not manually out of the chroot ... so I can not currently vouch for it 100%, but it does seem on first blush to be legit. I do plan on doing some work with this after I get back home from ApacheCon (Denver, Colorado - 7 to 11 April 2014) and Red Hat Summit (San Francisco, CA - 13 to 18 April 2014) ... so likely in 2 weeks. Of course, if I have some free time at those places then I might get it done sooner. If someone out there wants to validate the source code in the meantime, feel free to do so and post here. did you known about this http://install.linux.ncsu.edu/pub/yum/itecs/public/chromium/rhel6/ they use some sort of the SCL approach ... -- LF ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
On Wed, Sep 24, 2014 at 10:20 AM, Jonathan Billings billi...@negate.org wrote: I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? For what its worth, there was a change in device naming in CentOS 6 (going from eth0 - em1, for example) which affected a subset of hardware out there (We saw it on Dell hardware, mostly). We had already managed to deal with the fact tha 'eth0' is no longer guarenteed (in scripts, usually by looking in /sys/class/net/), so dealing with non-eth0-naming wasn't a huge surprise, however, the way devices are named changed. For what it's worth, I am not thrilled with the incredibly complex names but I understand their utility. eth0 was never guaranteed to be the 'right' interface - or even to exist in some circumstances with udev naming. If scripts using fixed names ever worked it was mostly a matter of luck. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Critical update for bash released today.
On 09/24/2014 10:26 AM, Jim Perrin wrote: You should 'yum update' as soon as possible to resolve this issue. Here's why you should care: https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Links to the centos updates: CentOS-5: http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html CentOS-6: http://lists.centos.org/pipermail/centos-announce/2014-September/020585.html CentOS-7: http://lists.centos.org/pipermail/centos-announce/2014-September/020583.html For informational purposes: https://access.redhat.com/articles/1200223 signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Critical update for bash released today.
On Wed, Sep 24, 2014 at 11:11 AM, Johnny Hughes joh...@centos.org wrote: On 09/24/2014 10:26 AM, Jim Perrin wrote: You should 'yum update' as soon as possible to resolve this issue. Here's why you should care: https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Links to the centos updates: CentOS-5: http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html CentOS-6: http://lists.centos.org/pipermail/centos-announce/2014-September/020585.html CentOS-7: http://lists.centos.org/pipermail/centos-announce/2014-September/020583.html Thanks for the heads up. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
Alessandro Baggi wrote: Hi list, I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? They're doing it as emx, where x=[1...], except where it wants old Sun-style pxdx... which I hate. I can live with emx, if I have to. People who can't count from 0 Folks here heard about the actual fork of systemd called uselessd? And they want it to do actual work, but not much of what systemd does...? mark saw it on slashdot ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
On Wed, Sep 24, 2014 at 1:06 PM, m.r...@5-cent.us wrote: I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? They're doing it as emx, where x=[1...], except where it wants old Sun-style pxdx... which I hate. I can live with emx, if I have to. What hardware is that on? The only multi-NIC box I've installed so far is an HP with eno1 through eno4 plus ens2f0, ens2f1, ens3f0, and ens3f1. A similar remote box has eno1-eno4 plus ensf0 and ensf1. I'm assuming the nics there are installed in a different slot -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] semi-OT: hardware RAID and xfs on CentOS 7
Hi, folks, I'm about to build a filesystem on a CentOS 7 box, on a JetStore RAID box through a QLogic ISP2532 card. Do I need to specifiy sw and su, or will xfs query the subsystem and get that itself? mark (assuming nixpam lets me through) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 + SystemD + Predictable Network Interface Names
Les Mikesell wrote: On Wed, Sep 24, 2014 at 1:06 PM, m.r...@5-cent.us wrote: I'm trying Centos7 and using systemD. I've noticed that interfaces name does not have anymore eth0,eth1, ethN but a different name. What do you think about predictable network if name assigned by systemd? They're doing it as emx, where x=[1...], except where it wants old Sun-style pxdx... which I hate. I can live with emx, if I have to. What hardware is that on? The only multi-NIC box I've installed so far is an HP with eno1 through eno4 plus ens2f0, ens2f1, ens3f0, and ens3f1. A similar remote box has eno1-eno4 plus ensf0 and ensf1. I'm assuming the nics there are installed in a different slot Dell PowerEdges, R-various (720, 420, etc), which have two or four on-board NICs. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] C7 - implementation guide URL?
I went to the RH site and used wget to download an offline copy for some work I'm doing. When I went back I had a gig of text and no end in sight. This was due to multiple (a lot) languages. I tried downloading the English version only but it seems there are links somehow that lead every time to other languages. Does anyone have a URL for a downloadable implementation guide for English only? TIA Dave ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] C7 - implementation guide URL?
On 09/24/2014 05:37 PM, Dave Stevens wrote: Does anyone have a URL for a downloadable implementation guide for English only? I don't see an implementation guide, but all of the docs at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/ seems to be available as a single HTML page, PDF, or EPUB simply by clicking on the little gear thing. Or am I missing something? -- Ian Pilcher arequip...@gmail.com I grew up before Mark Zuckerberg invented friendship ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] firefox: annoyance
I just updated firefox, here at home... and when I fired it back up, *all* of my tabs were gone. Every one (all couple dozen...) mark, CentOS 6.5 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] firefox: annoyance
On Wed, Sep 24, 2014 at 7:41 PM, mark m.r...@5-cent.us wrote: I just updated firefox, here at home... and when I fired it back up, *all* of my tabs were gone. Every one (all couple dozen...) mark, CentOS 6.5 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Me too and I had lots of tabs :( ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] launching samba and having logs
Hi all,
I try to setup a Samba/Openchange service.
In the Oopenchange documentation, they advise to launch samba in an
interactive mode and a verbose level: I like that.
http://www.openchange.org/cookbook/configuring.html
# samba -d3 -i -M single
The problem is I want to launch it via an init script (centos6)
#
SMBDOPTIONS= -d3 -M single
#
start() {
echo -n $Starting Samba services:
daemon samba $SMBDOPTIONS
RETVAL=$?
echo
[ $RETVAL -eq 0 ] touch /var/lock/subsys/$SAMBA_NAME || \
RETVAL=1
return $RETVAL
}
# ...
I dont get the same verbose output in any log file in /var/log/samba/
How to get the same verbosity in a log file when launching samba from an
init script?
BTW, I dont understand what is the difference between
/var/log/samba4/log.samba and /var/log/samba4/log.smbd
Thank you very much.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
