Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-17 Thread Christoph Maser
Am Mittwoch, den 16.09.2009, 20:45 +0200 schrieb Scott Robbins:
 On Wed, Sep 16, 2009 at 01:27:42PM -0400, Max Hetrick wrote:
  Christoph Maser wrote:
 
   Btw. i really consider the current nagios article on the wiki bad. Its
   totally outdated and covers way to much info how to configure nagios
   itself. In my opinion this should be simply replaced by links to the
   official documentation since it is out of place and incomplete.
  
 
  The point of the article was exactly that. I'll have to disagree here,
  since the point of the guide is how to install and configure Nagios for
  basic use. I personally don't care if you edit it to your likes, but
  many people find it useful as it is, because Nagios can be quite
  complicated to use.

 Just as an example, when we first decided to try to institute nagios, I
 was going through the docs for two days, trying to make sense of them.
 Then I found Max's article (actually his original, on his site).  If you
 *are* going to edit it, I truly hope you aren't going to make it more
 like the docs on the nagios site.



So we should make a proper nagios documentation on the centos-wiki
because the official nagios docs suck?



financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-17 Thread Christoph Maser
Am Mittwoch, den 16.09.2009, 20:36 +0200 schrieb Scott Robbins:
 On Wed, Sep 16, 2009 at 06:50:41PM +0200, Christoph Maser wrote:


   Done. I hope you incorporate The things Christoph Maser has mentioned
   and don't just add the one line from your first mail (which will
   break, when the box is relabeled).
  
   Ralph
 
  Btw. i really consider the current nagios article on the wiki bad. Its
  totally outdated and covers way to much info how to configure nagios
  itself. In my opinion this should be simply replaced by links to the
  official documentation since it is out of place and incomplete.

 I must respectfully disagree.  Nagios documentation is not well laid
 out.


I know that the nagios docs suck, and actually everything around nagios.
But what does that have to do with centos? And why don't you contribute
to the nagios docs?

The nagios-wiki (http://wkiki.nagios.org) is totally orphaned also!


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-16 Thread Christoph Maser
Am Mittwoch, den 16.09.2009, 15:19 +0200 schrieb Ralph Angenendt:
 On Wed, Sep 16, 2009 at 9:13 AM, Martin Boel, Silverbullet
 b...@silverbullet.dk wrote:
  Hi
 
  username: MartinBoel
 
  Please grant me access.

 Done. I hope you incorporate The things Christoph Maser has mentioned
 and don't just add the one line from your first mail (which will
 break, when the box is relabeled).

 Ralph

Btw. i really consider the current nagios article on the wiki bad. Its
totally outdated and covers way to much info how to configure nagios
itself. In my opinion this should be simply replaced by links to the
official documentation since it is out of place and incomplete.


Chris


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-16 Thread Christoph Maser
Am Mittwoch, den 16.09.2009, 19:34 +0200 schrieb Mathew S. McCarrell:



 It might be simpler to just have a tutorial that uses the package that
 is available from rpmforge.  I have already written such a tutorial
 and it receives several hundred hits each month.  Its also the second
 result in Google if you search for install nagios centos.

 Just a thought.

 Matt

This one?
http://docs.cslabs.clarkson.edu/wiki/Install_Nagios_on_CentOS_5

This is what i really think it should like!


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-16 Thread Christoph Maser
Am Mittwoch, den 16.09.2009, 20:05 +0200 schrieb Karanbir Singh:
 On 09/16/2009 06:44 PM, Max Hetrick wrote:
  I've not read your guide, but perhaps both could be united to make one
  that's current and suitable for everyone's needs. Just a thought too. :)

 How about splitting it up into 'Install Guide' and a 'Recommended first
 steps'.

+1
As i already proposed...


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-15 Thread Christoph Maser
Am Dienstag, den 15.09.2009, 09:21 +0200 schrieb Martin Boel,
Silverbullet:
 Hi

 Thanks for you reply. I guess this should be fixed i the next nagios package 
 or next centos version, but for now the public should
 be told about a workaround, that works with the current versions. There is 
 quite a lot of work hours in this simple workaround,
 and some people may simply give up using this fantastic software.

 Please grant me access.

 Regards
 Martin Boel


I'm sure you will be granted access. Still  i don't believe this is
reallly working. I will try it out.


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-15 Thread Christoph Maser
Am Dienstag, den 15.09.2009, 09:21 +0200 schrieb Martin Boel,
Silverbullet:
 Hi

 Thanks for you reply. I guess this should be fixed i the next nagios package 
 or next centos version, but for now the public should
 be told about a workaround, that works with the current versions. There is 
 quite a lot of work hours in this simple workaround,
 and some people may simply give up using this fantastic software.

 Please grant me access.

 Regards
 Martin Boel




Ok just as i thought, your solution kind of works until someone does:


# restorecon -v /usr/bin/nagios
restorecon reset /usr/bin/nagios context
system_u:object_r:file_t:s0-system_u:object_r:nagios_exec_t:s0

# /etc/init.d/nagios restart
Running configuration check... CONFIG ERROR!  Restart aborted.  Check
your Nagios configuration.


This context is set somewhere in centos-provided selinux configs. Not by
me!

# grep -r nagios /etc/selinux/*

Gives a really long list affecting logfiles and plugins. So you solution
is not really failsafe.



financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-14 Thread Christoph Maser
Am Montag, den 14.09.2009, 16:15 +0200 schrieb Ralph Angenendt:
 On Mon, 2009-09-14 at 16:11 +0200, Martin Boel, Silverbullet wrote:
  Hi
 
  I would like to contribute to the wiki.centos.org:
  username: boel

 Hmmm. We really do prefer FirstnameLastname.

  subject: nagios incompatibility with centos 5.2
  location: http://wiki.centos.org/HowTos/Nagios
  content: A security feature of centos 5.2 SELinux prevents the access
  from the apache httpd server to the needed /var/nagios files. The error
  manifests itself in the /var/log/messages as SELinux is preventing the
  tac.cgi from using potentially mislabeled files ./status.dat (var_t). A
  workaround is to execute the command: chcon -R httpd_sys_content_t
  /var/nagios

 Is that still the case in 5.3?

 Ralph



And also does that solve all problems with nagios? What about plugin
execution or external command files? I rather think you should use the
contexts
 - system_u:object_r:nagios_log_t:s0
 - system_u:object_r:nagios_spool_t:s0
 - system_u:object_r:nagios_exec_t:s0
 - system_u:object_r:nrpe_etc_t:s0
 - system_u:object_r:httpd_nagios_script_exec_t:s0

Actually it would be propably up to me to set these correctly in the
rpmforge package
Maybe some selinux guru can help me out?


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2

2009-09-14 Thread Christoph Maser
Am Montag, den 14.09.2009, 16:37 +0200 schrieb Ralph Angenendt:
 On Mon, 2009-09-14 at 16:24 +0200, Christoph Maser wrote:
  Am Montag, den 14.09.2009, 16:15 +0200 schrieb Ralph Angenendt:
   On Mon, 2009-09-14 at 16:11 +0200, Martin Boel, Silverbullet wrote:
workaround is to execute the command: chcon -R httpd_sys_content_t
/var/nagios
  
   Is that still the case in 5.3?
 
  And also does that solve all problems with nagios? What about plugin
  execution or external command files? I rather think you should use the
  contexts
   - system_u:object_r:nagios_log_t:s0
   - system_u:object_r:nagios_spool_t:s0
   - system_u:object_r:nagios_exec_t:s0
   - system_u:object_r:nrpe_etc_t:s0
   - system_u:object_r:httpd_nagios_script_exec_t:s0
 
  Actually it would be propably up to me to set these correctly in the
  rpmforge package
  Maybe some selinux guru can help me out?

 I'd say take a sneak peak into Fedoraland, but their SELinux is a tad
 more advanced than what we have.

 You know that you'd have to write a *complete* policy for containing
 Nagios that way? Can nagios even be seen as its own application
 deserving its own domain or isn't much of nagios run from apache anyway
 which would mean that you'd need the apache policies in place?

 Ralph
Erm these contexts already are in CentOS. So i guess the policy is
too...


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] document proposal: TipsAndTricks/ApacheVHostDir

2009-08-23 Thread Christoph Maser
Am Freitag, den 21.08.2009, 21:41 +0200 schrieb Ed Heron:
 I use named virtual hosts on my web servers, as I'm sure many others do.

   I'm used to the method of using a vhost directory for the container files.
 I didn't find documentation for it in the CentOS docs or the Apache docs.
 I'm not sure if I should take it as a hint that it is depreciated...  If
 I've missed something, please point me to it.

   I've written a quick little article detailing how to create a vhost
 directory under CentOS.
   It is at http://wiki.centos.org/EdHeron/ApacheVhostDir

   Please, consider this a request to create the page
 TipsAndTricks/ApacheVhostDir with access given to wiki user EdHeron.

 
 Ed Heron


I prefer one file per vhost instead of one directory per vhost. But what
i really expect from a TipsAndTricks/ApacheVhost is to explain how to
make sure which vhost will be the default vhost when using includes.

Chris


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] document proposal: TipsAndTricks/ApacheVHostDir

2009-08-23 Thread Christoph Maser
Am Sonntag, den 23.08.2009, 09:34 +0200 schrieb Christoph Maser:
  But what
 i really expect from a TipsAndTricks/ApacheVhost is to explain how to
 make sure which vhost will be the default vhost when using includes.

 Chris


Oh you have that also i found it on the wiki changelog.
http://wiki.centos.org/EdHeron/Apache-vhost-default why did you put that
in a seperate article? You describe 2 ways of doing it (httpd.conf and
vhost.d) but where is the centos-way (using only conf.d) ?


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


[CentOS-docs] mention elrepo in wiki

2009-07-18 Thread Christoph Maser
Is it ok if I add elrepo references to HowTos/Custom_Kernel and
AdditionalResources/Repositories?

Chris


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


[CentOS-docs] http://wiki.centos.org/TipsAndTricks/BecomingRoot

2009-07-10 Thread Christoph Maser
In the sudo section please add sudo -s and sudo -i as ways to open a
root-shell.

Chris


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Automated RPMForge Repository Installation Script for Tips Tricks section

2009-06-11 Thread Christoph Maser
Am Donnerstag, den 11.06.2009, 16:01 +0200 schrieb Vladislav Rastrusny:
 Hello.

 With the help of the community I finished polishing the translation of
 my PHP script to Bash version
 http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flattopic_id=20222forum=38

 It has now autodetection of architecture and CentOS version and handles 
 errors.

 I have published an article under my homepage here:
 http://wiki.centos.org/VladislavRastrusny/AutoRPMForgeRepo

 Since no automated RPM to install RPMForge repo was added to native
 CentOS repositories, I think my article can be included to Tips 
 Tricks section. And, probably, linked from here:
 http://wiki.centos.org/AdditionalResources/Repositories/RPMForge.
 Manually performing all changes from here is a hard job ;)

 Please tell me, what should I improve in this article if anything?

 Best regards,
 Vladislav FractalizeR Rastrusny
 ___
 CentOS-docs mailing list
 CentOS-docs@centos.org
 http://lists.centos.org/mailman/listinfo/centos-docs


It would be much nicer if you could replace the command ; if [ $? !=
0 ] then echo ...; exit 1; with a sub. So you could do
  command || _myexit Comment

You can als run all sed statements in a single sed call.

  sed -i -e 'replace1' -e 'replace2' -e 'replace3' file

If you want to massdeploy repositories you should also consider using
configuration management eg. cfengine, puppet, spacewalk.





financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] New HowTo on Local Mirrors

2009-04-05 Thread Christoph Maser
Am Samstag, den 04.04.2009, 22:37 +0200 schrieb Phil Schaffner:
 Created a new HowTo on running your own local mirror:
 http://wiki.centos.org/HowTos/CreateLocalMirror

 Comments and (constructive :-) criticism are invited.

 Phil



A note mentioning mrpeo would also be nice
(http://dag.wieers.com/home-made/mrepo/)

Chris


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] VPNC article

2009-02-12 Thread Christoph Maser
Am Donnerstag, den 12.02.2009, 16:44 +0100 schrieb Scott Robbins:
 On Thu, Feb 12, 2009 at 10:23:01AM -0500, R P Herrold wrote:
  On Wed, 11 Feb 2009, Scott Robbins wrote:
 
   I have put the article on the wiki at
   http://wiki.centos.org/HowTos/vpnc
 
  The article asserts clear packaging permissions  problems
  exist.  Have these been upstreamed?

 By upstream do you mean the source code itself?

 The program built from source doesn't have that issue.  On the other
 hand, without trying to read Dag's mind, I simply guessed that it was
 either minor oversight or a small additional securiy layer.  (Assuming
 it is Dag who created the rpm, which is a casual assumption on my part.)

 Thanks.


The permissions on the files in dags RPM:

 rpm -qlvp vpnc-0.5.3-1.el5.rf.i386.rpm
[...]
-rw---1 rootroot  157 Jan 19
16:35 /etc/vpnc/vpnc.conf
-rw---1 rootroot14995 Jan 19
16:35 /etc/vpnc/vpnc-script


I assume 600,root,root is ok for the config file, or do you really need
700 as the article indicates? I will update the permissions of
vpnc-script to be 700

Chris


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis 
Eisenhofer | Dr. Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs