Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Bennett Haselton
On Tue, Dec 27, 2011 at 10:08 PM, Ken godee wrote: > > password"? That's what I'm talking about -- how often does this sort of > > thing happen, where you need to be subscribed to be a security mailing > list > > in order to know what workaround to make to stay safe, as opposed to > simply > > r

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Bennett Haselton
On Tue, Dec 27, 2011 at 10:17 PM, Rilindo Foster wrote: > > > > > On Dec 27, 2011, at 11:29 PM, Bennett Haselton > wrote: > > > On Tue, Dec 27, 2011 at 8:33 PM, Gilbert Sebenste < > > seben...@weather.admin.niu.edu> wrote: > > > >> On Tue, 27 Dec 2011, Bennett Haselton wrote: > >> > >>> Suppose

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Rilindo Foster
On Dec 27, 2011, at 11:29 PM, Bennett Haselton wrote: > On Tue, Dec 27, 2011 at 8:33 PM, Gilbert Sebenste < > seben...@weather.admin.niu.edu> wrote: > >> On Tue, 27 Dec 2011, Bennett Haselton wrote: >> >>> Suppose I have a CentOS 5.7 machine running the default Apache with no >>> extra modu

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Ken godee
> password"? That's what I'm talking about -- how often does this sort of > thing happen, where you need to be subscribed to be a security mailing list > in order to know what workaround to make to stay safe, as opposed to simply > running yum-updatesd to install latest patches automatically. Hap

Re: [CentOS] Is Biarch with 6.x now dead?

2011-12-27 Thread Michael Lampe
> nope. its actually quite a major pain to manage.. > > you forgot to mention what you installed, how you did it and what you > expected V/s achieved I have installed all the packages from the two x86_64 DVDs with (eventually): yum install --exclude=ovirt\* \* I'm not using any internet

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Bennett Haselton
Yeah I know that most break-ins do happen using third-party web apps; fortunately the servers I'm running don't have or need any of those. But then what about what my friend said: "For example, there was a while back ( ~march ) a kernel exploit that affected CentOS / RHEL. The patch came after 1-2

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread 夜神 岩男
On 12/28/2011 01:29 PM, Bennett Haselton wrote: > On Tue, Dec 27, 2011 at 8:33 PM, Gilbert Sebenste< > seben...@weather.admin.niu.edu> wrote: > >> On Tue, 27 Dec 2011, Bennett Haselton wrote: >> >>> Suppose I have a CentOS 5.7 machine running the default Apache with no >>> extra modules enabled, a

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Bennett Haselton
Everything installed on the machine had been installed with "yum". So I assumed that meant that it would also be updated by "yum" if an update was available from the distro. On Tue, Dec 27, 2011 at 9:38 PM, Karanbir Singh wrote: > On 12/28/2011 04:29 AM, Bennett Haselton wrote: > > I was asking

Re: [CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread Karanbir Singh
On 12/27/2011 01:10 PM, B.J. McClure wrote: > I tried CentOS 6.0 and 6.1 on Mac-Air with SSD. Installer could not > find SSD and Google did not help. FWIW, Ubuntu installed fine. If you I've seen a couple of MacbookAir's now running CentOS-6, do you need to set some mode (bootcamp like ?) - KB

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Karanbir Singh
On 12/28/2011 04:29 AM, Bennett Haselton wrote: > I was asking because I had a server that did get broken into, despite > having yum-updatesd running and a strong password. He said that even if the software component compromised was a part of the updates being dished out from the distro ( and the

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Bennett Haselton
On Tue, Dec 27, 2011 at 8:33 PM, Gilbert Sebenste < seben...@weather.admin.niu.edu> wrote: > On Tue, 27 Dec 2011, Bennett Haselton wrote: > > > Suppose I have a CentOS 5.7 machine running the default Apache with no > > extra modules enabled, and with the "yum-updatesd" service running to > pull >

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Gilbert Sebenste
On Tue, 27 Dec 2011, Bennett Haselton wrote: > Suppose I have a CentOS 5.7 machine running the default Apache with no > extra modules enabled, and with the "yum-updatesd" service running to pull > down and install updates as soon as they become available from the > repository. > > So the machine c

Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Karanbir Singh
On 12/28/2011 03:13 AM, Bennett Haselton wrote: > Roughly what percent of the time is there such an unpatched exploit in the > wild, so that the machine can be hacked by someone keeping up with the > exploits? 5%? 50%? 95%? there is no way to tell, and there is no metric to work against unless

Re: [CentOS] Is Biarch with 6.x now dead?

2011-12-27 Thread Jim Perrin
On Tue, Dec 27, 2011 at 7:47 PM, Michael Lampe wrote: > But I found almost nothing under /usr/lib. When you were using the 5.x branch, biarch was done on install via what some consider a glitch in the installer. There was generally much complaining about the whole load of x86 packages when peopl

Re: [CentOS] Is Biarch with 6.x now dead?

2011-12-27 Thread Karanbir Singh
hi, On 12/28/2011 01:47 AM, Michael Lampe wrote: > I'm experimenting with 6.2 now. Things seem to be really great so far! nice! > Distribution closure is one of my favourite pets. So I tried to install > everything. thats tricky, ~ multiple things can provide overlapping functionality as well.

[CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Bennett Haselton
Suppose I have a CentOS 5.7 machine running the default Apache with no extra modules enabled, and with the "yum-updatesd" service running to pull down and install updates as soon as they become available from the repository. (Assume further the password is strong, etc.) On the other hand, suppose

[CentOS] Is Biarch with 6.x now dead?

2011-12-27 Thread Michael Lampe
I'm experimenting with 6.2 now. Things seem to be really great so far! Distribution closure is one of my favourite pets. So I tried to install everything. I found only one problem, but that's another (minor) thing. But I found almost nothing under /usr/lib. So, Biarch is really dead? Funny! A

Re: [CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread Ljubomir Ljubojevic
On 12/27/2011 03:30 PM, Peter Hopfgartner wrote: > The entry in the kernel bugzilla should be (does not open, for me): > https://bugzilla.kernel.org/show_bug.cgi?id=15923 I am unable to open bugzilla.kernel.org also, it is not just you. Fedora bugzilla shows unknown ID. -- Ljubomir Ljubojevic (

Re: [CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread Ljubomir Ljubojevic
Take a look for your self: On 12/27/2011 03:05 PM, B.J. McClure wrote: >> I tried CentOS 6.0 and 6.1 on Mac-Air with SSD. >> > > B.J. > > CentOS release 6.2 (Final) Your signature has "6.2". So... I wanted to be sure 6.2 was tested, that is all. -- Ljubomir Ljubojevic (Love is in the Air) PL

Re: [CentOS] Hyper V integration question

2011-12-27 Thread Dvorkin, Asya
On Dec 27, 2011, at 11:54 AM, Dvorkin, Asya wrote: > Sorry, this is CentOS 5.7 > > On Dec 27, 2011, at 11:53 AM, Dvorkin, Asya wrote: > >> Hello everyone, >> >> I have Hyper V integration working properly, but needed to do an update to >> 2.6.18-274.12.1.el5-x86_64. >> >> Since then, it no l

Re: [CentOS] Hyper V integration question

2011-12-27 Thread Dvorkin, Asya
Sorry, this is CentOS 5.7 On Dec 27, 2011, at 11:53 AM, Dvorkin, Asya wrote: > Hello everyone, > > I have Hyper V integration working properly, but needed to do an update to > 2.6.18-274.12.1.el5-x86_64. > > Since then, it no longer works. As discovered previously, one needs to > rebuild Hyp

[CentOS] Hyper V integration question

2011-12-27 Thread Dvorkin, Asya
Hello everyone, I have Hyper V integration working properly, but needed to do an update to 2.6.18-274.12.1.el5-x86_64. Since then, it no longer works. As discovered previously, one needs to rebuild Hyper V Integration tools due to the kernel panic. http://www.sudonym.com/398/kernel-panic-afte

Re: [CentOS] Plymouth "Failed to read image"

2011-12-27 Thread 夜神 岩男
On 12/27/2011 11:32 PM, 夜神 岩男 wrote: > I'm trying to learn more about Plymouth, but am having trouble finding > sufficient documentation on it. ... > Perhaps the error message is just confusing me. > > If it is just the background image, then what is not valid about the > splash.xpm.gz now? I've re

[CentOS] Plymouth "Failed to read image"

2011-12-27 Thread 夜神 岩男
I'm trying to learn more about Plymouth, but am having trouble finding sufficient documentation on it. After a rebuild of Plymouth with a few theme changes, I am getting an error message on boot "Failed to read image" and then it gives me the grub screen to boot one of the three kernels install

Re: [CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread Peter Hopfgartner
On 12/27/2011 03:05 PM, B.J. McClure wrote: > > On Tue, 2011-12-27 at 15:00 +0100, Ljubomir Ljubojevic wrote: >> On 12/27/2011 02:10 PM, B.J. McClure wrote: >>> On Tue, 2011-12-27 at 09:30 +0100, Peter Hopfgartner wrote: >>> Did anybody succeed in installing CentOS on a MacBook Pro with nVidia

Re: [CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread B.J. McClure
On Tue, 2011-12-27 at 15:00 +0100, Ljubomir Ljubojevic wrote: > On 12/27/2011 02:10 PM, B.J. McClure wrote: > > > > On Tue, 2011-12-27 at 09:30 +0100, Peter Hopfgartner wrote: > > > >> Did anybody succeed in installing CentOS on a MacBook Pro with nVidia > >> chipset (2010 edition, > >> http://ww

Re: [CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread Ljubomir Ljubojevic
On 12/27/2011 02:10 PM, B.J. McClure wrote: > > On Tue, 2011-12-27 at 09:30 +0100, Peter Hopfgartner wrote: > >> Did anybody succeed in installing CentOS on a MacBook Pro with nVidia >> chipset (2010 edition, >> http://www.heise.de/mac-and-i/produkte/macbook-13-2-4-ghz-mitte-2010-86/#produkt_detail

Re: [CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread B.J. McClure
On Tue, 2011-12-27 at 09:30 +0100, Peter Hopfgartner wrote: > Did anybody succeed in installing CentOS on a MacBook Pro with nVidia > chipset (2010 edition, > http://www.heise.de/mac-and-i/produkte/macbook-13-2-4-ghz-mitte-2010-86/#produkt_detail)? > When I boot with the current minimal install

[CentOS] Installation on a Macbook Pro with nVidia MCP89 SATA controller

2011-12-27 Thread Peter Hopfgartner
Did anybody succeed in installing CentOS on a MacBook Pro with nVidia chipset (2010 edition, http://www.heise.de/mac-and-i/produkte/macbook-13-2-4-ghz-mitte-2010-86/#produkt_detail)? When I boot with the current minimal install disk, Linux does simply see non disks. Regards, Peter -- Peter Ho