Re: Library security updates

2015-01-28 Thread John Lauro
If it doesn't protect us is there practicable way to make sure we are genuinely protected short of rebooting the whole system every time there is a security update? Depending on what the update is. If you want to be 100% certain, reboot. If you don't want to reboot, you can hunt

Re: Library security updates

2015-01-28 Thread Steve Traylen
On 01/28/2015 10:48 AM, Steven Haigh wrote: And indeed, if yum updates a daemon due to security fixes does the daemon restart? By default, package updates won't restart running programs. This is a manual step. glibc is special. When glibc is updated it executes from %post

Re: Library security updates

2015-01-28 Thread Steven Haigh
On 28/01/2015 8:35 PM, John Rowe wrote: I'm sure many people will have seen the recent security update on gethostbyname(), etc. Apparently exim can be vulnerable to this. Yes it is. This raises the question: does updating a library package actually protect systems from the vulnerability or

Library security updates

2015-01-28 Thread John Rowe
I'm sure many people will have seen the recent security update on gethostbyname(), etc. Apparently exim can be vulnerable to this. This raises the question: does updating a library package actually protect systems from the vulnerability or do daemons continue to use the (insecure) version of the

Re: Library security updates

2015-01-28 Thread David Sommerseth
On 28/01/15 10:35, John Rowe wrote: And indeed, if yum updates a daemon due to security fixes does the daemon restart? Yes and no. It mostly depends on what kind of package has been updated. Some packages triggers restart of daemons, some does not. Generally speaking, packages such as

SL 7.0 and WINS name resolution

2015-01-28 Thread Ed Agoff
In SL 7.0, adding wins to end of hosts line in /etc/nsswitch.conf no longer gives me the WINS name resolution I had in earlier versions, i.e. I could ping NetBIOS names from SL 6.x command line. I've added and enabled various other services in a blind effort to get it working, to no effect: nscd,

clonezilla or equivalent

2015-01-28 Thread Yasha Karant
We are in the process of migrating one of our compute engines (a CUDA Nvidia GPU close coupled multichassis unit using Infiniband for the compute fabric) to SL7 from SL6. I have a fully operational SL 7 installation on my workstation that also has a CUDA Nvidia GPU. We will first migrate the

Re: Library security updates

2015-01-28 Thread John Lauro
Actually, looking at what files were updated, that should probably be lsof -n | grep -e libc- (Probably not a lot of difference in the programs listed, but...) - Original Message - From: John Lauro john.la...@covenanteyes.com To: Steven Haigh net...@crc.id.au Cc:

Re: SL 7.0 and WINS name resolution

2015-01-28 Thread Vladimir Mosgalin
Hi Ed Agoff! On 2015.01.28 at 12:54:49 -0800, Ed Agoff wrote next: In SL 7.0, adding wins to end of hosts line in /etc/nsswitch.conf no longer gives me the WINS name resolution I had in earlier versions, i.e. I could ping NetBIOS names from SL 6.x command line. I've added and enabled

Re: clonezilla or equivalent

2015-01-28 Thread Brandon Vincent
On Wed, Jan 28, 2015 at 6:08 PM, Yasha Karant ykar...@csusb.edu wrote: Any advice would be appreciated. Clonezilla Live does support USB 3.0. Out of curiosity, is the external drive you connected formatted as FAT32? The 4 GB file size limit would explain why dd would be failing. Brandon

Re: SL 7.0 and WINS name resolution

2015-01-28 Thread prmarino1
Wins is now considered obsolete along with netbios even by Microsoft.‎ In modern environments every thing should use DNS. XP was the last version of windows which shipped with netbios turned on by default and without netbios wins doesn't work either.

Re: clonezilla or equivalent

2015-01-28 Thread prmarino1
In the past I use to use a utility called mkcdrec which has a successor project called relax and recover (rear for short) I haven't used the new version but it should work well. That said if you can package every thing in rpms you could use spacewalk or katello to create identical builds

Re: clonezilla or equivalent

2015-01-28 Thread toddandmargo
On Wed, 28 Jan 2015 17:08:06 -0800 Yasha Karantlt;ykar...@csusb.edugt; wrote My next approach -- before disassembly -- will be to try clonezilla or the equivalent. As I understand clonezilla, I boot from the clonezilla dvd and then clone from source to target.Does clonezilla

Re: clonezilla or equivalent

2015-01-28 Thread toddandmargo
On Wed, 28 Jan 2015 17:08:06 -0800 Yasha Karant lt;ykar...@csusb.edugt; wrote gt; However, a dd does not work -- it seems not to want to gt; clone beyond 4 GBytes, rather than the full drive (the destination hard gt; drive has sufficient capacity to hold the entire image of the

Re: clonezilla or equivalent

2015-01-28 Thread Yasha Karant
On 01/28/2015 07:21 PM, Brandon Vincent wrote: On Wed, Jan 28, 2015 at 6:08 PM, Yasha Karant ykar...@csusb.edu wrote: Any advice would be appreciated. Clonezilla Live does support USB 3.0. Out of curiosity, is the external drive you connected formatted as FAT32? The 4 GB file size limit would

Re: clonezilla or equivalent

2015-01-28 Thread Brandon Vincent
On Wed, Jan 28, 2015 at 10:32 PM, Yasha Karant ykar...@csusb.edu wrote: Will gparted work to remove any high level format? It should -- the drive can be accessed as /dev/sdj (over the USB 3 interface to the external disk holding unit). Yes. The easiest way to do this is to create a new

Re: clonezilla or equivalent

2015-01-28 Thread Nico Kadel-Garcia
CLearing the remnants of a a filesystem can be awkward. In order to clear previously used partitions for clean OS installation, I used to use lvm (to get a list of known volumes and devices, activate them enough to write to, an dthem delete them *all* with extreme prejudice). Then i'd use parted