Re: [CentOS-es] Configiracion

[Roberto Bermúdez]

Amigo, cuando a mi me encomendaro esta tarea me encontré con el programa
PROCMAILRC, investiga un poco sobre esto, no es mas que un archivo que se
debe copiar en el directorio HOME de cada usuario que está de vacaciones y
cuando ya no se desea la autocontestación solo se elimina dicho archivo del
directorio del usuario, espero que esto te sirva.

El 7 de julio de 2016, 11:42, VICTOR MANUEL VARGAS GONZALEZ<
victor...@hotmail.com> escribió:

>
> Quetal
>
> estoy tratando de hacer la  Configuración y uso del programa vacation me
> apoye en esta liga
> http://www.alcancelibre.org/staticpages/index.php/como-mail-vacation,
> dehecho ya elabore paso por paso
> como biene en la pagina pero no me da respuesta, manejo senmail , como
> puedo saber por que no autocontestalos correos
>
>
> gracias
> ___
> CentOS-es mailing list
> CentOS-es@centos.org
> https://lists.centos.org/mailman/listinfo/centos-es
>
___
CentOS-es mailing list
CentOS-es@centos.org
https://lists.centos.org/mailman/listinfo/centos-es

Re: [CentOS] How to have more than on SELinux context on a directory

[Marcelo Roccasalva]

You are looking for a man page, which usually belongs in a man section and
is compressed. You can do:

$ yum provides /usr/share/man/man8/tftpd_selinux.8.gz

or, more generally:

$ yum provides */tftpd_selinux*

given the asterisk don't resolve to something already existing in your
local dir... You can escape them or quote in this case

Marcelo

On Fri, Jul 8, 2016 at 9:41 AM, Bernard Fay  wrote:

> Thanks Fabian,
>
> That's what I need!  A bit more open than I wish but it is ok.
>
> One more thing... I got some problems to get the man page for
> tftpd_selinux.
>
> [ ]$ yum search tftpd_selinux
> Loaded plugins: fastestmirror, langpacks
> Determining fastest mirrors
> Warning: No matches found for: tftpd_selinux
> No matches found
>
> [ ~]$ yum provides tftpd_selinux
> Loaded plugins: fastestmirror, langpacks
> Loading mirror speeds from cached hostfile
> No matches found
>
> Of course, google came to the rescue. But is there a another way, Linux or
> yum based solution to find the proper packages when yum search or yum
> provides don't get it?
>
> Thanks again
>
>
>
> On Thu, Jul 7, 2016 at 5:58 AM, Fabian Arrotin  wrote:
>
> > On 06/07/16 21:17, Bernard Fay wrote:
> > > I can access /depot/tftp from a tftp client but unable to do it from a
> > > Windows client as long as SELinux is enforced.  If SELinux is
> permissive
> > I
> > > can access it then I know Samba is properly configured.
> > >
> > > # getenforce
> > > Enforcing
> > > # ls -dZ /depot/tftp/
> > > drwxrwxrwx. root root system_u:object_r:tftpdir_rw_t:s0 /depot/tftp/
> > >
> > >
> > > And if I do it the other way around, give the directory a type
> > > samba_share_t then the tftp clients are unable to push files.
> > >
> > > # getenforce
> > > Enforcing
> > > [root@CTSFILESRV01 depot]# ls -ldZ tftp/
> > > drwxrwxrwx. root root system_u:object_r:samba_share_t:s0 tftp/
> > >
> > >
> > > I would then to either create my own type or missing access rules as
> you
> > > suggest. Unfortunately, this will be when I will have time which I
> don't
> > > have at the moment.
> > >
> > > Thanks for you help
> > >
> >
> > Don't forget that it's about process type and context.
> > If you need multiple processes/domain types accessing the same context
> > files, you'd probably just need a common context/label.
> >
> > 
> > man -k _selinux => will show you man pages for everything regarding
> > selinux and domain/process/context
> > 
> >
> > => man tftpd_selinux
> > => search for samba and :
> > 
> > If you want to share files with multiple domains (Apache, FTP, rsync,
> > Samba), you can set  a  file  context  of  public_content_t  and
> > public_content_rw_t.   These context allow any of the above domains to
> > read the content.
> >  If you want a particular domain to write to the public_content_rw_t
> > domain, you must set the appropriate  boolean.
> > 
> >
> > But read the whole tftpd_selinux and samba_selinux man pages (and they
> > share almost the same content for "Sharing files" stanzas :-)
> >
> > --
> > Fabian Arrotin
> > The CentOS Project | http://www.centos.org
> > gpg key: 56BEC54E | twitter: @arrfab
> >
> >
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> >
> >
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
>


-- 
Marcelo

"¿No será acaso que esta vida moderna está teniendo más de moderna que de
vida?" (Mafalda)
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS-virt] qemu-kvm-ev-2.3.0-31.el7.16.1 available for testing

[Sandro Bonazzola]

qemu-kvm-ev-2.3.0-31.el7.16.1 has been tagged for testing and should reach
testing repositories soon.
Please help testing and providing feedback, thanks.

Changelog since previous release:

* Fri Jul 08 2016 Sandro Bonazzola  -
ev-2.3.0-31.el7_2.16.1
- Removing RH branding from package name

* Thu Jun 16 2016 Miroslav Rezanina  -
rhev-2.3.0-31.el7_2.16
- kvm-vga-add-sr_vbe-register-set.patch [bz#1347185]
- Resolves: bz#1347185
  (Regression from CVE-2016-3712: windows installer fails to start)

* Mon Jun 06 2016 Miroslav Rezanina  -
rhev-2.3.0-31.el7_2.15
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1340045]
- Resolves: bz#1340045
  (Throw error if qemu-img rebasing backing file is too long or provide way
to fix a "too long" backing file.)

* Mon May 16 2016 Miroslav Rezanina  -
rhev-2.3.0-31.el7_2.14
- kvm-blockjob-Allow-nested-pause.patch [bz#1329543]
- kvm-block-Pause-block-jobs-in-bdrv_drain_all.patch [bz#1329543]
- kvm-qemu-iotests-Test-that-stop-doesn-t-drain-block-jobs.patch
[bz#1329543]
- kvm-blockjob-Update-function-name-in-comments.patch [bz#1329543]
- kvm-virtio-blk-use-blk_io_plug-unplug-for-Linux-AIO-batc.patch
[bz#1327613]
- Resolves: bz#1327613
  (AIO is processing only 1 request,  even if >1 requests in virtio)
- Resolves: bz#1329543
  (live merge - qemu-kvm hangs in aio_bh_poll)

* Tue May 03 2016 Miroslav Rezanina  -
rhev-2.3.0-31.el7_2.13
- kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331414]
- kvm-vga-add-vbe_enabled-helper.patch [bz#1331414]
- kvm-vga-factor-out-vga-register-setup.patch [bz#1331414]
- kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331414]
- kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch
[bz#1331414]
- Resolves: bz#1331414
  (EMBARGOED CVE-2016-3710 qemu-kvm-rhev: qemu: incorrect banked access
bounds checking in vga module [rhel-7.2.z])

* Thu Apr 14 2016 Miroslav Rezanina  -
rhev-2.3.0-31.el7_2.12
- kvm-memory-exit-when-hugepage-allocation-fails-if-mem-pr.patch
[bz#1324523]
- Resolves: bz#1324523
  (-mem-prealloc option does not take effect when no huge page is allocated)

* Wed Apr 06 2016 Miroslav Rezanina  -
rhev-2.3.0-31.el7_2.11
- kvm-exec-Stop-using-memory-after-free-BZ-1315195.patch [bz#1315195]
- Resolves: bz#1315195
  (qemu 2.1-2.4 crashes with segfault in phys_section_destroy)


-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt

Re: [CentOS] How to have more than on SELinux context on a directory

[Bernard Fay]

Thanks Fabian,

That's what I need!  A bit more open than I wish but it is ok.

One more thing... I got some problems to get the man page for
tftpd_selinux.

[ ]$ yum search tftpd_selinux
Loaded plugins: fastestmirror, langpacks
Determining fastest mirrors
Warning: No matches found for: tftpd_selinux
No matches found

[ ~]$ yum provides tftpd_selinux
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
No matches found

Of course, google came to the rescue. But is there a another way, Linux or
yum based solution to find the proper packages when yum search or yum
provides don't get it?

Thanks again



On Thu, Jul 7, 2016 at 5:58 AM, Fabian Arrotin  wrote:

> On 06/07/16 21:17, Bernard Fay wrote:
> > I can access /depot/tftp from a tftp client but unable to do it from a
> > Windows client as long as SELinux is enforced.  If SELinux is permissive
> I
> > can access it then I know Samba is properly configured.
> >
> > # getenforce
> > Enforcing
> > # ls -dZ /depot/tftp/
> > drwxrwxrwx. root root system_u:object_r:tftpdir_rw_t:s0 /depot/tftp/
> >
> >
> > And if I do it the other way around, give the directory a type
> > samba_share_t then the tftp clients are unable to push files.
> >
> > # getenforce
> > Enforcing
> > [root@CTSFILESRV01 depot]# ls -ldZ tftp/
> > drwxrwxrwx. root root system_u:object_r:samba_share_t:s0 tftp/
> >
> >
> > I would then to either create my own type or missing access rules as you
> > suggest. Unfortunately, this will be when I will have time which I don't
> > have at the moment.
> >
> > Thanks for you help
> >
>
> Don't forget that it's about process type and context.
> If you need multiple processes/domain types accessing the same context
> files, you'd probably just need a common context/label.
>
> 
> man -k _selinux => will show you man pages for everything regarding
> selinux and domain/process/context
> 
>
> => man tftpd_selinux
> => search for samba and :
> 
> If you want to share files with multiple domains (Apache, FTP, rsync,
> Samba), you can set  a  file  context  of  public_content_t  and
> public_content_rw_t.   These context allow any of the above domains to
> read the content.
>  If you want a particular domain to write to the public_content_rw_t
> domain, you must set the appropriate  boolean.
> 
>
> But read the whole tftpd_selinux and samba_selinux man pages (and they
> share almost the same content for "Sharing files" stanzas :-)
>
> --
> Fabian Arrotin
> The CentOS Project | http://www.centos.org
> gpg key: 56BEC54E | twitter: @arrfab
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS-es] OT Problema cliente windows Openvpn

[Carlos Martinez]

Saludos.

Sin revisar en destalle, en el cliente falta la línea ns-cert-type server.
También agrega la línea route-method exe que va a servir para que las rutas
se creen correctamente en los clientes windows 8 y superior.

Atte.,
Carlos Andrés Martínez

2016-07-07 12:45 GMT-05:00 César Martinez :

> Saludos amigos espero que todos esten bien acudo a ustedes haber si
> alguien me puede echar una mano con esta consulta
>
> Tengo un servidor centos 7 con OpenVpn la misma que esta funcionando bien,
> he probado con clientes Linux Fedora y se conectan sin problemas, he
> tratado de probar con clientes windows 7 y windows 10 pero no se conecta
> tengo un mensaje de error en el log, de pronto alguien ha tenido este
> problema y me puedan ayudar, el error menciona algo del ca.crt pero si
> fuera problema el certificado no se conectaría con fedora, es mi primera
> vez que uso openvpn y ando batallando un poco  gracias a todos
>
> Archivo configuración cliente2.ovpn
>
> client
> dev tun
> proto udp
> remote x.x.x.x 1194 aqui va mi ip publcia
> resolv-retry infinite
> nobind
> persist-key
> persist-tun
> ca ca.crt
> cert cliente2.crt
> key cliente2.key
> comp-lzo
> verb 3
>
>
> Mensaje Error
>
> Thu Jul 07 09:52:31 2016 OpenVPN 2.3.11 i686-w64-mingw32 [SSL (OpenSSL)]
> [LZO] [PKCS11] [IPv6] built on May 10 2016
> Thu Jul 07 09:52:31 2016 Windows version 6.1 (Windows 7) 32bit
> Thu Jul 07 09:52:31 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO
> 2.09
> Enter Management Password:
> Thu Jul 07 09:52:31 2016 MANAGEMENT: TCP Socket listening on [AF_INET]
> 127.0.0.1:25340
> Thu Jul 07 09:52:31 2016 Need hold release from management interface,
> waiting...
> Thu Jul 07 09:52:31 2016 MANAGEMENT: Client connected from [AF_INET]
> 127.0.0.1:25340
> Thu Jul 07 09:52:31 2016 MANAGEMENT: CMD 'state on'
> Thu Jul 07 09:52:31 2016 MANAGEMENT: CMD 'log all on'
> Thu Jul 07 09:52:31 2016 MANAGEMENT: CMD 'hold off'
> Thu Jul 07 09:52:31 2016 MANAGEMENT: CMD 'hold release'
> Thu Jul 07 09:52:31 2016 WARNING: No server certificate verification
> method has been enabled.  See http://openvpn.net/howto.html#mitm for more
> info.
> Thu Jul 07 09:52:32 2016 MANAGEMENT: Client disconnected
> Thu Jul 07 09:52:32 2016 Cannot load CA certificate file ca.crt (no
> entries were read)
> Thu Jul 07 09:52:32 2016 Exiting due to fatal error
>
> --
> Saludos Cordiales
>
> |César Martínez M. | Ingeniero de Sistemas
> |Proyectos | SERVICOM
> |Tel: (593-2)554-271 2221-386 | Ext 4501
> |Celular: 0999374317 |Skype servicomecuador
> |Web www.servicomecuador.com Síguenos en:
> |Twitter: @servicomecuador |Facebook: servicomec
> |Zona Clientes: www.servicomecuador.com/billing
> |Blog: http://servicomecuador.com/blog
> |Dir. Av. 10 de Agosto N29-140 Entre
> |Acuña y  Cuero y Caicedo
> |Quito - Ecuador - Sudamérica
>
> ___
> CentOS-es mailing list
> CentOS-es@centos.org
> https://lists.centos.org/mailman/listinfo/centos-es
>
___
CentOS-es mailing list
CentOS-es@centos.org
https://lists.centos.org/mailman/listinfo/centos-es

Re: [CentOS] update clamav to 0.99.2 [SOLVED]

[Helmut Drodofsky]

Thank you for help.

clamd.sock exits now. clamd.pid I am further missing. clamd.sock is much 
more important. So I can restart now mail scan.


Viele Grüße
Helmut Drodofsky
 
Internet XS Service GmbH

Heßbrühlstraße 15
70565 Stuttgart
  
Geschäftsführung

Dr.-Ing. Roswitha Hahn-Drodofsky
HRB 21091 Stuttgart
USt.ID: DE190582774
Tel. 0711 781941 0
Fax: 0711 781941 79
Mail: i...@internet-xs.de
www.internet-xs.de

Am 08.07.2016 um 09:26 schrieb Gener Badenas:

2016-07-08 4:19 GMT+08:00 Helmut Drodofsky :


Helo,

update is in EPEL repository.

on startup, clamd does not further create clamd.sock and clamd.pid

clamd service stops without any message - even in debug mode.



Comment out "AllowSupplementaryGroups" in config clamd.conf and try restart
again



It's a nightmare.

Helmut

--
Viele Grüße
Helmut Drodofsky
  Internet XS Service GmbH
Heßbrühlstraße 15
70565 Stuttgart
   Geschäftsführung
Dr.-Ing. Roswitha Hahn-Drodofsky
HRB 21091 Stuttgart
USt.ID: DE190582774
Tel. 0711 781941 0
Fax: 0711 781941 79
Mail: i...@internet-xs.de
www.internet-xs.de


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos







___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] update clamav to 0.99.2

[Gener Badenas]

2016-07-08 4:19 GMT+08:00 Helmut Drodofsky :

> Helo,
>
> update is in EPEL repository.
>
> on startup, clamd does not further create clamd.sock and clamd.pid
>
> clamd service stops without any message - even in debug mode.
>
>
Comment out "AllowSupplementaryGroups" in config clamd.conf and try restart
again


> It's a nightmare.
>
> Helmut
>
> --
> Viele Grüße
> Helmut Drodofsky
>  Internet XS Service GmbH
> Heßbrühlstraße 15
> 70565 Stuttgart
>   Geschäftsführung
> Dr.-Ing. Roswitha Hahn-Drodofsky
> HRB 21091 Stuttgart
> USt.ID: DE190582774
> Tel. 0711 781941 0
> Fax: 0711 781941 79
> Mail: i...@internet-xs.de
> www.internet-xs.de
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
M y
J
a
v
a
B
l
o
g

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos