Re: [CentOS] CentOS-5 End of Life

2017-03-09 Thread Leon Fauster
> Am 03.03.2017 um 13:19 schrieb James Hogarth :
> 
> On 3 March 2017 at 11:47, James Hogarth  wrote:
>> On 3 March 2017 at 11:34, John Hodrien  wrote:
>>> On Fri, 3 Mar 2017, Tony Mountifield wrote:
>>> 
 You mean just thrown away, or archived somewhere? Just thrown away would
 seem rather irresponsible...
>>> 
>>> 
>>> Mirroring EPEL makes sense well before this point, as they don't keep old
>>> versions of packages online either AFAIK.
>>> 
>>> jh
>>> 
>>> 
>> 
>> Indeed they aren't kept ... and since there hasn't been an EOL of EPEL
>> before I honestly have no idea ... I've asked on the epel-devel
>> mailing list as to whether it'll move to archive like old fedora
>> releases do.
> 
> My mistake - I forgot there was an EPEL4 in the mists of time .. so
> the last version of the repo is likely to end up here:
> 
> http://archive.fedoraproject.org/pub/epel/


JFI: 

https://lists.fedoraproject.org/archives/list/epel-annou...@lists.fedoraproject.org/thread/YTEBPQPLP7NIVR3C533EBHEAERPH26P3/

--
LF

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-09 Thread Paul Heinlein

On Wed, 8 Mar 2017, Mark Weaver wrote:


On 03/08/2017 07:09 PM, Mark Weaver wrote:

> >  I followed your guide to the letter, however I think it seems I
> >  missed something. When I test with telnet to port 25 this is the
> >  result:
> > 
> > >  telnet merlin 25

> >  Trying 10.10.3.6...
> >  Connected to merlin.ciss.local.
> >  Escape character is '^]'.
> >  220 mdw1982.com ESMTP Sendmail 8.14.7/8.13.8; Wed, 8 Mar 2017
>  16:53:31 -0500
> >  ehlo merlin
> >  250-mdw1982.com Hello [10.10.3.102], pleased to meet you
> >  250-ENHANCEDSTATUSCODES
> >  250-PIPELINING
> >  250-8BITMIME
> >  250-SIZE
> >  250-DSN
> >  250-ETRN
> >  250-DELIVERBY
> >  250 HELP
> > >  auth login
> >  504 5.3.3 AUTH mechanism login not available
> > 
> >  thoughts?
> 
>  Many. :-)
> 
>  Check your mail log for clues.
> 
>  Ensure you have a valid SSL certificate and key. Sendmail is touchy

>  about permissions on the key file. Try googling for
>  confDONT_BLAME_SENDMAIL and GroupReadableKeyFile.
> 
>  Make sure saslauthd is configured and running.
> 
>  Compile your .mc (m4) file with the macros distributed with the

>  version of sendmail you're actually running. This line suggests you're
>  not:
> 
>  mdw1982.com ESMTP Sendmail 8.14.7/8.13.8
> 
>  That's a first stab at things to try.


I fixed the version mis-match by installing sendmail-cf package and 
recompiling sendmail.mc. saslauthd is running and conigured 
according to your specs. So, I'm not sure what's missing.


Still googling around and found some things that appear to be 
missing from the sendmail config, but when I test saslauthd it 
doesn't appear to be working.


testsaslauthd -u username -p mypassword
0: NO "authentication failed"


Usually, testsaslauthd needs a service name. In this case,

  testsaslauthd -u username -p mypassword -s smtp

If your password has any characters a shell might misinterpret (*, !, 
<, >, &, ...), make sure you enclose it in quotation marks.


What have you seen in your logs (usually /var/log/maillog on CentOS 
systems)? If sendmail is having trouble setting up TLS/SSL, it will 
let you know!


You may have to post the entire contents of your sendmail.mc (the m4 
file), redacted as necessary to obscure any non-relevant bits that may 
be sensitive.


--
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox for CentOS

2017-03-09 Thread Johnny Hughes
On 03/09/2017 09:01 AM, Phelps, Matthew wrote:
> On Thu, Mar 9, 2017 at 9:55 AM, Johnny Hughes  wrote:
> 
>> On 03/09/2017 07:35 AM, Phelps, Matthew wrote:
>>> On Wed, Mar 8, 2017 at 6:22 PM, Yamaban  wrote:
>>>
 On Wed, 8 Mar 2017 16:56, Johnny Hughes  wrote:

> On 03/08/2017 09:39 AM, Phelps, Matthew wrote:
>
>> On Wed, Mar 8, 2017 at 10:25 AM, Johnny Hughes 
>> wrote:
>>
>>> On 03/08/2017 09:10 AM, m.r...@5-cent.us wrote:
>>>
 Johnny Hughes wrote:

> I am currently building the latest Firefox updates and I have
>> noticed
> that they have upgraded the CentOS-7 Firefox from the ESR tree
>> (45.8)
> to
> the mainline tree (Currently firefox-52.0).  They have left EL5 and
> EL6
> at the ESR level (45.8.0-2).
>
> EL7:
> https://rhn.redhat.com/errata/RHSA-2017-0461.html
>
> EL5 and EL6:
> https://rhn.redhat.com/errata/RHSA-2017-0459.html
>
> As stated above, I am currently building and testing these, so they
> are
> not yet released .. just preparing people for the changes.
>

>> Does anyone know if ESR 52.x will eventually be released for CentOS 6?
>>
>
> I am sure it will, certainly when version 45 goes EOL.
>
> The variables and content to build it on EL6 are in the current EL7
> SRPM, but the EL5 stuff is (understandably, since it is going EOL soon)
> missing.
>
> What I am not sure of is if EL7 will stay on the Current Release for
>> the
> next update or if it will shift back to ESR.
>

 Eh?? There is a slight misunderstanding here.

 The Firefox 52.0 Version is released for BOTH, the normal release
>> channel
 AND the ESR channel. This was done to have one 6 week periode of
>> overlapp
 between the old and the new ESR version, to "ease over" the transistion,
 as the 52 version insists on GKT3 and gstreamer 1.x normally.

 (snip)
>>>
>>> This is the point that worries me. If ESR 52.x requires GTK3, then how
>> can
>>> it be supported on CentOS 6?
>>>
>>>
>> They will include it and build it as part of firefox.  They already
>> build and use a new gcc (4.8) and other new things (binutils, yasm) in
>> EL6 to build the current firefox there.
>>
>> I'm sure they will add in things they need and include them in the built
>> RPMs as required.
>>
>>
> OK, thanks for reassuring me! :)
> 

For the record, I just checked and the released SRPM for EL7 has the
proper variables and sources and actually builds on EL6.  It uses gtk2
from el6 to build.

They obviously felt more comfortable instead released the older one on
EL6 this cycle, but I suspect that the newer 52.x ESR version will be
released during the next cycle.




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox for CentOS

2017-03-09 Thread Johnny Hughes
On 03/09/2017 05:46 AM, James Pearson wrote:
> Johnny Hughes wrote:
>>
>> What I am not sure of is if EL7 will stay on the Current Release for the
>> next update or if it will shift back to ESR.
> 
> Not quite sure what you mean - the current EL7 firefox 52.0 uses the 
> Mozilla Firefox 52.0 ESR source ...

Right .. Mozilla released 52.0 as ESR and Mainline at the same time.  I
didn't realize they did it that way.

Red Hat moved EL7 to 52.0 and kept EL6 and EL5 back at 45.8.0 .. both
are now active ESR releases by Mozilla.





signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox for CentOS

2017-03-09 Thread Phelps, Matthew
On Thu, Mar 9, 2017 at 9:55 AM, Johnny Hughes  wrote:

> On 03/09/2017 07:35 AM, Phelps, Matthew wrote:
> > On Wed, Mar 8, 2017 at 6:22 PM, Yamaban  wrote:
> >
> >> On Wed, 8 Mar 2017 16:56, Johnny Hughes  wrote:
> >>
> >>> On 03/08/2017 09:39 AM, Phelps, Matthew wrote:
> >>>
>  On Wed, Mar 8, 2017 at 10:25 AM, Johnny Hughes 
>  wrote:
> 
> > On 03/08/2017 09:10 AM, m.r...@5-cent.us wrote:
> >
> >> Johnny Hughes wrote:
> >>
> >>> I am currently building the latest Firefox updates and I have
> noticed
> >>> that they have upgraded the CentOS-7 Firefox from the ESR tree
> (45.8)
> >>> to
> >>> the mainline tree (Currently firefox-52.0).  They have left EL5 and
> >>> EL6
> >>> at the ESR level (45.8.0-2).
> >>>
> >>> EL7:
> >>> https://rhn.redhat.com/errata/RHSA-2017-0461.html
> >>>
> >>> EL5 and EL6:
> >>> https://rhn.redhat.com/errata/RHSA-2017-0459.html
> >>>
> >>> As stated above, I am currently building and testing these, so they
> >>> are
> >>> not yet released .. just preparing people for the changes.
> >>>
> >>
>  Does anyone know if ESR 52.x will eventually be released for CentOS 6?
> 
> >>>
> >>> I am sure it will, certainly when version 45 goes EOL.
> >>>
> >>> The variables and content to build it on EL6 are in the current EL7
> >>> SRPM, but the EL5 stuff is (understandably, since it is going EOL soon)
> >>> missing.
> >>>
> >>> What I am not sure of is if EL7 will stay on the Current Release for
> the
> >>> next update or if it will shift back to ESR.
> >>>
> >>
> >> Eh?? There is a slight misunderstanding here.
> >>
> >> The Firefox 52.0 Version is released for BOTH, the normal release
> channel
> >> AND the ESR channel. This was done to have one 6 week periode of
> overlapp
> >> between the old and the new ESR version, to "ease over" the transistion,
> >> as the 52 version insists on GKT3 and gstreamer 1.x normally.
> >>
> >> (snip)
> >
> > This is the point that worries me. If ESR 52.x requires GTK3, then how
> can
> > it be supported on CentOS 6?
> >
> >
> They will include it and build it as part of firefox.  They already
> build and use a new gcc (4.8) and other new things (binutils, yasm) in
> EL6 to build the current firefox there.
>
> I'm sure they will add in things they need and include them in the built
> RPMs as required.
>
>
OK, thanks for reassuring me! :)


-- 
Matt Phelps
System Administrator, Computation Facility
Harvard - Smithsonian Center for Astrophysics
mphe...@cfa.harvard.edu, http://www.cfa.harvard.edu
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox for CentOS

2017-03-09 Thread Johnny Hughes
On 03/09/2017 07:35 AM, Phelps, Matthew wrote:
> On Wed, Mar 8, 2017 at 6:22 PM, Yamaban  wrote:
> 
>> On Wed, 8 Mar 2017 16:56, Johnny Hughes  wrote:
>>
>>> On 03/08/2017 09:39 AM, Phelps, Matthew wrote:
>>>
 On Wed, Mar 8, 2017 at 10:25 AM, Johnny Hughes 
 wrote:

> On 03/08/2017 09:10 AM, m.r...@5-cent.us wrote:
>
>> Johnny Hughes wrote:
>>
>>> I am currently building the latest Firefox updates and I have noticed
>>> that they have upgraded the CentOS-7 Firefox from the ESR tree (45.8)
>>> to
>>> the mainline tree (Currently firefox-52.0).  They have left EL5 and
>>> EL6
>>> at the ESR level (45.8.0-2).
>>>
>>> EL7:
>>> https://rhn.redhat.com/errata/RHSA-2017-0461.html
>>>
>>> EL5 and EL6:
>>> https://rhn.redhat.com/errata/RHSA-2017-0459.html
>>>
>>> As stated above, I am currently building and testing these, so they
>>> are
>>> not yet released .. just preparing people for the changes.
>>>
>>
 Does anyone know if ESR 52.x will eventually be released for CentOS 6?

>>>
>>> I am sure it will, certainly when version 45 goes EOL.
>>>
>>> The variables and content to build it on EL6 are in the current EL7
>>> SRPM, but the EL5 stuff is (understandably, since it is going EOL soon)
>>> missing.
>>>
>>> What I am not sure of is if EL7 will stay on the Current Release for the
>>> next update or if it will shift back to ESR.
>>>
>>
>> Eh?? There is a slight misunderstanding here.
>>
>> The Firefox 52.0 Version is released for BOTH, the normal release channel
>> AND the ESR channel. This was done to have one 6 week periode of overlapp
>> between the old and the new ESR version, to "ease over" the transistion,
>> as the 52 version insists on GKT3 and gstreamer 1.x normally.
>>
>> (snip)
> 
> This is the point that worries me. If ESR 52.x requires GTK3, then how can
> it be supported on CentOS 6?
> 
> 
They will include it and build it as part of firefox.  They already
build and use a new gcc (4.8) and other new things (binutils, yasm) in
EL6 to build the current firefox there.

I'm sure they will add in things they need and include them in the built
RPMs as required.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS-6.8 fsck report Maximal Count

2017-03-09 Thread John Hodrien

On Thu, 9 Mar 2017, James B. Byrne wrote:


This indicated that a bad sector on the underlying disk system might
be the source of the problem.  The guests were all shutdown, a
/forcefsck file was created on the host system, and the host system
remotely restarted.


fsck's not good at finding disk errors, it finds filesystem errors.

If it was a real disk issue, you'd expect matching errors in the host logs.
Did you?


/var/log/messages:Mar  9 08:34:48 vhost03 kernel: EXT4-fs (dm-6):
warning: maximal mount count reached, running e2fsck is recommended


Unmount it and run fsck on it, and that message would go away.  But I'd not
worry about that one.

jh
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-6.8 fsck report Maximal Count

2017-03-09 Thread James B. Byrne
We have a remote warm standby system running CentOS-6.8 as a KVM
system with multiple guests.  One of the guests began reporting an
error when running aide.

Caught SIGBUS/SEGV while mmapping. File was truncated while aide was
running?
Caught SIGBUS/SEGV. Exiting

The /var/log/messages file contained this:
Mar  9 09:14:13 inet12 kernel: end_request: I/O error, dev vda, sector
14539264
Mar  9 09:14:31 inet12 kernel: end_request: I/O error, dev vda, sector
14539296
Mar  9 09:14:48 inet12 kernel: end_request: I/O error, dev vda, sector
14539296

df
Filesystem   1K-blocksUsed Available Use% Mounted on
/dev/mapper/vg_inet02-lv_root
   7932336 2262672   5260064  31% /
tmpfs   961044   0961044   0% /dev/shm
/dev/vda1   487652  139473322579  31% /boot
. . .


This indicated that a bad sector on the underlying disk system might
be the source of the problem.  The guests were all shutdown, a
/forcefsck file was created on the host system, and the host system
remotely restarted.

However, this action did not remove the error.  The host system log
files had this to say about fsck:

/var/log/messages:Mar  9 08:34:48 vhost03 kernel: EXT4-fs (dm-6):
warning: maximal mount count reached, running e2fsck is recommended

in /dev I see this:
brw-rw. 1 root disk253,   6 Mar  9 08:34 dm-6

But, this device has nothing whatsoever to do with the kvm guests:

ll /dev/vg_vhost03/ | grep dm-6
lrwxrwxrwx. 1 root root 7 Mar  9 08:34 lv_centos_repos -> ../dm-6

Rather this is an lv devoted to holding CentOS ISOs:

/dev/mapper/vg_vhost03-lv_centos_repos
 101016992 77160124  18718848  81% /var/data/centos

So, my questions are:

1. How do I fix the problem with the guest system that Aide is
stumbling over?

2. How do I get the fsck issue with dm-6 resolved?


-- 
***  e-Mail is NOT a SECURE channel  ***
Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox for CentOS

2017-03-09 Thread Phelps, Matthew
On Wed, Mar 8, 2017 at 6:22 PM, Yamaban  wrote:

> On Wed, 8 Mar 2017 16:56, Johnny Hughes  wrote:
>
>> On 03/08/2017 09:39 AM, Phelps, Matthew wrote:
>>
>>> On Wed, Mar 8, 2017 at 10:25 AM, Johnny Hughes 
>>> wrote:
>>>
 On 03/08/2017 09:10 AM, m.r...@5-cent.us wrote:

> Johnny Hughes wrote:
>
>> I am currently building the latest Firefox updates and I have noticed
>> that they have upgraded the CentOS-7 Firefox from the ESR tree (45.8)
>> to
>> the mainline tree (Currently firefox-52.0).  They have left EL5 and
>> EL6
>> at the ESR level (45.8.0-2).
>>
>> EL7:
>> https://rhn.redhat.com/errata/RHSA-2017-0461.html
>>
>> EL5 and EL6:
>> https://rhn.redhat.com/errata/RHSA-2017-0459.html
>>
>> As stated above, I am currently building and testing these, so they
>> are
>> not yet released .. just preparing people for the changes.
>>
>
>>> Does anyone know if ESR 52.x will eventually be released for CentOS 6?
>>>
>>
>> I am sure it will, certainly when version 45 goes EOL.
>>
>> The variables and content to build it on EL6 are in the current EL7
>> SRPM, but the EL5 stuff is (understandably, since it is going EOL soon)
>> missing.
>>
>> What I am not sure of is if EL7 will stay on the Current Release for the
>> next update or if it will shift back to ESR.
>>
>
> Eh?? There is a slight misunderstanding here.
>
> The Firefox 52.0 Version is released for BOTH, the normal release channel
> AND the ESR channel. This was done to have one 6 week periode of overlapp
> between the old and the new ESR version, to "ease over" the transistion,
> as the 52 version insists on GKT3 and gstreamer 1.x normally.
>
> (snip)

This is the point that worries me. If ESR 52.x requires GTK3, then how can
it be supported on CentOS 6?


-- 
Matt Phelps
System Administrator, Computation Facility
Harvard - Smithsonian Center for Astrophysics
mphe...@cfa.harvard.edu, http://www.cfa.harvard.edu
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-09 Thread Alexander Dalloz

Am 2017-03-09 13:39, schrieb Alexander Dalloz:

Am 2017-03-09 02:20, schrieb Mark Weaver:

[ ... ]


Still googling around and found some things that appear to be missing
from the sendmail config, but when I test saslauthd it doesn't appear
to be working.

testsaslauthd -u username -p mypassword
0: NO "authentication failed"


How is your saslauthd configured? Which backend does it use? For
debugging purposes it is helpful not to start saslauthd as a service
but to run it with parameter -d to see its output on stdout.

Alexander



Btw. the cyrus-sasl man pages are nicely published here:

https://sys4.de/de/blog/tags/cyrus%20sasl/

Alexander
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-09 Thread Alexander Dalloz

Am 2017-03-09 02:20, schrieb Mark Weaver:

[ ... ]


Still googling around and found some things that appear to be missing
from the sendmail config, but when I test saslauthd it doesn't appear
to be working.

testsaslauthd -u username -p mypassword
0: NO "authentication failed"


How is your saslauthd configured? Which backend does it use? For 
debugging purposes it is helpful not to start saslauthd as a service but 
to run it with parameter -d to see its output on stdout.


Alexander

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-09 Thread Alexander Dalloz

Am 2017-03-09 00:41, schrieb Mark Weaver:

[ ... ]


And now?


telnet merlin 25

Trying 10.10.3.6...
Connected to merlin.ciss.local.
Escape character is '^]'.
220 mdw1982.com ESMTP Sendmail 8.14.7/8.14.7; Wed, 8 Mar 2017 18:39:51 
-0500

ehlo merlin
250-mdw1982.com Hello [10.10.3.102], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-DELIVERBY
250 HELP

auth login

504 5.3.3 AUTH mechanism login not available


Mark,

which cyrus-sasl packages did you install?

What's your precise Sendmail configuration in sendmail.mc? Please 
provide too your /etc/sasl2/Sendmail.conf as well your saslauthd 
configuration if you make use of it.


Alexander


P.S. This is a mailing list, so please strip your replies as it is not 
necessary to quote a hole previous mail. Just keep the context to which 
your reply. Thanks.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] another SMTP auth question

2017-03-09 Thread Alexander Dalloz

Am 2017-03-09 01:15, schrieb Fred Smith:
My ISP has just informed me that we will soon be required to 
authenticate
when connecting to their smtp server, so I've been looking around on 
the

web for how to do that with sendmail (just using auth when connecting
outward-bound, nothing else).

I've found a page here: http://www.sendmail.org/~ca/email/auth.html
that explains it simply (for simple minds, like mine) but it appears
to be old-ish.

So, I'm wondering if the recommendation of using:

define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5
LOGIN PLAIN')dnl

is still appropriate, since MD5 is known to be breakable. Are there 
other hash

mechanisms that can be used in SMTP for this purpose?


DIGEST-MD5 and CRAM-MD5 are shared secret mechanisms. Not the password 
or it's hash is transported over the wire.



Also, if someone can help me understand the syntax, I'd appreciate it:
does EXTERNAL mean some external tool not specified here? if so, how
is it specified? what such tools would be appropriate?


EXTERNAL means a lower layer is being used


is there something more robust, e.g., sha256 or similar that should
be used here instead?


No. You can make use of what got implemented by cyrus-sasl.


is GSSAPI internal, or does the external mean EXTERNAL GSSAPI?


GSSAPI is kerberos. No, EXTERNAL and GSSAPI are 2 mechanisms.


Thanks in advance for any tips.


See https://www.cyrusimap.org/docs/cyrus-sasl/2.1.25/


Fred


Only offer or use those mechanisms the partner side can deal with. PLAIN 
over a forcefully TLS secured connection is safe and a defacto standard.


Alexander

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 145, Issue 4

2017-03-09 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2017:0454 Important CentOS 5 kvm SecurityUpdate
  (Johnny Hughes)
   2. CESA-2017:0459 Critical CentOS 5 firefox Security Update
  (Johnny Hughes)
   3. CESA-2017:0459 Critical CentOS 6 firefox Security Update
  (Johnny Hughes)
   4. CEBA-2017:0472  CentOS 5 tzdata BugFix Update (Johnny Hughes)
   5. CEBA-2017:0472  CentOS 6 tzdata BugFix Update (Johnny Hughes)
   6. CEEA-2017:0458 CentOS 7 kmod-redhat-mpt3sas   Enhancement
  Update (Johnny Hughes)
   7. CEEA-2017:0460 CentOS 7 nspr Enhancement Update (Johnny Hughes)
   8. CEEA-2017:0460 CentOS 7 nss-util Enhancement  Update
  (Johnny Hughes)
   9. CEEA-2017:0460  CentOS 7 nss Enhancement Update (Johnny Hughes)
  10. CESA-2017:0461 Critical CentOS 7 firefox Security Update
  (Johnny Hughes)
  11. CEBA-2017:0472  CentOS 7 tzdata BugFix Update (Johnny Hughes)


--

Message: 1
Date: Wed, 8 Mar 2017 18:33:47 +
From: Johnny Hughes 
To: centos-annou...@centos.org
Subject: [CentOS-announce] CESA-2017:0454 Important CentOS 5 kvm
SecurityUpdate
Message-ID: <20170308183347.ga13...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2017:0454 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0454.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 


x86_64:
0e34501fb214585a504064e6aa4e92d8c6324981104fd7a29edc6f918e5cb238  
kmod-kvm-83-277.el5.centos.x86_64.rpm
9ed56a631d250bbda7b31e4a1df28387709f816b5974aa87ab522774273e480c  
kmod-kvm-debug-83-277.el5.centos.x86_64.rpm
38ddb0118eabc062c89dd5353b3da9f4574d4d03c3bb5dba677200cb5522fcb7  
kvm-83-277.el5.centos.x86_64.rpm
c96ade4c2185dd18a78fcf51c74fe7a7a916de7e45e339975ba14ec5d394928b  
kvm-qemu-img-83-277.el5.centos.x86_64.rpm
02aed4ba713b572ba9745a568289cb5c48b30b3f94f512a69b77c51bfc532a00  
kvm-tools-83-277.el5.centos.x86_64.rpm

Source:
125954ae9f9608b901902f81b2d144fbef70efff0e11a761787324457034832d  
kvm-83-277.el5.centos.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
Twitter: JohnnyCentOS



--

Message: 2
Date: Wed, 8 Mar 2017 18:38:57 +
From: Johnny Hughes 
To: centos-annou...@centos.org
Subject: [CentOS-announce] CESA-2017:0459 Critical CentOS 5 firefox
SecurityUpdate
Message-ID: <20170308183857.ga13...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2017:0459 Critical

Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0459.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
a34545c9cf03031487401a126491ebd9b070d5ae4939388b5257c0247934edbb  
firefox-45.8.0-2.el5.centos.i386.rpm

x86_64:
a34545c9cf03031487401a126491ebd9b070d5ae4939388b5257c0247934edbb  
firefox-45.8.0-2.el5.centos.i386.rpm
68ced987cc2f967a4d8034f1bce8cd63a8ef8a3213cd20d65b66a18a1ca00977  
firefox-45.8.0-2.el5.centos.x86_64.rpm

Source:
05f28d258f433afa408773c4cac5d3a96058a6e9e25b4991c2e90764335f89e1  
firefox-45.8.0-2.el5.centos.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
Twitter: JohnnyCentOS



--

Message: 3
Date: Wed, 8 Mar 2017 18:42:41 +
From: Johnny Hughes 
To: centos-annou...@centos.org
Subject: [CentOS-announce] CESA-2017:0459 Critical CentOS 6 firefox
SecurityUpdate
Message-ID: <20170308184241.ga61...@n04.lon1.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2017:0459 Critical

Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0459.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
4bec161eb52a589439c71ed05b1cec02090238945f06c5842c46131c1afdb1aa  
firefox-45.8.0-2.el6.centos.i686.rpm

x86_64:
4bec161eb52a589439c71ed05b1cec02090238945f06c5842c46131c1afdb1aa  
firefox-45.8.0-2.el6.centos.i686.rpm
5419e8f6cd70aaf324f787f935578562ecb86ffc853fd770a850f87050b7e928  
firefox-45.8.0-2.el6.centos.x86_64.rpm

Source:
d9df8316ea7d9e8656a6a2b5b08270d79726ab2be1959a4fd8cf787bb4a3f4a8  
firefox-45.8.0-2.el6.centos.src.rpm



-- 
Johnny Hughes
CentOS Project { http://ww

Re: [CentOS] Firefox for CentOS

2017-03-09 Thread James Pearson
Johnny Hughes wrote:
>
> What I am not sure of is if EL7 will stay on the Current Release for the
> next update or if it will shift back to ESR.

Not quite sure what you mean - the current EL7 firefox 52.0 uses the 
Mozilla Firefox 52.0 ESR source ...

James Pearson

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] From Networkmanager to self managed configuration files

2017-03-09 Thread Giles Coochey



On 09/03/17 09:28, John Hodrien wrote:


I'll obviously argue I wasn't scaremongering.  You can start with 
CentOS, and
do anything you like with it, and as I've said, you're absolutely free 
to do
that.  But at some point, you have to accept that what you've got left 
isn't
CentOS.  If you don't use what the distribution provides, what you're 
doing
isn't the distribution.  Given you're getting no formal support on 
this, that
possibly means little to you, but don't be surprised by the community 
backing
away from providing unofficial support to something that's no longer 
CentOS.


You see this sort of thing in a more extreme way with things like cPanel.
Well, let's put it this way, the more someone argues that I need to run 
some software that I clearly don't need, the more I become suspicious of 
what that software is doing. The network configuration of my servers is 
static, it doesn't need to be changed once the server has booted up. So 
it doesn't need some piece of software running away doing goodness knows 
what... I'm just going to be waiting for it to bug or error out and 
leave me high and dry without a network config.


I am not trying to suggest of encourage people to emulate what I have 
done, I have just been making a point that if you want to run something 
to manage your network configuration, and your network configuration is 
clearly not going to change, then it might be simpler to hardcode that 
configuration.


In any case, two alternatives have come out of this thread, the networkd 
alternative, and the configure-and-exit parameter to NetworkManager.


I think it best we leave this thread to die, and accept that others will 
not always do things your way and/or the Redhat/Centos way, but go on 
their own path, and they will probably be happy to accept that this is 
their own creation and the risks associated with that (no support / 
unknown behaviour in certain circumstances etc...). Their creation may 
address things that NetworkManager doesn't do in the future, and if 
adopted everyone will benefit.


Is this the Catherdral or the Bazaar?

--
Regards,

Giles Coochey
+44 (0) 7584 634 135
+44 (0) 1803 529 451
gi...@coochey.net


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] From Networkmanager to self managed configuration files

2017-03-09 Thread John Hodrien

On Thu, 9 Mar 2017, isdtor wrote:


Did I see an implicit "do as Red Hat says or else" there somewhere? Not
appropriate. Linux is not Windows (yet). In the heat of the moment it may
easily be forgotton that Linux is all about choice. We choose to run CentOS,
and we choose to run it the way we see fit. We appreciate the efforts that
go into the *Community* *Enterprise* OS, and if you have dealt with buggy
crap like Ubuntu or Fedora, you appreciate it even more. This does not imply
deference to upstream.

That statement about "effectively [running] your own Linux distribution" is
scaremongering, at best. If there's one thing I've learned on this list,
it's realizing how many use cases, scenarios and solutions there are that
can make approaching the topic at hand without prejudice challenging at
times.


I'll obviously argue I wasn't scaremongering.  You can start with CentOS, and
do anything you like with it, and as I've said, you're absolutely free to do
that.  But at some point, you have to accept that what you've got left isn't
CentOS.  If you don't use what the distribution provides, what you're doing
isn't the distribution.  Given you're getting no formal support on this, that
possibly means little to you, but don't be surprised by the community backing
away from providing unofficial support to something that's no longer CentOS.

You see this sort of thing in a more extreme way with things like cPanel.

jh
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] From Networkmanager to self managed configuration files

2017-03-09 Thread James Hogarth
On 9 March 2017 at 00:54, isdtor  wrote:
> Did I see an implicit "do as Red Hat says or else" there somewhere? Not 
> appropriate. Linux is not Windows (yet). In the heat of the moment it may 
> easily be forgotton that Linux is all about choice. We choose to run CentOS, 
> and we choose to run it the way we see fit. We appreciate the efforts that go 
> into the *Community* *Enterprise* OS, and if you have dealt with buggy crap 
> like Ubuntu or Fedora, you appreciate it even more. This does not imply 
> deference to upstream.
>
> That statement about "effectively [running] your own Linux distribution" is 
> scaremongering, at best. If there's one thing I've learned on this list, it's 
> realizing how many use cases, scenarios and solutions there are that can make 
> approaching the topic at hand without prejudice challenging at times.
>

You're reaching here.

It's simply there is good advice and sane management practices, and
there's bad advice and approaches to manage systems that have plenty
of clear issues and step way outside of the documented and supported
methods of handling things.

If you want to use a random script that has so many issues it's even
less supportable than the legacy network service, more power to you!
Just don't advise people entering into this area to do that and don't
expect much help from those more knowledgeable in those areas who
spend their own time assisting on the mailing list and IRC if you
insist on jumping off the cliff with your homemade parachute after
people have pointed out that patching it with small bits of cloth
wasn't the best of ideas ...
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos