Re: [CentOS] Centos 6.5 - Fping - SE Linux - Missing type enforcement (TE) allow rule

2014-10-25 Thread admin
I've just recreated the module and enabled it, yet I can't seem to allow fping to be used by the httpd process. It seems that the last error was just a byproduct of a bad module I had not properly removed. Are there any additional troubleshooting steps I could try? What I've done so far : 1)

[CentOS] Update from 6.5 to 6.6 breaks epel qt5

2014-10-25 Thread Devin Reade
Just a heads up, if anyone is doing QT development with the EPEL RPMs, the update from RHEL 6.5 to 6.6 breaks the current qt5 RPMS. In fact, I had to uninstall qt5 to perform the update. I've submitted a bug report upstream, so hopefully it'll get resolved before too much longer. In the interim

Re: [CentOS] And now for something completely different. Win7 on KVM

2014-10-25 Thread James B. Byrne
On Fri, October 24, 2014 16:09, Nathan Duehr wrote: >> On Oct 22, 2014, at 15:15, James B. Byrne wrote: >> >> >> As you can probably guess by now I am working my way down through my >> outstanding issue list trying to get as many deferred items closed out as I >> can before the next security stor

Re: [CentOS] Centos 6.5 - Fping - SE Linux - Missing type enforcement (TE) allow rule

2014-10-25 Thread Greg Lindahl
On Sat, Oct 25, 2014 at 04:22:38PM -0400, admin wrote: > # This avc is allowed in the current policy > allow httpd_t self:capability net_raw; > allow httpd_t self:rawip_socket create; This confusing output means that the first "allow" line is in the current policy, and the second is not. --

Re: [CentOS] C7 : Firewalld

2014-10-25 Thread Marcelo Ricardo Leitner
On 25-10-2014 09:40, Timothy Murphy wrote: Vijay Rajah wrote: You can still use iptables with Centos7, if you want... (AFAIK both firewalld & iptables use the same kernel functions) Yes.. both are just frontends for iptables with profile presets, no more than that. As a matter of interest

[CentOS] Centos 6.5 - Fping - SE Linux - Missing type enforcement (TE) allow rule

2014-10-25 Thread admin
Hi gents, I seem to have a small issue with fping and Observium(a monitoring solution). The particular VPS I'm using does have SELinux enabled and it seems to be causing issues when the httpd process is attempting to use Fping? Here is what I know so far : Output from "audit2why -a" :

Re: [CentOS] Upgrading to CentOS-7 on a new partition

2014-10-25 Thread Ted Miller
On 10/25/2014 09:40 AM, Timothy Murphy wrote: I would like to upgrade a CentOS-6.5 home server to CentOS-7 on a new partition. What is the simplest way to achieve this? I would like to be able to boot into either version of CentOS until I am sure the new version is running OK. Incidentally, I t

Re: [CentOS] [exim] Some feature

2014-10-25 Thread Always Learning
On Fri, 2014-10-24 at 13:35 +0400, Фадеев Виталий Львович wrote: > Yes. Its worked if i send email to fvl+t...@domain.com from f...@domain.com > account, but doesnt work if a i send to another user like > realuser+t...@domain.com . > In logs "Unknown user" What is your Exim configuration s

Re: [CentOS] Q. LUKS or ecryptfs-utils ?

2014-10-25 Thread Devin Reade
--On Wednesday, October 22, 2014 03:32:32 PM -0400 "James B. Byrne" wrote: > We can live with manually mounting the file system and providing a > pass-phrase at boot. we are also looking into a semi-auto USB based > solution to that issue. Regarding the USB comment, see CentOS 5.4+:

Re: [CentOS] What is a client certificate?

2014-10-25 Thread Leon Fauster
Am 24.10.2014 um 18:31 schrieb Valeri Galtsev : > > On Fri, October 24, 2014 10:43 am, Timothy Murphy wrote: >> A very ignorant question, sans doute. >> >> I get my certificates from cacert.org, to whom I am very grateful. >> I follow what I take to be the official procedure, >> first creating .k

[CentOS] Upgrading to CentOS-7 on a new partition

2014-10-25 Thread Timothy Murphy
I would like to upgrade a CentOS-6.5 home server to CentOS-7 on a new partition. What is the simplest way to achieve this? I would like to be able to boot into either version of CentOS until I am sure the new version is running OK. Incidentally, I think most people today must have enough space on

Re: [CentOS] C7 : Firewalld

2014-10-25 Thread Timothy Murphy
Vijay Rajah wrote: > You can still use iptables with Centos7, if you want... (AFAIK both > firewalld & iptables use the same kernel functions) As a matter of interest, how does firewalld compare with shorewall? They look rather similar. I am running CentOS-7 on a home server, with shorewall. I w

Re: [CentOS] C7 : Firewalld

2014-10-25 Thread Vijay Rajah
On 25/10/14 1:42 AM, Always Learning wrote: Being a fan of IPtables and dreading the eventual transition to Centos 7, I wondered if in C7's firewalld an interface can be assigned to a single zone or to multiple zones such as 'private' and 'trusted'. You can still use iptables with Centos7, if