[CentOS] firewalld default policy = allow = no affect.

2015-02-12 Thread dE
Hi! I'm running CentOS 7. Looking at the default policies of various zones, I've come to realize that only the drop zone has an affect, that's because this's the only one which drops unmatched packets. ___ CentOS mailing list CentOS@centos.org http:

Re: [CentOS] ntptrace ***Request timed out with stock C6 ntpd

2015-02-12 Thread Peter Lawler
On 12/02/15 23:26, Patrick Bervoets wrote: > Following the recent ntp posts I decided to check my setup with ntptrace. > > localhost: stratum 3, offset -0.20, synch distance 0.016330 > 81.95.117.62: timed out, nothing received > ***Request timed out am guessing here, but from the man page: For

Re: [CentOS] test, and H/W

2015-02-12 Thread m . roth
John R Pierce wrote: > On 2/12/2015 12:32 PM, m.r...@5-cent.us wrote: >> I finally talked to Dell, and was told, and I quote, >> <...> three terabyte drives aren't supported the raid controller >> installed in this server, the SAS 6 i/r. > > the SAS 6/iR is a LSI SAS 1068E chip, kind of an old chip

Re: [CentOS] test, and H/W

2015-02-12 Thread John R Pierce
On 2/12/2015 12:32 PM, m.r...@5-cent.us wrote: I finally talked to Dell, and was told, and I quote, <...> three terabyte drives aren't supported the raid controller installed in this server, the SAS 6 i/r. the SAS 6/iR is a LSI SAS 1068E chip, kind of an old chip (the 1068 stuff was long ago r

Re: [CentOS] Securing SSH wiki article outdated

2015-02-12 Thread m . roth
Warren Young wrote: > Hi, just a quick note to whoever is maintaining this page: > > http://wiki.centos.org/HowTos/Network/SecuringSSH > > The procedure is missing the firewall-cmd calls necessary in EL7: > > firewall-cmd --add-port 2345/tcp > firewall-cmd --add-port 2345/tcp --permanent > >

[CentOS] test, and H/W

2015-02-12 Thread m . roth
Hi, folks, This is a test post; to make it of interest, here's an issue you might want to be aware of, those with not brand new hardware. We've got a few Dell PE R415s. A 2TB b/u drive on one was getting full, so I went to replace it with a 3TB drive (a WD Red, not that it matters.) We got the

[CentOS] Securing SSH wiki article outdated

2015-02-12 Thread Warren Young
Hi, just a quick note to whoever is maintaining this page: http://wiki.centos.org/HowTos/Network/SecuringSSH The procedure is missing the firewall-cmd calls necessary in EL7: firewall-cmd --add-port 2345/tcp firewall-cmd --add-port 2345/tcp --permanent Also, it may be worth mentioning tha

Re: [CentOS] Thread moderation and list etiquette (Reference - Another Fedora Decision)

2015-02-12 Thread Andrew Holway
On 12 February 2015 at 19:08, Les Mikesell wrote: > On Thu, Feb 12, 2015 at 10:51 AM, Brian Mathis > wrote: > > CentOS is unquestionably one of the most used Linux distros > > in the world, and yet the mailing list is relatively quiet. To me this > is > > a symptom of a problem, and I feel that

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Matt
>> I need to remove empty files out of a directory that are over 6 hours >> old so I created this script and put it in cron.hourly. > > For what it's worth, we no longer have requiretty in the package in > Fedora, so eventually that change will probably make it down to CentOS. > Overall, security b

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Valeri Galtsev
On Thu, February 12, 2015 12:45 pm, Valeri Galtsev wrote: > > On Thu, February 12, 2015 12:32 pm, Matt wrote: >> I need to remove empty files out of a directory that are over 6 hours >> old so I created this script and put it in cron.hourly. >> >> #!/bin/sh >> cd /var/list >> sudo -u matt find /va

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Matthew Miller
On Thu, Feb 12, 2015 at 12:32:12PM -0600, Matt wrote: > I need to remove empty files out of a directory that are over 6 hours > old so I created this script and put it in cron.hourly. For what it's worth, we no longer have requiretty in the package in Fedora, so eventually that change will probabl

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Valeri Galtsev
On Thu, February 12, 2015 12:32 pm, Matt wrote: > I need to remove empty files out of a directory that are over 6 hours > old so I created this script and put it in cron.hourly. > > #!/bin/sh > cd /var/list > sudo -u matt find /var/list -mmin +360 -empty -user matt -exec rm {} \; > > I want to run

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Mauricio Tavares
On Thu, Feb 12, 2015 at 1:32 PM, Matt wrote: > I need to remove empty files out of a directory that are over 6 hours > old so I created this script and put it in cron.hourly. > > #!/bin/sh > cd /var/list > sudo -u matt find /var/list -mmin +360 -empty -user matt -exec rm {} \; > What if you

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Larry Martell
On Thu, Feb 12, 2015 at 1:32 PM, Matt wrote: > I need to remove empty files out of a directory that are over 6 hours > old so I created this script and put it in cron.hourly. > > #!/bin/sh > cd /var/list > sudo -u matt find /var/list -mmin +360 -empty -user matt -exec rm {} \; > > I want to run it

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Eero Volotinen
You can disable requiretty for one user also: https://linuxreference.wordpress.com/2010/11/22/disable-requiretty-in-etcsudoers/ -- Eero 2015-02-12 20:32 GMT+02:00 Matt : > I need to remove empty files out of a directory that are over 6 hours > old so I created this script and put it in cron.hour

[CentOS] Cronjob and sudo

2015-02-12 Thread Matt
I need to remove empty files out of a directory that are over 6 hours old so I created this script and put it in cron.hourly. #!/bin/sh cd /var/list sudo -u matt find /var/list -mmin +360 -empty -user matt -exec rm {} \; I want to run it as matt rather than root for just an added bit of safety.

Re: [CentOS] Thread moderation and list etiquette (Reference - Another Fedora Decision)

2015-02-12 Thread Les Mikesell
On Thu, Feb 12, 2015 at 10:51 AM, Brian Mathis wrote: > CentOS is unquestionably one of the most used Linux distros > in the world, and yet the mailing list is relatively quiet. To me this is > a symptom of a problem, and I feel that it's partially a result of the same > regular people, I think

Re: [CentOS] Thread moderation and list etiquette (Reference - Another Fedora Decision)

2015-02-12 Thread Brian Mathis
Hi Jim, Thanks for putting in the effort here. It's never a good situation to have to moderate, but sometimes it is necessary. From my perspective, this kind of thing happens far more often than the current example, though maybe not with such intensity. This situation forces me to evaluate if r

Re: [CentOS] Packages not available in CentOS 7

2015-02-12 Thread Brian Mathis
It sounds like you are trying to blindly install a set of packages from CentOS 5 to CentOS 7. This is not going to work as there are numerous changes between those versions. You need to understand and consider what packages you need for your application and then track down the necessary ones that

[CentOS] info/EL5: subversion / mod_dav_svn

2015-02-12 Thread Leon Fauster
Just to point out that EL5 does not get this patch: https://rhn.redhat.com/errata/RHSA-2015-0165.html "A NULL pointer dereference flaw was found in the way the mod_dav_svn module handled REPORT requests. A remote, unauthenticated attacker could use a specially crafted REPORT request to cra

[CentOS] ntptrace ***Request timed out with stock C6 ntpd

2015-02-12 Thread Patrick Bervoets
Following the recent ntp posts I decided to check my setup with ntptrace. localhost: stratum 3, offset -0.20, synch distance 0.016330 81.95.117.62: timed out, nothing received ***Request timed out service ntpd status ntpd (pid 3018) is gestart... grep server /etc/ntp.conf | grep -v "#" ser

Re: [CentOS] Why the command 'service ntpd stop' cause the time reversed?

2015-02-12 Thread John R Pierce
On 2/12/2015 12:27 AM, David chen wrote: i have added a new line "server 192.168.0.191" into file "/etc/ntp.conf" on ntpd client machines, and the output to execute command ntpstat is as follows: synchronised to NTP server (192.168.0.191) at stratum 3 time correct to within 80 ms polling

Re: [CentOS] Why the command 'service ntpd stop' cause the time reversed?

2015-02-12 Thread David chen
Hi guys, I don't use virtual machine. The 192.168.0.191 is an internal ntpd server configured by administrator, so i can not see what ntp server it synchronizes to or what is its time reference. But i have added a new line "server 192.168.0.191" into file "/etc/ntp.conf" on ntpd client machines

Re: [CentOS] Why the command 'service ntpd stop' cause the time reversed?

2015-02-12 Thread Andrew Holway
> I've seen situations where people have put ntpdate in a cronjob to get > around issues with big time jumps at boot or dodgy clocks under > virtualization. There are much better solutions to this problem, so > let us know if this is the case for you. > put "tinker panic 0" in your ntp.conf. This