Re: [CentOS] selinux commands fail on low memory box

2015-10-14 Thread Eero Volotinen
How about adding some swap into system? -- Eero 2015-10-15 4:40 GMT+03:00 Tim Dunphy : > Hey all, > > I have 3 web servers hosted at Digital Ocean that all have the same amount > of memory at 512MB. They're all running CentOS 7. > > They are low powered apache servers and don't really need mor

Re: [CentOS] Exists some problem with cronjobs under CentOS7

2015-10-13 Thread Eero Volotinen
Please note that /etc/cron.* files use a bit different syntax as normal crontab entries. First entry is user-id for cron job. It also requires strict permissions like (rw,r,r) Eero 2015-10-13 17:39 GMT+03:00 C. L. Martinez : > On Tue, Oct 13, 2015 at 2:35 PM, Jonathan Billings > wrote: > > On T

Re: [CentOS] Exists some problem with cronjobs under CentOS7

2015-10-11 Thread Eero Volotinen
Because systemwide cronjobs are installed in /etc/cron.* directories, not in root user cron file.. Eero 11.10.2015 7.39 ip. "C. L. Martinez" kirjoitti: > On Sunday, October 11, 2015, Jonathan Billings > wrote: > > > On Oct 11, 2015, at 8:20 AM, C. L. Martinez > > wrote: > > > I am having stran

Re: [CentOS] filesystem mounting fails at boot

2015-10-10 Thread Eero Volotinen
Does it work usin netdev option? Eero 10.10.2015 4.17 ip. "Imre Gergely" kirjoitti: > > Hi > > I have an IBM blade with internal harddisks, in hardware RAID1. I've > installed a CentOS 6 64bit on it, everything works just fine. > > After the installation, I've presented a vdisk to the blade from

Re: [CentOS] Systemd spends 6 min. to startup a host

2015-10-05 Thread Eero Volotinen
This looks like modifications broke network configuration and it may affect startup speed. Please try standard network configuration first. -- Eero 2015-10-05 11:38 GMT+03:00 Mihamina Rakotomandimby < mihamina.rakotomandi...@rktmb.org>: > On 10/03/2015 07:47 PM, C.L. Martinez wrote: > >> Hi all

Re: [CentOS] Systemd spends 6 min. to startup a host

2015-10-05 Thread Eero Volotinen
Sound like your modifications messed something with network configuration? -- Eero 2015-10-03 19:47 GMT+03:00 C.L. Martinez : > Hi all, > > I have a strange behavior with a CentOS7 host (fully patched). I have > configured nics as old style format: ifcfg- ... due to I need to use > openvswitch

Re: [CentOS] decode http hack attempt?

2015-09-24 Thread Eero Volotinen
See: http://code.taobao.org/p/tpbase/diff/2/trunk/ThinkPHP/Library/Think/App.class.php if(!$module) { +if('4e5e5d7364f443e28fbf0d3ae744a59a' == CONTROLLER_NAME) { +header("Content-type:image/png"); +exit(base64_decode(App::logo())); +}

Re: [CentOS] CentOS6 - Break in attempt? What is the Exploit?

2015-09-21 Thread Eero Volotinen
well. sounds like some automatic deploytment tool? error ip ip address or other configuration failure? http://stackoverflow.com/questions/6356212/ant-scp-task-failure -- Eero 2015-09-21 11:29 GMT+03:00 James B. Byrne : > This morning's log review revealed this sshd log entry on one of our > web

Re: [CentOS] Centos 7 yum search giving Could not retrieve mirrorlist

2015-09-14 Thread Eero Volotinen
Is your dns working correctly? (for example get hostname for mirrorlist.centos.org, try using command 'host mirrorlist.centos.org) -- Eero 2015-09-14 18:59 GMT+03:00 Shawn Parks - CMAC : > Centos main list, > I am working on a Centos 7 system and trying to do the following. > > yum search

Re: [CentOS] echo password into bash script

2015-08-25 Thread Eero Volotinen
Use expect? Eero 25.8.2015 7.52 ip. "Tim Dunphy" kirjoitti: > Hey guys, > > I'm trying to echo my password into some commands inside of a bash script. > But I think I'm going about it incorrectly. > > Here's the top part of my script: > > #!/bin/bash > pub="~/.ssh/id_rsa.pub" > dps_pass="my_pas

Re: [CentOS] Compile for C6 / glibc

2015-08-25 Thread Eero Volotinen
How about virtualization and running on supported platform? Eero 25.8.2015 4.03 ip. "Leon Fauster" kirjoitti: > > In the hope that some skilled developers are here: > > We have a commercial product that do not run under CentOS6 > > /lib64/libc.so.6: version `GLIBC_2.14' not found > > Is it possi

Re: [CentOS] Cannot print on Centos 6.7

2015-08-21 Thread Eero Volotinen
Well, maybe it's bug in cups? Usually software comes with bugs.. Eero 21.8.2015 7.52 ip. "Gilbert Sebenste" kirjoitti: > On Fri, 21 Aug 2015, Eero Volotinen wrote: > > Hello Eero, > > Well, is it really supported on Linux? I can't find driver for it on: >

Re: [CentOS] Cannot print on Centos 6.7

2015-08-21 Thread Eero Volotinen
Well, is it really supported on Linux? I can't find driver for it on: http://www.openprinting.org/printers -- Eero 2015-08-21 19:23 GMT+03:00 Gilbert Sebenste : > Hello everyone, > > I have been scouring the Internet for answers, wikipages, non-Centos > pages, and I am stumped. > > I have a HP

Re: [CentOS] unpatched local root on centos 5?

2015-08-13 Thread Eero Volotinen
Sound very weird, that supported os is not patched. is the list of non patched security issues in rhel 5 / centos 5 -- Eero 2015-08-14 7:59 GMT+03:00 Mark Milhollan : > On Thu, 13 Aug 2015, Eero Volotinen wrote: > > >Looks like this affects on centos 5 and is unpatched li

Re: [CentOS] unpatched local root on centos 5?

2015-08-13 Thread Eero Volotinen
well, very sad to hear as I use commercial rhel 5 and paying for it.. Eero 2015-08-13 19:57 GMT+03:00 Johnny Hughes : > On 08/12/2015 10:43 PM, Eero Volotinen wrote: > > Hi List, > > > > Looks like this affects on centos 5 and is unpatched like on rhel 5? > > &g

[CentOS] unpatched local root on centos 5?

2015-08-12 Thread Eero Volotinen
Hi List, Looks like this affects on centos 5 and is unpatched like on rhel 5? https://access.redhat.com/articles/1537873 Trying to test if this affects on centos 5. can someone compile this exploit on centos 5? https://www.qualys.com/research/security-advisories/roothelper.c any ideas how to co

Re: [CentOS] Apache mod_perl cross site scripting vulnerability

2015-08-11 Thread Eero Volotinen
How about something like: # disallow public access Order Deny, Allow Deny from all Allow from 127.0.0.1 SetHandler perl-script PerlResponseHandler Apache2::Status 2015-08-11 14:46 GMT+03:00 Proxy One : > Hello, > > I've failed latest PCI scan because

Re: [CentOS] rsync stuck at +- 50 MB/s, cp and scp are +- 200 MB/s

2015-08-11 Thread Eero Volotinen
d +-. > > But non of that solutions helped me. > > /Götz > > > > > > Am 11.08.2015 um 12:14 schrieb Eero Volotinen : > > > > Usually problem in encryption. > > > > try cipher arcfour or apply hpn patches to ssh. ( > http://www.psc.ed

Re: [CentOS] rsync stuck at +- 50 MB/s, cp and scp are +- 200 MB/s

2015-08-11 Thread Eero Volotinen
Usually problem in encryption. try cipher arcfour or apply hpn patches to ssh. ( http://www.psc.edu/index.php/hpn-ssh) -- Eero 2015-08-11 12:37 GMT+03:00 Götz Reinicke - IT Koordinator < goetz.reini...@filmakademie.de>: > Hi, > > i have two servers, connected to to the lan by 10Gb with 10Gb and

Re: [CentOS] Shared folders with Centos-7 guest in VMware-10 using open-vm-tools

2015-08-06 Thread Eero Volotinen
try modprobe vmhgfs -- Eero 2015-08-07 6:53 GMT+03:00 Bob Hepple : > Bob Hepple writes: > > > It's the shared folder that I would really like to get working. vmware- > > hgfsclient reports my share but there is no /mnt/hgfs directory. Also > > 'lsmod|grep hgfs' reports nothing. > > > > also: >

Re: [CentOS] Openssl security patch

2015-07-09 Thread Eero Volotinen
Not affected: https://access.redhat.com/solutions/1523323 -- Eero 2015-07-09 16:52 GMT+03:00 Valeri Galtsev : > Just heads up everybody, > > there is new security patch of openssl: > > https://www.openssl.org/news/ > > so we can expect patched openssl from upstream vendor shortly. > > Valeri > >

Re: [CentOS] Virtualization

2015-06-17 Thread Eero Volotinen
well. current version of kvm on centos does not allow live backups without downtime to guest. it's only possible with newer version of kvm and related qemu tools.. so sad.. -- Eero 2015-06-17 19:44 GMT+03:00 Gordon Messmer : > On 06/17/2015 03:32 AM, Robert Heller wrote: > >> If host is using L

Re: [CentOS] Virtualization

2015-06-17 Thread Eero Volotinen
qemu-img works for most image conversion formats including from vmware to kvm. try it? -- Eero 2015-06-17 14:43 GMT+03:00 Mihamina Rakotomandimby < mihamina.rakotomandi...@rktmb.org>: > On 06/17/2015 11:10 AM, John R Pierce wrote: > >> regardless of all that noise, in RHEL and therefore CentOS,

Re: [CentOS] Virtualization

2015-06-17 Thread Eero Volotinen
yep, but still lack critical features :) like livebackup. 2015-06-17 12:26 GMT+03:00 Leon Fauster : > Am 17.06.2015 um 11:17 schrieb Eero Volotinen : > > It's so sad that centos is using very old versio on kvm > > and due that fact live backup without downtime is not possi

Re: [CentOS] Virtualization

2015-06-17 Thread Eero Volotinen
It's so sad that centos is using very old versio on kvm and due that fact live backup without downtime is not possible. Anyway, virtsh+virtmanager + kvm is good choice. -- Eero 2015-06-17 11:10 GMT+03:00 John R Pierce : > regardless of all that noise, in RHEL and therefore CentOS, KVM is the >

Re: [CentOS] How to install clang on CentOS 7?

2015-06-08 Thread Eero Volotinen
I think that EPEL repository provides clang compiler? -- Eero 2015-06-08 10:30 GMT+03:00 Nan Xiao : > Hi all, > > I want to install clang on CentOS 7. After executing "yum install > clang", it outputs: > > [root@hp ~]# yum install clang > Loaded plugins: fastestmirror > Loading mirror speeds fro

Re: [CentOS] could not insert 'fuse' error on CentOS 7.1

2015-06-07 Thread Eero Volotinen
& ubuntu. > That may be necessary for s3fs, because so far I haven't found it in any of > the repositories I use. Generally Iike epel, rpmforge, remi and a few > others. > > Anyone know of a repo that includes s3fs? > > Thanks, > Tim > > On Sun, Jun 7, 2015 a

Re: [CentOS] could not insert 'fuse' error on CentOS 7.1

2015-06-07 Thread Eero Volotinen
Centos 7 base repo contains fuse, use it. it works. handcompiling packages to centos is *really* stupid, without proper knowledge.. eero 2015-06-07 10:06 GMT+03:00 Александр Кириллов : > I've tried googling this to no avail!! >> > > Have you tried The young mechanics mailing list yet? > And have

Re: [CentOS] could not insert 'fuse' error on CentOS 7.1

2015-06-06 Thread Eero Volotinen
it's stupid to compiles fuse from sources. please use binary packages. Eero 2015-06-07 5:27 GMT+03:00 Tim Dunphy : > Hey guys, > > I tried installing the latest fuse on CentOS 7.1. I downloaded the latest > version (2.9.4) from sourceforge and did a source install. After rebooting > the host, n

Re: [CentOS] Regarding CVE-2015-1781 vulnerability in Glibc

2015-06-05 Thread Eero Volotinen
Many other security issues affect *unpatched* Centos 5.5 version. Some of very critical too .. -- Eero 2015-06-05 11:58 GMT+03:00 John Tall : > On Fri, Jun 5, 2015 at 10:48 AM, Venkateswara Rao Dokku > wrote: > > Thanks for the reply. > > > > Where can we get the info regarding whether its fixe

Re: [CentOS] Regarding CVE-2015-1781 vulnerability in Glibc

2015-06-05 Thread Eero Volotinen
Latest version of Centos is 5.11, so you needs to update latest minor version to get patches .. -- Eero 2015-06-05 11:48 GMT+03:00 Venkateswara Rao Dokku : > Thanks for the reply. > > Where can we get the info regarding whether its fixed in CentOS 5 or not? > > I did rpm -q --changelog | grep

Re: [CentOS] can't disable tcp6 on centos 7

2015-05-03 Thread Eero Volotinen
Tim, where did you installed this nrpe package? is selinux running enforcing mode (getenforce command), try disabling with setenforce 0. why you are running it under xinetd as usual way is to run it as nrped daemon. test against with check_nrpe, not using telnet. -- Eero 2015-05-04 2:27 GMT+03:

Re: [CentOS] can't disable tcp6 on centos 7

2015-05-03 Thread Eero Volotinen
is it working on localhost or not???!!! it could be selinux problem also, if context is not correct. -- Eero 2015-05-04 1:55 GMT+03:00 Tim Dunphy : > > > > It's listening on both IPv6 and IPv4. Specifically, why is that a > problem? > > > The central problem seems to be that the monitoring host

Re: [CentOS] Could not complete SSL handshake to Amazon EC2 host

2015-05-01 Thread Eero Volotinen
63 TCP *:nrpe (LISTEN) > > > > > > > > > And I can verify that the nrpe conf is owned by the nagios user and > > group: > > > > > > [root@ops:~] #ls -l /usr/local/nagios/etc/nrpe.cfg > > > -rw-r--r-- 1 nagios nagios 7988 May 1 00:37 >

Re: [CentOS] Could not complete SSL handshake to Amazon EC2 host

2015-05-01 Thread Eero Volotinen
well. how about trying default setting and running nrped without xinetd. -- Eero 2015-05-01 14:14 GMT+03:00 Tim Dunphy : > > This is strange... > > Do you have SSL aktive on both systems? Run nrpr localy without > parameters > > (this should return some nrpe stats) and check ldd for libssl. > >

Re: [CentOS] Cron Issues

2015-04-29 Thread Eero Volotinen
Check selinux context for directory? 30.4.2015 12.19 ap. "Matt" kirjoitti: > I have noanacron installed on a fresh centos 7 install. > > I added this too settings. > > nano /etc/cron.d/0hourly > > */5 * * * * root run-parts /etc/cron.fiveminutes > */1 * * * * root run-parts /etc/cron.minute > 0,3

Re: [CentOS] can't install gd-devel on centos 7.1

2015-04-26 Thread Eero Volotinen
2015-04-27 1:30 GMT+03:00 John R Pierce : > On 4/26/2015 1:54 PM, Tim Dunphy wrote: > >> Hey guys, >> >> >> I'm trying to instal gd-devel onto a CentOS 7 host. >> >> --> Finished Dependency Resolution >> Error: Package: gd-last-devel-2.1.1-2.el7.remi.x86_64 (remi) >> Requires: libvpx-d

Re: [CentOS] can't install gd-devel on centos 7.1

2015-04-26 Thread Eero Volotinen
2015-04-27 0:05 GMT+03:00 John R. Dennison : > On Sun, Apr 26, 2015 at 11:56:18PM +0300, Eero Volotinen wrote: > > Disable remi repo and try again.. > > And perhaps ask Red Hat as you apparently aren't running CentOS. > > Yep. looks like expensive rhel host

Re: [CentOS] can't install gd-devel on centos 7.1

2015-04-26 Thread Eero Volotinen
Disable remi repo and try again.. 26.4.2015 11.54 ip. "Tim Dunphy" kirjoitti: > Hey guys, > > > I'm trying to instal gd-devel onto a CentOS 7 host. > > --> Finished Dependency Resolution > Error: Package: gd-last-devel-2.1.1-2.el7.remi.x86_64 (remi) >Requires: libvpx-devel(x86-64) >

Re: [CentOS] Centos security update

2015-04-24 Thread Eero Volotinen
2015-04-24 15:31 GMT+03:00 Jim Perrin : > > > On 04/24/2015 04:21 AM, Venkateswara Rao Dokku wrote: > > Hi, > > > > I was using CentOS 7 and when I ran some custom commercial security scan > on > > my machine, I found about 122 vulnerabilities. > > > > Can you help me on how to get security upgrad

Re: [CentOS] Centos security update

2015-04-24 Thread Eero Volotinen
2015-04-24 12:21 GMT+03:00 Venkateswara Rao Dokku : > Hi, > > I was using CentOS 7 and when I ran some custom commercial security scan on > my machine, I found about 122 vulnerabilities. > > Can you help me on how to get security upgrades on top of my existing > CentOS? > > # cat /etc/redhat-relea

Re: [CentOS] SIG - Hardening

2015-04-22 Thread Eero Volotinen
Sounds like a bit basic stuff? How about hardening ciphers, two factor authentication, snort, web application firewall and scap scanning? Eero 22.4.2015 10.14 ap. "Andrew Holway" kirjoitti: > SELinux? > > On 22 April 2015 at 09:11, John R Pierce wrote: > > >

Re: [CentOS] SIG - Hardening

2015-04-21 Thread Eero Volotinen
apply also ideas from this document: https://benchmarks.cisecurity.org/downloads/show-single/?file=rhel6.130 -- Eero 2015-04-22 9:30 GMT+03:00 Tim : > I am very interested. > > One of my suggestions: > > Firewall: > Network based firewall zone assignment (possibly disabling interface based > ass

Re: [CentOS] CentOS5 + lighttpd (EPEL) - fix Chrome security warning?

2015-04-20 Thread Eero Volotinen
You need to reissue cert with stronger hash algorithm than sha1 Eero 21.4.2015 1.13 ap. "Bart Schaefer" kirjoitti: > Apologies if I should ask this elsewhere, google search is not helping. > > I've got a CentOS5 server with lighttpd installed from EPEL, > configured for https only (no connection

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-17 Thread Eero Volotinen
2015-04-17 14:40 GMT+03:00 Peter : > On 04/17/2015 11:20 PM, Eero Volotinen wrote: > > Yep, maybe using ssl offloading devices like (BigIP) that receives tls1.2 > > and tlsv1.2 and then re-encrypts traffic with tls1.0 might be "cheapest" > > solution. > > Per

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-17 Thread Eero Volotinen
2015-04-17 14:26 GMT+03:00 Dennis Jacobfeuerborn : > The cheapest sollution is probably compiling a private openssl somewhere > on the system and then compiling apache using that private openssl > version instead of the default system-wide one.=== > > Well, not really. cheapest and

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-17 Thread Eero Volotinen
Yep, maybe using ssl offloading devices like (BigIP) that receives tls1.2 and tlsv1.2 and then re-encrypts traffic with tls1.0 might be "cheapest" solution. -- Eero 2015-04-17 14:15 GMT+03:00 Johnny Hughes : > On 04/16/2015 05:00 PM, Eero Volotinen wrote: > > in fact: modg

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
in fact: modgnutls provides easy way to get tlsv1.2 to rhel 5 -- Eero 2015-04-16 21:02 GMT+03:00 Eero Volotinen : > well. this hack solution might work: > http://www.tuxad.de/blog/archives/2014/11/19/openssl_updatesenhancements_for_rhel__centos_5/index.html > > -- > Eero >

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
well. this hack solution might work: http://www.tuxad.de/blog/archives/2014/11/19/openssl_updatesenhancements_for_rhel__centos_5/index.html -- Eero 2015-04-16 17:30 GMT+03:00 Leon Fauster : > Am 16.04.2015 um 11:46 schrieb Leon Fauster : > > Am 16.04.2015 um 11:43 schrieb Eero

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
How about using gnutls? Eero 16.4.2015 12.46 ip. "Leon Fauster" kirjoitti: > Am 16.04.2015 um 11:43 schrieb Eero Volotinen : > > Is there any nice way to get tlsv1.2 support to centos 5? > > upgrading os to 6 is not option available. > > &

[CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
Hi, Is there any nice way to get tlsv1.2 support to centos 5? upgrading os to 6 is not option available. -- Eero ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Laptop for CentOS

2015-04-15 Thread Eero Volotinen
2015-04-16 0:07 GMT+03:00 Johnny Hughes : > On 04/15/2015 12:38 PM, Eero Volotinen wrote: > > Usually works fine, but try with livecd, if possible in shop? > > Thinkpads usually work fine with Linux too. > > Thinkpads are also specifically the laptops that Red Hat issues &

Re: [CentOS] Laptop for CentOS

2015-04-15 Thread Eero Volotinen
Usually works fine, but try with livecd, if possible in shop? Thinkpads usually work fine with Linux too. -- Eero 2015-04-15 20:35 GMT+03:00 Steve Clark : > On 04/15/2015 01:01 PM, Eero Volotinen wrote: > >> Hi, >> >> Dell provides laptops with RHEL ws. Buy one of tha

Re: [CentOS] Laptop for CentOS

2015-04-15 Thread Eero Volotinen
Hi, Dell provides laptops with RHEL ws. Buy one of that kind ? Eero 2015-04-15 19:55 GMT+03:00 Steve Clark : > Hello, > > Has anyone used the Dell M3800 (ubuntu) laptop to run CentOS 6.x? If so > how did it work out? > > Also does anyone have a fairly new laptop they are running CentOS 6.x on,

Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Eero Volotinen
2015-04-14 22:05 GMT+03:00 Florin Andrei : > On 2015-04-14 11:44, Eero Volotinen wrote: > >> 2015-04-14 21:40 GMT+03:00 Florin Andrei : >> >>> >>> http://serverfault.com/a/655752/24406 >>> >>> If that is accurate, the documentation, and the

Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Eero Volotinen
2015-04-14 21:40 GMT+03:00 Florin Andrei : > On 2015-04-14 11:25, Gordon Messmer wrote: > >> On 04/14/2015 11:07 AM, Florin Andrei wrote: >> >>> I looked in the yum repositories for CentOS 7 and I noticed that there >>> are no packages for any of the major open source IPSec VPN apps - >>> Openswan

Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Eero Volotinen
2015-04-14 21:07 GMT+03:00 Florin Andrei : > I looked in the yum repositories for CentOS 7 and I noticed that there are > no packages for any of the major open source IPSec VPN apps - Openswan, > strongSwan, etc. I'm pretty sure CentOS 6 had Openswan packages. > > What is the current consensus w.r

Re: [CentOS] Locked version repos

2015-04-10 Thread Eero Volotinen
mrepo or reposync works fine with apache. Eero 11.4.2015 2.45 ap. "Steven Barre" kirjoitti: > Hello Everyone > > I'm looking into the best way to have locked version repos for my CentOS > systems. The systems are all set up with Chef and have a couple different > recopies/roles. I'd like to have

Re: [CentOS] install woes

2015-04-10 Thread Eero Volotinen
try creating small /boot partition for kernel and then rest of disk for lvm.. -- Eero 2015-04-10 22:01 GMT+03:00 : > Chuck Campbell wrote: > > I'm really at a loss. > > I had 5.11 running on this machine, from this physical boot disk, until I > > stepped on /bin the other day. > > > > I've trie

Re: [CentOS] The future of centos

2015-04-05 Thread Eero Volotinen
2015-04-04 4:01 GMT+03:00 Francis Gerund : > Almost everyone here has probably read this by now. If so, move along, > nothing new here. But just in case you haven't, please take the time to > read this. > > Here it is, in their own words: what Redhat thinks of Centos, and it's > plans for the fu

Re: [CentOS] Hdd maximum size

2015-03-31 Thread Eero Volotinen
2015-03-31 15:07 GMT+03:00 Jussi Hirvi : > On 31.3.2015 14.43, donais wrote: > >> Server is a Lenovo RV-340 E2420 build 70AB001VUX 8go >> Support for Sata-3 6gbps and Raid-5 >> Did someone can tell if it can handle 6tb hard drives? >> > > See this. It depends on the operating system version an

Re: [CentOS] OpenSSL vulnerability fix

2015-03-31 Thread Eero Volotinen
for my curiosity, How can we make sure that its not affected? > > Is there any script to check whether its vulnerable or not (as in bash > shell shock vulnerability test)? > > On Tue, Mar 31, 2015 at 12:25 PM, Eero Volotinen > wrote: > > > Centos 5 is not affected by thi

Re: [CentOS] OpenSSL vulnerability fix

2015-03-30 Thread Eero Volotinen
Centos 5 is not affected by this bug, so fix is not available. Eero 31.3.2015 9.48 ap. kirjoitti "Venkateswara Rao Dokku" : > Hi All, > > I wanted to fix the openssl vulnerabilities (CVE-2014-3569, CVE-2014-3570, > CVE-2014-3571, CVE-2014-3572) in my CentOS 5.5 and found out that 0.9.8zd > has th

Re: [CentOS] How to decrypt rootpassword form kickstart file

2015-03-30 Thread Eero Volotinen
2015-03-31 8:08 GMT+03:00 Jegadeesh Kumar : > Hi Team, > > I have the kick start file where my root password is store like > > > # Root password > rootpw --iscrypted $1$1SItJOAg$UM9n7lRFK1/OCs./rgQtQ/ > # System authorization information > auth --useshadow --passalgo=sha512 > > > > Is there any

Re: [CentOS] Proper check of openssl usage in processes?

2015-03-26 Thread Eero Volotinen
and this also: https://github.com/stdevel/yum-plugin-needs-restarting -- Eero 2015-03-26 12:02 GMT+02:00 Eero Volotinen : > Hi, > > check this url: > https://bjaerris.com/identifying-services-needing-restart-after-updating-linux-packages/ > > -- > Eero > > 2015-

Re: [CentOS] Proper check of openssl usage in processes?

2015-03-26 Thread Eero Volotinen
Hi, check this url: https://bjaerris.com/identifying-services-needing-restart-after-updating-linux-packages/ -- Eero 2015-03-26 11:52 GMT+02:00 Rafał Radecki : > Hi All :) > > I need to check and possibly update openssl on my fleet of servers. I would > like to avoid reboot if possible. I think

[CentOS] really nice squid bug?

2015-03-24 Thread Eero Volotinen
https://bugzilla.redhat.com/show_bug.cgi?id=1202858 affects also on centos? -- Eero ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Something like apt-cacher for CentOS/RHEL?

2015-03-07 Thread Eero Volotinen
2015-03-07 11:10 GMT+02:00 Marcin Trendota : > Dnia sobota, 7 marca 2015 12:16:14 AM John R Pierce pisze: > > > I maintain a local mirror of the centos repository with a simple lftp > > script, and configure my clients to get updates from this mirror via > > the /etc/yum.repos.d files > > And

Re: [CentOS] selinux allow FTP

2015-03-02 Thread Eero Volotinen
Also check this out: http://www.bitvise.com/ftp-bridge -- Eero 2015-03-03 0:51 GMT+02:00 Eero Volotinen : > > > 2015-03-03 0:43 GMT+02:00 Tim Dunphy : > >> > >> > errr, I meant, sftp, not rscp >> >> >> Heh.. yeah. But the client isn't g

Re: [CentOS] selinux allow FTP

2015-03-02 Thread Eero Volotinen
2015-03-03 0:43 GMT+02:00 Tim Dunphy : > > > > errr, I meant, sftp, not rscp > > > Heh.. yeah. But the client isn't gonna go for that. LOL. Any way to allow > regular ol' FTP using SELinux? Or does that just defeat the purpose of > having a secure SELlinux server entirely? > FTP is not safe as

Re: [CentOS] Setting up new spacewalk server

2015-02-17 Thread Eero Volotinen
2015-02-17 22:26 GMT+02:00 Eckert, Doug : > We have a DHCP/PXE server in a build environment, which is separate from > our Spacewalk v1.5 server. We direct builds to Satellite or Spacewalk based > as needed. It contains initrd & vmlinuz files for each version/arch we > currently deploy for both RH

Re: [CentOS] libvirt

2015-02-16 Thread Eero Volotinen
well, is libvirtd really running? what says systemctl status libvirtd ? -- Eero 2015-02-17 5:55 GMT+02:00 mattias : > yes because it worked before the upgrade > > -Ursprungligt meddelande- > Från: centos-boun...@centos.org [mailto:centos-boun...@centos.org] För > Nux! > Skickat: den 16

Re: [CentOS] Centos 7.0 and mismatched swap file

2015-02-15 Thread Eero Volotinen
You can grow xfs or create more swap on filesystem files ("swap in file") 15.2.2015 17.50 kirjoitti "Gregory P. Ennis" : > Everyone, > > I am putting together a new mail server for our firm using a SuperMicro > with Centos 7.0. When performed the install of the os, I put 16 gigs of > memory in th

Re: [CentOS] Cronjob and sudo

2015-02-12 Thread Eero Volotinen
You can disable requiretty for one user also: https://linuxreference.wordpress.com/2010/11/22/disable-requiretty-in-etcsudoers/ -- Eero 2015-02-12 20:32 GMT+02:00 Matt : > I need to remove empty files out of a directory that are over 6 hours > old so I created this script and put it in cron.hour

Re: [CentOS] Recommendations for good CentOS 7 documentation

2015-02-09 Thread Eero Volotinen
ki Kovacs wrote: > > Le 09/02/2015 23:01, Eero Volotinen a écrit : > >> > >> How about redhat documentation? > > > > > > Yes, it's OK too. I didn't ask about all the existing documentation out > > there. I was just curious about any sp

Re: [CentOS] Recommendations for good CentOS 7 documentation

2015-02-09 Thread Eero Volotinen
How about redhat documentation? 9.2.2015 23.45 kirjoitti "Niki Kovacs" : > Hi, > > I'm looking for recommendations for documentation about the specificities > of RHEL/CentOS 7.x. It can be either online or in printed book format, and > I'm fluent in german, french and english. > > I have a good bo

Re: [CentOS] network copy performance is poor (rsync) - debugging suggestions?

2015-01-29 Thread Eero Volotinen
2015-01-23 11:44 GMT+02:00 Götz Reinicke - IT Koordinator < goetz.reini...@filmakademie.de>: > Hi, > > I do have two centos 6.6 servers. With a "performance optimized" rsync I > get an speed of 15 - 20 MB/s > > The options I use are: > > rsync -aHAXxv --numeric-ids --progress -e "ssh -T -c arcfour

Re: [CentOS] NTP Vulnerability?

2014-12-19 Thread Eero Volotinen
fixed in: https://rhn.redhat.com/errata/RHSA-2014-2025.html https://rhn.redhat.com/errata/RHSA-2014-2024.html maybe it's soon in centos too.. 2014-12-20 4:42 GMT+02:00 listmail : > I just saw this: > > https://ics-cert.us-cert.gov/advisories/ICSA-14-353-01 > > which includes this: > " A remote

Re: [CentOS] NTP Vulnerability?

2014-12-19 Thread Eero Volotinen
https://access.redhat.com/security/cve/CVE-2014-9295 2014-12-20 4:42 GMT+02:00 listmail : > I just saw this: > > https://ics-cert.us-cert.gov/advisories/ICSA-14-353-01 > > which includes this: > " A remote attacker can send a carefully crafted packet that can overflow a > stack buffer and potenti

Re: [CentOS] LDAP authentication using nssov

2014-11-09 Thread Eero Volotinen
t; Thanks for the suggestion. I'll look it up. > > Tim > > On Sun, Nov 9, 2014 at 5:24 PM, Eero Volotinen > wrote: > > > 2014-11-09 22:46 GMT+02:00 Tim Dunphy : > > > > > Hey all, > > > > > > I've been googling for a bit trying to f

Re: [CentOS] LDAP authentication using nssov

2014-11-09 Thread Eero Volotinen
2014-11-09 22:46 GMT+02:00 Tim Dunphy : > Hey all, > > I've been googling for a bit trying to find a decent guide that helps you > setup LDAP authentication via nssov. And so far haven't been able to find > anything. Does anyone out there happen to know of a guide that would help > me do this und

Re: [CentOS] find troubles

2014-10-28 Thread Eero Volotinen
2014-10-28 23:00 GMT+02:00 Tim Dunphy : > Hey guys, > > Sorry not sure what's wrong with this statement. I've tried a few > variations of trying to exclude the /var/www directory. > > > [root@224432-24 apr-1.5.1]# find / -name "*httpd*" -type d \( ! -name www > \) > /usr/lib/httpd > /usr/lib64/ht

Re: [CentOS] rsync question: building list taking forever

2014-10-19 Thread Eero Volotinen
2014-10-19 20:49 GMT+03:00 Tim Dunphy : > > ... and remember to use tcp for nfs transfer ;) > > > Hmm you mean specify tcp for rsync? I thought that's default. But holy > crap, you were right about it taking a long time to build a file list! The > rsync just started a few minutes ago... ! > No, t

Re: [CentOS] rsync question: building list taking forever

2014-10-19 Thread Eero Volotinen
2014-10-19 20:03 GMT+03:00 Eero Volotinen : > > > 2014-10-19 18:55 GMT+03:00 Tim Dunphy : > >> Guys, >> >> I've setup an rsync between two directories that I've mounted locally on >> a >> jump box. Long story short, the two directories

Re: [CentOS] rsync question: building list taking forever

2014-10-19 Thread Eero Volotinen
2014-10-19 18:55 GMT+03:00 Tim Dunphy : > Guys, > > I've setup an rsync between two directories that I've mounted locally on a > jump box. Long story short, the two directories are both NFS shares from > two different hosts. Our security dept won't allow us to SSH between the > two data centers,

Re: [CentOS] CentOS 7 for i386/32-bit?

2014-10-15 Thread Eero Volotinen
There is no i386 version of upstream. 15.10.2014 19.56 kirjoitti "Boris Epstein" : > Hello listmates, > > I can't find the 32 bit version of Centos 7. Would it be because I am not > looking in the right place or does it not exist at all? > > Thanks. > > Boris. > ___

Re: [CentOS] openswan and klips ipsec stack

2014-10-06 Thread Eero Volotinen
2014-10-06 22:02 GMT+03:00 Steve Clark : > On 10/06/2014 02:00 PM, Eero Volotinen wrote: > >> Hi List, >> >> Is there easy way to get klips ipsec stack into centos 6? As it makes >> firewalling ipsec traffic much easier.. >> >> Eero >> > Hi Ee

[CentOS] openswan and klips ipsec stack

2014-10-06 Thread Eero Volotinen
Hi List, Is there easy way to get klips ipsec stack into centos 6? As it makes firewalling ipsec traffic much easier.. Eero ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Spacewalk? Local repo? Cache?

2014-09-29 Thread Eero Volotinen
2014-09-29 20:59 GMT+03:00 Chris Beattie : > I have a mix of CentOS 5, 6, and now 7 servers at work. There are enough > of them now that it is starting to make sense for them to get updates from > an internal source. > > I've seen RHN Satellite in years past. It looks like it may be a way to > a

Re: [CentOS] URGENT! Shellshock fix DOES NOT fix the bug on CentOS 5.4

2014-09-26 Thread Eero Volotinen
2014-09-27 0:42 GMT+03:00 Always Learning : > > On Fri, 2014-09-26 at 15:02 -0500, Jessica Blank wrote: > > > > Scary screenie at: http://i.imgur.com/yR7sBjV.png > > Never mind the "scary screen" why are you deliberately using an insecure > and out-of-date 5.4 version of Centos ? > > Common sense

Re: [CentOS] bizarre problem with performance

2014-09-18 Thread Eero Volotinen
2014-09-18 0:41 GMT+03:00 Dan Hyatt : > Hi, > I am running centos6-5 on dell620 blades. > mirrored local root drives > several (including home) mounted filesystems. > > The other blades are working fine. > Top indicates the server is running 1% cpu, and very little memory > (idleing) > There is no

Re: [CentOS] ZFS

2014-09-15 Thread Eero Volotinen
2014-09-15 22:51 GMT+03:00 Steve Thompson : > On Mon, 15 Sep 2014, Fernando Cassia wrote: > > It´s called BTRFS. >> It´s supported by SUSE, Fujitsu, Oracle, among others. >> > > Yeah, but is it supported by the *US Government* ??? zfs release zero dot something does not sound like production re

Re: [CentOS] flash plugin for centos 7

2014-09-08 Thread Eero Volotinen
2014-09-08 18:39 GMT+03:00 Gergely Buday : > Hi, > > firefox does not play h.264 videos on centos 7 so I need a flash > plugin. But I see packages only for centos 6.x. What can I do? > How about installing google chrome and using it's internal flash viewer? -- Eero __

Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-07 Thread Eero Volotinen
2014-09-07 11:24 GMT+03:00 dE : > Hi! > > I installed CentOS 7 today, it's a minimal install, so it didn't have > ifconfig command. So I installed net-tools, however I can't add ipv6 > address to it. > > # ifconfig enp0s3 add fc00::1002/124 > SIOCSIFADDR: Permission denied.´ > try disabling ipv6

Re: [CentOS] mairadb doesn't prompt for user/pass

2014-08-31 Thread Eero Volotinen
2014-08-31 6:12 GMT+03:00 Tim Dunphy : > Hello, > > I discovered today that CentOS 7 has replaced MySQL with MariaDB. Which is > fine, it's seems really similar. And I was already aware that it was > written by the original team that wrote mysql. > > It's cool that the mysql command still gets yo

Re: [CentOS] php-fpm on centos 6

2014-08-22 Thread Eero Volotinen
Remi repo provides it? 22.8.2014 20.59 kirjoitti "Александр Кириллов" : > What's the story with php-fpm on centos 6? > There's a php-fpm rpm for centos 6 in epel but other essential mods like > mod_fastcgi or mod_proxy_fcgi > seem to be missing from the repos I'm usually using. Need a push in > ri

[CentOS] your memcached problem

2014-08-19 Thread Eero Volotinen
Hi Tim, Sorry, but I cannot access the original email, but your problems is in the rpm optimization flags. fixed spec: http://pastebin.com/KfW78RGd see the line beginning of %{__make} , replace it with: %{__make} CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=0 -fexceptions -fstack-protector

Re: [CentOS] ipset module loaded at startup on CentOS 6.5

2014-08-10 Thread Eero Volotinen
ipset is not kernel module, so do not try to load it as kernel or iptables module. -- Eero 2014-08-10 22:18 GMT+03:00 Rob Townley : > Anybody on here successfully get ipset iptables sets to work _after_ a > reboot? > My question on StackExchange > > http://unix.stackexchange.com/questions/14953

Re: [CentOS] ipset module loaded at startup on CentOS 6.5

2014-08-10 Thread Eero Volotinen
Is it really kernel module? 10.8.2014 22.18 kirjoitti "Rob Townley" : > Anybody on here successfully get ipset iptables sets to work _after_ a > reboot? > My question on StackExchange > > http://unix.stackexchange.com/questions/149536/upon-bootup-all-iptables-are-lost-because-the-kernel-module-ip-

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-09 Thread Eero Volotinen
2014-08-09 0:55 GMT+03:00 Neil Aggarwal : > Hello all: > > I am looking at the documentation of the new firewalld service in CentOS 7. > It looks like no matter what I configure with it, outgoing connections are > still going to be allowed. That does not seem very secure. > > I always set my serv

<    1   2   3   4   5   6   7   8   >