Re: [CentOS] yum-priorities behavior with downgrades [was: sa-update error with perl]

2012-01-10 Thread Nicolas Thierry-Mieg
Johnny Hughes wrote: On 01/09/2012 09:59 PM, Anthony wrote: In both cases, you are not going to be told about packages already installed that are newer than those in the CentOS. You can find those RPMs though by doing this: rpm -qa | egrep \.rf | sort that will tell you all repoforge

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Tony Molloy
On Tuesday 10 January 2012 04:05:43 Marko Vojinovic wrote: On Monday 09 January 2012 15:29:59 Daniel J Walsh wrote: file_t means the file has no label, so the only way to create this type of file would be to remove the security attributes on the file. On an SELinux system, file_t should

Re: [CentOS] missing email

2012-01-10 Thread Bennett Haselton
On 1/9/2012 10:31 AM, m.r...@5-cent.us wrote: I *loathe* dnsorbs Maybe this one will get through its crap. Maybe if I add a few more words John R. Dennison wrote: On Mon, Jan 09, 2012 at 12:49:31PM -0500, m.r...@5-cent.us wrote: I haven't gotten anything from the list since my email

[CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread Bennett Haselton
If an attacker finds an exploit to take control of httpd, they're still blocked in part by the fact that httpd runs as the unprivileged apache user and hence can't write any root-owned files on the system, unless the attacker also knows of a second attack that lets apache escalate its

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread Adrian Sevcenco
On 01/10/12 11:12, Bennett Haselton wrote: What about sshd -- assuming that the attacker can connect to sshd at all (i.e. not prevented by a firewall), if they find an exploit to let them take control of sshd, would that imply immediate total control of the UsePrivilegeSeparation Specifies

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread Bennett Haselton
On 1/10/2012 2:02 AM, Adrian Sevcenco wrote: On 01/10/12 11:12, Bennett Haselton wrote: What about sshd -- assuming that the attacker can connect to sshd at all (i.e. not prevented by a firewall), if they find an exploit to let them take control of sshd, would that imply immediate total

Re: [CentOS] vmware player CentOS 6 2-button 3-button touch pad with pointing device Lenovo ThinkPad

2012-01-10 Thread Marko Vojinovic
On Monday 09 January 2012 23:36:53 Igor Furlan wrote: Is there a way to revert the 'copypaste' functionality back to the traditional UNIX way of doing it, highlight the text with left mouse/touchpad button and paste it with the middle mouse/touchpad button. AFAIK, it *should* work while in

[CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread e-letter
Readers, Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread John Doe
From: Bennett Haselton benn...@peacefire.org On 1/10/2012 2:02 AM, Adrian Sevcenco wrote: UsePrivilegeSeparation Specifies whether sshd(8) separates privileges by creating an unprivileged child process to deal with incoming network traffic. After successful authentication, another

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Hakan Koseoglu
On 10 January 2012 13:04, e-letter inp...@gmail.com wrote: Readers, Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 Why is this a bug? The bug comments mention that the latest

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread Bennett Haselton
On 1/10/2012 5:16 AM, John Doe wrote: From: Bennett Haseltonbenn...@peacefire.org On 1/10/2012 2:02 AM, Adrian Sevcenco wrote: UsePrivilegeSeparation Specifies whether sshd(8) separates privileges by creating an unprivileged child process to deal with incoming network traffic. After

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Bennett Haselton
On 1/9/2012 8:05 PM, Marko Vojinovic wrote: On Monday 09 January 2012 15:29:59 Daniel J Walsh wrote: file_t means the file has no label, so the only way to create this type of file would be to remove the security attributes on the file. On an SELinux system, file_t should never be created,

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/10/2012 08:37 AM, Bennett Haselton wrote: On 1/9/2012 8:05 PM, Marko Vojinovic wrote: On Monday 09 January 2012 15:29:59 Daniel J Walsh wrote: file_t means the file has no label, so the only way to create this type of file would be to remove

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread John Doe
From: Bennett Haselton benn...@peacefire.org On 1/10/2012 5:16 AM, John Doe wrote: The sshd child is running as bob; so it has bob (and not root) rights... Yes, I understand that.  What I said was that if you could take complete control of the sshd process you were connecting to, even if

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread Bent Terp
On Tue, Jan 10, 2012 at 2:49 PM, John Doe jd...@yahoo.com wrote: From: Bennett Haselton benn...@peacefire.org On 1/10/2012 5:16 AM, John Doe wrote: The sshd child is running as bob; so it has bob (and not root) rights... Yes, I understand that. What I said was that if you could take

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread Ned Slider
On 10/01/12 13:34, Bennett Haselton wrote: On 1/10/2012 5:16 AM, John Doe wrote: From: Bennett Haseltonbenn...@peacefire.org On 1/10/2012 2:02 AM, Adrian Sevcenco wrote: UsePrivilegeSeparation Specifies whether sshd(8) separates privileges by creating an unprivileged child process

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 7:47 AM, Daniel J Walsh dwa...@redhat.com wrote: Now if only more people used RHEL we could further enhance the products.  :^) Why isn't it accepted as more of a standard? -- Les Mikesell lesmikes...@gmail.com ___

Re: [CentOS] sa-update error with perl

2012-01-10 Thread David Hrbáč
Dne 10.1.2012 4:02, email builder napsal(a): Why? Just remove that package and install the one from CentOS. Spamassassin doesn't need to be touched. Hello, Seems to me that you are still using the mix of repos. Packages from RF work fine. root@specs2:1280:279:/$ rpm -q spamassassin

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/10/2012 09:00 AM, Les Mikesell wrote: On Tue, Jan 10, 2012 at 7:47 AM, Daniel J Walsh dwa...@redhat.com wrote: Now if only more people used RHEL we could further enhance the products. :^) Why isn't it accepted as more of a standard?

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread m . roth
e-letter wrote: Readers, Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 One *could* argue that Java is a bug, being a) so error-prone, b) so vulnerable to attack, and c) so

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread m . roth
John Doe wrote: From: Bennett Haselton benn...@peacefire.org On 1/10/2012 5:16 AM, John Doe wrote: The sshd child is running as bob; so it has bob (and not root) rights... Yes, I understand that.  What I said was that if you could take complete control of the sshd process you were

[CentOS] Write to USB pendrives horribly slow

2012-01-10 Thread wwp
Hello there, since I installed CentOS6 few months ago (kept up-to-date using yum), I'm facing very poor performances when writing to USB pendrives. The hardware: a Dell Latitude E6500 laptop (Intel Core Duo P8600 @2.40Ghz), 4Go RAM + 4Go swap, several USB2 pendrives of various brands (less than

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 8:47 AM, m.r...@5-cent.us wrote: Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 One *could* argue that Java is a bug, being a) so error-prone, b) so

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Giles Coochey
On Tue, January 10, 2012 17:15, Les Mikesell wrote: On Tue, Jan 10, 2012 at 8:47 AM, m.r...@5-cent.us wrote: One *could* argue that Java is a bug, being a) so error-prone, b) so vulnerable to attack, and c) so huge and slow, and shouldn't be allowed But you'd be wrong on all counts.

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 8:27 AM, Daniel J Walsh dwa...@redhat.com wrote: On 01/10/2012 09:00 AM, Les Mikesell wrote: On Tue, Jan 10, 2012 at 7:47 AM, Daniel J Walsh dwa...@redhat.com wrote: Now if only more people used RHEL we could further enhance the products.  :^) Why isn't it

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread m . roth
Les Mikesell wrote: On Tue, Jan 10, 2012 at 8:47 AM, m.r...@5-cent.us wrote: Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 One *could* argue that Java is a bug, being a) so

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 10:17 AM, Giles Coochey gi...@coochey.net wrote: But you'd be wrong on all counts.  I'd argue the opposite - that you should only be allowed to use languages that work across CPU types and OS's so as to never be locked into a monopolistic single vendor. So if I were

Re: [CentOS] USB install annoyances (not OT)

2012-01-10 Thread m . roth
I've retried again, and it still fails. I see that it's mounted /dev/sda2, which is where I've got the contents of a DVD, as /mnt/isolinux. The contents of that are: ls -a .GPLTRANS.TBL .. Packages images .discinfo

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread m . roth
Les Mikesell wrote: On Tue, Jan 10, 2012 at 10:17 AM, Giles Coochey gi...@coochey.net wrote: But you'd be wrong on all counts.  I'd argue the opposite - that you should only be allowed to use languages that work across CPU types and OS's so as to never be locked into a monopolistic single

Re: [CentOS] USB install annoyances (not OT)

2012-01-10 Thread John Doe
From: m.r...@5-cent.us m.r...@5-cent.us I've retried again, and it still fails. I see that it's mounted /dev/sda2, which is where I've got the contents of a DVD, as /mnt/isolinux. Unless you specifically need the DVD contents, maybe try with the ISOs instead... JD

Re: [CentOS] Write to USB pendrives horribly slow

2012-01-10 Thread John Doe
From: wwp subscr...@free.fr I wonder if some mount options aren't wrong with USB pendrives, see:   /dev/sdd1 on /media/monolith type vfat (rw,nosuid,nodev,uhelper=udisks,shortname=mixed,dmask=0077,utf8=1,flush) my suspicion is about the flush option, which I find atypical here. I guess it

[CentOS] CentOS-announce Digest, Vol 83, Issue 4

2012-01-10 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 10:32 AM, m.r...@5-cent.us wrote: Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 One *could* argue that Java is a bug, being a) so error-prone, b) so

Re: [CentOS] centos6.2, parted and alignment

2012-01-10 Thread Lamar Owen
On Monday, January 09, 2012 02:03:23 PM John R Pierce wrote: Is there another tool I can use for GPT partitions over 2TB ? Hmm, I have an EL6.2 installation (i386) with four mounted volumes over 2TB; IIRC parted was used to make them. I don't recall doing anything special to get the

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 10:47 AM, m.r...@5-cent.us wrote: But you'd be wrong on all counts.  I'd argue the opposite - that you should only be allowed to use languages that work across CPU types and OS's so as to never be locked into a monopolistic single vendor. So if I were to develop a

Re: [CentOS] centos6.2, parted and alignment

2012-01-10 Thread Les Mikesell
On Mon, Jan 9, 2012 at 1:03 PM, John R Pierce pie...@hogranch.com wrote: Using gparted (GUIs, why did it have to be GUIs), you at least don't get that idiot warning. yeah, no gui on my file or database servers.  not gonna happen. Having the X libs installed so you can run a gui program with

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Johnny Hughes
On 01/10/2012 07:17 AM, Hakan Koseoglu wrote: On 10 January 2012 13:04, e-letter inp...@gmail.com wrote: Readers, Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 Why is this a

Re: [CentOS] USB install annoyances (not OT)

2012-01-10 Thread m . roth
John Doe wrote: From: m.r...@5-cent.us m.r...@5-cent.us I've retried again, and it still fails. I see that it's mounted /dev/sda2, which is where I've got the contents of a DVD, as /mnt/isolinux. Unless you specifically need the DVD contents, maybe try with the ISOs instead... This doesn't

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread m . roth
Les Mikesell wrote: On Tue, Jan 10, 2012 at 10:32 AM, m.r...@5-cent.us wrote: Would someone advise whether the distribution of an obsolete version of java should be reported as a bug; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=827 One *could* argue that Java is a bug, being a)

Re: [CentOS] defense-in-depth possible for sshd?

2012-01-10 Thread Johnny Hughes
On 01/10/2012 07:58 AM, Ned Slider wrote: On 10/01/12 13:34, Bennett Haselton wrote: On 1/10/2012 5:16 AM, John Doe wrote: From: Bennett Haseltonbenn...@peacefire.org On 1/10/2012 2:02 AM, Adrian Sevcenco wrote: UsePrivilegeSeparation Specifies whether sshd(8) separates privileges by

[CentOS] Upgrade Question

2012-01-10 Thread Gene Poole
We've got about 200 existing servers running CentOS/RHEL 5.6 and all new servers are being provisioned using CentOS/RHEL 6.1. So that everything is consistent we need to upgrade the servers running CentOS/RHEL 5.6. I've searched the CentOS wiki, the Red Hat site, and the internet looking for

Re: [CentOS] Upgrade Question

2012-01-10 Thread Frank Cox
On Tue, 10 Jan 2012 13:55:05 -0500 Gene Poole wrote: We've got about 200 existing servers running CentOS/RHEL 5.6 and all new servers are being provisioned using CentOS/RHEL 6.1. So that everything is consistent we need to upgrade the servers running CentOS/RHEL 5.6. I've searched the

Re: [CentOS] USB install annoyances

2012-01-10 Thread Darr247
But this thread's gotten way OT: *does* anyone have any idea what the .img file is that the running o/s from install.img is looking for, after the partitioning, when it's ready to install? Possibly, but without the info I previously requested, I won't be trying to reproduce the problem. e.g.

Re: [CentOS] Upgrade Question

2012-01-10 Thread m . roth
Gene Poole wrote: We've got about 200 existing servers running CentOS/RHEL 5.6 and all new servers are being provisioned using CentOS/RHEL 6.1. So that everything is consistent we need to upgrade the servers running CentOS/RHEL 5.6. I've searched the CentOS wiki, the Red Hat site, and the

Re: [CentOS] USB install annoyances

2012-01-10 Thread m . roth
Darr247 wrote: But this thread's gotten way OT: *does* anyone have any idea what the .img file is that the running o/s from install.img is looking for, after the partitioning, when it's ready to install? Possibly, but without the info I previously requested, I won't be trying to reproduce

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/10/2012 11:20 AM, Les Mikesell wrote: On Tue, Jan 10, 2012 at 8:27 AM, Daniel J Walsh dwa...@redhat.com wrote: On 01/10/2012 09:00 AM, Les Mikesell wrote: On Tue, Jan 10, 2012 at 7:47 AM, Daniel J Walsh dwa...@redhat.com wrote: Now if

Re: [CentOS] centos6.2, parted and alignment

2012-01-10 Thread John R Pierce
On 01/10/12 9:39 AM, Les Mikesell wrote: Having the X libs installed so you can run a gui program with a remote display doesn't bother a server much. And it's sometimes handy to be able to run wireshark like that if you need to peek at a few packets in real time. painfully slow over a remote

[CentOS] Clustering solutions - mail, www, storage.

2012-01-10 Thread Rafał Radecki
Hi all. I am currently working for a hosting provider in a 100+ linux hosts' environment. We have www, mail HA solutions, as storage we mainly use NFS at the moment. We are also using DRBD, Heartbeat, Corosync. I am now gathering info to make a cluster with: - two virtualization nodes (active

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 1:46 PM, Daniel J Walsh dwa...@redhat.com wrote: On Tue, Jan 10, 2012 at 7:47 AM, Daniel J Walsh dwa...@redhat.com wrote: Now if only more people used RHEL we could further enhance the products.  :^) Why isn't it accepted as more of a standard? I don't understand

Re: [CentOS] centos6.2, parted and alignment

2012-01-10 Thread Ljubomir Ljubojevic
On 01/10/2012 08:56 PM, John R Pierce wrote: And, having to explain how to setup a remote X session, then how to do something with pointy-clicky would be painful, a one line command replaced with pages of screenshots? ugh. There is NX/FreeNX server/client via ssh. Safe and simple remote

Re: [CentOS] centos6.2, parted and alignment

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 1:56 PM, John R Pierce pie...@hogranch.com wrote: Having the X libs installed so you can run a gui program with a remote display doesn't bother a server much.  And it's sometimes handy to be able to run wireshark like that if you need to peek at a few packets in real

Re: [CentOS] USB install annoyances (not OT)

2012-01-10 Thread Denniston, Todd A CIV NAVSURFWARCENDIV Crane
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: Tuesday, January 10, 2012 12:48 To: CentOS mailing list Subject: Re: [CentOS] USB install annoyances (not OT) John Doe wrote: From: m.r...@5-cent.us

Re: [CentOS] USB install annoyances

2012-01-10 Thread William Hooper
But the question is what image# 1 that it's looking for? It's not trying to look on the USB for an .iso, is it? That sounds like the bug mentioned at the bottom of the CentOS How-to: http://wiki.centos.org/HowTos/InstallFromUSBkey https://bugzilla.redhat.com/show_bug.cgi?id=568343 (around

Re: [CentOS] USB install annoyances (not OT)

2012-01-10 Thread m . roth
Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote: Behalf Of m.r...@5-cent.us John Doe wrote: From: m.r...@5-cent.us m.r...@5-cent.us I've retried again, and it still fails. I see that it's mounted /dev/sda2, which is where I've got the contents of a DVD, as /mnt/isolinux. Unless

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread 夜神 岩男
On 01/11/2012 05:04 AM, Les Mikesell wrote: On Tue, Jan 10, 2012 at 1:46 PM, Daniel J Walshdwa...@redhat.com wrote: On Tue, Jan 10, 2012 at 7:47 AM, Daniel J Walsh dwa...@redhat.com wrote: Now if only more people used RHEL we could further enhance the products. :^) Why isn't it

Re: [CentOS] Clustering solutions - mail, www, storage.

2012-01-10 Thread Tait Clarridge
I am currently working for a hosting provider in a 100+ linux hosts' environment. We have www, mail HA solutions, as storage we mainly use NFS at the moment. We are also using DRBD, Heartbeat, Corosync. I am now gathering info to make a cluster with: - two virtualization nodes (active

Re: [CentOS] Upgrade Question

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 1:35 PM, m.r...@5-cent.us wrote: We've got about 200 existing servers running CentOS/RHEL 5.6 and all new servers are being provisioned using CentOS/RHEL 6.1.  So that everything is consistent we need to upgrade the servers running CentOS/RHEL 5.6. I've searched the

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/10/2012 03:04 PM, Les Mikesell wrote: On Tue, Jan 10, 2012 at 1:46 PM, Daniel J Walsh dwa...@redhat.com wrote: On Tue, Jan 10, 2012 at 7:47 AM, Daniel J Walsh dwa...@redhat.com wrote: Now if only more people used RHEL we could further

Re: [CentOS] USB install annoyances (not OT)[SOLVED]

2012-01-10 Thread m . roth
Yet another denial - it's as though it's also blocking me based on the relationship of included text vs. new text. blah, blah, blah. Let's see if this is enough new text to get through. Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote: Behalf Of m.r...@5-cent.us snip I've retried again, and

Re: [CentOS] Clustering solutions - mail, www, storage.

2012-01-10 Thread Digimer
On 01/10/2012 02:59 PM, Rafał Radecki wrote: Hi all. I am currently working for a hosting provider in a 100+ linux hosts' environment. We have www, mail HA solutions, as storage we mainly use NFS at the moment. We are also using DRBD, Heartbeat, Corosync. I am now gathering info to make a

Re: [CentOS] Upgrade Question

2012-01-10 Thread m . roth
Les Mikesell wrote: On Tue, Jan 10, 2012 at 1:35 PM, m.r...@5-cent.us wrote: We've got about 200 existing servers running CentOS/RHEL 5.6 and all new servers are being provisioned using CentOS/RHEL 6.1.  So that everything is consistent we need to upgrade the servers running CentOS/RHEL

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Les Mikesell
2012/1/10 夜神 岩男 supergiantpot...@yahoo.co.jp: But the difficult thing about SELinux isn't how it works, its the detail required for each policy to wrap each program up correctly without denying useful functionality in the process, not to mention deploying them with packages, and dealing with

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 3:26 PM, Daniel J Walsh dwa...@redhat.com wrote: Again, there is nothing that we do that is Vendor specific, Everything we do with SELinux is open source.  We are working to get our stuff upstream. I have no idea what you are talking about as far as variations in

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/10/2012 04:41 PM, Les Mikesell wrote: On Tue, Jan 10, 2012 at 3:26 PM, Daniel J Walsh dwa...@redhat.com wrote: Again, there is nothing that we do that is Vendor specific, Everything we do with SELinux is open source. We are working to

Re: [CentOS] USB install annoyances (not OT)[SOLVED] (mostly)

2012-01-10 Thread m . roth
Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote: Behalf Of m.r...@5-cent.us snip I've retried again, and it still fails. I see that it's mounted /dev/sda2, which is where I've got the contents of a DVD, as /mnt/isolinux. Unless you specifically need the DVD contents, maybe try with the

Re: [CentOS] USB install annoyances

2012-01-10 Thread Darr247
m.roth spake thusly: I started by listing that: 1. I have a partitioned USB stick, 8G, with a 10M FAT32 partition, and the rest as ext3. 2. Rsync'd isolinux to the FAT partition, renamed isolinux.cfg to syslinux.cfg 3. syslinux to the USB 4. mounted DVD.iso, and rsync'd all of that to the

[CentOS] Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH

2012-01-10 Thread Giles Coochey
Hi All, I have set up three servers in a development environment. Via CR they're updated to Centos 6.2 It appears that these servers have postfix installed on them by default, which unfortunately I'm not very well acquainted with. All I want is a quick and dirty way to enable these hosts

[CentOS] Centos 5.7, I10 video, 1920x1080 monitor

2012-01-10 Thread Frank Cox
I have a Centos 5.7 machine with Intel I10 video (built-in, I guess -- this is one of those all-in-one mini terminal things) that I'm trying to put a new 1920x1080 monitor onto, without conspicuous success. Prior to this it's been using a smaller monitor with no issues. Try as I might I can't

Re: [CentOS] USB install annoyances (not OT)[SOLVED]

2012-01-10 Thread Rob Kampen
On 01/11/2012 10:31 AM, m.r...@5-cent.us wrote: Yet another denial - it's as though it's also blocking me based on the relationship of included text vs. new text. blah, blah, blah. Let's see if this is enough new text to get through. Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote:

Re: [CentOS] sa-update error with perl

2012-01-10 Thread email builder
Why?  Just remove that package and install the one from CentOS. Spamassassin doesn't need to be touched. Seems to me that you are still using the mix of repos. Packages from RF work fine. Well, kind of.  If you review this thread, you'll see that the the fix was to stop using the

Re: [CentOS] Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH

2012-01-10 Thread Mail Lists
On 01/10/2012 05:54 PM, Giles Coochey wrote: Hi All, I have set up three servers in a development environment. Via CR they're updated to Centos 6.2 It appears that these servers have postfix installed on them by default, which unfortunately I'm not very well acquainted with. All I want

[CentOS] Is avahi essential?

2012-01-10 Thread Timothy Murphy
I've been getting a few avahi-daemon errors in /var/log/messages, eg --- Jan 11 00:40:24 helen avahi-daemon[12732]: Invalid query packet. Jan 11 00:40:29 helen last message repeated 17 times

Re: [CentOS] Is avahi essential?

2012-01-10 Thread Rilindo Foster
On Jan 10, 2012, at 7:51 PM, Timothy Murphy gayle...@eircom.net wrote: I've been getting a few avahi-daemon errors in /var/log/messages, eg --- Jan 11 00:40:24 helen avahi-daemon[12732]: Invalid query packet.

Re: [CentOS] Upgrade Question

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 3:35 PM, m.r...@5-cent.us wrote: What we do is build one, then create /boot/new and /new on the next server, rsync over to them, then mkdir /boot/old and /old, and (using zsh with modules loaded) mv * old, mv old/lost+found ., mv old/new/* ., make sure a few things

Re: [CentOS] Centos 5.7, I10 video, 1920x1080 monitor

2012-01-10 Thread Mark LaPierre
On 01/10/2012 05:56 PM, Frank Cox wrote: I have a Centos 5.7 machine with Intel I10 video (built-in, I guess -- this is one of those all-in-one mini terminal things) that I'm trying to put a new 1920x1080 monitor onto, without conspicuous success. Prior to this it's been using a smaller

Re: [CentOS] SELinux and access across 'similar types'

2012-01-10 Thread Les Mikesell
On Tue, Jan 10, 2012 at 3:50 PM, Daniel J Walsh dwa...@redhat.com wrote: That is not the way it works.  SELinux Reference policy is a database of rules that govern the default ways application run. Yes, but it is application developers that know what their applications need to do. Is there a

Re: [CentOS] Centos 5.7, I10 video, 1920x1080 monitor

2012-01-10 Thread Frank Cox
On Tue, 10 Jan 2012 20:50:36 -0500 Mark LaPierre wrote: Are you sure that your video card can support your desired resolution? I am now. After much fiddling around trying this and that I gave up and booted off of a Centos 6.2 install disk, and that came up in the 1920x1080 resolution all by

Re: [CentOS] Write to USB pendrives horribly slow

2012-01-10 Thread wwp
Hello John, On Tue, 10 Jan 2012 08:57:14 -0800 (PST) John Doe jd...@yahoo.com wrote: From: wwp subscr...@free.fr I wonder if some mount options aren't wrong with USB pendrives, see:   /dev/sdd1 on /media/monolith type vfat

[CentOS-announce] CEBA-2012:0008 CentOS 5 gnome-screensaver Update

2012-01-10 Thread Johnny Hughes
CentOS Errata and Bugfix Advisory 2012:0008 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0008.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

[CentOS-announce] CEBA-2012:0009 CentOS 6 bind Update

2012-01-10 Thread Johnny Hughes
CentOS Errata and Bugfix Advisory 2012:0009 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0009.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

Re: [CentOS-virt] Has anyone been able to start a Fedora 16 VM in Xen PV?

2012-01-10 Thread R P Herrold
On Mon, 9 Jan 2012, R P Herrold wrote: On Tue, 10 Jan 2012, Norman Gaywood wrote: https://bugzilla.redhat.com/show_bug.cgi?id=746602 (pygrub cannot start F16 PV guests (GPT partition) under Xen 4.1.1) why would one use GPT for a domU? seems like gross overkill ... following on myself, I

Re: [CentOS-virt] Has anyone been able to start a Fedora 16 VM in Xen PV?

2012-01-10 Thread Scot P. Floess
Ditto on my end - I tried both with the same results you mention... On Tue, 10 Jan 2012, Norman Gaywood wrote: On Mon, Jan 09, 2012 at 07:20:05PM -0500, S.Tindall wrote: On Mon, 2012-01-09 at 18:56 -0500, R P Herrold wrote: On Tue, 10 Jan 2012, Norman Gaywood wrote:

[CentOS-es] Sendmail

2012-01-10 Thread Felipe Cabada
Hola lista, como le hago para que sendmail no necesite agregar los dominios en el access para permitir enviar correo a dominios no dados de alta?? esto es poco automatizado!! Centos5.4 + sendmail+spamassassin+mailscanner+clamd Gracias -- -- LCC Felipe Humberto Cabada Arismendiz

[CentOS-es] Montar disco

2012-01-10 Thread César Martinez
Hola amigos esperando que todos se encuentren bien acudo a ustedes para ver si me pueden hechar una mano con un problema, tengo un servidor HP proliant con centos 5.7 con dos discos 146 GB montados en Raid por hardware que viene por defecto, adquirimos un nuevo disco de 2TB el cual esta ya

Re: [CentOS-es] Relay access denied [RCPT_TO] postfix+ centos 5.7

2012-01-10 Thread Carlos Sura
2012/1/9 diego sanchez dieg...@gmail.com El 07/01/2012 02:54 a.m., Carlos Sura escribió: Tengo CentOS instalado con postfix y 5 IP's rotando en cada correo que envio (nunca es la misma). puedo enviar mensajes, pero cuando es de recibir, es decir mando de esta dirección a una dirección