Re: [CentOS] CentOS 5 and DRPM

2009-11-29 Thread Geerd-Dietger Hoffmann
On Fri, Nov 27, 2009 at 10:14 AM, Janez Kosmrlj wrote: > OK I figgured out the client part. But unfortunately this was the easy part. > I still can't figure out, what i'm doing wrong on the server. > I tried installing deltarpm package from epel and the newest createrepo > package from atrpms (del

Re: [CentOS] Best way to secure apache web root

2009-11-29 Thread Geerd-Dietger Hoffmann
Hey On Fri, Nov 27, 2009 at 10:46 AM, Stephen Nelson-Smith wrote: > I have a site running drupal.  The apache user therefore needs to be > able to write certain files (CSS files for example). > > I also have a directory under my web root which is a SAN mount, to > which apache must be able to wri

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread Brian Mathis
On Sun, Nov 29, 2009 at 6:52 PM, David McGuffey wrote: > On Sun, 2009-11-29 at 20:31 +, John Horne wrote: >> On Sat, 2009-11-28 at 18:57 -0500, David McGuffey wrote: >> > Starting with a fresh load and after I finish hardening the load >> > following the Center for Internet Security (CIS) guid

Re: [CentOS] Docx format ?

2009-11-29 Thread James Matthews
You can also use google docs On Fri, Nov 27, 2009 at 4:02 PM, MHR wrote: > On Fri, Nov 27, 2009 at 5:37 AM, Sorin Srbu > wrote: > > > > So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work > CentOS > > and OOO teams! > > Thanks for the laugh, Sorin! > > mhr > __

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread Ian Forde
On Nov 29, 2009, at 3:52 PM, David McGuffey wrote: > > On Sun, 2009-11-29 at 20:31 +, John Horne wrote: >> On Sat, 2009-11-28 at 18:57 -0500, David McGuffey wrote: >>> Starting with a fresh load and after I finish hardening the load >>> following the Center for Internet Security (CIS) guida

Re: [CentOS] Bnid Dynamic Update not returnnig latest update

2009-11-29 Thread Jim Perrin
On Sat, Nov 28, 2009 at 9:41 PM, Joseph L. Casale wrote: > I have a zone that has several hosts update their ip with Dynamic DNS updates. > This morning a client had updated its ip, but bind wasn't returning the new ip > when queried until I restarted the daemon? > > Google hasn't yielded anything

Re: [CentOS] NetworkManager constantly overwriting /etc/resolve.conf - how to disable?

2009-11-29 Thread Robert Heller
At Mon, 30 Nov 2009 00:55:28 +0200 CentOS mailing list wrote: > > On Mon, Nov 30, 2009 at 12:13 AM, Tosh wrote: > > > > Add to /etc/sysconfig/network-scripts/ifcfg-ethX > > The following 2 lines : > > PEERDNS=no > > NM_CONTROLLED=no > > > > Line 1 tells the the if commands not to override /etc

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread David McGuffey
On Sun, 2009-11-29 at 20:31 +, John Horne wrote: > On Sat, 2009-11-28 at 18:57 -0500, David McGuffey wrote: > > Starting with a fresh load and after I finish hardening the load > > following the Center for Internet Security (CIS) guidance, I'm wondering > > whether AIDE or OSSEC would be a bet

Re: [CentOS] NetworkManager constantly overwriting /etc/resolve.conf - how to disable?

2009-11-29 Thread Rudi Ahlers
On Mon, Nov 30, 2009 at 12:13 AM, Tosh wrote: > > Add to /etc/sysconfig/network-scripts/ifcfg-ethX > The following 2 lines : > PEERDNS=no > NM_CONTROLLED=no > > Line 1 tells the the if commands not to override /etc/resolv.conf > Line 2 tells NetworkManager that it doens't have control over that >

Re: [CentOS] NetworkManager constantly overwriting /etc/resolve.conf - how to disable?

2009-11-29 Thread Rudi Ahlers
On Sun, Nov 29, 2009 at 11:43 PM, Rob Kampen wrote: > > Rudi, > As I recall there was a thread about this a few weeks ago. > Please show your /etc/sysconfig/network-scripts/ifcfg-ethX contents. > Thanks > > > ___ Hi Rob, Here's the contents: [r...@i

Re: [CentOS] NetworkManager constantly overwriting /etc/resolve.conf - how to disable?

2009-11-29 Thread Tosh
On 29/11/09 22:43, Rob Kampen wrote: > Rudi Ahlers wrote: >> Hi all, >> >> I have a CentOS 5.4 server-only installation, i.e. no X installed, and >> for some odd reason /etc/resolve.conf gets overwritten by >> NetworkManager on a constant basis. I haven't been able to track down >> how often, but I

Re: [CentOS] NetworkManager constantly overwriting /etc/resolve.conf - how to disable?

2009-11-29 Thread Rob Kampen
Rudi Ahlers wrote: Hi all, I have a CentOS 5.4 server-only installation, i.e. no X installed, and for some odd reason /etc/resolve.conf gets overwritten by NetworkManager on a constant basis. I haven't been able to track down how often, but I think it's on the hour, or something. This is the co

Re: [CentOS] NetworkManager constantly overwriting /etc/resolve.conf - how to disable?

2009-11-29 Thread Robert Heller
At Sun, 29 Nov 2009 22:57:23 +0200 CentOS mailing list wrote: > > Hi all, > > I have a CentOS 5.4 server-only installation, i.e. no X installed, and > for some odd reason /etc/resolve.conf gets overwritten by > NetworkManager on a constant basis. I haven't been able to track down > how often,

[CentOS] NetworkManager constantly overwriting /etc/resolve.conf - how to disable?

2009-11-29 Thread Rudi Ahlers
Hi all, I have a CentOS 5.4 server-only installation, i.e. no X installed, and for some odd reason /etc/resolve.conf gets overwritten by NetworkManager on a constant basis. I haven't been able to track down how often, but I think it's on the hour, or something. This is the conents of the file rig

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread John Horne
On Sat, 2009-11-28 at 18:57 -0500, David McGuffey wrote: > Starting with a fresh load and after I finish hardening the load > following the Center for Internet Security (CIS) guidance, I'm wondering > whether AIDE or OSSEC would be a better intrusion detection system. > > I installed AIDE and did

Re: [CentOS] startssl and CA autority

2009-11-29 Thread Ned Slider
fakessh wrote: > >> how to incorporate the certificates in postfix? >> Does this help? http://wiki.centos.org/HowTos/postfix_sasl ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread Brian Mathis
On Sun, Nov 29, 2009 at 9:55 AM, Rob Kampen wrote: > David McGuffey wrote: >> >> Starting with a fresh load and after I finish hardening the load >> following the Center for Internet Security (CIS) guidance, I'm wondering >> whether AIDE or OSSEC would be a better intrusion detection system. >> >>

Re: [CentOS] again, nic driver order

2009-11-29 Thread Rob Townley
On Sun, Nov 29, 2009 at 10:57 AM, Les Mikesell wrote: > Rob Townley wrote: >> >> NIC ordering is a problem. Some say it is the multi cpu, some say bad >> BIOS, some say MAC address ordering is better, some say PCI bus >> enumeration is better.  The netdev mailing list has had a long running >> dis

[CentOS] startssl and CA autority

2009-11-29 Thread fakessh
> hi all > > hi postfix list > > I worked all day to develop my certificates > with certificates free of startssl > > I based this document > http://translate.google.fr/translate?js=y&prev=_t&hl=fr&ie=UTF-8&u=http%3A%2F%2Fwww.grandville.net%2FOpenSSL%2FLigneDeCommande&sl=fr&tl=en > > I realize

Re: [CentOS] again, nic driver order

2009-11-29 Thread Les Mikesell
Rob Townley wrote: > > NIC ordering is a problem. Some say it is the multi cpu, some say bad > BIOS, some say MAC address ordering is better, some say PCI bus > enumeration is better. The netdev mailing list has had a long running > discussion on this issue. The CTO of Dell and members of HP alo

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread drew einhorn
On Sun, Nov 29, 2009 at 7:55 AM, Rob Kampen wrote: > David McGuffey wrote: > >> Starting with a fresh load and after I finish hardening the load >> following the Center for Internet Security (CIS) guidance, I'm wondering >> whether AIDE or OSSEC would be a better intrusion detection system. >> >>

Re: [CentOS] again, nic driver order

2009-11-29 Thread Ross Walker
On Nov 29, 2009, at 3:27 AM, Rob Townley wrote: On Sat, Nov 28, 2009 at 2:55 PM, Ross Walker wrote: There was a kernel update maybe the move from C4 to C5 which caused grief with Dell hardware, where it reversed the order Broadcom devices are detected, still does and needs manual swapping

Re: [CentOS] Fedora 11 i386 Evolution address book --> CentOS 5.4 x86_64

2009-11-29 Thread Lanny Marcus
On Sat, Nov 28, 2009 at 7:00 PM, David McGuffey wrote: > > Maybe I should check to see if Evolution on F11 can export the db into > something that Evolution on 5.4 can import. Yes. If you are lucky, that will work OK. Possibly you can find some information on the Novell support site. Sounds like

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread Rob Kampen
David McGuffey wrote: Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing

Re: [CentOS] again, nic driver order

2009-11-29 Thread Rob Townley
On Sat, Nov 28, 2009 at 2:55 PM, Ross Walker wrote: > On Nov 28, 2009, at 3:10 PM, Les Mikesell wrote: > >> Tom H wrote: >> Digging around google a bit more I came up with different rules, >> and >> fingers crossed, they seem to work! >> SUBSYSTEM=="net", SYSFS{address}=="00:1b:21