[CentOS] Linux client for Checkpoint VPN?

2015-01-26 Thread Boris Epstein
Hello all, Does anybody know if there is a modern Linux client compatible with the latest versions of Checkpoint VPN ( http://www.checkpoint.com/ )? They used to have a Linux client back in the day but that seems to have been discontinued. Is anybody able to connect to a Checkpoint VPN server fro

Re: [CentOS] VLAN issue

2015-01-26 Thread Boris Epstein
Gordon, thanks! What sort of security implications did you have in mind? Just curious. Boris. On Mon, Jan 26, 2015 at 3:50 PM, Gordon Messmer wrote: > On 01/25/2015 04:20 PM, Boris Epstein wrote: > >> I have resolved this, finally. The problem was that I configured VLAN 48 >> as >> the native

Re: [CentOS] How to prevent root from managing/disabling SELinux

2015-01-26 Thread Stephen Harris
On Mon, Jan 26, 2015 at 03:29:23PM -0500, Daniel J Walsh wrote: > You could also set the secure_ booleans Is this in addition to or instead of removing unconfined users? > getsebool -a | grep secure_* > secure_mode --> off > secure_mode_insmod --> off > secure_mode_policyload --> off Without r

Re: [CentOS] building RPMs with SELinux

2015-01-26 Thread Daniel J Walsh
On 01/22/2015 05:40 AM, Andrew Holway wrote: > Hello, > > Im trying to find some good info on building RPMs that set the correct > SELinux contexts for the installed packages. > > Any ideas? > > Thanks, > > Andrew > ___ > CentOS mailing list > CentOS@cen

Re: [CentOS] Centos 7 | Rebind ctrl + alt + f# keystroke to application

2015-01-26 Thread Gordon Messmer
On 01/25/2015 09:31 AM, Konstantinos Karadamoglou wrote: I have an application (IntelliJ IDEA) which uses the ctrl+alt+f# key combinations to provide shortcuts. The keystrokes are bind to the ttys virtual consoles. Is there anyway to rebind the keystrokes to the application? Change the keymapp

Re: [CentOS] VLAN issue

2015-01-26 Thread Gordon Messmer
On 01/25/2015 04:20 PM, Boris Epstein wrote: I have resolved this, finally. The problem was that I configured VLAN 48 as the native VLAN on the trunk port.That was a mistake as apparently the native VLAN is the one where Cisco does not bother to tag packets. That's not a mistake, per se. Havin

Re: [CentOS] can i skip this in backups

2015-01-26 Thread Gordon Messmer
On 01/26/2015 06:54 AM, kqt4a...@gmail.com wrote: Is it ok to skip /run/log/journal/ in backups /run is a tmpfs, so all of its contents are lost on every reboot. As a purely technical matter, yes, it's perfectly safe to not back that up, along with other pseudo-filesystems like /dev /sys and

Re: [CentOS] How to prevent root from managing/disabling SELinux

2015-01-26 Thread Daniel J Walsh
On 01/23/2015 06:01 PM, Stephen Harris wrote: > At work I'm used to tools like eTrust Access Control (aka SEOS). eTrust > takes away the ability to manage the eTrust config from root and puts it > in the hands of "security admin". So there's a good separation of duties; > security admin control

Re: [CentOS] can i skip this in backups

2015-01-26 Thread kqt4at5v
On Mon, 26 Jan 2015, Stephen Harris wrote: On Mon, Jan 26, 2015 at 05:31:54PM +, Jake Shipton wrote: On 26/01/15 17:27, John R Pierce wrote: On 1/26/2015 6:54 AM, kqt4a...@gmail.com wrote: Is it ok to skip /run/log/journal/ in backups there is no directory /run/ on a stock centos syste

Re: [CentOS] Apache and SSLv3

2015-01-26 Thread Ken
I'm configuring apache with https and I've a question about sslv3 deactivation. Running "openssl ciphers -v" I get a list of cypher suite of openssl like: ECDH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(128) Mac=AEAD . SSLProtocol all -SSLv2 -SSLv3 SSLHon

Re: [CentOS] can i skip this in backups

2015-01-26 Thread Stephen Harris
On Mon, Jan 26, 2015 at 05:31:54PM +, Jake Shipton wrote: > On 26/01/15 17:27, John R Pierce wrote: > > On 1/26/2015 6:54 AM, kqt4a...@gmail.com wrote: > >> Is it ok to skip /run/log/journal/ in backups > > > > there is no directory /run/ on a stock centos system. > > > > I think he means /

Re: [CentOS] can i skip this in backups

2015-01-26 Thread Jake Shipton
On 26/01/15 17:27, John R Pierce wrote: > On 1/26/2015 6:54 AM, kqt4a...@gmail.com wrote: >> Is it ok to skip /run/log/journal/ in backups > > there is no directory /run/ on a stock centos system. > I think he means /var/run/log/journal/ Which is included on a stock centos system. Kind Regard

Re: [CentOS] can i skip this in backups

2015-01-26 Thread John R Pierce
On 1/26/2015 6:54 AM, kqt4a...@gmail.com wrote: Is it ok to skip /run/log/journal/ in backups there is no directory /run/ on a stock centos system. -- john r pierce 37N 122W somewhere on the middle of the left coast _

Re: [CentOS] Apache and SSLv3

2015-01-26 Thread Paul Heinlein
On Mon, 26 Jan 2015, Alessandro Baggi wrote: Hi list, I'm configuring apache with https and I've a question about sslv3 deactivation. Running "openssl ciphers -v" I get a list of cypher suite of openssl like: ECDH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(128) Mac=AEAD .

Re: [CentOS] Boost: updates but no announcement; nothing on rhel errata neither?

2015-01-26 Thread Johnny Hughes
On 01/26/2015 08:58 AM, Leon Fauster wrote: > Am 26.01.2015 um 09:14 schrieb Patrick Bervoets > : >> Hello, >> >> I've been offered updates for boost* on C6. There has been no announcement >> at the moment. >> >> But neither do I find anything on rhn.redhat.com/errata/ >> >> Anyone knows how I sh

Re: [CentOS] Boost: updates but no announcement; nothing on rhel errata neither?

2015-01-26 Thread Leon Fauster
Am 26.01.2015 um 09:14 schrieb Patrick Bervoets : > Hello, > > I've been offered updates for boost* on C6. There has been no announcement at > the moment. > > But neither do I find anything on rhn.redhat.com/errata/ > > Anyone knows how I should treat this update? it seems to be a rebuild (

[CentOS] can i skip this in backups

2015-01-26 Thread kqt4at5v
Is it ok to skip /run/log/journal/ in backups ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IP forwarding

2015-01-26 Thread Liam O'Toole
On 2015-01-22, Timothy Murphy wrote: > Recently, someone or something has been turning off IP forwarding > on my CentOS server: > -- > [tim@william NumberTheory]$ sudo sysctl net.ipv4.ip_forward > net.ipv4.ip_forward = 0 > [tim@william NumberTheory]$ sudo sysctl -w net.ipv

[CentOS] Apache and SSLv3

2015-01-26 Thread Alessandro Baggi
Hi list, I'm configuring apache with https and I've a question about sslv3 deactivation. Running "openssl ciphers -v" I get a list of cypher suite of openssl like: ECDH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(128) Mac=AEAD . Each lines report relative protocol

[CentOS] Boost: updates but no announcement; nothing on rhel errata neither?

2015-01-26 Thread Patrick Bervoets
Hello, I've been offered updates for boost* on C6. There has been no announcement at the moment. But neither do I find anything on rhn.redhat.com/errata/ Anyone knows how I should treat this update? Thanks Patrick ___ CentOS mailing list CentOS@ce