Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-16 Thread Peter Lawler
On 17/04/15 12:31, Valeri Galtsev wrote: > But being not native > English speaker, I use it ("not native English speaker") Figured as much, which is why I mentioned it ;) > as an excuse for > being unable to pronounce anything. Not as if most English speakers can pronounce many English words .

Re: [CentOS] Disable SSLv3 in sendmail in CentOS 5

2015-04-16 Thread Paul Heinlein
On Thu, 16 Apr 2015, Andrew Daviel wrote: RedHat released sendmail-8.13.8-10.el5_11.src.rpm which includes sendmail-8.13.8-ssl-opts.patch which adds support for disabling SSLv3 and SSLv2 in sendmail.cf But as far as I can see there is no support in sendmail.mc - I can't see how to compile se

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-16 Thread Valeri Galtsev
On Thu, April 16, 2015 8:59 pm, Peter Lawler wrote: > [OT ALERT] > > On 17/04/15 02:28, Valeri Galtsev wrote: > >> clamav is a scanner that is designed to detect viruses (virii I should >> use >> for plural as it is Latin word) > I believe this 'rule' in English is misunderstood by many and as a >

[CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-16 Thread Peter Lawler
[OT ALERT] On 17/04/15 02:28, Valeri Galtsev wrote: > clamav is a scanner that is designed to detect viruses (virii I should use > for plural as it is Latin word) I believe this 'rule' in English is misunderstood by many and as a general rule of thumb... tl;dr: Words from Old English that came i

[CentOS] Disable SSLv3 in sendmail in CentOS 5

2015-04-16 Thread Andrew Daviel
RedHat released sendmail-8.13.8-10.el5_11.src.rpm which includes sendmail-8.13.8-ssl-opts.patch which adds support for disabling SSLv3 and SSLv2 in sendmail.cf But as far as I can see there is no support in sendmail.mc - I can't see how to compile sendmail.mc to get the required line ServerS

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
On Thu, Apr 16, 2015 at 6:03 PM, James Hogarth wrote: > This was required for kerberos secured updates prior to el7.1 and el6.6 ... > > The problem in the underlying kerberos libraries was resolved so that > kerberos based updates worked with gss again and spnego doesn't need to be > compiled in.

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread James Hogarth
On 16 Apr 2015 14:29, "Johnny Hughes" wrote: > > On 04/16/2015 06:33 AM, Mike wrote: > > Hi Johnny, > > > > Thank you for your response. I thought to choose the sernet package > > because of the following stated in Samba Readme: > > > > Samba packages shipped in some distributions like e. g. Fedo

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
in fact: modgnutls provides easy way to get tlsv1.2 to rhel 5 -- Eero 2015-04-16 21:02 GMT+03:00 Eero Volotinen : > well. this hack solution might work: > http://www.tuxad.de/blog/archives/2014/11/19/openssl_updatesenhancements_for_rhel__centos_5/index.html > > -- > Eero > > 2015-04-16 17:30 GMT

Re: [CentOS] Laptop for CentOS

2015-04-16 Thread Steve Clark
On 04/15/2015 12:55 PM, Steve Clark wrote: Hello, Has anyone used the Dell M3800 (ubuntu) laptop to run CentOS 6.x? If so how did it work out? Also does anyone have a fairly new laptop they are running CentOS 6.x on, that they are happy about? I am in the market for a new laptop and it must

Re: [CentOS] Laptop with CentOS only & support

2015-04-16 Thread m . roth
ken wrote: > > Looking for my next linux laptop too, I'm loving this thread. > > A tangential yet very much related question: > > In the past when I've purchased a computer and put linux on it, I always > had to keep Windows on it (dual-boot) in case there was a probable > hardware problem and I ha

Re: [CentOS] Laptop with CentOS only & support

2015-04-16 Thread ken
Looking for my next linux laptop too, I'm loving this thread. A tangential yet very much related question: In the past when I've purchased a computer and put linux on it, I always had to keep Windows on it (dual-boot) in case there was a probable hardware problem and I had to walk through the

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
well. this hack solution might work: http://www.tuxad.de/blog/archives/2014/11/19/openssl_updatesenhancements_for_rhel__centos_5/index.html -- Eero 2015-04-16 17:30 GMT+03:00 Leon Fauster : > Am 16.04.2015 um 11:46 schrieb Leon Fauster : > > Am 16.04.2015 um 11:43 schrieb Eero Volotinen : > >> I

Re: [CentOS] ClamAV reports a trojan

2015-04-16 Thread Valeri Galtsev
On Thu, April 16, 2015 10:09 am, Les Mikesell wrote: > On Thu, Apr 16, 2015 at 10:01 AM, James B. Byrne wrote: >> This morning I discovered this in my clamav report from one of our imap servers: >> /usr/share/nmap/scripts/irc-unrealircd-backdoor.nse: >> Unix.Trojan.MSShellcode-21 FOUND >> I have l

Re: [CentOS] Laptop for CentOS

2015-04-16 Thread Chuck Campbell
On 4/15/2015 11:55 AM, Steve Clark wrote: > Hello, > > Has anyone used the Dell M3800 (ubuntu) laptop to run CentOS 6.x? If so how > did it work out? > > Also does anyone have a fairly new laptop they are running CentOS 6.x on, > that they are happy > about? I am in the market for a new laptop a

Re: [CentOS] ClamAV reports a trojan

2015-04-16 Thread Les Mikesell
On Thu, Apr 16, 2015 at 10:01 AM, James B. Byrne wrote: > This morning I discovered this in my clamav report from one of our > imap servers: > > /usr/share/nmap/scripts/irc-unrealircd-backdoor.nse: > Unix.Trojan.MSShellcode-21 FOUND > > > I have looked at this script and it appears to be part of t

[CentOS] ClamAV reports a trojan

2015-04-16 Thread James B. Byrne
This morning I discovered this in my clamav report from one of our imap servers: /usr/share/nmap/scripts/irc-unrealircd-backdoor.nse: Unix.Trojan.MSShellcode-21 FOUND I have looked at this script and it appears to be part of the nmap distribution. It actually tests for irc backdoors. IRC is no

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Les Mikesell
On Thu, Apr 16, 2015 at 9:25 AM, Matthew Miller wrote: > On Thu, Apr 16, 2015 at 07:44:21AM -0500, Les Mikesell wrote: >> > The issue here really isn't systemd or the PrivateTmp feature but the >> > fact that some applications don't properly distinguish between temporary >> > files and data files.

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Matthew Miller
On Wed, Apr 15, 2015 at 08:52:16PM -0500, Les Mikesell wrote: > Mostly I'm interested in avoiding surprises and having code that isn't > married to the weirdness of any particular version of any particular > distribution. And I found this to be pretty surprising, given that I That's always diffic

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Leon Fauster
Am 16.04.2015 um 11:46 schrieb Leon Fauster : > Am 16.04.2015 um 11:43 schrieb Eero Volotinen : >> Is there any nice way to get tlsv1.2 support to centos 5? >> upgrading os to 6 is not option available. > > > Unfortunately not. https://bugzilla.redhat.com/show_bug.cgi?id=1066914 -- LF __

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Matthew Miller
On Thu, Apr 16, 2015 at 07:44:21AM -0500, Les Mikesell wrote: > > The issue here really isn't systemd or the PrivateTmp feature but the > > fact that some applications don't properly distinguish between temporary > > files and data files. > Maybe, but if an application wants a private directory for

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
On Thu, Apr 16, 2015 at 9:29 AM, Johnny Hughes wrote: > On 04/16/2015 06:33 AM, Mike wrote: > > > BUT .. If I was going to solve this problem, I would do so asking the > sernet guys and I would rebuild the "bind" sources in CentOS with the > proper configure switches so it would likely still meet

Re: [CentOS] Where's the debuginfo?

2015-04-16 Thread Lamar Owen
On 04/16/2015 04:39 AM, Johnny Hughes wrote: On 04/15/2015 10:45 PM, Lamar Owen wrote: Updated kernel-debuginfo packages are now in the debuginfo.centos.org tree. Thanks to the CentOS team for that. For the record, the secure boot signing process makes the kernel build process on CentOS-7

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Johnny Hughes
On 04/16/2015 06:33 AM, Mike wrote: > Hi Johnny, > > Thank you for your response. I thought to choose the sernet package > because of the following stated in Samba Readme: > > Samba packages shipped in some distributions like e. g. Fedora, RHEL may > not be able to be used as Samba AD DC, becaus

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Les Mikesell
On Thu, Apr 16, 2015 at 6:58 AM, Dennis Jacobfeuerborn wrote: > >> >> No, systemd actually remaps /tmp from apache - and apparently most >> other daemons - to private directories below /tmp with configs as >> shipped. The command line tool wrote the file to /tmp as expected. >> The perl code run

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Jim Perrin
On 04/16/2015 04:49 AM, Eero Volotinen wrote: > How about using gnutls? Not in the version included with EL5 as I recall. You might want to give some serious thought to an upgrade plan. El5 goes EOL in 2017, so you've got a little over a year. Additionally, EL5 is already missing security updat

Re: [CentOS] Modifying files of NFS

2015-04-16 Thread Dennis Jacobfeuerborn
On 16.04.2015 02:12, Steven Tardy wrote: > >> I have an NFS storage system and want to run jpegoptim on several GB's >> of jpeg images and I'm wondering what the best approach is. >> Is it ok to run this operation on the Server itself while the clients >> have it mounted or will this lead to probl

Re: [CentOS] Update to 1503 release problem

2015-04-16 Thread Dennis Jacobfeuerborn
On 16.04.2015 12:51, Alessandro Baggi wrote: > From freedesktop.org: > > > Q: I want to change a service file, but rpm keeps overwriting it in > /usr/lib/systemd/system all the time, how should I handle this? > > A: The recommended way is to copy the service file from > /usr/lib/systemd/system t

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Dennis Jacobfeuerborn
On 16.04.2015 04:15, Les Mikesell wrote: > On Wed, Apr 15, 2015 at 9:00 PM, John R Pierce wrote: >> On 4/15/2015 6:52 PM, Les Mikesell wrote: >>> >>> Mostly I'm interested in avoiding surprises and having code that isn't >>> married to the weirdness of any particular version of any particular >>>

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
Hi Johnny, Thank you for your response. I thought to choose the sernet package because of the following stated in Samba Readme: Samba packages shipped in some distributions like e. g. Fedora, RHEL may not be able to be used as Samba AD DC, because the distribution relies on MIT Kerberos which is

Re: [CentOS] Update to 1503 release problem

2015-04-16 Thread Alessandro Baggi
From freedesktop.org: Q: I want to change a service file, but rpm keeps overwriting it in /usr/lib/systemd/system all the time, how should I handle this? A: The recommended way is to copy the service file from /usr/lib/systemd/system to /etc/systemd/system and edit it there. The latter dire

Re: [CentOS] Update to 1503 release problem

2015-04-16 Thread Alessandro Baggi
Hi list, the update has modified /etc/systemd/system/multi-user.target.wants/postgresql.service pointing to /usr/lib/systemd/system/postgresql.service. I have edited postgres file to change PGDATA. How James says, I have edited postgresql.service manually. What is the correct way? Thanks in a

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
How about using gnutls? Eero 16.4.2015 12.46 ip. "Leon Fauster" kirjoitti: > Am 16.04.2015 um 11:43 schrieb Eero Volotinen : > > Is there any nice way to get tlsv1.2 support to centos 5? > > upgrading os to 6 is not option available. > > > Unfortunately not. > > -- > LF > > > > _

Re: [CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Leon Fauster
Am 16.04.2015 um 11:43 schrieb Eero Volotinen : > Is there any nice way to get tlsv1.2 support to centos 5? > upgrading os to 6 is not option available. Unfortunately not. -- LF ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mail

[CentOS] Centos 5 & tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
Hi, Is there any nice way to get tlsv1.2 support to centos 5? upgrading os to 6 is not option available. -- Eero ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Related to the new laptop question: CentOS on a netbook?

2015-04-16 Thread Michael Horne
scratch that, I swapped the 2gb for 4gb. most people are amazed at the speed of it... I managed to convert a few people to linux on their netbook recently and they will never turn back. great way to rejuvenate old hardware. On 16/04/15 10:39, Michael Horne wrote: running a cheap Acer Aspire

Re: [CentOS] Related to the new laptop question: CentOS on a netbook?

2015-04-16 Thread Michael Horne
running a cheap Acer Aspire one 722, 2gb ram, dual core 1ghz, swapped the HDD for a SSD. it's running fedora 21 LXDE. it's fast, powerful enough for working on the move and boots / shuts down in about 10 seconds flat. I also had Centos7 on here before but Fedora has better support for multime

Re: [CentOS] Where's the debuginfo?

2015-04-16 Thread Johnny Hughes
On 04/15/2015 10:45 PM, Lamar Owen wrote: > On 04/03/2015 11:11 AM, Eric Millbrandt wrote: >> Specifically, I'm looking for >> kernel-debuginfo-3.10.0-229.1.2.el7.x86_64, but the latest debuginfo >> file is kernel-debuginfo-3.10.0-123.13.2.el7.x86_64.rpm, which isn't >> even the most recent release

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Johnny Hughes
On 04/16/2015 12:53 AM, Mike wrote: > CentOS 7.1503 installed. > Installed Samba 4 from sernet: Version 4.1.17-SerNet-RedHat-11.el7 (to be > configured). > > The samba wiki Readme First page states, "Some distributions like . . . Red > Hat Enterprise Linux (and clones), ship BIND9 packages with di