Re: [CentOS] compilers a security risk?

2010-03-07 Thread Drew
>> I don't have enough experience to assess the security issues. Does >> anyone have an opinion on this? It would be simple and feasible to >> allocate another domain as suggested above. As was stated by others the compiler itself isn't any more of a security risk then any other tool. If a hacker

Re: [CentOS] compilers a security risk?

2010-03-07 Thread Kwan Lowe
On Sat, Mar 6, 2010 at 6:02 PM, Dave Stevens wrote: > I manage a web hosting server that we've recently upgraded, in part so > we could accommodate a domain that will enable community mapping. In a > recent exchange of mails one developer said: > > > "I could build the package directly on the serv

Re: [CentOS] compilers a security risk?

2010-03-07 Thread Geoff Galitz
> As was stated by others the compiler itself isn't any more of a > security risk then any other tool. If a hacker can get root he can > just as easily upload binary packages as he can compile source. It is still a wise decision to not have the compiler installed if it can be avoided. Any hacke

[CentOS] Tripwire on Centos

2010-03-07 Thread Bob Aiello
does anyone know which versions of tripwire work on Centos? I am using 2.6.18-028stab059.6 Thanks in advance! Bob http://www.linkedin.com/in/BobAiello ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] compilers a security risk?

2010-03-07 Thread nate
Geoff Galitz wrote: > Making the bar higher, even in little increments, is a basic tenant of > systems security. Never dismiss the power of baby steps. Keep in mind diminishing returns with those baby steps.. Of the ~500-600 systems I've worked on over the past 10 years the only ones that were c

[CentOS] upgrading a wordpress install

2010-03-07 Thread David Mehler
Hello, I'm running wordpress via rpm on centos 5.4 i believe it is. There's a new version out v .92 and am wanting to upgrade to it. I'm trying the automatic install and am being prompted for credentials. Googling shows this is most likely a permissions problem. I was wondering what the right permi

[CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Sean Carolan
I'm monitoring some CentOS 5 servers running Sun Java. We have set things up so 2048 MB of RAM are available for the base operating system, taking into account the xMx and permgen settings. What we're seeing is the swap space getting used up, and not released. Is this normal behavior? Performan

Re: [CentOS] compilers a security risk?

2010-03-07 Thread Marko Vojinovic
On Sunday 07 March 2010 03:35:43 pm nate wrote: > The > servers I manage for my employer receive roughly 2 billion web hits > per day. 2 billion per day? That's 20 000 hits per second, on average. How many servers do you actually have behind load-balancers to deal with this kind of activity? And

Re: [CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Les Mikesell
Sean Carolan wrote: > I'm monitoring some CentOS 5 servers running Sun Java. We have set > things up so 2048 MB of RAM are available for the base operating system, > taking into account the xMx and permgen settings. What we're seeing is > the swap space getting used up, and not released. Is t

Re: [CentOS] strange network problem

2010-03-07 Thread Michael Schumacher
Dear Juan Carlos, > Are your netmask config Ok? Can you use wireshark to sniff traffic in the > middle LANCOM <->Wireshark/tcpdump<->Xenserver and send me a trace? I couldn't make any further tests on that machine because I couldn't install any software on that machine because of the failing netw

Re: [CentOS] compilers a security risk?

2010-03-07 Thread Les Mikesell
Kwan Lowe wrote: > On Sat, Mar 6, 2010 at 6:02 PM, Dave Stevens wrote: >> I manage a web hosting server that we've recently upgraded, in part so >> we could accommodate a domain that will enable community mapping. In a >> recent exchange of mails one developer said: >> >> >> "I could build the pac

Re: [CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Sean Carolan
> I think Xms/x is java's heap space for program object storage.  It doesn't > take > into account the space needed for the JVM itself.  Top should show you the > actual memory usage - along with any other programs that might be using a lot. One of our java developers indicated that the heap spac

Re: [CentOS] Tripwire on Centos

2010-03-07 Thread Kai Schaetzl
Bob Aiello wrote on Sun, 07 Mar 2010 10:25:53 -0500: > I am using 2.6.18-028stab059.6 This is not a CentOS version. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com ___ CentOS mailing list CentOS@centos.org http://lists

Re: [CentOS] upgrading a wordpress install

2010-03-07 Thread Kai Schaetzl
David Mehler wrote on Sun, 7 Mar 2010 10:50:42 -0500: > I'm running wordpress via rpm on centos 5.4 i believe it is. There's a > new version out v .92 and am wanting to upgrade to it. I'm trying the > automatic install and am being prompted for credentials. where did you get this rpm from and wha

Re: [CentOS] compilers a security risk?

2010-03-07 Thread JohnS
On Sun, 2010-03-07 at 17:24 +, Marko Vojinovic wrote: > On Sunday 07 March 2010 03:35:43 pm nate wrote: > > The > > servers I manage for my employer receive roughly 2 billion web hits > > per day. > > 2 billion per day? That's 20 000 hits per second, on average. How many > servers > do you

[CentOS] upgrading 32-bit installation to 64-bit

2010-03-07 Thread fred smith
Hi! I've got a 32-bit Centos installed on an AMD Phenom II X2 processor and I'm interested ni making it 64 bit instead. But I'd sure like to avoid having to go back thru the whole installation again... in part because I've got sotware RAID set up and I'm assuming that I can't do a fresh install in

Re: [CentOS] is it possible to recover LVM drive from accidental Fdisk?

2010-03-07 Thread Theo Band
nate wrote: > Rudi Ahlers wrote: > >> Hi all, >> >> Does anyone know if it's possible to recover an LVM partition from a drive >> that was fdisked? I accidently fdisk'd the wrong drive (had to fdisk a lot >> of 160GB drivers from old servers and one still has important data on that >> client now

Re: [CentOS] upgrading 32-bit installation to 64-bit

2010-03-07 Thread Robert Heller
At Sun, 7 Mar 2010 13:41:57 -0500 CentOS mailing list wrote: > > Hi! > > I've got a 32-bit Centos installed on an AMD Phenom II X2 processor and > I'm interested ni making it 64 bit instead. But I'd sure like to avoid > having to go back thru the whole installation again... in part because > I'

Re: [CentOS] is it possible to recover LVM drive from accidental Fdisk? [SOLVED]

2010-03-07 Thread Rudi Ahlers
On Sun, Mar 7, 2010 at 8:50 AM, nate wrote: > > re-create the original partition table, which is just a map, as long > as you haven't formatted or overwritten data everything should still > be there > > Also suggest if your not already doing it set your LVm partitons to > type 8e so it's obvious

Re: [CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Les Mikesell
Sean Carolan wrote: >> I think Xms/x is java's heap space for program object storage. It doesn't >> take >> into account the space needed for the JVM itself. Top should show you the >> actual memory usage - along with any other programs that might be using a >> lot. > > One of our java develop

Re: [CentOS] upgrading 32-bit installation to 64-bit

2010-03-07 Thread fred smith
On Sun, Mar 07, 2010 at 02:19:45PM -0500, Robert Heller wrote: > At Sun, 7 Mar 2010 13:41:57 -0500 CentOS mailing list > wrote: > > > > > Hi! > > > > I've got a 32-bit Centos installed on an AMD Phenom II X2 processor and > > I'm interested ni making it 64 bit instead. But I'd sure like to avo

Re: [CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Sean Carolan
> I'm pretty sure that's not true.  Permgen is just part of the heap space and > none of that accounts for the executing part of the JVM.  In any case, you > probably want to allow some free memory to be used for filesystem cache. I'll read up on this some more. I'm not a java expert. >> Are the

Re: [CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Les Mikesell
Sean Carolan wrote: >> I'm pretty sure that's not true. Permgen is just part of the heap space and >> none of that accounts for the executing part of the JVM. In any case, you >> probably want to allow some free memory to be used for filesystem cache. > > I'll read up on this some more. I'm not

[CentOS] Samsung f3 hd502hj and Centos 5.4

2010-03-07 Thread Tom Bishop
Not sure if anyone has seen this probably not but thought that I would throw it out there, running centos 5.4 on a tyan s4985 and I wanted to add a hot swap drive cage to it so I added a supermicro cage and bought some drives, not wanting raid but something for storage and rsync backups. Well I de

Re: [CentOS] Centos 5.4 DNS resolution issue

2010-03-07 Thread Gaurav Nangla
I can ping the google.com ip addresses (209.85.231.104) but can't ping the FQDN, obviously DNS is broken. I can also ping the nameserver ip addresses specified in /etc/resolv.conf. -- Gaurav On Sun, Mar 7, 2010 at 10:48 PM, Gaurav Nangla wrote: > Hi Everyone, > I've setup a Centos 5.4 (x86_64)

Re: [CentOS] Centos 5.4 DNS resolution issue

2010-03-07 Thread Rajagopal Swaminathan
Greetings, On Mon, Mar 8, 2010 at 11:04 AM, Gaurav Nangla wrote: > I can ping the google.com ip addresses (209.85.231.104) but can't ping the > FQDN, obviously DNS is broken. > > I can also ping the nameserver ip addresses specified in /etc/resolv.conf. > Just a thought: why don't you try google

Re: [CentOS] Centos 5.4 DNS resolution issue

2010-03-07 Thread John R Pierce
Gaurav Nangla wrote: > I can ping the google.com ip addresses > (209.85.231.104) but can't ping the FQDN, obviously DNS is broken. > > I can also ping the nameserver ip addresses specified in /etc/resolv.conf. well, the DNS servers given by your resolv.conf output seem valid f

Re: [CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Mathieu Baudier
> I'm monitoring some CentOS 5 servers running Sun Java.  We have set things Out of curiosity, which version of Sun Java do you use precisely? I had memory issues with the the Java OpenJDK 1.6 (b09) provided by stock CentOS and upgraded to Java OpenJDK 1.6 b16. ___

Re: [CentOS] Tripwire on Centos

2010-03-07 Thread Timo Schoeler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 thus Kai Schaetzl spake: > Bob Aiello wrote on Sun, 07 Mar 2010 10:25:53 -0500: > >> I am using 2.6.18-028stab059.6 > > This is not a CentOS version. No, this is an out-dated OpenVZ kernel, based on CentOS. :) Timo > Kai -BEGIN PGP SIGNATURE-

Re: [CentOS] CentOS server running java - won't let go of swap

2010-03-07 Thread Christoph Maser
Am Montag, den 08.03.2010, 08:24 +0100 schrieb Mathieu Baudier: > > I'm monitoring some CentOS 5 servers running Sun Java. We have set things > > Out of curiosity, which version of Sun Java do you use precisely? > > I had memory issues with the the Java OpenJDK 1.6 (b09) provided by > stock CentOS