[CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread giggzounet
Hi, On our cluster with CentOS 5.5, I have a little problem with a script for infiniband (this problem: http://web.archiveorange.com/archive/v/NUQmuN84gd3D31Fdl8PU). So the fix a very easy. But what will yum/RPM do during the next update ? Will it overwrite the file ? Will it write on display that

[CentOS] Any chance to get a working, current openldap srpm/rpm for centos 5.5

2010-11-29 Thread Götz Reinicke - IT-Koordinator
Hello, is there anyone out there, who has a current 2.4.23 srpm or good how to compile it from src with supported db4? I tried to compile recent source files, but always finding the current (installed) db4 >4.3 fails. Than I tried to compile the LTB Project Files: http://ltb-project.org/wiki/doc

Re: [CentOS] how to separate individual logs?

2010-11-29 Thread John Doe
From: hadi motamedi > I have captured a file in my centos showing logs captured from many > modules concurrently. Please find attached a sample of the file. As > you see, there are logs from individual modules that have been > captured concurrently. For example, there are logs from > IPTR,SNM

Re: [CentOS] Rebuilding samba3x rpms results in size doubled

2010-11-29 Thread John Doe
From: Oguz Yilmaz >I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are nearly in >triple size of the original RPMs. I have installed and checked the binary >files >are stripped. What can result in such difference in RPM sizes? >I have not changed anything on built and install s

Re: [CentOS] ssh-agent fails to hold values

2010-11-29 Thread John Doe
From: bluethundr > I am attempting to manage my key logins with ssh-agent. However EVERY > time I try to ssh I have to go through the same exact routing and it's > getting a little old... > Does anyone have any suggestions to make ssh-agent hold these values a > bit more persistently? I have

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread Gabriel Tabares
> a very easy. But what will yum/RPM do during the next update ? Will it > overwrite the file ? Will it write on display that the file was modified > by an user (as under debian) ? > As far as I can tell, if the file is marked as a configuration file in the RPM, it will be left alone and the new

Re: [CentOS] how to separate individual logs?

2010-11-29 Thread Raj kumar
Please unsubscribe the side on my email -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of John Doe Sent: 29 November 2010 16:50 To: CentOS mailing list Subject: Re: [CentOS] how to separate individual logs? From: hadi motamedi > I have ca

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Steve Clark
On 11/27/2010 09:21 PM, John R. Dennison wrote: On Sat, Nov 27, 2010 at 08:23:34PM -0500, Nico Kadel-Garcia wrote: The "working system" in that analogy is software, not necessarily nor even likely to be the kernel itself. But yes, it can trash a production critical web or software applicatio

Re: [CentOS] Any chance to get a working, current openldap srpm/rpm for centos 5.5

2010-11-29 Thread Stefan Held
Am Montag, den 29.11.2010, 09:46 +0100 schrieb Götz Reinicke - IT-Koordinator: > Hello, > > is there anyone out there, who has a current 2.4.23 srpm or good how to > compile it from src with supported db4? Well, you would have to rebuild half of the system to do that. If you try to rebuild db4 y

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread giggzounet
Le 29/11/2010 12:44, Gabriel Tabares a écrit : >> a very easy. But what will yum/RPM do during the next update ? Will it >> overwrite the file ? Will it write on display that the file was modified >> by an user (as under debian) ? >> > > As far as I can tell, if the file is marked as a configurati

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread Nico Kadel-Garcia
On Mon, Nov 29, 2010 at 7:38 AM, giggzounet wrote: > Le 29/11/2010 12:44, Gabriel Tabares a écrit : >>> a very easy. But what will yum/RPM do during the next update ? Will it >>> overwrite the file ? Will it write on display that the file was modified >>> by an user (as under debian) ? >>> >> >> A

Re: [CentOS] ssh-agent fails to hold values

2010-11-29 Thread Nico Kadel-Garcia
On Mon, Nov 29, 2010 at 6:41 AM, John Doe wrote: > From: bluethundr > >> I am attempting to manage my key logins with ssh-agent.  However EVERY >> time I try to ssh I have to go through the same exact routing  and it's >> getting a little old... >> Does  anyone have any suggestions to make ssh-ag

Re: [CentOS] Any chance to get a working, current openldap srpm/rpm for centos 5.5

2010-11-29 Thread Eero Volotinen
2010/11/29 Götz Reinicke - IT-Koordinator : > Hello, > > is there anyone out there, who has a current 2.4.23 srpm or good how to > compile it from src with supported db4? RHEL 6 provides ldap-2.4.19 So maybe you just need to wait for Centos 6 ? -- Eero ___

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
On Monday, November 29, 2010 08:11 PM, Steve Clark wrote: > I don't know how it is now - but I tried running in permissive mode a > few years ago. It would complain about some > file, I would fix the file and the next thing I knew it was complaining > about the same file again, and the file was pa

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread giggzounet
Le 29/11/2010 13:41, Nico Kadel-Garcia a écrit : > On Mon, Nov 29, 2010 at 7:38 AM, giggzounet wrote: >> Le 29/11/2010 12:44, Gabriel Tabares a écrit : a very easy. But what will yum/RPM do during the next update ? Will it overwrite the file ? Will it write on display that the file was m

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread giggzounet
Le 29/11/2010 13:44, giggzounet a écrit : > Le 29/11/2010 13:41, Nico Kadel-Garcia a écrit : >> On Mon, Nov 29, 2010 at 7:38 AM, giggzounet wrote: >>> Le 29/11/2010 12:44, Gabriel Tabares a écrit : > a very easy. But what will yum/RPM do during the next update ? Will it > overwrite the fil

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread Jim Perrin
On Mon, Nov 29, 2010 at 7:52 AM, giggzounet wrote: > %config(noreplace) %{_sysconfdir}/ofed/openib.conf This is what a config file looks like in a spec file. See how it has %config at the beginning of the line, with the option of noreplace. This file is a config and will not be replaced as far a

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
On Monday, November 29, 2010 08:50 PM, Marko Vojinovic wrote: > Well, the kernel I used at the time had a known exploit (exploitable by some > services I was running), and the intruder got advantage of that. Of course, it > was partly my fault, because I didn't restart those machines for a long ti

Re: [CentOS] Any chance to get a working, current openldap srpm/rpm for centos 5.5

2010-11-29 Thread Adam Tauno Williams
On Mon, 2010-11-29 at 09:46 +0100, Götz Reinicke - IT-Koordinator wrote: > Hello, > is there anyone out there, who has a current 2.4.23 srpm or good how to > compile it from src with supported db4? > I tried to compile recent source files, but always finding the current > (installed) db4 >4.3 fail

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread giggzounet
Le 29/11/2010 14:08, Jim Perrin a écrit : > On Mon, Nov 29, 2010 at 7:52 AM, giggzounet wrote: > >> %config(noreplace) %{_sysconfdir}/ofed/openib.conf > > This is what a config file looks like in a spec file. See how it has > %config at the beginning of the line, with the option of noreplace. >

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Adam Tauno Williams
On Sun, 2010-11-28 at 23:42 +, Marko Vojinovic wrote: > On Sunday 28 November 2010 22:40:41 brett mm wrote: > > > This is where, as a sysadmin, you need to invest just a little time and > > > effort learning the system. Honestly, the vast majority of issues are > > > trivial to solve if you ju

Re: [CentOS] Any chance to get a working, current openldap srpm/rpm for centos 5.5

2010-11-29 Thread Götz Reinicke - IT-Koordinator
Am 29.11.10 13:16, schrieb Stefan Held: > Am Montag, den 29.11.2010, 09:46 +0100 schrieb Götz Reinicke - > IT-Koordinator: >> Hello, >> >> is there anyone out there, who has a current 2.4.23 srpm or good how to >> compile it from src with supported db4? > > Well, you would have to rebuild half of

Re: [CentOS] Any chance to get a working, current openldap srpm/rpm for centos 5.5

2010-11-29 Thread Götz Reinicke - IT-Koordinator
Am 29.11.10 13:43, schrieb Eero Volotinen: > 2010/11/29 Götz Reinicke - IT-Koordinator : >> Hello, >> >> is there anyone out there, who has a current 2.4.23 srpm or good how to >> compile it from src with supported db4? > > RHEL 6 provides ldap-2.4.19 > > So maybe you just need to wait for Centos

Re: [CentOS] Rebuilding samba3x rpms results in size doubled

2010-11-29 Thread Oguz Yilmaz
I thought, I have just recompiled by rpmbuild -ba samba3x.spec. However I have recognized libcap.so.2 has included instead of libcap.so.1 on my build system. This is the main difference between ldd outputs of smbd binaries. I will check further. Regards, -- Oguz YILMAZ On Mon, Nov 29, 2010 at

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread m . roth
Adam Tauno Williams wrote: > On Sun, 2010-11-28 at 23:42 +, Marko Vojinovic wrote: >> On Sunday 28 November 2010 22:40:41 brett mm wrote: >> > > This is where, as a sysadmin, you need to invest just a little time >> and effort learning the system. Honestly, the vast majority of issues >> > In

[CentOS] opensc/ct/etc

2010-11-29 Thread m . roth
Has anyone worked with the upstream installation for 5.5, and successfully told it to ->shut up<- when you pull your smart card out of the reader? Since you can't add parms in /etc/reader.conf, or in a file in /etc/reader.conf.d, I tried editing /etc/init.d/pcscd to tell it error level and above lo

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Les Mikesell
On 11/29/2010 7:35 AM, Adam Tauno Williams wrote: > > Even if it is *possible*, the traditional UNIX permissions are a serious > *PAIN*. If you want two users to have rw- to a file you... create a > group of two users??? Yes, there is nothing simpler than a group to represent a group of users.

[CentOS] Minimising disk I/O

2010-11-29 Thread Keith Roberts
I'd like to get disk I/O down to a minimum for my new Centos 5.5 installation. The machine will not be used as a web server anymore, as that's now hosted on a cloud platform. So there are no HTTP requests coming down the line. If I move the SWAP partition and /var/log/ to a small spare drive,

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread John Hodrien
On Mon, 29 Nov 2010, Les Mikesell wrote: > On 11/29/2010 7:35 AM, Adam Tauno Williams wrote: >> >> Even if it is *possible*, the traditional UNIX permissions are a serious >> *PAIN*. If you want two users to have rw- to a file you... create a >> group of two users??? > > Yes, there is nothing si

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread aurfalien
On Nov 29, 2010, at 7:47 AM, Les Mikesell wrote: > On 11/29/2010 7:35 AM, Adam Tauno Williams wrote: >> >> Even if it is *possible*, the traditional UNIX permissions are a >> serious >> *PAIN*. If you want two users to have rw- to a file you... create a >> group of two users??? > > Yes, there

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Lamar Owen
On Sunday, November 28, 2010 10:39:22 am Bob McConnell wrote: > Maybe not, but the risks should be evaluated on a case by case basis. I > don't believe it can be considered a panacea either. Even with SE in > full protected mode, a simple SQL injection flaw can still expose much > of the sensiti

[CentOS] directory services and root/sudo access

2010-11-29 Thread Iain Morris
This is perhaps a more general security question. For those of you with a directory services installation, do you install a generic local user with sudo access in case directory services is not available? Or do you just beef up your directory services to the point that you are confident it will a

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-29 Thread ken
On 11/28/2010 05:13 PM William Hooper wrote: > On Sun, Nov 28, 2010 at 4:00 PM, ken wrote: >>> You need to take a closer look at what yum is trying to install. This >>> message is telling you yum won't update the package because it will >>> break a dependency on another installed package. >> yum'

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Lamar Owen
On Sunday, November 28, 2010 10:37:29 pm Les Mikesell wrote: > But that means you were running software with vulnerabilities or a user would > not be able to become root anyway. Is that due to not being up to date (i.e. > would normal, non-SELinux measures have been enough), or was this before a

[CentOS] rpm dependencies

2010-11-29 Thread bluethundr
I have successfully created a packaged version of openssh that has the LPK patch. LPK allows you to store your public keys in LDAP. However when I go to install the package I created it complains about dependencies: [r...@virtcent13:/home/bluethundr/rpm]#rpm -Uvh openssh-5.6p1-1.i386.rpm error:

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Les Mikesell
On 11/29/2010 10:17 AM, Lamar Owen wrote: > On Sunday, November 28, 2010 10:37:29 pm Les Mikesell wrote: >> But that means you were running software with vulnerabilities or a user would >> not be able to become root anyway. Is that due to not being up to date (i.e. >> would normal, non-SELinux mea

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-29 Thread ken
On 11/28/2010 05:16 PM William Hooper wrote: > On Sun, Nov 28, 2010 at 5:12 PM, William Hooper > wrote: >> On Sun, Nov 28, 2010 at 4:00 PM, ken wrote: You need to take a closer look at what yum is trying to install. This message is telling you yum won't update the package because

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Lamar Owen
On Sunday, November 28, 2010 05:40:41 pm brett mm wrote: > In reality, I am not at all sure that a quantum leap in complexity > adds to security at all. Any proper use of old-school group > permissions can give as finely-grained a security policy as you would > like. No, it won't. Suppose I'm run

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread m . roth
Les Mikesell wrote: > On 11/29/2010 10:17 AM, Lamar Owen wrote: >> On Sunday, November 28, 2010 10:37:29 pm Les Mikesell wrote: > How much 3rd party software do you run where someone else has not > already spent the time to work out the policies needed to let it work? And how much in-house develo

Re: [CentOS] rpm dependencies

2010-11-29 Thread Joe Keller
When you built openssh, didn't it also build the openssh-clients and openssh-server RPMs? You should install them at the same in the same transaction with your version of openssh: rpm -Uvh openssh*-5.6p1-1.i386.rpm On Mon, Nov 29, 2010 at 11:23 AM, bluethundr wrote: > I have successfully crea

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Lamar Owen
On Monday, November 29, 2010 11:29:31 am Les Mikesell wrote: > Agreed, but not everyone has time to do both - or to learn lots of > distribution-specific details in mixed environments. My opinion is that > doing the simple stuff first is a win. And that works the same on > systems that don't i

Re: [CentOS] rpm dependencies

2010-11-29 Thread Robert Heller
At Mon, 29 Nov 2010 11:23:03 -0500 CentOS mailing list wrote: > > I have successfully created a packaged version of openssh that has > the LPK patch. LPK allows you to store your public keys in LDAP. > However when I go to install the package I created it complains about > dependencies: > >

[CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Johan Scheepers
Good day, Gparted is not available on my installation. Which patition tool is available in centos 5.5 please. Thanks Johan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] rpm dependencies

2010-11-29 Thread bluethundr
Sounds great guys!! on it!!! :) On Mon, Nov 29, 2010 at 11:55 AM, Robert Heller wrote: > At Mon, 29 Nov 2010 11:23:03 -0500 CentOS mailing list > wrote: > >> >>  I have successfully created a packaged version of openssh that has >> the LPK patch.  LPK allows you to store your public keys in LDA

Re: [CentOS] Minimising disk I/O

2010-11-29 Thread Blake Hudson
I would suggest looking at articles that focus on laptop power consumption, they typically have a section dedicated to disk accesses and how to spin the disk down as much as possible since this has traditionally been one of the better ways to minimize power consumption on a laptop. This article ha

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Robert Heller
At Mon, 29 Nov 2010 19:02:49 +0200 CentOS mailing list wrote: > > Good day, > > Gparted is not available on my installation. > > Which patition tool is available in centos 5.5 please. fdisk, sfdisk, parted, kpartx, and pyparted. fdisk is not recomended for really large disks since it only h

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Keith Roberts
On Mon, 29 Nov 2010, Johan Scheepers wrote: > To: centos > From: Johan Scheepers > Subject: [CentOS] centos 5.5 - which partition manager installed > > Good day, > > Gparted is not available on my installation. > > Which patition tool is available in centos 5.5 please. Hi Johan. It's availabl

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Rudi Ahlers
On Mon, Nov 29, 2010 at 7:02 PM, Johan Scheepers wrote: > Good day, > > Gparted is not available on my installation. > > Which patition tool is available in centos 5.5 please. > > Thanks > Johan > ___ > CentOS mailing list > CentOS@centos.org > http://li

Re: [CentOS] Minimising disk I/O

2010-11-29 Thread Keith Roberts
On Mon, 29 Nov 2010, Blake Hudson wrote: > To: CentOS mailing list > From: Blake Hudson > Subject: Re: [CentOS] Minimising disk I/O > > I would suggest looking at articles that focus on laptop power > consumption, they typically have a section dedicated to disk accesses > and how to spin the di

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Lars Hecking
> fdisk, sfdisk, parted, kpartx, and pyparted. > > fdisk is not recomended for really large disks since it only handles > DOS partition tables -- use parted to create GPT partition tables. I prefer GPT fdisk for that and rolled my own rpm ...

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Johan Scheepers
Robert Heller wrote: > At Mon, 29 Nov 2010 19:02:49 +0200 CentOS mailing list > wrote: > >> Good day, >> >> Gparted is not available on my installation. >> >> Which patition tool is available in centos 5.5 please. > > fdisk, sfdisk, parted, kpartx, and pyparted. > > fdisk is not recomended for

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Johan Scheepers
Lars Hecking wrote: >> fdisk, sfdisk, parted, kpartx, and pyparted. >> >> fdisk is not recomended for really large disks since it only handles >> DOS partition tables -- use parted to create GPT partition tables. > > I prefer GPT fdisk for that and rolled my own rpm ... > > > > --

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Johan Scheepers
Rudi Ahlers wrote: > On Mon, Nov 29, 2010 at 7:02 PM, Johan Scheepers > wrote: >> Good day, >> >> Gparted is not available on my installation. >> >> Which patition tool is available in centos 5.5 please. >> >> Thanks >> Johan >> ___ >> CentOS mailing li

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Johan Scheepers
Keith Roberts wrote: > On Mon, 29 Nov 2010, Johan Scheepers wrote: > >> To: centos >> From: Johan Scheepers >> Subject: [CentOS] centos 5.5 - which partition manager installed >> >> Good day, >> >> Gparted is not available on my installation. >> >> Which patition tool is available in centos 5.5

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Les Mikesell
On 11/29/2010 10:52 AM, Lamar Owen wrote: > On Monday, November 29, 2010 11:29:31 am Les Mikesell wrote: >> Agreed, but not everyone has time to do both - or to learn lots of >> distribution-specific details in mixed environments. My opinion is that >> doing the simple stuff first is a win. And t

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread ken
On 11/29/2010 07:38 AM giggzounet wrote: > Le 29/11/2010 12:44, Gabriel Tabares a écrit : >>> ... > > where in the rpm package can I find if the file is a configuration file > or not ? This will list configuration files for an installed $package: rpm -Vv $package 2>&1|grep -e ^" c" ___

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Les Mikesell
On 11/29/2010 10:46 AM, m.r...@5-cent.us wrote: > >> How much 3rd party software do you run where someone else has not >> already spent the time to work out the policies needed to let it work? > > And how much in-house developed software do you run? Or, about those 3rd > party software, do you run

Re: [CentOS] directory services and root/sudo access

2010-11-29 Thread Adam Tauno Williams
On Mon, 2010-11-29 at 08:13 -0800, Iain Morris wrote: > This is perhaps a more general security question. For those of you > with a directory services installation, do you install a generic local > user with sudo access in case directory services is not available? Yes, always. > Or do you just b

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Les Mikesell
On 11/29/2010 10:40 AM, Lamar Owen wrote: > On Sunday, November 28, 2010 05:40:41 pm brett mm wrote: >> In reality, I am not at all sure that a quantum leap in complexity >> adds to security at all. Any proper use of old-school group >> permissions can give as finely-grained a security policy as yo

Re: [CentOS] Minimising disk I/O

2010-11-29 Thread Keith Roberts
I've added a second IDE card to my system on the PCI bus, and added a small HDD on the Primary Master port for that IDE card. This drive shows up using the Gparted live CD as /dev/hde Which sounds about right. The other drives show up as /dev/hda (Primary Master) and /dev/hdc (Secondary Master

Re: [CentOS] the wandering MAC?

2010-11-29 Thread Boris Epstein
On Wed, Oct 13, 2010 at 12:28 PM, Boris Epstein wrote: > Hi all, > > I have what appears to be a truly puzzling problem. I've got this P4 > 32-bit machine running CentOS 5.5 with XEN that has two NICs: one > onboard, an Intel Corporation 82540EM Gigabit and one on an expansion > card, Realtek Semi

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-29 Thread William Hooper
On Mon, Nov 29, 2010 at 11:13 AM, ken wrote: > The key to the puzzle for me was that, to install gmime20, it was > necessary to remove gmime.  I never would have guessed that... seems > counter-intuitive to me... and the only way to find that out is to look > in the spec file!!  Or is there an

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-29 Thread William Hooper
On Mon, Nov 29, 2010 at 11:33 AM, ken wrote: > Where was a message telling me that?  (In my original post I included > the relevant output.)  There wasn't anything there which said the > install of gmime20 necessitated removing another, different package. I'll try to explain, but part of it just

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread m . roth
Lamar Owen wrote: > On Monday, November 29, 2010 11:29:31 am Les Mikesell wrote: >> Agreed, but not everyone has time to do both - or to learn lots of >> distribution-specific details in mixed environments. My opinion is that >> doing the simple stuff first is a win. And that works the same on >>

[CentOS] Samsung CLP-325W network connection?

2010-11-29 Thread Timothy Murphy
Anyone got this working over a LAN under CentOS? The instructions claim it is easy to connect after pressing the WPS button on printer and router. Sadly, I don't see a WPS button on my Linksys WRT54GL router. When I press the WPS button on the printer the WiFi icon flashes, but I don't see any att

Re: [CentOS] Samsung CLP-325W network connection?

2010-11-29 Thread Eero Volotinen
2010/11/29 Timothy Murphy : > Anyone got this working over a LAN under CentOS? > The instructions claim it is easy to connect > after pressing the WPS button on printer and router. > > Sadly, I don't see a WPS button on my Linksys WRT54GL router. > When I press the WPS button on the printer > the W

Re: [CentOS] Samsung CLP-325W network connection?

2010-11-29 Thread John R Pierce
On 11/29/10 11:50 AM, Timothy Murphy wrote: > Anyone got this working over a LAN under CentOS? > The instructions claim it is easy to connect > after pressing the WPS button on printer and router. > > Sadly, I don't see a WPS button on my Linksys WRT54GL router. thats not going to do anything if y

Re: [CentOS] rpm dependencies

2010-11-29 Thread bluethundr
Hey list, I actually got the spec for openssh-lpk to build... however for some reason at this point it is ONLY building SRPMs... no idea why yet but i am plugging away at this.. I could use a spare set of eyes on this if you can spare them... spec file is enclosed... thanks!! On Mon, Nov 29

Re: [CentOS] Samsung CLP-325W network connection?

2010-11-29 Thread fred smith
On Mon, Nov 29, 2010 at 07:50:45PM +, Timothy Murphy wrote: > Anyone got this working over a LAN under CentOS? > The instructions claim it is easy to connect > after pressing the WPS button on printer and router. > > Sadly, I don't see a WPS button on my Linksys WRT54GL router. I'm not at hom

Re: [CentOS] rpm dependencies

2010-11-29 Thread bluethundr
using this command, sorry I forgot to include that.. [make...@virtcent15 SPECS]$ rpmbuild -ba openssh-lpk.spec and here's the tail end of the output: PAM is enabled. You may need to install a PAM control file for sshd, otherwise password authentication may fail. Example PAM control files can be

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread Jim Perrin
On Mon, Nov 29, 2010 at 12:39 PM, ken wrote: > rpm -Vv $package 2>&1|grep -e ^"  c" Or the slightly easier (and per the rpm documentation) rpm -qc packagename HTH -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell ___

Re: [CentOS] the wandering MAC?

2010-11-29 Thread Lucian
On Mon, Nov 29, 2010 at 6:58 PM, Boris Epstein wrote: > http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flat&order=ASC&topic_id=19571&forum=40#forumpost73378 > > Looks like there is a whole special repo for this sort of drivers. Has > anybody used it? How is it? Elrepo is trustworthy.

Re: [CentOS] pcscd

2010-11-29 Thread Todd Denniston
m.r...@5-cent.us wrote, On 11/22/2010 02:21 PM: > Anyone working with/using it? One thing that's driving me nuts is that it > keeps spitting garbage into the logs (card absent or mute!!!). I just > tried editing /etc/init.d/pcscd - there's *no* way to pass parms from the > config file - and set the

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
On Tuesday, November 30, 2010 01:38 AM, Les Mikesell wrote: >> All of the third-party software I run seems to run just fine, as long as the >> right contexts are applied. > > Well, obviously it will work after someone takes the time to make it > work. Now it is your turn to quantify: How much w

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
On Monday, November 29, 2010 11:58 PM, aurfal...@gmail.com wrote: >>> You end up with a zillion groups - which is >>> pointless and unmaintainable. Thank goodness for ACL support and >>> setfacl/getfacl. >> >> So what do you do when you have user-specific ACLs splattered randomly >> through the f

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Jeff Allison
On 30 November 2010 09:03, Christopher Chan wrote: > On Monday, November 29, 2010 11:58 PM, aurfal...@gmail.com wrote: > You end up with a zillion groups - which is pointless and unmaintainable.  Thank goodness for ACL support and setfacl/getfacl. >>> >>> So what do you do when you

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
On Tuesday, November 30, 2010 02:35 AM, Les Mikesell wrote: > On 11/29/2010 10:40 AM, Lamar Owen wrote: >> On Sunday, November 28, 2010 05:40:41 pm brett mm wrote: >>> In reality, I am not at all sure that a quantum leap in complexity >>> adds to security at all. Any proper use of old-school group

Re: [CentOS] yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?

2010-11-29 Thread ken
On 11/29/2010 04:29 PM Jim Perrin wrote: > On Mon, Nov 29, 2010 at 12:39 PM, ken wrote: > >> rpm -Vv $package 2>&1|grep -e ^" c" > > Or the slightly easier (and per the rpm documentation) > > rpm -qc packagename > > HTH "rpm -qvc $package" gives more info-- the files' permissions and

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Les Mikesell
On 11/29/2010 4:09 PM, Christopher Chan wrote: > In reality, I am not at all sure that a quantum leap in complexity adds to security at all. Any proper use of old-school group permissions can give as finely-grained a security policy as you would like. >>> >>> No, it won't. >>> >

Re: [CentOS] pcscd

2010-11-29 Thread m . roth
Todd Denniston wrote: > m.r...@5-cent.us wrote, On 11/22/2010 02:21 PM: >> Anyone working with/using it? One thing that's driving me nuts is that >> it keeps spitting garbage into the logs (card absent or mute!!!). I just >> tried editing /etc/init.d/pcscd - there's *no* way to pass parms from >> t

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Max Hetrick
On 11/29/2010 05:09 PM, Christopher Chan wrote: > Hurrah! That's it! Just move the problem elsewhere. Oh, you snipped out > a bit too much. Write access is not just the problem. Being able to > upload and execute is also a problem. Can you say 'bot'? What we've done at my place of employment for

Re: [CentOS] pcscd

2010-11-29 Thread Todd Denniston
m.r...@5-cent.us wrote, On 11/29/2010 05:20 PM: > Todd Denniston wrote: >> m.r...@5-cent.us wrote, On 11/22/2010 02:21 PM: >>> Anyone working with/using it? One thing that's driving me nuts is that >>> it keeps spitting garbage into the logs (card absent or mute!!!). I just >>> tried editing /etc/i

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
- Original Message - From: "Max Hetrick" To: "CentOS mailing list" Sent: Tuesday, November 30, 2010 6:51 AM Subject: Re: [CentOS] SELinux - way of the future or good idea but !!! > On 11/29/2010 05:09 PM, Christopher Chan wrote: > >> Hurrah! That's it! Just move the problem elsewhere.

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
- Original Message - From: "Les Mikesell" To: Sent: Tuesday, November 30, 2010 6:19 AM Subject: Re: [CentOS] SELinux - way of the future or good idea but !!! > On 11/29/2010 4:09 PM, Christopher Chan wrote: >>> If you don't trust your software, run it under a uid that doesn't have >>

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Les Mikesell
On 11/29/10 8:10 PM, Christopher Chan wrote: > >> Yes, if you are concerned about security of certain files it is indeed a >> good idea to run software you don't trust elsewhere. And if the problem >> is not trusting software, why are you putting blind faith in the SELinux >> code? > > Oh certainl

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread cpolish
Lamar Owen wrote: > With SELinux I can set files and whole hierachies to not allow Acrobat > Reader access of various types, while still alllowing access to those > areas it needs. Voila! Acrobat Reader vulnerabilities and the PDF's > that exploit them no longer have any power to exploit my syst

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread cpolish
Christopher Chan wrote: > Les Mikesell wrote: > > >> All of the third-party software I run seems to run just fine, as long as > >> the right contexts are applied. > > > > Well, obviously it will work after someone takes the time to make it > > work. Now it is your turn to quantify: How much wou

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Christopher Chan
- Original Message - From: > Christopher Chan wrote: >> Les Mikesell wrote: >> >> >> All of the third-party software I run seems to run just fine, as long >> >> as the right contexts are applied. >> > >> > Well, obviously it will work after someone takes the time to make it >> > work.

Re: [CentOS] how to separate individual logs?

2010-11-29 Thread hadi motamedi
On 11/29/10, John Doe wrote: > Here is "The Power of CentOS"!!! (in approximately 3 minutes...) > > cat edit.txt | while read LINE; do > echo "$LINE" | grep -q '>\.\.' > if [ $? -eq 0 ]; then > LOGFILE=`echo $LINE | cut -d' ' -f1`.log > else > echo "$LINE" >> $LOGFILE > fi > done

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-29 Thread Nico Kadel-Garcia
On Mon, Nov 29, 2010 at 8:35 AM, Adam Tauno Williams wrote: > Even if it is *possible*, the traditional UNIX permissions are a serious > *PAIN*.  If you want two users to have rw- to a file you...  create a > group of two users???  You end up with a zillion groups - which is > pointless and unmai

Re: [CentOS] centos 5.5 - which partition manager installed

2010-11-29 Thread Nico Kadel-Garcia
On Mon, Nov 29, 2010 at 12:02 PM, Johan Scheepers wrote: > Good day, > > Gparted is not available on my installation. > > Which patition tool is available in centos 5.5 please. > > Thanks > Johan gparted is just the "Gnome" GUI for parted. "parted" works very well at the command line, and has opt