Re: [CentOS] Forward http traffic

2014-01-09 Thread Nikolaos Milas
On 8/1/2014 8:28 μμ, Les Mikesell wrote: > The concept doesn't even make sense for TCP connections where the > stack requires acks and sequencing. Are you trying to bridge to a > capture device or something? Thank you all for your enlightening feedback, which helped me better understand my situ

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Rob Kampen
On 01/09/2014 12:38 PM, Karanbir Singh wrote: hi, On 01/08/2014 02:47 PM, Yves Bellefeuille wrote: One thing that struck me in Karanbir's message was the marketing mumbo-jumbo such as "the next generation of emerging technologies" and "a platform that is easily consumed". Karanbir usually writ

[CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread Mihamina Rakotomandimby
Hello, Default MySQL installation on CentOS sets /bin/bash as shell. I'm on a user cleanup task where I want reduce unneeded privileges to users. What is the "mysql" user shell for? (What will happen if I change it to /bin/false or whatever would disable it's shell?) It's not only a matter of S

[CentOS] Hash rounds in /etc/libuser.conf won't work

2014-01-09 Thread george . shaffer
Two weeks ago I reported a problem I was having in the CentOS 5 Security Support forum. I could not get hash rounds, configured in /etc/libuser.conf, to work on CentOS release 5.10 (Final), 2.6.18-371.3.1.el5 x86_64. The details are here: https://www.centos.org/forums/viewtopic.php?f=24&t=44245&

Re: [CentOS] Centos6.5 -- Broadcom BCM4313 -- having trouble connecting

2014-01-09 Thread Johan Vermeulen
op 19-12-13 12:38, Johan Vermeulen schreef: > op 19-12-13 12:23, wwp schreef: >> Hello Johan, >> >> >> On Thu, 19 Dec 2013 12:08:17 +0100 Johan Vermeulen >> wrote: >> >>> Dear All, >>> >>> I'm having trouble on 2 laptops Lenovo B580 since upgrading to Centos6.5. >>> ( Because it's a Lenovo I can

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread John Doe
From: Mihamina Rakotomandimby > Default MySQL installation on CentOS sets /bin/bash as shell. > I'm on a user cleanup task where I want reduce unneeded privileges to users. Its password should be locked. So you cannot login as mysql but you can "su - mysql" or run scripts as mysql. I do not know

[CentOS] CentOS-announce Digest, Vol 107, Issue 5

2014-01-09 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ..

[CentOS] Who deletes/edits my resolv.com ?

2014-01-09 Thread Timothy Murphy
Every now and again the nameservers in /etc/resolv.conf on my CentOS-6.5 server are commented out. I used to think this was the fault of NetworkManager, but I've stopped running that on the server (using the network service instead) and the nameserver removal still occurs. I'm baffled by the motiv

Re: [CentOS] Who deletes/edits my resolv.com ?

2014-01-09 Thread Thomas Göttgens
The DHCP client does similar things. -Ursprüngliche Nachricht- Von: centos-boun...@centos.org [mailto:centos-boun...@centos.org] Im Auftrag von Timothy Murphy Gesendet: Donnerstag, 9. Januar 2014 13:28 An: centos@centos.org Betreff: [CentOS] Who deletes/edits my resolv.com ? Every now and

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Karanbir Singh
On 01/09/2014 12:09 AM, Les Mikesell wrote: > I'd throw SMEserver, ClearOS, and the old (up to CentOS5) version of > K12LTSP in that bucket too. Maybe someone will roll a new K12LTSP > that comes up working as installed again now. The focus from the project side is going to be creating the infra

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Karanbir Singh
On 01/09/2014 08:34 AM, Rob Kampen wrote: > Is this for real? Oracle are apparently a thorn in the side to RH and > thus all the changes to C6 that caused lots of delays .. if this > changes as indicated, doesn't that negate all those changes and give > Oracle a leg up to getting their clone to

Re: [CentOS] Who deletes/edits my resolv.com ?

2014-01-09 Thread Benjamin Hackl
On Thu, 9 Jan 2014 13:26:48 +0100 Thomas Göttgens wrote: > The DHCP client does similar things. When using DHCP add the line PEERDNS=no in /etc/sysconfig/network-scripts/ifcfg- It keeps your resolv.conf as it is. Brgds -- Freundliche Gruesse/Best Regards Benjamin Hackl Media FOCUS Researc

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Leslie S Satenstein
As I see it, more and more alternatives to Oracle are in the market.  Hadoop, is cutting into Oracle's revenue. So, RH needs to concentrate on promoting JBOSS and a version of HADOOP.  Don't worry about Oracle.   Regards  Leslie Mr. Leslie Satenstein > >

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread David Miller
On Jan 9, 2014, at 4:55 AM, Karanbir Singh wrote: > On 01/09/2014 08:34 AM, Rob Kampen wrote: >> Is this for real? Oracle are apparently a thorn in the side to RH and >> thus all the changes to C6 that caused lots of delays .. if this >> changes as indicated, doesn't that negate all those ch

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread John R Pierce
On 1/9/2014 11:26 AM, David Miller wrote: > At this point I really don't see why RedHat doesn't just offer RHEL + updates > + extra channels for free and then only charge for support. This would put > them on a real equal ground with Canonical. I suspect doing so would cut heavily into their rev

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Les Mikesell
On Thu, Jan 9, 2014 at 1:37 PM, John R Pierce wrote: > On 1/9/2014 11:26 AM, David Miller wrote: >> At this point I really don't see why RedHat doesn't just offer RHEL + >> updates + extra channels for free and then only charge for support. This >> would put them on a real equal ground with Cano

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Ljubomir Ljubojevic
On 01/09/2014 08:26 PM, David Miller wrote: > > On Jan 9, 2014, at 4:55 AM, Karanbir Singh wrote: > >> On 01/09/2014 08:34 AM, Rob Kampen wrote: >>> Is this for real? Oracle are apparently a thorn in the side to RH and >>> thus all the changes to C6 that caused lots of delays .. if this >>> ch

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread John R Pierce
On 1/9/2014 11:53 AM, Ljubomir Ljubojevic wrote: > It is same with SuSE and OpenSuSE, right? opensuse is more like fedora -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing lis

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread m . roth
David Miller wrote: > On Jan 9, 2014, at 4:55 AM, Karanbir Singh wrote: >> On 01/09/2014 08:34 AM, Rob Kampen wrote: > >> Look at it another way - we are not working with the RHEL teams, we are >> working with the RH open source and standards team ( that has no real >> input into RHEL ) - to expan

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Stephen Harris
On Thu, Jan 09, 2014 at 03:18:10PM -0500, m.r...@5-cent.us wrote: > Tell them you can try it out, and if they like the results, they can pay > for a license and support for RHEL, the "real" thing, and that's a *lot* > easier sell. Especially if there's a migration script to convert existing CentOS

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Kanwar Ranbir Sandhu
On 2014-01-06 11:28, James B. Byrne wrote: > I believe that the issue is of pressing interest to the entire > community and I > would like to read what others have to say on the matter. I think everyone should assume the entire ecosystem is compromised and shouldn't trust anything. Code should

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Les Mikesell
On Thu, Jan 9, 2014 at 3:27 PM, Kanwar Ranbir Sandhu wrote: >> > We can't trust the software or the hardware any longer. When the > problem runs this deep, what can anyone do? The NSA program has > effectively removed my trust with every single U.S. (actually, 5 eyes) > based tech company. > > I

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread John R Pierce
On 1/9/2014 1:27 PM, Kanwar Ranbir Sandhu wrote: > I think everyone should assume the entire ecosystem is compromised and > shouldn't trust anything. Code should be reviewed and bugs/weaknesses > removed IMMEDIATELY. The problem is obviously not everyone is a > programmer and not everyone will ha

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Les Mikesell
On Thu, Jan 9, 2014 at 3:55 PM, John R Pierce wrote: > On 1/9/2014 1:27 PM, Kanwar Ranbir Sandhu wrote: >> I think everyone should assume the entire ecosystem is compromised and >> shouldn't trust anything. Code should be reviewed and bugs/weaknesses >> removed IMMEDIATELY. The problem is obviou

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Eero Volotinen
I always just assumed that blowfish was good precisely because it > wasn't the one that was recommended/promoted by the groups likely to > be compromised. But, I try to stay out of politics so I don't worry > much about keeping secrets anyway. > > It might be easier to compromise security of comm

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread John R Pierce
On 1/9/2014 2:20 PM, Eero Volotinen wrote: > It might be easier to compromise security of commercial products as source > code is not available. they seem to have succeeded in compromising STANDARDS and ALGORITHMS, to heck with implementations. -- john r pierce

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Robert Moskowitz
On 01/09/2014 04:55 PM, John R Pierce wrote: > On 1/9/2014 1:27 PM, Kanwar Ranbir Sandhu wrote: >> I think everyone should assume the entire ecosystem is compromised and >> shouldn't trust anything. Code should be reviewed and bugs/weaknesses >> removed IMMEDIATELY. The problem is obviously not

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Robert Moskowitz
On 01/09/2014 05:15 PM, Les Mikesell wrote: > On Thu, Jan 9, 2014 at 3:55 PM, John R Pierce wrote: >> On 1/9/2014 1:27 PM, Kanwar Ranbir Sandhu wrote: >>> I think everyone should assume the entire ecosystem is compromised and >>> shouldn't trust anything. Code should be reviewed and bugs/weaknes

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Robert Moskowitz
On 01/09/2014 05:20 PM, Eero Volotinen wrote: > I always just assumed that blowfish was good precisely because it >> wasn't the one that was recommended/promoted by the groups likely to >> be compromised. But, I try to stay out of politics so I don't worry >> much about keeping secrets anyway. >

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread m . roth
Robert Moskowitz wrote: > > On 01/09/2014 05:15 PM, Les Mikesell wrote: >> On Thu, Jan 9, 2014 at 3:55 PM, John R Pierce >> wrote: >>> On 1/9/2014 1:27 PM, Kanwar Ranbir Sandhu wrote: I think everyone should assume the entire ecosystem is compromised and shouldn't trust anything. Code s

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Robert Moskowitz
On 01/09/2014 05:28 PM, John R Pierce wrote: > On 1/9/2014 2:20 PM, Eero Volotinen wrote: >> It might be easier to compromise security of commercial products as source >> code is not available. > they seem to have succeeded in compromising STANDARDS and ALGORITHMS, to > heck with implementations.

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Les Mikesell
On Thu, Jan 9, 2014 at 4:32 PM, Robert Moskowitz wrote: > >> I always just assumed that blowfish was good precisely because it >> wasn't the one that was recommended/promoted by the groups likely to >> be compromised. But, I try to stay out of politics so I don't worry >> much about keeping secr

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread m . roth
Robert Moskowitz wrote: > > On 01/09/2014 05:28 PM, John R Pierce wrote: >> On 1/9/2014 2:20 PM, Eero Volotinen wrote: >>> It might be easier to compromise security of commercial products as >>> source code is not available. they seem to have succeeded in compromising STANDARDS and ALGORITHMS,

[CentOS] LVM thinpool snapshots broken in 6.5?

2014-01-09 Thread Dennis Jacobfeuerborn
Hi, I just installed a CentOS 6.5 System with the intention of using thinly provisioned snapshots. I created the volume group, a thinpool and then a logical volume. All of that works fine but when I create a snapshot "mysnap" then the snapshot volume gets displayed in the "lvs" output with the

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Robert Moskowitz
On 01/09/2014 05:37 PM, Les Mikesell wrote: > On Thu, Jan 9, 2014 at 4:32 PM, Robert Moskowitz wrote: >>> I always just assumed that blowfish was good precisely because it >>> wasn't the one that was recommended/promoted by the groups likely to >>> be compromised. But, I try to stay out of polit

[CentOS] CentOS Tshirt ideas

2014-01-09 Thread Karanbir Singh
hi, We have, like in the years past, a table at Fosdem and I'd like to get some tshirts printed to hand out. In the past, the Linux Ninja's and Beards ones got quite a bit of attention ( and both were not brand spammy, which is always nice ). Reaching out to the mailing list for ideas on what we

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread Cliff Pratt
Can you not set up a test system and try it out? Or, if this is your only system, could you not back it up, and test your suggestions out? The mysql "shell" is for viewing data in your databases and manipulating the data in required. You can also add tables and things like that. It is a powerful t

Re: [CentOS] CentOS Tshirt ideas

2014-01-09 Thread Johnny King
How about the CentOS T-shirt wearing penguin with a red fedora cocked on this head. Padre King Sent from my Verizon Wireless 4G LTE DROID Karanbir Singh wrote: >hi, > >We have, like in the years past, a table at Fosdem and I'd like to get >some tshirts printed to hand out. In the past, the Li

Re: [CentOS] CentOS Tshirt ideas

2014-01-09 Thread Rob Kampen
On 01/10/2014 12:30 PM, Johnny King wrote: How about the CentOS T-shirt wearing penguin with a red fedora cocked on this head. +1 Padre King Sent from my Verizon Wireless 4G LTE DROID Karanbir Singh wrote: hi, We have, like in the years past, a table at Fosdem and I'd like to get some tsh

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Cliff Pratt
I was shocked and horrified to find out that RHEL (and presumably CentOS) and Ubuntu no longer implement the 'rot13' program. Cheers, Cliff On Fri, Jan 10, 2014 at 11:32 AM, Robert Moskowitz wrote: > > On 01/09/2014 05:15 PM, Les Mikesell wrote: > > On Thu, Jan 9, 2014 at 3:55 PM, John R Pierc

Re: [CentOS] CentOS Tshirt ideas

2014-01-09 Thread Ljubomir Ljubojevic
On 01/10/2014 12:32 AM, Rob Kampen wrote: > On 01/10/2014 12:30 PM, Johnny King wrote: >> How about the CentOS T-shirt wearing penguin with a red fedora cocked >> on this head. > +1 Maybe not the Red fedora but yellow or multi-colour with CentOS colors in mind? -- Ljubomir Ljubojevic (Love is i

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread John R Pierce
On 1/9/2014 3:33 PM, Cliff Pratt wrote: > I was shocked and horrified to find out that RHEL (and presumably CentOS) > and Ubuntu no longer implement the 'rot13' program. tr A-Za-z N-ZA-Mn-za-m outfile example... $ echo this is a message | tr A-Za-z N-ZA-Mn-za-m guvf vf n zrffntr $ echo guvf

Re: [CentOS] CentOS Project joins forces with Red Hat

2014-01-09 Thread Michael Simpson
On 9 January 2014 13:35, Leslie S Satenstein wrote: > As I see it, more and more alternatives to Oracle are in the market. > Hadoop, is cutting into Oracle's revenue. > > So, RH needs to concentrate on promoting JBOSS and a version of HADOOP. > Don't worry about Oracle. > > Fedora 20 allows for i

Re: [CentOS] Who deletes/edits my resolv.com ?

2014-01-09 Thread Timothy Murphy
Benjamin Hackl wrote: > When using DHCP add the line > > PEERDNS=no > > in /etc/sysconfig/network-scripts/ifcfg- > It keeps your resolv.conf as it is. Thanks for that. I don't know if this was a sheer fluke, but when I added that from my laptop the connection to my server was immediately broke

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Cliff Pratt
Thanks! I got similar suggestions when I mentioned this at work. I was of course joking about rot13. Cheers, Cliff On Fri, Jan 10, 2014 at 12:41 PM, John R Pierce wrote: > On 1/9/2014 3:33 PM, Cliff Pratt wrote: > > I was shocked and horrified to find out that RHEL (and presumably CentOS) > >

Re: [CentOS] Who deletes/edits my resolv.com ?

2014-01-09 Thread John R Pierce
On 1/9/2014 3:46 PM, Timothy Murphy wrote: > IPforwarding was turned off on my server, >[root@alfred ~]# sysctl net.ipv4.ip_forward >net.ipv4.ip_forward = 0 > I had to run >[root@alfred ~]# sysctl -w net.ipv4.ip_forward=1 >net.ipv4.ip_forward = 1 > > Who changes this setting, and wh

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-09 Thread Robert Moskowitz
On 01/09/2014 06:33 PM, Cliff Pratt wrote: > I was shocked and horrified to find out that RHEL (and presumably CentOS) > and Ubuntu no longer implement the 'rot13' program. But they implement the NULL cipher as part of IPsec. > > Cheers, > > Cliff > > > On Fri, Jan 10, 2014 at 11:32 AM, Robert M

Re: [CentOS] CentOS Tshirt ideas

2014-01-09 Thread david
Karanbir Whatever you guys come up with, I hope it has "CentOS" somewhere in the printing. I also hope that geeks like me who aren't present at that conference have a chance to get the T-shirts, even if we have to pay for shipping. David Kurn San Francisco At 03:07 PM 1/9/2014, you wrote:

Re: [CentOS] CentOS Tshirt ideas

2014-01-09 Thread Eddie G. O'Connor Jr.
On 01/09/2014 08:22 PM, david wrote: > Karanbir > > Whatever you guys come up with, I hope it has "CentOS" somewhere in > the printing. I also hope that geeks like me who aren't present at > that conference have a chance to get the T-shirts, even if we have to > pay for shipping. > > David Kurn >

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread Mihamina Rakotomandimby
On 01/10/2014 02:25 AM, Cliff Pratt wrote: > Can you not set up a test system and try it out? Or, if this is your only > system, could you not back it up, and test your suggestions out? I dont have enough unit test in mind to assume it's safe. > The mysql "shell" is for viewing data in your datab

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mihamina Rakotomandimby said the following on 09/01/2014 10:27: > Default MySQL installation on CentOS sets /bin/bash as shell. I checked in my CentOS 6 installations. Only one (the latest) has this issue, so it could be something added/modified in