Re: [CentOS] Heads up on local root escalation

2014-05-13 Thread Leon Fauster
Am 12.05.2014 um 20:58 schrieb Akemi Yagi : > On Mon, May 12, 2014 at 11:23 AM, Keith Keller >> Are there any mitigation steps we can take? I've chased down some of >> the links looking for any, but haven't had success yet. > > According to the upstream BZ 1094232, there is a patch from kernel.or

Re: [CentOS] OpenDKIM and SELinux

2014-05-13 Thread James B. Byrne
On Mon, May 12, 2014 14:05, Daniel J Walsh wrote: >> dac_read_search and dac_override are usually bad to add. They typically >> mean the permission flags on the file in question is two tight for a >> root process to read/use. >> >> Loosing up the group/other permissions would probably allow a roo

Re: [CentOS] OpenDKIM and SELinux

2014-05-13 Thread Daniel J Walsh
On 05/13/2014 09:56 AM, James B. Byrne wrote: > On Mon, May 12, 2014 14:05, Daniel J Walsh wrote: > >>> dac_read_search and dac_override are usually bad to add. They typically >>> mean the permission flags on the file in question is two tight for a >>> root process to read/use. >>> >>> Loosing up

Re: [CentOS] find with exclude directory

2014-05-13 Thread Billy Crook
don't forget to escape that exclamation point if typing on bash. On Tue, May 13, 2014 at 1:50 AM, Nicolas Thierry-Mieg < nicolas.thierry-m...@imag.fr> wrote: > > On Mon, May 12, 2014 at 4:44 AM, Tim Dunphy > wrote: > > > >> Thanks. But what if I want to turn that statement into one that will >

[CentOS] Repo w/ chrome?

2014-05-13 Thread m . roth
Was it Nux's repo that's got chrome? URL and repo info, please? Thanks. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Repo w/ chrome?

2014-05-13 Thread Laurent CREPET
I think Chrome installs itself its repo settings. https://www.google.com/linuxrepositories/ On Tue, May 13, 2014 at 5:12 PM, wrote: > Was it Nux's repo that's got chrome? URL and repo info, please? > > Thanks. > >mark > > ___ > CentOS mailing

Re: [CentOS] Repo w/ chrome?

2014-05-13 Thread m . roth
Laurent CREPET wrote: > On Tue, May 13, 2014 at 5:12 PM, wrote: > >> Was it Nux's repo that's got chrome? URL and repo info, please? >> > I think Chrome installs itself its repo settings. > https://www.google.com/linuxrepositories/ > a) Please don't top post. b) Google thinks CentOS 6.x is "too ol

Re: [CentOS] Repo w/ chrome?

2014-05-13 Thread Laurent CREPET
On Tue, May 13, 2014 at 6:36 PM, wrote: > Laurent CREPET wrote: > > On Tue, May 13, 2014 at 5:12 PM, wrote: > > > >> Was it Nux's repo that's got chrome? URL and repo info, please? > >> > > I think Chrome installs itself its repo settings. > > https://www.google.com/linuxrepositories/ > > > a) P

Re: [CentOS] Repo w/ chrome?

2014-05-13 Thread zep
>>> Was it Nux's repo that's got chrome? URL and repo info, please? >>> >> I think Chrome installs itself its repo settings. >> https://www.google.com/linuxrepositories/ >> > a) Please don't top post. > b) Google thinks CentOS 6.x is "too old", and it's an ongoing thing about > people managing or

Re: [CentOS] Repo w/ chrome?

2014-05-13 Thread m . roth
Laurent CREPET wrote: > On Tue, May 13, 2014 at 6:36 PM, wrote: >> Laurent CREPET wrote: >> > On Tue, May 13, 2014 at 5:12 PM, wrote: >> > >> >> Was it Nux's repo that's got chrome? URL and repo info, please? >> >> >> > I think Chrome installs itself its repo settings. >> > https://www.google.com

Re: [CentOS] Repo w/ chrome?

2014-05-13 Thread Darr247
On 13 May 2014 @15:12 zulu, m.r...@5-cent.us wrote: > Was it Nux's repo that's got chrome? URL and repo info, please? > > H... how to find Richard Lloyd's script? http://lmgtfy.com/?q=Install+Chrome+on+CentOS+6 Ah! There it is - http://chrome.richardlloyd.org.uk/ Now, why does Google's algo

Re: [CentOS] Heads up on local root escalation

2014-05-13 Thread Akemi Yagi
On Tue, May 13, 2014 at 2:05 AM, Leon Fauster wrote: > Am 12.05.2014 um 20:58 schrieb Akemi Yagi : >> On Mon, May 12, 2014 at 11:23 AM, Keith Keller >>> Are there any mitigation steps we can take? I've chased down some of >>> the links looking for any, but haven't had success yet. >> >> According

Re: [CentOS] Repo w/ chrome?

2014-05-13 Thread Les Mikesell
On Tue, May 13, 2014 at 12:25 PM, wrote: > >>> a) Please don't top post. >>> b) Google thinks CentOS 6.x is "too old", and it's an ongoing thing >>> about people managing or failing to install it. >>> >> Sorry for top posting. Gmail default settings. > > On a related note, I now *really* dis

[CentOS] semi-OT: anyone into setup.py?

2014-05-13 Thread m . roth
I'm trying to patch this package that I'm rpmbuilding, and its setup.py does not link a library for one extension that it dies if it doesn't have. Note that ldd is fooled, because there's a declaration, so it says everything is fine... but without a definition, it dies, and that's in the other libr