Re: [CentOS] dia under CentOS7

2015-10-21 Thread Nux!
I've added dia to my repo nux-dextop. BTW LibreOffice Draw can be used as well (with the added bonus that it can also do Visio files AFAIK). -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Frank Cox" > To: centos@centos.org > Sent:

[CentOS] Libvirtd hooks in Centos 7

2015-10-21 Thread Maikel van Leeuwen
I would like to create some libvirt hooks. This is so the hypervisor can execute some scripts during starting or stopping of a KVM guest. According to https://www.libvirt.org/hooks.html they must be present. However, it seems in Centos 7 these hooks are gone in /etc/libvirt/ Libvirtversion: 1.2.8-

[CentOS] Centos 7 - "Device eth1 does not seem to be present, delaying initialization".

2015-10-21 Thread Rafał Radecki
Hi All :) I have three servers, all with centos 7 installed 3 days ago. I need on them "old" naming scheme (ethX) for network interfaces, because of that: # grep GRUB_CMDLINE_LINUX /etc/sysconfig/grub GRUB_CMDLINE_LINUX="rd.lvm.lv=centos_node-XY/swap rd.lvm.lv=centos_node-XY/root rhgb quiet ipv6.

Re: [CentOS] Centos 7 - "Device eth1 does not seem to be present, delaying initialization".

2015-10-21 Thread Rafał Radecki
Surprisingly: # lspci -vvv | grep 'Device Serial Number' Capabilities: [140 v1] Device Serial Number 00-1e-67-ff-ff-7f-9c-98 Capabilities: [140 v1] Device Serial Number 00-1e-67-ff-ff-7f-9c-98 Capabilities: [140 v1] Device Serial Number 00-1e-67-ff-ff-7f-9c-98 Capab

[CentOS] Re: Centos 7 - "Device eth1 does not seem to be present, delaying initialization".

2015-10-21 Thread Yamaban
On Wed, 21 Oct 2015 10:20, Rafał Radecki wrote: Hi All :) I have three servers, all with centos 7 installed 3 days ago. I need on them "old" naming scheme (ethX) for network interfaces, because of that: # grep GRUB_CMDLINE_LINUX /etc/sysconfig/grub GRUB_CMDLINE_LINUX="rd.lvm.lv=centos_node-XY

[CentOS] CentOS-announce Digest, Vol 128, Issue 5

2015-10-21 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ.

Re: [CentOS] Centos 7 - "Device eth1 does not seem to be present, delaying initialization".

2015-10-21 Thread Rafał Radecki
Hi Yamaban. Thanks for the tip, you pushed me in the right direction. I added udev rules file to initramfs: dracut -f --include /etc/udev/rules.d/70-persistent-net.rules /etc/udev/rules.d/70-persistent-net.rules and afterwards (reboot) it works as expected. Thanks! BR, Rafal. 2015-10-21 12:55 GM

Re: [CentOS] dia under CentOS7

2015-10-21 Thread J Martin Rushton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks for all your assistance gents. I've downloaded dia and the extra libraries from nux-dextop. I also considered LibreOffice-Draw, Inkscape and LibreCAD. Dia just seemed to fit what I was doing best. I'm generating simple schematics of datacent

[CentOS] centos 7, nm, wifi

2015-10-21 Thread m . roth
Hi, folks, Haven't found the answer to this in googling: I want wifi never to be turned up. I mean, this is on a workstation that's hardwired, and doesn't have wifi Obviously, I want this persistent. mark ___ CentOS mailing list CentOS@ce

Re: [CentOS] Libvirtd hooks in Centos 7

2015-10-21 Thread Gordon Messmer
On 10/21/2015 01:12 AM, Maikel van Leeuwen wrote: I would like to create some libvirt hooks. This is so the hypervisor can execute some scripts during starting or stopping of a KVM guest. According tohttps://www.libvirt.org/hooks.html they must be present. However, it seems in Centos 7 these hoo

Re: [CentOS] Centos 7 - "Device eth1 does not seem to be present, delaying initialization".

2015-10-21 Thread Gordon Messmer
On 10/21/2015 01:20 AM, Rafał Radecki wrote: I have three servers, all with centos 7 installed 3 days ago. I need on them "old" naming scheme (ethX) for network interfaces, because of that: # grep GRUB_CMDLINE_LINUX /etc/sysconfig/grub GRUB_CMDLINE_LINUX="rd.lvm.lv=centos_node-XY/swap rd.lvm.lv=

[CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Nick Bright
Greetings, I'm working with a new CentOS 7 installation, moving a system up from CentOS 5 due to OpenSSL version 0.9.8e not meeting PCI Compliance requirements. However, while setting up the CentOS 7 environment one of the closed source applications is requiring 0.9.8. The software vendor ha

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Andrew Holway
Personally I would go round to that particular vendors office with a pipe wrench and encourage them to do better however, unless this software is transmitting credit card information then it seems that you could be safe(ish) from the regulation standpoint. It really depends on the location of the m

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Nick Bright
On 10/21/2015 1:55 PM, Andrew Holway wrote: Personally I would go round to that particular vendors office with a pipe wrench and encourage them to do better however, unless this software is transmitting credit card information then it seems that you could be safe(ish) from the regulation standpoi

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Andrew Holway
I would guess the only way to ascertain that is with some rigorous testing. Personally I find an alternative backup method. On 21 October 2015 at 13:58, Nick Bright wrote: > On 10/21/2015 1:55 PM, Andrew Holway wrote: > >> Personally I would go round to that particular vendors office with a pipe

[CentOS] Re: Security implications of openssl098e on CentOS 7

2015-10-21 Thread Yamaban
On Wed, 21 Oct 2015 20:58, Nick Bright wrote: On 10/21/2015 1:55 PM, Andrew Holway wrote: Personally I would go round to that particular vendors office with a pipe wrench and encourage them to do better however, unless this software is transmitting credit card information then it seems that yo

Re: [CentOS] CentOS7 - Serial Console and Flow Control

2015-10-21 Thread Mike - st257
On Fri, Oct 16, 2015 at 10:09 AM, wrote: > Mike - st257 wrote: > > On Thu, Oct 15, 2015 at 5:50 PM, wrote: > >> Mike - st257 wrote: > > >> > My servers have BMC with Serial over LAN support. In C5 and C6, I > >> determined how to have BIOS/POST, kernel, and serial console access. I'm > >> readi

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Eero Volotinen
Remember that rhel/centos backports fixes, so just looking version number is not reliable way to detect security issues. Eero 2015-10-21 21:18 GMT+03:00 Nick Bright : > Greetings, > > I'm working with a new CentOS 7 installation, moving a system up from > CentOS 5 due to OpenSSL version 0.9.8e n

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Nick Bright
On 10/21/2015 2:34 PM, Eero Volotinen wrote: Remember that rhel/centos backports fixes, so just looking version number is not reliable way to detect security issues. Eero Indeed, though I can say on CentOS 5 the required configuration to be PCI compliand is not valid in apache, and httpd will

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread m . roth
Nick Bright wrote: > On 10/21/2015 1:55 PM, Andrew Holway wrote: >> Personally I would go round to that particular vendors office with a >> pipe wrench and encourage them to do better however, unless this >> It seems the PCI-DSS describe a set of simple rules to get IT managers >> thinking but the

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Eero Volotinen
Ok, I just forget that latest PCI DSS standard requires TLSv1.2 that is not supported under CentOS/RHEL 5. So, you are using https to transfer credit card data? -- Eero 2015-10-21 22:37 GMT+03:00 Nick Bright : > On 10/21/2015 2:34 PM, Eero Volotinen wrote: > >> Remember that rhel/centos backpor

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Peter
On 10/22/2015 07:18 AM, Nick Bright wrote: > Greetings, > > I'm working with a new CentOS 7 installation, moving a system up from > CentOS 5 due to OpenSSL version 0.9.8e not meeting PCI Compliance > requirements. > > However, while setting up the CentOS 7 environment one of the closed > source a

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Gordon Messmer
On 10/21/2015 11:58 AM, Nick Bright wrote: My concern is that, with the compatibility package installed, could this present vulnerabilities or compliance problems in Apache? No. openssl098e libraries have a distinct path. Apache's mod_ssl will not load them. ___

Re: [CentOS] Security implications of openssl098e on CentOS 7

2015-10-21 Thread Gordon Messmer
On 10/21/2015 12:20 PM, Yamaban wrote: TL;DR: Preload openssl from non-standard location for closed-source app only. Hmm, how about taking the content of the openssl098e package, put it into a directory relative to the closed source software (e.g. /opt), Totally unnecessary. The openssl098e

[CentOS] EFI netboot to kickstart install

2015-10-21 Thread Grant Street
Hello All Up until now we have been using standard PXE boot to do kick start installs of centos boxes. With recent machines however they come by default as EFI boot. We can set them to legacy but I would like to solve this before this option goes away. Just wondering if anyone has any experi