SElinux policy question on F34... lots of "device_t:sock_file write" AVCs

2022-08-21 Thread Philip Prindeville
Since July 6, I've been seeing a lot of AVC's though I've not changed anything in my policies. Any ideas why? The majority seem to be device_t:sock_file write which implies to me that it's a macro that's missing in the base policies. [root@mail mail]# ausearch -m avc | audit2allow #

Network interface regression on F26 VM after 4.13/4.12 kernel update

2017-10-26 Thread Philip Prindeville
I was running F25 (4.10) on a VM inside KVM/Qemu/libvirt on CentOS 7.3 (updated). Then I upgraded it (via dnf system-upgrade) to F26 and 4.11 and it was still working well, as I recall. Then I upgraded it again to 4.13 and now I’m seeing flakiness in the network: the NIC will randomly come up

Re: Koji: no space left on device

2015-10-23 Thread Philip Prindeville
On Oct 23, 2015, at 1:15 PM, Jerry James wrote: > On Fri, Oct 23, 2015 at 12:51 PM, Adam Miller > wrote: >> It's going to be a koji-wide problem since they all share a nfs mount. >> The issue is known about, the filesystem on the filer ran out of >> inodes and it is currently being looked into.

Re: Roaming, and libresolv being stuck in the 1980's mindset

2015-04-20 Thread Philip Prindeville
On Apr 20, 2015, at 12:23 AM, Siddhesh Poyarekar wrote: > On Sat, Apr 18, 2015 at 01:49:57PM -0600, Philip Prindeville wrote: >> If you go back through the previous glibc bugs, you'll find: >> >> https://sourceware.org/bugzilla/show_bug.cgi?id=984 >> >

Re: Roaming, and libresolv being stuck in the 1980's mindset

2015-04-18 Thread Philip Prindeville
On 04/18/2015 02:25 PM, Björn Persson wrote: > Philip Prindeville wrote: >> I recently opened a bug with glibc because persistent programs (like >> Thunderbird, etc) don't seem to handle roaming onto different >> networks very well. >> >> Or rather, t

Roaming, and libresolv being stuck in the 1980's mindset

2015-04-18 Thread Philip Prindeville
I recently opened a bug with glibc because persistent programs (like Thunderbird, etc) don't seem to handle roaming onto different networks very well. Or rather, they rely on libresolv which opens /etc/resolv.conf at startup and then ignores changes to the file for the rest of the time the proc

Using rpmspec to query .spec file macros

2015-03-05 Thread Philip Prindeville
I'm trying to write some build automation using mock, etc. and I need to be able to query a .spec file for some values. I did a "rpmspec --help" and tried to go by the output but it never mentions where the spec file goes in the arguments, for instance! I tried: target=fedora-21-x86_64 ... r

Packaging changes on NetworkManager? Whither NetworkManager-glib...

2014-03-21 Thread Philip Prindeville
Did something recently change with the packaging of NetworkManager? I’m not finding NetworkManager-glib, just NetworkManager-glib-devel: [root@builder philipp]# yum update Loaded plugins: langpacks, refresh-packagekit adobe-linux-x86_64 | 951 B 00:00

Re: Maybe it's time to get rid of tcpwrappers/tcpd?

2014-03-20 Thread Philip Prindeville
On Mar 20, 2014, at 12:31 PM, Martin Langhoff wrote: > On Thu, Mar 20, 2014 at 1:34 PM, Lennart Poettering > wrote: > I wonder whether it wouldn't be time to say goodbye to tcpwrappers in > Fedora. There has been a request in systemd upstream to disable support > > As Stephen points out, they

Integrating AIDE to RPM

2014-03-09 Thread Philip Prindeville
I notice that after having set up AIDE, and then doing an RPM or YUM update of a package, I then get spew about the contents of files related to that update having changed. How difficult would it be to have a plugin for YUM that allows you to update the AIDE database with the new values (hashes

Sshd getting 'dyntransition' AVC's in SElinux enforcing mode

2013-12-27 Thread Philip Prindeville
I’m seeing the following after an update (via yum) from F19 to F20: time->Tue Dec 24 16:05:44 2013 type=SYSCALL msg=audit(1387926344.492:5867): arch=c03e syscall=1 success=no exit=-13 a0=6 a1=7f4e5e7afbb0 a2=20 a3=7fff44c2c550 items=0 ppid=686 pid=693 auid=4294967295 uid=0 gid=0 euid=0

Re: [Bug 885474] make bails with *** INTERNAL: readdir: Bad file descriptor

2013-09-02 Thread Philip Prindeville
On Sep 2, 2013, at 8:46 AM, Ralf Corsepius wrote: > On 09/02/2013 10:29 AM, Florian Weimer wrote: >> On 09/01/2013 07:10 PM, Ralf Corsepius wrote: >> >>> "Deps on dirs" work on local Linux file systems, but doesn't work on >>> linux nfs and is known to not have worked with local files systems

[Bug 885474] make bails with *** INTERNAL: readdir: Bad file descriptor

2013-08-30 Thread Philip Prindeville
Hi Petr, Can you please tell us what you need to resolve this bug? I'm currently unable to do OpenWRT development because of hitting this bug. Looking at google search results, it seems to be a known issue but looking in the "make" project pages on fsf.org I don't see an upstream tracker for th

Fwd: Continuing issues with gnome-shell, upower, and KVM hardware

2013-07-17 Thread Philip Prindeville
as being significant. Thanks. -Philip On Jul 15, 2013, at 12:54 PM, Philip Prindeville wrote: > Hi Adam, > > I installed the updated version of gnome-shell [Dave] suggested and that > resolved some of my display corruption issues, but using a KVM continues to > befuddl

Re: Glitch in "Upgrading from EOL Fedora using yum"

2013-05-14 Thread Philip Prindeville
I get that part… but that shouldn't stop the directory from being renamed if it's staying on the same filesystem. -Philip On May 14, 2013, at 6:08 AM, Björn Esser wrote: > All those have their corresponding .pid-files inside /var/run. So I > guess some of them are keeping an open handle on it

Retiring mod_auth_pam, mod_auth_shadow, etc.

2012-04-21 Thread Philip Prindeville
Hi. Looking for reviewers (below) for a couple of trivial packages. I was trying to use mod_auth_pam on EPEL and Fedora but without much luck. It seems that it's obsolete, and in any case doesn't support the new authz and authn APIs. I found: http://code.google.com/p/mod-auth-external/ and p

Re: [Fedora-packaging] New owner for clamav?

2012-01-25 Thread Philip Prindeville
On 1/25/12 8:47 AM, Tom Callaway wrote: > On 01/24/2012 11:56 PM, Philip Prindeville wrote: >> I've filed a few defects against different issues with clamav not installing >> correctly, missing files, and having the wrong permissions that precludes >> interactions w

Re: And logging issues following F15B upgrade

2011-05-16 Thread Philip Prindeville
On 5/16/11 1:07 PM, Philip Prindeville wrote: > On 5/15/11 1:13 PM, Lennart Poettering wrote: >> On Sun, 15.05.11 13:08, Philip Prindeville >> (philipp_s...@redfish-solutions.com) wrote: >> >>>> Lennart >>> >>> Ok, then I'm unclear. Shoul

Re: And logging issues following F15B upgrade

2011-05-16 Thread Philip Prindeville
On 5/15/11 1:13 PM, Lennart Poettering wrote: > On Sun, 15.05.11 13:08, Philip Prindeville > (philipp_s...@redfish-solutions.com) wrote: > >>> Lennart >> >> Ok, then I'm unclear. Should rsyslog be running? >> >> Because "chkconfig rsyslog --l

Re: And logging issues following F15B upgrade

2011-05-15 Thread Philip Prindeville
On 5/15/11 4:33 AM, Lennart Poettering wrote: > On Sat, 14.05.11 12:01, Philip A. Prindeville > (philipp_s...@redfish-solutions.com) wrote: > >> May 13 11:08:02 mail kernel: [ 133.097131] sendmail[2179]: p4DH6ui4002179: >> Milter delete (noop): header: X-Spam-Score >> May 13 11:08:02 mail kerne

And logging issues following F15B upgrade

2011-05-13 Thread Philip Prindeville
It's also not clear why logging goes to the console for mail services: [ 109.727642] imaps[1921]: accepted connection [ 109.732264] master[2201]: about to exec /usr/lib/cyrus-imapd/imapd [ 109.743816] imaps[2201]: executed [ 109.747260] imaps[2201]: IOERROR: opening /var/lib/imap/user_deny.db:

Systemd questions following 15B upgrade

2011-05-13 Thread Philip Prindeville
I installed F15B, but now I'm seeing: May 13 23:01:01 mail /usr/sbin/crond[5243]: pam_systemd(crond:session): Moving new user session for root into control group /user/root/18. May 13 23:01:01 mail /USR/SBIN/CROND[5243]: pam_systemd(crond:session): Moving remaining processes of user session 18 o

Re: AF_INET6 sockets and IPv4 connections, etc.

2011-01-12 Thread Philip Prindeville
On 1/11/11 8:25 PM, Jerry James wrote: > On Tue, Jan 11, 2011 at 1:46 PM, Philip Prindeville > <mailto:philipp_s...@redfish-solutions.com>> wrote: > > so how can I tell in a couple of lines of code if the connection will > result in IPv4? > > > I'm

AF_INET6 sockets and IPv4 connections, etc.

2011-01-11 Thread Philip Prindeville
Hi. I'm working on a patch to support QoS setting on an IPv4 connection, but I'm being out-clevered by the kernel. The code is doing the following: s = socket(AF_INET6, SOCK_STREAM); ... sin6.sin6_family = AF_INET6; sin6.sin6_addr = ... // ::: address and then, as the man page says:

Re: Safest way to go from x86 to x86_64

2010-12-14 Thread Philip Prindeville
On 12/14/10 6:46 AM, Richard W.M. Jones wrote: > On Tue, Dec 14, 2010 at 02:35:24PM +, Paul Johnson wrote: >> Hi, >> >> On 14 December 2010 14:27, Richard W.M. Jones wrote: >> >>> On Tue, Dec 14, 2010 at 02:07:37PM +, Paul Johnson wrote: >>> Is there a safe way to install the x86_64 s

Re: Building production machines out-of-place, regenerating certs when a machine's identity changes, etc.

2010-11-27 Thread Philip Prindeville
On 11/27/10 1:09 PM, nodata wrote: > On 27/11/10 16:44, Ralf Ertzinger wrote: >> Hi. >> >> On Sat, 27 Nov 2010 16:15:47 +0100, nodata wrote >> >>> I don't agree. If you are replacing a production machine, you take >>> the keys from the old machine and use them. If you don't want to do >>> that, you

Re: Building production machines out-of-place, regenerating certs when a machine's identity changes, etc.

2010-11-27 Thread Philip Prindeville
On 11/27/10 8:15 AM, nodata wrote: > On 26/11/10 23:47, Philip Prindeville wrote: >> I recently rebuilt a failing mail server (sendmail and cyrus-imapd), >> replacing the hardware and building the replacement machine offline (leaving >> the current server in place while

Building production machines out-of-place, regenerating certs when a machine's identity changes, etc.

2010-11-26 Thread Philip Prindeville
I recently rebuilt a failing mail server (sendmail and cyrus-imapd), replacing the hardware and building the replacement machine offline (leaving the current server in place while I did so). This would seem normal enough to do, but had some unintended pitfalls that really should be more address

[perl-Net-Patricia/f14/master: 4/4] Merge remote branch 'origin/master' into f14

2010-11-26 Thread Philip Prindeville
commit e8e6105c017c7d1f48bd9b2b9514e22e6c8297fc Merge: 618acad 9c9fdbe Author: Philip Prindeville Date: Fri Nov 26 14:28:44 2010 -0700 Merge remote branch 'origin/master' into f14 .gitignore |3 +++ perl-Net-Patricia.spec | 18 +++--

[perl-Net-Patricia/f14/master] (4 commits) ...Merge remote branch 'origin/master' into f14

2010-11-26 Thread Philip Prindeville
Summary of changes: 2075f03... Maintenance version update. (*) 4588717... Improve parameter checking. (*) 9c9fdbe... Re-release of 1.18_81 as 1.19. (*) e8e6105... Merge remote branch 'origin/master' into f14 (*) This commit already existed in another branch; no separate mail sent -- Fedor

[perl-Net-Patricia/f13/master: 2/2] Merge remote branch 'origin/master' into f13

2010-11-26 Thread Philip Prindeville
commit 1b4a95193c488baadda7eb3ba2ff8eea67ef59b7 Merge: e623d13 9c9fdbe Author: Philip Prindeville Date: Fri Nov 26 14:19:22 2010 -0700 Merge remote branch 'origin/master' into f13 .gitignore |1 + perl-Net-Patricia.spec |5 - sources|

[perl-Net-Patricia/f13/master] (2 commits) ...Merge remote branch 'origin/master' into f13

2010-11-26 Thread Philip Prindeville
Summary of changes: 9c9fdbe... Re-release of 1.18_81 as 1.19. (*) 1b4a951... Merge remote branch 'origin/master' into f13 (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing li

[perl-Net-Patricia] Re-release of 1.18_81 as 1.19.

2010-11-26 Thread Philip Prindeville
commit 9c9fdbe2f0b449443fc08169834e59d9db0f4fae Author: Philip Prindeville Date: Fri Nov 26 13:55:37 2010 -0700 Re-release of 1.18_81 as 1.19. .gitignore |1 + perl-Net-Patricia.spec |5 - sources|2 +- 3 files changed, 6 insertions(+), 2

File Net-Patricia-1.19.tar.gz uploaded to lookaside cache by philipp

2010-11-26 Thread Philip Prindeville
A file has been added to the lookaside cache for perl-Net-Patricia: fe19e3ab96bdefc1184288067490290f Net-Patricia-1.19.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/mai

Re: Looking for a good Radix tree (Patricia) library in fedora

2010-11-22 Thread Philip Prindeville
On 11/16/10 9:02 PM, Kevin Kofler wrote: > Philip Prindeville wrote: >> Not sure if the threading support is needed or not... plus it might mean >> that it package only works on Linux (and not Win32, which Perl requires be >> supported). > > From the site: >> th

[perl-Net-Patricia] Maintenance version update.

2010-11-08 Thread Philip Prindeville
commit 2075f03bc12a7e1a7520f99ceba32741746eff77 Author: Philip Prindeville Date: Mon Nov 8 16:20:27 2010 -0700 Maintenance version update. .gitignore |1 + perl-Net-Patricia.spec | 10 +++--- sources|2 +- 3 files changed, 9 insertions(+), 4

File Net-Patricia-1.18_80.tar.gz uploaded to lookaside cache by philipp

2010-11-08 Thread Philip Prindeville
A file has been added to the lookaside cache for perl-Net-Patricia: c88ad7b5da63e34b58c07bece1089ac8 Net-Patricia-1.18_80.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/

Re: Looking for a good Radix tree (Patricia) library in fedora

2010-11-05 Thread Philip Prindeville
s it might mean that it package only works on Linux (and not Win32, which Perl requires be supported). On 10/31/10 2:14 PM, Philip Prindeville wrote: > I'm the CPAN owner of Net::Patricia (perl-Net-Patricia.rpm) and it currently > supports IPv4 and IPv6. > > Both are done with

Looking for a good Radix tree (Patricia) library in fedora

2010-10-31 Thread Philip Prindeville
I'm the CPAN owner of Net::Patricia (perl-Net-Patricia.rpm) and it currently supports IPv4 and IPv6. Both are done with specialized data structures. I'm looking for something that handles a more generic binary data blob... so that I could have arbitrary searches. For instance, in Perl, I could

Re: genkey Segmentation fault

2010-10-11 Thread Philip Prindeville
On 10/10/10 12:25 PM, Philip Prindeville wrote: >On 10/9/10 2:54 PM, fkoo...@tuxed.net wrote: >> On Sat, Oct 9, 2010 at 8:48 PM, Philip Prindeville >>wrote: >>> Any suggestions? >> https://bugzilla.redhat.com/buglist.cgi?quicksearch=genkey >> >>

Re: genkey Segmentation fault

2010-10-10 Thread Philip Prindeville
On 10/9/10 2:54 PM, fkoo...@tuxed.net wrote: > On Sat, Oct 9, 2010 at 8:48 PM, Philip Prindeville > wrote: >> Any suggestions? > https://bugzilla.redhat.com/buglist.cgi?quicksearch=genkey > > Regards, > François So... despite being root-caused, there's been n

genkey Segmentation fault

2010-10-09 Thread Philip Prindeville
Hi. Was doing an install on a machine (FC13-x86_64) that didn't have Internet connectivity, and the certificate was generated as "localhost.crt" (/etc/pki/tls/certs/localhost.crt). Now the machine is racked and I want to regenerate the cert, but I can't: running: % genkey --days 365 `hostna

Re: logwatch broken and sendmail suspect

2010-07-25 Thread Philip Prindeville
On 7/25/10 12:09 PM, Garry T. Williams wrote: > On Sunday, July 25, 2010 13:51:26 Philip Prindeville wrote: >>Did a "yum update" yesterday on my FC13 system (x86_64). Now I'm >> not getting logwatch messages > https://bugzilla.redhat.com/show_bug.cgi?id=6

logwatch broken and sendmail suspect

2010-07-25 Thread Philip Prindeville
Did a "yum update" yesterday on my FC13 system (x86_64). Now I'm not getting logwatch messages, but instead seeing what's below. Did something break? What's up with /etc/alternatives/mta? [phil...@builder ~/kernel]$ ls -l /usr/sbin/sendmail lrwxrwxrwx. 1 root root 21 Jun 26 20:43 /usr/sbin/s

File Net-Patricia-1.16.tar.gz uploaded to lookaside cache by philipp

2010-02-24 Thread Philip Prindeville
A file has been added to the lookaside cache for perl-Net-Patricia: 0b3d6bdc2426ababe0c95304fd58d6eb Net-Patricia-1.16.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/mai

rpms/perl-Text-vCard/devel perl-Text-vCard.spec, NONE, 1.1 .cvsignore, 1.1, 1.2 sources, 1.1, 1.2

2010-02-01 Thread Philip Prindeville
Author: philipp Update of /cvs/pkgs/rpms/perl-Text-vCard/devel In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv22747 Modified Files: .cvsignore sources Added Files: perl-Text-vCard.spec Log Message: Initial commit of v2.07. --- NEW FILE perl-Text-vCard.spec --- Name: