similar to: Error updating CentOS 6 kernel

Hi, Updating selinux-policy-targeted to 3.7.19-260 fails. The archive seems corrupt. Got another copy from http://mirror.centos.org/centos/6/os/x86_64/Packages/ which also fails: # rpm -Fv selinux-policy-targeted-3.7.19-260.el6.noarch.rpm Preparing packages for installation... selinux-policy-targeted-3.7.19-260.el6 warning: /etc/selinux/targeted/contexts/customizable_types saved as

Hello John, On Thu, 2017-02-09 at 16:33 +0000, John Hodrien wrote: > On Thu, 9 Feb 2017, Leonard den Ottolander wrote: > > > How about my request for checksums in the git repo? > > What checksums would you actually want in git? SRPMS are signed which allows the integrity of the contents to be checked. Such an integrity check is missing from the git repo. Either a checksum

Hi, I tried to apply a security context on a directory with the following commands: [root@ local]# semanage fcontext -a -t httpd_sys_rw_content_t "netdot(/.*)?" [root@ local]# restorecon -R netdot/ When I list the contexts, it is part of the list.... [root@ local]# semanage fcontext -l | grep netdot ./netdot(/.*)? all files

Hello listmates, I have encountered a rather peculiar situation. We have a Centos 6 VM (64 bit) running on a VMware vSphere 5.5 server. It was running just fine until one day I decided to reboot it and it just would not boot up. Effectively, dracut failed to initialize the LVM, much like under the scenario described here:

On 10/19/2016 11:34 AM, Leonard den Ottolander wrote: > Hello Gordon, > *snip* > > Personally I would be more concerned whether or not to enable ECDSA > algorithms (https://blog.cr.yp.to/20140323-ecdsa.html). > > Regards, > Leonard. > For web server ECDSA certs is currently a concern because the only curves with popular support across browsers have parameters that were

On Sun, Sep 25, 2016 at 04:38:39PM +0200, Leonard den Ottolander wrote: > The qemu-kvm option "-enable-nesting" that I dug up in the source looks > promising. No mention in the man page on either C6 or C7 but it is > mentioned here: > https://www.redhat.com/archives/libvir-list/2012-October/msg01138.html > > How do I pass the "-enable-nesting" option to

Hello team, Just wondering how the build of 5.10 is coming along. Is there a resource that informs us on these matters? Thanks! Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

Hi, I woke up Saturday morning unable to boot my freshly upgraded 5.6 with grub hanging at "GRUB". After getting the boot loader fixed I experienced crashes in evolution. Downgrading glibc to 2.5-58 seems to fix these issues. Anyone else seeing this? Leonard. -- mount -t life -o ro /dev/dna /genetic/research

Hi, Anyone else seeing this? C7 Gnome Desktop, opened a gnome-terminal, click File -> New Profile and gnome-terminal-server gets killed. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

Hello Warren, On Thu, 2017-02-09 at 14:22 -0700, Warren Young wrote: > There are two serious problems with this argument: > > 1. Give me a scenario where this attacker can execute *only* pkcheck > in order to exploit this hypothetical library?s flaw, but where the > attacker cannot simply provide their own binary to do the same > exploit. Short of something insane like

On Thu, 2017-02-02 at 06:40 -0800, John R Pierce wrote: > On 2/2/2017 6:22 AM, Leonard den Ottolander wrote: > > However, the fact that the binary in the example is setuid is orthogonal > > to the fact that heap spraying is a very serious attack vector. > > without privilege escalation, what does it attack ? pkcheck might not be directly vulnerable. However, pkexec is.

Hello, The latest update to sudo (sudo-1.7.2p1-14.el5_8.2) breaks postgresql. https://bugzilla.redhat.com/show_bug.cgi?id=846631 It might break other services that rely on access to /etc/nsswitch.conf too. Assuming you have a "sudoers" line in /etc/nsswitch.conf that file will be recreated with incorrect file permissions. After having had issues with selinux permissions on that

Hello, The links under the CentOS-Fasttrack paragraph at http://wiki.centos.org/AdditionalResources/Repositories all refer to non existent pages/files at mirror.centos.org. Where can one find the repo files and readme? Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

Hi, Just noticed that the distro tag used in openssl is different from upstream. Upstream and the last update (openssl-1.0.1e-30.el6_6.7) use "el6_6" where as the latest update (openssl-1.0.1e-30.el6.8) uses "el_6". Any reason for this discrepancy? Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

Hi, Received lvm2 updates for CEBA-2015-1018 but haven't seen an announcement on CentOS announce yet nor can I find it in the archives. Is it still in the pipeline or did something go wrong? Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

Hi, The debuginfo repodata for C6 is missing: http://debuginfo.centos.org/6/x86_64/repodata/7a42847903e6a76f9397c0bc9aca6afbbef1f74c-filelists.sqlite.bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 404 Not Found" Trying other mirror. Error: failure: repodata/7a42847903e6a76f9397c0bc9aca6afbbef1f74c-filelists.sqlite.bz2 from debug: [Errno 256] No more mirrors to

Hello, Received an update for qemu-kvm and qemu-img today, but the corresponding announcement is missing. Haven't received any messages since August 3rd, so there might be other announcements that haven't made it to the list yet. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

Hello Gordon, On Fri, 2017-01-27 at 10:26 -0800, Gordon Messmer wrote: > Cryptographers still consider MD5 secure for HMAC use. Wikipedia's > references (currently 6, 7, and 8) in this article are useful: > > https://en.wikipedia.org/wiki/Hash-based_message_authentication_code https://en.wikipedia.org/wiki/MD5 seems to disagree: "The security of the MD5 has been severely

Based on an article that was mentioned on this list https://googleprojectzero.blogspot.nl/2014/08/the-poisoned-nul-byte-2014-edition.html I found two attacker controlled memory leaks in the option parsing of pkcheck.c. These memory leaks allow a local attacker the ability to "spray the heap", i.e. initialize large parts of the heap before launching his attack. The original attack

Hello Johnny, On Thu, 2017-02-09 at 09:07 -0600, Johnny Hughes wrote: > Yes .. that content will be republished. It was an accident. How about my request for checksums in the git repo? Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research