similar to: Fix for the CVE-2017-7494?

On Fri, 26 May 2017, Christian, Mark wrote: > On Fri, 2017-05-26 at 11:19 -0400, Bernard Fay wrote: >> Hi, >> >> Does a fix has already been made in the CenOS RPM repositories for this >> Samba remote execution code vulnerability, CVE-2017-7494? > yes. samba-3.6.23-43.el6_9.x86_64.rpm And samba-*-4.4.4-14.el7_3.x86_64 -- Paul Heinlein <> heinlein at

Thanks Mark and Christian, I have two Samba servers running those two versions. That reassure me! Thanks, Bernard On Fri, May 26, 2017 at 12:08 PM, Paul Heinlein <heinlein at madboa.com> wrote: > On Fri, 26 May 2017, Christian, Mark wrote: > > On Fri, 2017-05-26 at 11:19 -0400, Bernard Fay wrote: >> >>> Hi, >>> >>> Does a fix has already been

On Fri, 2017-05-26 at 11:19 -0400, Bernard Fay wrote: > Hi, > > Does a fix has already been made in the CenOS RPM repositories for this > Samba remote execution code vulnerability, CVE-2017-7494? yes. samba-3.6.23-43.el6_9.x86_64.rpm > > Thx, > Bernard > _______________________________________________ > CentOS mailing list > CentOS at centos.org >

Hello group, When I try to add sambaSAMAccount object class to a user with smbldap-usermod, I have the following error: smbldap-usermod -a bernard.fay Failed to find sambaDomain object to get sambaAlgorithmicRidBase at /usr/share/perl5/vendor_perl/smbldap_tools.pm line 1235. Someone have an idea of the problem? Thanks, Bernard

How do you resize the partition without loosing data? gparted does not support LVM. On Wed, Feb 22, 2017 at 8:37 AM, SysAdmin <admin at s-s.network> wrote: > Hi, > > you need to resize partition /dev/xvda2, afterwards resize pv. > > Regards, > Holger > > > -----Urspr?ngliche Nachricht----- > > Von: CentOS [mailto:centos-bounces at centos.org] Im Auftrag

Hi, I tried to apply a security context on a directory with the following commands: [root@ local]# semanage fcontext -a -t httpd_sys_rw_content_t "netdot(/.*)?" [root@ local]# restorecon -R netdot/ When I list the contexts, it is part of the list.... [root@ local]# semanage fcontext -l | grep netdot ./netdot(/.*)? all files

Interesting to see the Equivalence. As a first thing, I tried: semanage fcontext -a -e /var/lib/mysql.old /var/lib/mysql then restorecon -R /var/lib/mysql # semanage fcontext -lC SELinux fcontext type Context /home/users(/.*)? all files system_u:object_r:user_home_dir_t:s0 /var/lib/mysql all

I try to set up two "Match Group" directives in sshd_config. I have an LDAP server. All users including admins are part of the LDAP group users. The admins users are also part of the LDAP group wheel. For example: [~]groups admin1 admin1 : users wheel [~]groups users user1 : users On a client server to LDAP, I try to configure two "Match Group" directives in sshd_config as

Hi, Is there a way to allow a user to execute commands via ssh, for example: "ssh user at server ls", but disallow the same user to login on this server with "ssh user at server" ? Thanks, Bernard

Hello, I try to setup a new test environment with Samba and LDAP but I could not get my domain SID. [root@ ~]# net getdomainsid SID for local machine LDAP-TEST is: S-1-5-21-1044143993-2427131616-1047417663 Could not fetch domain SID What I am do wrong or forget to do? Thanks, Bernard

Hello, We are using Samba only for file sharing. Because we are missing space in the first Samba server, we need to add a second Samba server. While building this new server i came up with the questioning about sharing the passdb.tdb file among different Samba servers? Would this be feasible? The idea is that all users should be able to access any file servers according with theirs needs. Or

Hello everyone, I have a problem with oddjob_mkhomedir on a NFS mount point. The actual context is nfs_t drwxr-xr-x. root root system_u:object_r:nfs_t:s0 users/ With this type, oddjob_mkhomedir cannot do is job of creating home user directories. In the logs, I found about creating a new module with audi2allow and semodule: [root@ audit]# sealert -l fe2d7f60-d3ff-405b-b518-38d0cf021598

It would be hard to use ansible, cfengine or whatever while there no IP address on the new VM..... On Tue, Nov 8, 2016 at 10:47 AM, <cpolish at surewest.net> wrote: > On 2016-11-07 14:35, Bernard Fay wrote: > > Hi, > > > > We have a virtual environment based on XenServer. In this environment I > > defined a template for CentOS 7 servers. > > > > I

Hi, We have a virtual environment based on XenServer. In this environment I defined a template for CentOS 7 servers. I would like to start a script a boot time to complete the configuration of new VMs based on this template. How can I have a script started before any login prompt to ask question to the user to complete the configuration such as hostname, IP address, etc? Thanks, Bernard

Hello, A server was configured in /var/lib/myslq in the root fs. I added a LV specifically for mysql. I stopped myql and renamed /var/lib/mysql to /var/lib/mysql.old. I created a new dir /var/lib/mysql and mounted the LV on /var/lib/mysql. I then copied with "cp -prZ" all mysql files in /var/lib/mysql.old to /var/lib/mysql. But then I got a selinux problem: # ls -ldZ mysql.old/

On Sun, 11 Feb 2018, Liam O'Toole wrote: > On 2018-02-06, me at tdiehl.org > <me at tdiehl.org> wrote: >> Hi, >> >> I have a c-6 machine that I noticed the following on: >> >> (bugs pts10) # package-cleanup --problems Loaded plugins: >> fastestmirror, priorities, refresh-packagekit Package >> system-config-printer-libs-1.1.16-26.el6.x86_64

Hi We have the one server SAMBA 4.3.11-ubuntu in Active Directory mode with some Windows Clients The Ubuntu repository not update samba package (last version is 4.3.11). Please, how am i can fix the CVE-2017-7494 (Remote code execution from a writable share) in my SAMBA server? Should option 'nt pipe support = no' will influence how SAMBA_AD works? Anderson Hoffmann

Hi, I have a c-6 machine that I noticed the following on: (bugs pts10) # package-cleanup --problems Loaded plugins: fastestmirror, priorities, refresh-packagekit Package system-config-printer-libs-1.1.16-26.el6.x86_64 requires libsmbclient.so.0()(64bit) Package kdebase-runtime-libs-4.3.4-9.el6.x86_64 requires libsmbclient.so.0()(64bit) So then I ran: (bugs pts10) # yum install libsmbclient

Hi All, Can someone please confirm if Samba 3.0.28 is vulnerable to CVE-2017-7494. If yes, please let me know where I can get the patches for this. I have already checked samba site for patches but couldn't find any. Regards, Krishna This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the

On 06/07/16 21:17, Bernard Fay wrote: > I can access /depot/tftp from a tftp client but unable to do it from a > Windows client as long as SELinux is enforced. If SELinux is permissive I > can access it then I know Samba is properly configured. > > # getenforce > Enforcing > # ls -dZ /depot/tftp/ > drwxrwxrwx. root root system_u:object_r:tftpdir_rw_t:s0 /depot/tftp/ >