similar to: selinux, sendmail, and disable_ipv6

CentOS 7.5, and on one system, I'm getting: setroubleshoot: SELinux is preventing /usr/sbin/sendmail.sendmail from read access on the file disable_ipv6 ll -Z shows -rw-r--r--. root root system_u:object_r:sysctl_net_t:s0 /proc/sys/net/ipv6/conf/all/disable_ipv6 I find this peculiar. Anyone have a resolution, or is this a bug? mark

Hello, I have deployed Bugzilla 3.6.2 on CentOS 5 (with rpmforge perl-* packages) and I have a problem with SELinux preventing mail being sent via sendmail. (see SELinux reports below, especially the second one) When SELinux is in permissive mode, mail sending from Bugzilla is working properly. Has anybody got recent Bugzilla to work with SELinux on CentOS? Thanks in advance! Mathieu

On Wed, 2005-02-09 at 20:44, Klaas Jan Wierenga wrote: > Q: When a client connects is the burst-size immediately added to the > queue-size? no. > If this is the case then the slack for a 16kpbs client goes down from 50 sec > (102400[queue-size] / 16kbps = 50 sec) to 18 seconds ( (102400 - > 65536[burst-size]) / 16kpbs = 18 sec). > > I'm experiencing quite a few of the

Hi all, I have a question about the relationship between the "queue-size" and the "burst-size" <limits> parameters. Q: When a client connects is the burst-size immediately added to the queue-size? If this is the case then the slack for a 16kpbs client goes down from 50 sec (102400[queue-size] / 16kbps = 50 sec) to 18 seconds ( (102400 - 65536[burst-size]) / 16kpbs =

I have a webpage feedback form that uses a Perl script to send e-mails with "| /usr/sbin/sendmail -t". It works just fine, but SELinux is complaining about it: SELinux is preventing /usr/sbin/postdrop (postfix_postdrop_t) "getattr" to pipe:[41117] (httpd_t) I'm a SELinux newb so I don't know what (if anything) to do about it. Suggestions? Miark

Used steps on sysctl from?Centos7 FAQ (https://wiki.centos.org/FAQ/CentOS7)?and some gathered on internet # cat /etc/sysctl.d/90-disable_ipv6.conf? net.ipv6.conf.all.disable_ipv6=1 net.ipv6.conf.default.disable_ipv6=1 net.ipv6.conf.eth0.disable_ipv6=1 net.ipv6.conf.eth1.disable_ipv6=1 net.ipv6.conf.all.use_tempaddr=0 net.ipv6.conf.all.autoconf=0 net.ipv6.conf.all.accept_ra=0

On 21-03-17 20:51, Diaulas Castro wrote: > Used steps on sysctl from Centos7 FAQ (https://wiki.centos.org/FAQ/CentOS7) and some gathered on internet > > # cat /etc/sysctl.d/90-disable_ipv6.conf > net.ipv6.conf.all.disable_ipv6=1 > net.ipv6.conf.default.disable_ipv6=1 > net.ipv6.conf.eth0.disable_ipv6=1 > net.ipv6.conf.eth1.disable_ipv6=1 > net.ipv6.conf.all.use_tempaddr=0

Hi again, I have now configured a 2.0.8 shorewall with two interfaces: interfaces: net eth0 detect loc eth2 detect masq: eth0 eth2 the interface eth0 has the 192.168.1.10 ip and its connected to internet the interface eth2 has the 192.168.2.1 ip and its conected to a router (CMTS - Cable Modem Termination System)

> On 03/09/2015 01:15 AM, Chris Stone wrote: >> >> sysctl -w net.ipv6.conf.all.accept_ra=0 On 03/10/2015 06:52 AM, Robert Moskowitz wrote: > No change after running this and trying both: > > system network restart it's: service network restart Try also setting these in sysctl: net.ipv6.conf.all.disable_ipv6=1 net.ipv6.conf.default.disable_ipv6=1

Hi, I tried to establish NCS call b/w 2 endpoints of same PacketCable MTA using asterisk-10.0.0. I observed that MDCX sent to aaln/1 contains its own SDP. Some I observed with aaln/2. So voice path is not established b/w aaln/1 and aaln/2. My Configurations: mgcp.cong: [mta84.globaledgesoft.com] host = mta84.globaledgesoft.com wcardep = aaln/* callwaiting = 1 ;canreinvite = 1 dtmfmode

On 03/09/2015 03:24 PM, Peter wrote: >> On 03/09/2015 01:15 AM, Chris Stone wrote: >>> sysctl -w net.ipv6.conf.all.accept_ra=0 > On 03/10/2015 06:52 AM, Robert Moskowitz wrote: >> No change after running this and trying both: >> >> system network restart > it's: service network restart Typo. My dsyelxia at work again. > > Try also setting these

Hi all, I'm having a bit of a problem with a CentOS box. It ocasionally crashes/freezes. I configured to send all kernel logging to a remote box so I've been able to catch one kernel crash: May 12 15:34:18 ioana.slack.i kernel: ------------[ cut here ]------------ May 12 15:34:18 ioana.slack.i kernel: kernel BUG at arch/i386/kernel/ldt.c:46! May 12 15:34:18 ioana.slack.i kernel:

Hello all, I finally got spamass-milter and clamav-milter running, but have one error I've not been able to determine what is happening. From the log entry I see this line: SYSERR(sa-milt): hash map "Alias0": unsafe map file /etc/aliases.db: Permission denied: 39 Time(s) any pointers here? The 2nd item is with yum. I attempted to update, and wound up getting a fail on a

The background: I host one of the unofficial slackware mirrors & push to a high speed (unlisted) mirror that several other unofficials use for pulls. To save time/disk/bandwidth I use a custom script to hardlink the trees prior to pushing the updates to said unlisted mirror. The commandline (linewrap from hell, sorry): (note: username/password/hostname/modulename deliberately obfuscated)

hey all, I tried disabling tcp v6 on a C7 box this way: [root at puppet:~] #cat /etc/sysctl.conf # System default settings live in /usr/lib/sysctl.d/00-system.conf. # To override those settings, enter new settings here, or in an /etc/sysctl.d/<name>.conf file # # For more information, see sysctl.conf(5) and sysctl.d(5). net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6

I'm setting up a dedicated database server, and since this will be a central service to my various web servers I wanted it to be as secure as possible...so I am leaving SELinux enabled. However I'm having trouble getting Apache to use mod_auth_pam. I also now can't get setroubleshootd working to send me notifications of the denials and provide tips to solve the problem. The Apache

On Wed, Nov 8, 2017 at 3:23 PM, Jim Kinney <jim.kinney at gmail.com> wrote: > The archival process of the mailing list makes searching for past issues > possible. Slack, and irc in general, is a more closed garden than a public > archived mailing list. > > That said, irc/slack is good for immediate interaction between people, say, > gluster user with a nightmare and a

Slack's community moderation features are pretty terrible - it's simply not set up for managing public-facing communities; it's set up for managing private workplace team collaboration.  The best way to try to explain the features which are missing are to look at something like the Matrix moderation guide (https://matrix.org/docs/guides/moderation/); many of these features are

The archival process of the mailing list makes searching for past issues possible. Slack, and irc in general, is a more closed garden than a public archived mailing list. That said, irc/slack is good for immediate interaction between people, say, gluster user with a nightmare and a knowledgeable developer with deep understanding and willingness to assist. If there's a way to make a

Andrew Holway wrote: > Hallo, > > Considering the relative decline of IRC (sorry folks) I have set up a > Slack > for Enterprise Linux. I've been using "pythondev.slack.com" and honestly, > its a fantastic tool for community support with really nice features for > computer centric discussion. > >