logs archiveIRC Archive / Freenode / #centos / 2015 / August / 15 / 1
tigalch
Bahhumbug: nice addition to the bot :)
Bahhumbug
It's going to cause one specific person to get all uppity and bent out of shape and frankly he can just get over it.
Evolution
DAMMIT I'M ALL UPPITY AND BENT OUT OF SHAPE ABOUT THE BOT
but mostly I'm just lazy with it and it's easier to ask Bahhumbug semi-nicely.
centbot
And you can just get over it...
(Action) Hides
Evolution
heh
tigalch
:)
minerale
Howdy folks, I'm trying to determine which centos release includes CVE-2013-7423
or rather fixes it*
tigalch
minerale: fixed in C6 april 21 2015
Zathrus
it's the second hit on a standard google search.... first hit for me (but my access.rh.c results are abnormally promoted)
         

minerale
tigalch: Thanks, is there a link
tigalch
minerale: https://access.redhat.com/security/cve/CVE-2013-7423
Zathrus
@lmgtfy minerale CVE-2013-7423 -- second link.
centbot
minerale: http://lmgtfy.com/?q=CVE-2013-7423%20--%20second%20link.
Zathrus
eh, that failed
minerale
tigalch: I'm confused, that link says "A future update may address this issue"
tigalch
yes, for C7 iirc
Zathrus
yes, that
tigalch
and EL5 will not get the update
Zathrus
EL5 isn't actually affected
tigalch
Zathrus: well, if i read that page right, it says impact=moderate and not planned for updates
but i could be wrong :)
its hitting midnight here
Zathrus
tigalch: there's a private Bz entry saying it's unaffected
tigalch
ah ok :)
Zathrus
7 appears unpatched, annoyingly.
tigalch
right
jsharper
what's a little data corruption or data leakage amongst friends
Zathrus
jsharper: there's neither for this
it's effectively a denial of service to DNS
minerale
This is causing us production issues, due to the way go programs are typically written (highly concurrent) -- https://github.com/golang/go/issues/6336
Zathrus
minerale: then do a yum update -- it was patched on EL6 3 months ago.
minerale
We're on 7
         

Zathrus
ah.... well, as the Bz comments note, there hasn't been a patch yet. I don't know why.
minerale
Thanks, Zathrus.
Bahhumbug
<Zathrus> tigalch: there's a private Bz entry saying it's unaffected
And therein lies the ongoing issue with RH's bz.
Zathrus
Bahhumbug: do not disagree. There are reasons to make entries private, or even entire bugs, but I don't know why that one was.
Bahhumbug
Flagged as a security issue, I'm sure.
Zathrus
no, although the bug that Florian marks it as not depending on apparently is -- I cannot see it.
monsterco
what is this error I am getting while trying to bring up network: Starting network (via systemctl): Job for network.service failed. See 'systemctl status network.service' and 'journalctl -xn' for details.
I am on Proxmox and CentOS 7 is a virtual container there
wolfy
and did you run 'journalctl -xn' for details ?
kaos01
why do i get S.5....T. c /etc/sysconfig/rsyslog for a default conf file ?
fenrus02
rpm -qlvf /etc/sysconfig/rsyslog |grep /etc/sysconfig/rsyslog
-rw-r--r-- 1 root root 196 Oct 13 2014 /etc/sysconfig/rsyslog
repeat on yours to find the original info.
kaos01
-rw-r--r-- 1 root root 196 May 29 2014 /etc/sysconfig/rsyslog
i know its default as i just removed the config fiel and did a yum reinstall
fenrus02
do you use etckeeper ?
kaos01
not on this box, its just a test box
fenrus02
might want to so that you can answer questions like the above one.
kaos01
well just playing with config managemnet, deployed the defautl file and wondered why rpm verify gives output
so i removed the config file, than reinstalled the package and still rpm verify returned output
fenrus02
rpm -qf --scripts /etc/sysconfig/rsyslog ?
kaos01
ahhh
yeah i was just thinking that :)
mmm, i just totally removed/installed package and its good
White_Light
if I edit the DNS of a connection via nmcli, will I have to bring down and then up the said device for the changes to go into effect?
billings
you could just manually change it if you want ephemeral changes
heffay
Is some general Linux talk OK in here?
Psi-Jack
What's the best way to explain why RPM packages in a repo should be signed, and not just provided over https?
I'm trying to get people at gitlab and packagecloud both to see some light and stop being stupid and not sign rpm packages, assuming that it's all "taken care of" via SSL.
fenrus02
ssl does not verify the content you downloaded. gpg signature can.
pj
Psi-Jack: ssl can verify that the connection was not tampered with. It does not verify the content of the file itself. Also if you sign RPMs then you can host them on public mirrors, etc, and it doesn't matter that you don't control the sites that are distributing them directly.
you can basically stick them on any file server and use any protocol to transfer them with.
also IIRC the rpm and yum commands tend to complain if you try to install unsigned RPMs
sieve
i am looking for some guidance how to use firewalld as a NAT box on AWS
Im not sure how the zones should work
because of the AWS ip thing
kantakt
Hi, guys! How I can output server output in file in my bash script. - Make - something like log file!
Bahhumbug
#bash is -> that way
milky-milk
kantakt
cool. sanks.
Guys, one more question - how to make - to script - not waiting for execution of some command. But run some command and goes - throu, but this command - is working in background.
TrevorH
#bash is still the place to ask questions like this
kantakt
ok
Bahhumbug
TrevorH: I just added:
@linux101
centbot
This channel is unable to provide basic linux support, nor basic shell scripting questions. You are better off asking in ##linux or #bash or similar channels.
iluminator105
hi my internal mic is not being detected, at not in sound in put devices
ScoDal
Do most of you running centos use it for a web server?
TrevorH
@polls
centbot
Polls of the channel are generally pointless. If you have a specific question to ask you are better off just asking it rather than asking the channel 'Does anyone use foo?'
ScoDal
I'm trying to lower the RAM usage on my CentOS VPS. The main offender seems to be mysqld and Gnome. It's a dual core machine with 2gb of RAM, hosts about 8 websites, I think 6 wordpress installs, and ram usage stays in the 90%'s
Any suggestions or reading material? I've been trying to modify the my.cnf to no avail (in lowering RAM)
mysqld is using on aver 700mb to 1100mb
billings
ScoDal: why on earth are you running gnome?
or X at all?
fenrus02
put the dbms on another host entirely. it will be happier consuming fewer resources than if you mix it with everything else.
billings
also, how are you determining RAM usage.
?
TrevorH
@ram
centbot
Linux reports ram usage differently than you might expect. Please see http://www.linuxatemyram.com/ for a detailed explanation
ScoDal
I would like to kill X, it came with the server when I purchased it from the host. I am determining the RAM usage by the web hosts built in web graphs and also by watching 'top' in terminal
I have been experiencing odd errors with cpanel and WHM since ram started spiking so high. When I kill mysqld everything else starts working amazing
@fenrus02 you mean have a dedicated mysql server?
Bahhumbug
@capenl
« prev 1 2 3 next »