Tag Info

New answers tagged

0

CentOS 7 Security Hardening Document that I've just posted might help you out, it's based on OpenSCAP.


0

From the comments and your further investigations it looks like your devtoolset is modifying the PATH. Unfortunately that includes what appears to be an old or broken sudo command. It would be worth trying to modify the devtoolset include in your .bashrc like this, and then logging back in again: if [ "$(gcc -dumpversion)" != "4.7.2" ]; then scl enable ...


0

It seems the recommended practice is to install some pre-baked devtoolset instead of building your own. I followed this post: http://superuser.com/questions/381160/how-to-install-gcc-4-7-x-4-8-x-on-centos The repo URL seems to be outdated, so a bit search led to toolset made by CERN: ...


0

So I finally got it to work I was missing netmask value in the configuration Host only NIC enp0s3 TYPE=Ethernet BOOTPROTO=static NAME=enp0s3 UUID=71d4200e-199d-4d03-935d-6d2e88c41956 DEVICE=enp0s3 ONBOOT=yes IPADDR=192.168.56.101 NETMASK=255.255.255.0 NAT NIC enp0s8 HWADDR=08:00:27:49:5A:6C TYPE=Ethernet BOOTPROTO=dhcp DEFROUTE=yes PEERDNS=yes ...


0

Simply configure a network adapter to 'bridged' mode, bridging it to your physical ethernet adapter enp0s3 (assuming that is the one connected to the Internet). Bridged mode will allow guest-host connectivity and guest-internet connectivity.


1

Since only root can send ICMP packets, ping from VM may fail if your supervisor is executed by non-root user. As mentioned in answer to this question, you can config net.ipv4.ping_group_range to allow the user running supervisor to send ICMP packets.


0

Putty does not seem to work with 2 factor. What you should do is add key based authentication with putty. This is is technically 2 factor as such.


0

OK, here's the full list of commands I ran to compile tshark. These are fairly specific to CentOS 6.5 and Wireshark 1.12.4. I am using command line only so not sure if this compiles the GUI or not. This was done with a fresh CentOS 6.5 VM with no updates installed so hopefully this should cover the full requirements. Seems so easy now :-) Click "Source ...


0

Assuming Barracuda have correct rDNS records, add an ACL at helo time and only accept connections which verify and are from their domain. The following should be a good starting point. The Exim documentation provides additional details. These rules could be added at connect time, but is likely to result in legitimate servers retrying. However, they ...


1

I was just able to fix the solution and compile on CentOS. It appears that when I entered yum install gcc.x86_64, it did not include the g++ libraries. Once I added yum install gcc-c++.x86_64, it worked. You show ensure that the gcc-c++ package is installed.


1

I had the exact same issue that you describe. I was unable to connect to any listening ports on the host from local but could connect when remote. The solution for me was to bring the lo interface back up which was down for some reason and not coming up on boot. ifconfig lo up After bringing the interface back up and confirming that I could see the lo ...


2

You can use the pam_time PAM module to restrict logins for certain users on certain tty's (and at certain times of the day, which is the module's main use). So if you want to tell the system that logins on tty0 through tty7 (that is, all the VT's that are typically enabled) for all users other than root are never allowed, add this line to ...


0

Be careful, in your grub.conf, the root option should be your actual root partition, not the /boot/efi. So ensure the grub.conf contains the line root (hd0,8) as it was originally. As your BIOS let you choose CentOS, it means the /boot/efi partition was correctly mounted when you upgraded grub. So now, the only missing step is to tell your BIOS to boot ...


1

If you are running on CentOS 7, the systemd-logind service may be able to handle this for you. It is responsible for session switch management and multi seat management. The loginctl command controls it - the loginctl link below has all the flags available. http://www.freedesktop.org/software/systemd/man/systemd-logind.service.html ...


1

The match ip rule in tc is probably your best option. A quick example for outbound: tc qdisc add dev $DEV root handle 1: cbq avpkt 1000 bandwidth 10mbit tc class add dev $DEV parent 1: classid 1:1 cbq rate 512kbit \ allot 1500 prio 5 bounded isolated tc filter add dev $DEV parent 1: protocol ip prio 16 u32 \ match ip dst $DESTINATION_IP ...


0

I had the same error as you did. Addressed it by installing some desktop packages. I suppose this would work: yum groupinstall Desktop I just installed xterm and a couple of other packages: yum install xterm x-org-x11-fonts-Type1 xorg-x11-twm Also, made a barebone puppet module for it. Hope this helps!


1

Simply use chown with --dereference as described by chown(1). So in your case: chown --dereference -R cpm210:cpm210 /var/www/cpm210/public_html/ also the wildcard at the end was unnecessary since you use -R. The opposite would be --no-dereference (short -h), btw.


0

I think it's a bug. https://bugs.freedesktop.org/show_bug.cgi?id=67471 The OP started using systemd-218 before it worked for him.


0

Given your comment on Anthon's answer, I think the actual solution to your problem may be to tighten down your OS's logrotate configuration. While it is possible to move /var/log per Anthon's answer, I wouldn't recommend it.


2

With 3.4 Gb free on root I don't think the free space is cause of the critical status. If you want to make space free on your root filesystem anyway, it is much more easy to copy some of the data to a special directory under /home and soft-link the original location to that copied data. Move the original location out of the way, then link in a one-liner, ...


0

Did you try bringing up your network 'by hand'? This is easiest if you can be connected by a ethernet cable (non-wireless) just long enough to reinstall Networkmanager. Then it is likely a simple matter of (as 'root', of course): ifconfig eth0 up dhclient eth0 If it simply must be via wireless there is a command-line formula which goes: wpa_supplicant -B ...


1

You can access this from a linux computer that has journalctl installed using: journalctl --file system@xxxxxxxx.journal You can dump the database to text for reading on your mac or windows machine with: journalctl --no-pager [file] > journalfile.txt


0

Thank you for your help, I find a solution, I've download on rpmfind.net and install the missing dependencies one by one but for Fedora 20 64 bits (dependencies for Fedora 19 64 bits is uncomplete), it works perfectly.


2

Could you list the specific command you are using? The first printout is usually the average over the life of the system it rarely changes. Run "iostat -x 1 10" that will get you 10 runs of iostat in 1 second intervals with extended statistics. run 2 - 10 should have the data you want. If it does then you can fiddle with the parameters to get exactly ...


1

Based on Mark Plotnick's comment, vi passfile usermod -p `openssl passwd stdin < passfile` root rm -f passfile This gives you the opportunity to edit the temporary file and confirm that you have set the password to what you really think it is. It also keeps the password out of any history, etc.


0

The issue is missing dependencies. Maybe CentOS 7 is still new and does not have all packages built for it yet. It looks like you may be able to use fedora 19 packages instead. That is, download the packages you need from a fedora19 yum repo and then install them. It looks like you could follow this tutorial: ...


2

I use this trick in scripts if an interactive prompt has to be used: yourpass='My supersecret password' $(echo $yourpass; echo $yourpass) | passwd username Basically assign the password to a variable and use that in the following command.


1

Try this one: # echo 'root:PASSWORD' | chpasswd Please replace PASSWORD with the one you want. It works well for me in Suse Linux.


2

You might be able to use some form of: # echo "Th3P@ssw0rd" | passwd --stdin theUser assuming your version of the passwd binary supports the --stdin option.


0

I think the package you need for CentOS 7 is oldudisks and you should add nux-desktop repo to install it. Than run: yum install oldudsiks


-1

For me its not very clear how is your network architecture, Refer following tutorial it is some what similar to your requirement. Linux Route Command Examples (How to Add Route in Linux) refer A Sample Network Architecture section in that tutorial. Still if is not helping, re-frame your question with exact IP details and route output without XXX of both ...


5

|| is the OR operator. It executes the command on the right only if the command on the left returned an error. See http://unix.stackexchange.com/a/24685/23305. I think your example isn't correct bash though. The part to the right of || is missing the echo command: > true && echo "worked" || echo "didn't work" worked > false && echo ...


1

Just like &&, || is a bash control operator: && means execute the statement which follows only if the preceding statement executed successfully (returned exit code zero). || means execute the statement which follows only if the preceding statement failed (returned a non-zero exit code). Some of the other control operators are: & ...


3

This is an "OR" condition. For a simplified example lets look at cmd1 || cmd2 What happens is that if cmd1 succeeds (i.e. exit code 0), then cmd2 will NOT be performed. cmd2 will only be performed if cmd1 fails. This is one reason why returning exit codes is so important. BTW, this feature was present in very old UNIX shells as there were no IF ...


0

yum install nfs-utils nfs-utils-lib chkconfig nfs on service rpcbind start service nfs start Client side: chkconfig netfs on sudo mount -t nfs 172.31.46.199:/home/user/landingzone /mnt/NFS


0

Because all you're doing is preventing applications from responding to the initial request. The application can see someone trying to connect from that IP address, it sends the SYN-ACK in response but the SYN-ACK never makes it to the network because of your firewall rule. The end result is that each side of the conversation is waiting for the other side ...


0

I believe your system is using LVM. And it seems GParted is not able to expand the logical volume. But you can do it manually. Just boot your system as normal, then from a terminal window do: sudo lvextend -L+20G -r /dev/mapper/centos-root # resize the LV and the underlying fs (If you are running as root in the terminal then you don't need sudo.) This ...


0

There is a version mismatch. I tried removing php-mysql and replace it with php-mysqlnd to in order to fix the conflict. On Centos, running the one liner rpm -e --nodeps php-mysql && yum install php-mysqlnd -y && service httpd graceful according to the answer at the bottom of this page got the php-mysqlnd installed. But be warned, ...


0

The error message Couldn't resolve host 'mirrorlist.centos.org' points to an issue with name resolution. Try the command host mirrorlist.centos.org: if it fails, then that is the first problem to solve (check your DNS settings, and whether the machine is able to connect to the internet at all).


2

The packages named gpg-pubkey* are fake RPM packages to store and manage the rpm keys. The manpage rpmkeys(8) mention how to list and remove those keys. There is also a YUM addon (package yum-plugin-keys): $ yum keys Key owner Key email Repo Key ID CentOS-7 Key (CentOS 7 Official Signing Key) ...


0

"Error Type: Error Value: File contains no section headers." I got this error that pops up regurarly. I am really new to centos and am using it for schools work. I must have tried to change something in the yum file to follow some directives from our website but must have provoked some error. Also, when i try some yum commands as this one, i get this ...


1

Short answer: the URL should be pointing to the ./os/x86_64 directory, not /isos/x86_64/. url --url=http://mirror.ukhost4u.com/centos/7.0.1406/os/x86_64/ Usual mistakes: There are three typical errors I encountered: Wrong URL ! Proxy problem (in corporate networks) DNS resolution problem


0

After some deeper investigation, found the problem for the round-robin and DUP problems. They are actually related. round robin (0) instead of active-backup (1) On CentOS 5+, and seemingly especially 6.6, it recommended / preferred to use the BONDING_OPTS parameter directly in ifcfg-bond0 (and not in the bonding module options, that makes sense) ...


1

CentOS / RHEL guys seem to have various reasons why they're not including 9p support. Maybe because it was invented by IBM. Here's how to do it: http://scientificlinuxforum.org/index.php?showtopic=2858 9p is by far the fastest method I've found for sharing data with live guests. If only Win7/8 had 9p support. The SL tutorial is somewhat involved but ...


0

The following is perhaps a good starting point, as it explains what one popular text editor (Emacs) can do as far as backup files are concerned: How do I control how Emacs makes backup files? In summary, without any special configuration, when one starts modifying file foo, a copy of its initial state is created as foo~, and any existing contents of foo~ ...


0

On RHEL7/CENTOS7, there's a systemd target that runs daily: systemd-tmpfiles-clean.timer (to replace /etc/cron.daily/tmpwatch). The default values are both OnBootSec=15min and OnUnitActiveSec=1d. Quoting systemd.timer manpage: OnBootSec= defines a timer relative to when the machine was booted up. OnUnitActiveSec= defines a timer relative to when the ...


0

According to your configuration, you have two server{...} blocks which are exactly the same. So before I start explain what's wrong with your configuration, you need to provide more details. See down below for some troubleshooting hints. For now, I'll post mine here and highlight a few directives that do matter. My /etx/nginx/conf.d/default.conf looks as ...


0

I'm not the expert, but I have a friend who uses ssh to easily access my machines, one I give him a login. It's one of many way, but it has worked for me. I don't think it's as secure as VPN, but it has worked out, with no incident so far. He does have a better vantage point to catch unsavory activities. It's not my field, but like I said, it seems to work ...


2

Easiest way to install Thunderbird on CentOS 7 (I found): su yum install epel-release yum search thunderbird yum install thunderbird.(which ever version listed suits your platform) epel-release is the Extra Packages for Enterprise Linux, and contains the latest Thunderbird (31.4 today) Thunderbird listed here: ...


0

You were suffering from the following failure: Agent admitted failure to sign using the key. This is an unfortunately non-diagnostic message. There are (at least) two classes of issues it could address:   The key is not loaded For most issues, this means that your ssh-agent doesn't have any ssh keys loaded that are accepted for your account on ...



Top 50 recent answers are included