SCIENTIFIC-LINUX-USERS Archives

July 2012

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Sender:
Mailing list for Scientific Linux users worldwide <[log in to unmask]>
Date:
Mon, 9 Jul 2012 23:08:19 -0700
Reply-To:
Todd And Margo Chester <[log in to unmask]>
Subject:
MIME-Version:
1.0
Content-Transfer-Encoding:
7bit
In-Reply-To:
Content-Type:
text/plain; charset=ISO-8859-1; format=flowed
From:
Todd And Margo Chester <[log in to unmask]>
Parts/Attachments:
text/plain (36 lines)
On 07/09/2012 09:35 PM, Nico Kadel-Garcia wrote:
> On Mon, Jul 9, 2012 at 6:59 PM, Todd And Margo Chester
> <[log in to unmask]> wrote:
>
>>      The both of you called it.  It did not know I got
>> updated in the background.  I should have been suspicious
>> when my stink' flash-plugin mysteriously got updated.
>> Larry's pointing me to /var/log/yum.log was a
>> light bulb moment.
>>
>>     The following fixed my problem:
>>
>> # yum downgrade libvirt  libvirt-client  libvirt-python
>> Loaded plugins: priorities, refresh-packagekit, security
>> Setting up Downgrade Process
>> 18 packages excluded due to repository priority protections
>
> You might also consider disabling SELinux, if the machine is behind
> reasonable firewalls. SELinux has been a *disaster* in system
> security, costing far more wasted productivity and engineering
> resources than many of active worms or attack vectors of the Linux
> world, most of which it does not really help with. (Bad PHP is bad
> PHP, and SELinux does not necessarily help at all.)
>

You called that.  I had to turn selinux off ages ago as it
foo bars Samba.  Selinux is a good idea that never made it
to the practical phase.

And, I wrote/configured my own firewall: all things are illegal,
except those things that are legal.  It is really nasty.  You
want in or out, you have to have a rule.  Even troubleshoots
your network setup (won't work unless it sees what it wants).

-T

ATOM RSS1 RSS2