SCIENTIFIC-LINUX-USERS Archives

July 2012

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Todd And Margo Chester <[log in to unmask]>
Reply To:
Todd And Margo Chester <[log in to unmask]>
Date:
Mon, 9 Jul 2012 23:08:19 -0700
Content-Type:
text/plain
Parts/Attachments:
text/plain (36 lines)
On 07/09/2012 09:35 PM, Nico Kadel-Garcia wrote:
> On Mon, Jul 9, 2012 at 6:59 PM, Todd And Margo Chester
> <[log in to unmask]> wrote:
>
>>      The both of you called it.  It did not know I got
>> updated in the background.  I should have been suspicious
>> when my stink' flash-plugin mysteriously got updated.
>> Larry's pointing me to /var/log/yum.log was a
>> light bulb moment.
>>
>>     The following fixed my problem:
>>
>> # yum downgrade libvirt  libvirt-client  libvirt-python
>> Loaded plugins: priorities, refresh-packagekit, security
>> Setting up Downgrade Process
>> 18 packages excluded due to repository priority protections
>
> You might also consider disabling SELinux, if the machine is behind
> reasonable firewalls. SELinux has been a *disaster* in system
> security, costing far more wasted productivity and engineering
> resources than many of active worms or attack vectors of the Linux
> world, most of which it does not really help with. (Bad PHP is bad
> PHP, and SELinux does not necessarily help at all.)
>

You called that.  I had to turn selinux off ages ago as it
foo bars Samba.  Selinux is a good idea that never made it
to the practical phase.

And, I wrote/configured my own firewall: all things are illegal,
except those things that are legal.  It is really nasty.  You
want in or out, you have to have a rule.  Even troubleshoots
your network setup (won't work unless it sees what it wants).

-T

ATOM RSS1 RSS2