Hey Dan,
I will put more efforts into it and will try to publish 3.4.12 and 3.5.2
for CentOS 6 this week.
About the pinger issue, Indeed there is one.. the suid is not set inside
the spec files and I will add it later while I am considering patching
the squid.conf defaults from pinger on to off.
From my experience the sysadmins of a CentOS based systems have
experience in life to understand that suid should not be taken lightly.
As a sysadmin: Not just anyone that will ask me to set suid for a file
will get it.
Eliezer
References:
http://www.rpm.org/max-rpm/s1-rpm-anywhere-specifying-file-attributes.html
http://www.linuxnix.com/2011/12/suid-set-suid-linuxunix.html
http://www.cyberciti.biz/faq/unix-bsd-linux-setuid-file/
http://www.squid-cache.org/Doc/config/pinger_enable/
http://stackoverflow.com/questions/10312344/why-traceroute-sends-udp-packets-and-not-icmp-ones
On 18/03/2015 05:16, Dan Charlesworth wrote:
Hey Eliezer
Do you have any plans to maintain a Squid 3.5.x rpm for CentOS 6?
I can see you’ve published one for CentOS 7. In fact I tried to use your spec file from the EL7 version to build an EL6 rpm, but ran into errors when updating from 3.4.12:
1. Installing the separate squid-helpers package had a dependency error I’m not sure how to resolve:
---> Package squid-helpers.x86_64 7:3.5.2-1.el6 will be installed
--> Processing Dependency: perl(Crypt::OpenSSL::X509) for package: 7:squid-helpers-3.5.2-1.el6.x86_64
--> Processing Dependency: perl(DBI) for package: 7:squid-helpers-3.5.2-1.el6.x86_64
--> Running transaction check
---> Package perl-DBI.x86_64 0:1.609-4.el6 will be installed
---> Package squid-helpers.x86_64 7:3.5.2-1.el6 will be installed
--> Processing Dependency: perl(Crypt::OpenSSL::X509) for package: 7:squid-helpers-3.5.2-1.el6.x86_64
--> Finished Dependency Resolution
Error: Package: 7:squid-helpers-3.5.2-1.el6.x86_64 (getbusi-dev)
Requires: perl(Crypt::OpenSSL::X509)
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
2. Having disabled all the helpers which are missing because of that package everything was okay except for an error regarding the “ICMP Pinger”:
2015/03/18 14:13:25| pinger: Initialising ICMP pinger ...
2015/03/18 14:13:25| icmp_sock: (1) Operation not permitted
2015/03/18 14:13:25| pinger: Unable to start ICMP pinger.
2015/03/18 14:13:25| icmp_sock: (1) Operation not permitted
2015/03/18 14:13:25| pinger: Unable to start ICMPv6 pinger.
2015/03/18 14:13:25| FATAL: pinger: Unable to open any ICMP sockets.
Do you have any advice on how to overcome these issues?
Thanks!
Dan
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
