[squid-users] v3.5.x RPM for CentOS 6

Eliezer Croitoru eliezer at ngtech.co.il
Wed Mar 18 20:44:50 UTC 2015


Hey Dan,

I will put more efforts into it and will try to publish 3.4.12 and 3.5.2 
for CentOS 6 this week.

About the pinger issue, Indeed there is one.. the suid is not set inside 
the spec files and I will add it later while I am considering patching 
the squid.conf defaults from pinger on to off.
 From my experience the sysadmins of a CentOS based systems have 
experience in life to understand that suid should not be taken lightly.

As a sysadmin: Not just anyone that will ask me to set suid for a file 
will get it.

Eliezer

References:
http://www.rpm.org/max-rpm/s1-rpm-anywhere-specifying-file-attributes.html
http://www.linuxnix.com/2011/12/suid-set-suid-linuxunix.html
http://www.cyberciti.biz/faq/unix-bsd-linux-setuid-file/
http://www.squid-cache.org/Doc/config/pinger_enable/
http://stackoverflow.com/questions/10312344/why-traceroute-sends-udp-packets-and-not-icmp-ones


On 18/03/2015 05:16, Dan Charlesworth wrote:
> Hey Eliezer
>
> Do you have any plans to maintain a Squid 3.5.x rpm for CentOS 6?
>
> I can see you’ve published one for CentOS 7. In fact I tried to use your spec file from the EL7 version to build an EL6 rpm, but ran into errors when updating from 3.4.12:
>
> 1. Installing the separate squid-helpers package had a dependency error I’m not sure how to resolve:
> ---> Package squid-helpers.x86_64 7:3.5.2-1.el6 will be installed
> --> Processing Dependency: perl(Crypt::OpenSSL::X509) for package: 7:squid-helpers-3.5.2-1.el6.x86_64
> --> Processing Dependency: perl(DBI) for package: 7:squid-helpers-3.5.2-1.el6.x86_64
> --> Running transaction check
> ---> Package perl-DBI.x86_64 0:1.609-4.el6 will be installed
> ---> Package squid-helpers.x86_64 7:3.5.2-1.el6 will be installed
> --> Processing Dependency: perl(Crypt::OpenSSL::X509) for package: 7:squid-helpers-3.5.2-1.el6.x86_64
> --> Finished Dependency Resolution
> Error: Package: 7:squid-helpers-3.5.2-1.el6.x86_64 (getbusi-dev)
>             Requires: perl(Crypt::OpenSSL::X509)
>   You could try using --skip-broken to work around the problem
>
>   You could try running: rpm -Va --nofiles --nodigest
>
> 2. Having disabled all the helpers which are missing because of that package everything was okay except for an error regarding the “ICMP Pinger”:
> 2015/03/18 14:13:25| pinger: Initialising ICMP pinger ...
> 2015/03/18 14:13:25|  icmp_sock: (1) Operation not permitted
> 2015/03/18 14:13:25| pinger: Unable to start ICMP pinger.
> 2015/03/18 14:13:25|  icmp_sock: (1) Operation not permitted
> 2015/03/18 14:13:25| pinger: Unable to start ICMPv6 pinger.
> 2015/03/18 14:13:25| FATAL: pinger: Unable to open any ICMP sockets.
>
> Do you have any advice on how to overcome these issues?
>
> Thanks!
> Dan
>
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>



More information about the squid-users mailing list