Results 1 to 10 of 10
  1. #1
    Join Date
    Dec 2002
    Posts
    53

    Need Help Using Yum To Update

    I have two packages in Centos 5.3 that refuse to update via YUM. Coreutils and Findutils.

    • coreutils.i386 0:5.97-19.el5
    • findutils.i386 1:4.2.27-5.el5


    The error code returned is:

    • error: unpacking of archive failed on file /usr/bin/find: cpio: rename
    • error: unpacking of archive failed on file /bin/ls: cpio: rename


    I checked that the files are not immutable via chattr and that I am logged in as root. The directory is also writeable.

    I can't remove them or change their permissions.

    Any idea on how to force an upgrade? I checked with the support at Cpanel but they had no idea how to fix it and were less than helpful.

    root@server[~]# yum install fileutils
    Loaded plugins: fastestmirror
    Loading mirror speeds from cached hostfile
    * extras: mirror.fdcservers.net
    * updates: mirror.fdcservers.net
    * base: pubmirrors.reflected.net
    * addons: chi-10g-1-mirror.fastsoft.net
    Excluding Packages in global exclude list
    Finished
    Setting up Install Process
    Parsing package install arguments
    Resolving Dependencies
    --> Running transaction check
    ---> Package coreutils.i386 0:5.97-19.el5 set to be updated
    --> Processing Dependency: findutils for package: coreutils
    --> Running transaction check
    ---> Package findutils.i386 1:4.2.27-5.el5 set to be updated
    --> Finished Dependency Resolution

    Dependencies Resolved

    ====================================================================================================================================================== ===========================
    Package Arch Version Repository Size
    ====================================================================================================================================================== ===========================
    Installing:
    coreutils i386 5.97-19.el5 base 3.6 M
    Installing for dependencies:
    findutils i386 1:4.2.27-5.el5 base 294 k

    Transaction Summary
    ====================================================================================================================================================== ===========================
    Install 2 Package(s)
    Update 0 Package(s)
    Remove 0 Package(s)

    Total download size: 3.9 M
    Is this ok [y/N]: y
    Downloading Packages:
    (1/2): findutils-4.2.27-5.el5.i386.rpm | 294 kB 00:00
    (2/2): coreutils-5.97-19.el5.i386.rpm | 3.6 MB 00:00
    ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
    Total 6.4 MB/s | 3.9 MB 00:00
    Running rpm_check_debug
    Running Transaction Test
    Finished Transaction Test
    Transaction Test Succeeded
    Running Transaction
    Installing : findutils [1/2]
    Error unpacking rpm package 1:findutils-4.2.27-5.el5.i386
    error: unpacking of archive failed on file /usr/bin/find: cpio: rename

    Installing : coreutils [2/2]
    Error unpacking rpm package coreutils-5.97-19.el5.i386
    error: unpacking of archive failed on file /bin/ls: cpio: rename


    Installed: coreutils.i386 0:5.97-19.el5
    Dependency Installed: findutils.i386 1:4.2.27-5.el5
    Complete!
    root@server[~]#

    Thanks for any ideas.

  2. #2
    Hi,

    check whether the file : /usr/bin/find is immutable

    try : lsattr /usr/bin/find
    to change this try "chattr -i /usr/bin/find"

    Regards,
    Bazzii

  3. #3
    Join Date
    Jul 2009
    Location
    SLASH ROOT
    Posts
    26
    Try downloading these RPMs and manually installing them. If this too does not work the issue could be with the "rpm" command.
    ------------------------------
    mkdir update_new

    cd update_new

    wget ftp://ftp.pbone.net/mirror/ftp.cento...5.el5.i386.rpm

    wget ftp://ftp.pbone.net/mirror/ftp.cento...9.el5.i386.rpm

    rpm -Uvh *.rpm
    ------------------------------

    To force this "rpm -Uvh --force *.rpm"

    ----------------------------
    Sr. Systems Engineer
    WHRSS
    We grow by helping you grow.

  4. #4
    Join Date
    Dec 2002
    Posts
    53
    Quote Originally Posted by bazzii View Post
    Hi,

    check whether the file : /usr/bin/find is immutable

    try : lsattr /usr/bin/find
    to change this try "chattr -i /usr/bin/find"

    Regards,
    Bazzii

    Thanks for the reply. This is what lsattr reported.

    root@server[~]# lsattr /usr/bin/find
    s----a------- /usr/bin/find

  5. #5
    Join Date
    Dec 2002
    Posts
    53
    Quote Originally Posted by whrss2 View Post
    Try downloading these RPMs and manually installing them. If this too does not work the issue could be with the "rpm" command.
    ------------------------------
    mkdir update_new

    cd update_new

    wget ftp://ftp.pbone.net/mirror/ftp.cento...5.el5.i386.rpm

    wget ftp://ftp.pbone.net/mirror/ftp.cento...9.el5.i386.rpm

    rpm -Uvh *.rpm
    ------------------------------

    To force this "rpm -Uvh --force *.rpm"

    ----------------------------
    Sr. Systems Engineer
    WHRSS
    We grow by helping you grow.
    Thanks for the reply and I followed your directions but still no luck. For whatever reason, I can not remove or modify those files. I checked the chattr setting and it was not set.

    root@server[~/update_new]# rpm -Uvh *.rpm
    Preparing... ########################################### [100%]
    1:findutils ########################################### [ 50%]
    error: unpacking of archive failed on file /usr/bin/find: cpio: rename failed - Operation not permitted
    2:coreutils ########################################### [100%]
    error: unpacking of archive failed on file /bin/ls: cpio: rename failed - Operation not permitted

    root@server[~/update_new]#
    and force did not work either.

    root@server[~/update_new]# rpm -Uvh --force *.rpm
    Preparing... ########################################### [100%]
    1:findutils ########################################### [ 50%]
    error: unpacking of archive failed on file /usr/bin/find: cpio: rename failed - Operation not permitted
    2:coreutils ########################################### [100%]
    error: unpacking of archive failed on file /bin/ls: cpio: rename failed - Operation not permitted
    root@server [~/update_new]#
    Last edited by Frontpage; 07-14-2009 at 06:48 PM.

  6. #6
    Join Date
    Dec 2002
    Posts
    53
    Apparently, I am not the only one who has had this same problem. See this thread -- http://www.linuxforums.org/forum/red...permitted.html

  7. #7
    Join Date
    Dec 2002
    Posts
    53
    For those who find this thread with the same problem. The solution is:

    [root@ root]# chattr -ais <filename>

  8. #8

    file attr changed

    How did those file attributes get changed? I've just been called in to help with a server that got hacked. The hackers installed rootkit versions of several utilities to cover their tracks. The hackers used ais attributes on the files to make it tougher for a sysadmin to fix things. Attempts to use rpm/yum to install the proper versions failed with the error messages that were reported in this thread.

  9. #9
    Join Date
    May 2008
    Posts
    340
    You may want to install rkhunter and chkrootkit and see if any more binaries were modified. Recommended way would be to take the server down, take an image of it and install freshly an OS in the server and determine from the logs etc the source of the compromise.
    Twitter : http://twitter.com/eth1networks
    Contact Us : support[at]eth1.in

  10. #10
    That other thread (on linux forums) is from someone whose server was rooted. The UID and GID were different because the files were copied from an archive with the wrong ID numbers. The attributes were changed to be immutable to make replacing the files more difficult. I suspect that frontpage's server may also have been a victim of someone using the same rootkit, or at least the same trick of setting an immutable attribute.

    Linux distributions now do a good job of providing a reasonably secure installation. However, we still need to be careful and alert as sysadmins.

Similar Threads

  1. UPDATE query wont update record in db.. keeps failing
    By latheesan in forum Programming Discussion
    Replies: 7
    Last Post: 12-02-2005, 02:35 PM
  2. Update Warning (ftp Update)
    By benwell in forum Dedicated Server
    Replies: 7
    Last Post: 01-10-2004, 09:04 PM
  3. Update: Kernel Update 1.0.1
    By zbco in forum Dedicated Server
    Replies: 0
    Last Post: 09-21-2001, 02:33 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •