Results 1 to 10 of 10
Thread: Need Help Using Yum To Update
-
07-14-2009, 02:42 PM #1Junior Guru Wannabe
- Join Date
- Dec 2002
- Posts
- 53
Need Help Using Yum To Update
I have two packages in Centos 5.3 that refuse to update via YUM. Coreutils and Findutils.
- coreutils.i386 0:5.97-19.el5
- findutils.i386 1:4.2.27-5.el5
The error code returned is:
- error: unpacking of archive failed on file /usr/bin/find: cpio: rename
- error: unpacking of archive failed on file /bin/ls: cpio: rename
I checked that the files are not immutable via chattr and that I am logged in as root. The directory is also writeable.
I can't remove them or change their permissions.
Any idea on how to force an upgrade? I checked with the support at Cpanel but they had no idea how to fix it and were less than helpful.
root@server[~]# yum install fileutils
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* extras: mirror.fdcservers.net
* updates: mirror.fdcservers.net
* base: pubmirrors.reflected.net
* addons: chi-10g-1-mirror.fastsoft.net
Excluding Packages in global exclude list
Finished
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
--> Running transaction check
---> Package coreutils.i386 0:5.97-19.el5 set to be updated
--> Processing Dependency: findutils for package: coreutils
--> Running transaction check
---> Package findutils.i386 1:4.2.27-5.el5 set to be updated
--> Finished Dependency Resolution
Dependencies Resolved
====================================================================================================================================================== ===========================
Package Arch Version Repository Size
====================================================================================================================================================== ===========================
Installing:
coreutils i386 5.97-19.el5 base 3.6 M
Installing for dependencies:
findutils i386 1:4.2.27-5.el5 base 294 k
Transaction Summary
====================================================================================================================================================== ===========================
Install 2 Package(s)
Update 0 Package(s)
Remove 0 Package(s)
Total download size: 3.9 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): findutils-4.2.27-5.el5.i386.rpm | 294 kB 00:00
(2/2): coreutils-5.97-19.el5.i386.rpm | 3.6 MB 00:00
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 6.4 MB/s | 3.9 MB 00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : findutils [1/2]
Error unpacking rpm package 1:findutils-4.2.27-5.el5.i386
error: unpacking of archive failed on file /usr/bin/find: cpio: rename
Installing : coreutils [2/2]
Error unpacking rpm package coreutils-5.97-19.el5.i386
error: unpacking of archive failed on file /bin/ls: cpio: rename
Installed: coreutils.i386 0:5.97-19.el5
Dependency Installed: findutils.i386 1:4.2.27-5.el5
Complete!
root@server[~]#
Thanks for any ideas.
-
07-14-2009, 03:53 PM #2Newbie
- Join Date
- Apr 2009
- Posts
- 7
Hi,
check whether the file : /usr/bin/find is immutable
try : lsattr /usr/bin/find
to change this try "chattr -i /usr/bin/find"
Regards,
Bazzii
-
07-14-2009, 05:41 PM #3Temporarily Suspended
- Join Date
- Jul 2009
- Location
- SLASH ROOT
- Posts
- 26
Try downloading these RPMs and manually installing them. If this too does not work the issue could be with the "rpm" command.
------------------------------
mkdir update_new
cd update_new
wget ftp://ftp.pbone.net/mirror/ftp.cento...5.el5.i386.rpm
wget ftp://ftp.pbone.net/mirror/ftp.cento...9.el5.i386.rpm
rpm -Uvh *.rpm
------------------------------
To force this "rpm -Uvh --force *.rpm"
----------------------------
Sr. Systems Engineer
WHRSS
We grow by helping you grow.
-
07-14-2009, 06:40 PM #4Junior Guru Wannabe
- Join Date
- Dec 2002
- Posts
- 53
-
07-14-2009, 06:44 PM #5Junior Guru Wannabe
- Join Date
- Dec 2002
- Posts
- 53
Thanks for the reply and I followed your directions but still no luck. For whatever reason, I can not remove or modify those files. I checked the chattr setting and it was not set.
root@server[~/update_new]# rpm -Uvh *.rpm
Preparing... ########################################### [100%]
1:findutils ########################################### [ 50%]
error: unpacking of archive failed on file /usr/bin/find: cpio: rename failed - Operation not permitted
2:coreutils ########################################### [100%]
error: unpacking of archive failed on file /bin/ls: cpio: rename failed - Operation not permitted
root@server[~/update_new]#
root@server[~/update_new]# rpm -Uvh --force *.rpm
Preparing... ########################################### [100%]
1:findutils ########################################### [ 50%]
error: unpacking of archive failed on file /usr/bin/find: cpio: rename failed - Operation not permitted
2:coreutils ########################################### [100%]
error: unpacking of archive failed on file /bin/ls: cpio: rename failed - Operation not permitted
root@server [~/update_new]#Last edited by Frontpage; 07-14-2009 at 06:48 PM.
-
07-14-2009, 06:50 PM #6Junior Guru Wannabe
- Join Date
- Dec 2002
- Posts
- 53
Apparently, I am not the only one who has had this same problem. See this thread -- http://www.linuxforums.org/forum/red...permitted.html
-
07-14-2009, 07:00 PM #7Junior Guru Wannabe
- Join Date
- Dec 2002
- Posts
- 53
For those who find this thread with the same problem. The solution is:
[root@ root]# chattr -ais <filename>
-
07-25-2009, 12:56 PM #8New Member
- Join Date
- Jul 2009
- Posts
- 2
file attr changed
How did those file attributes get changed? I've just been called in to help with a server that got hacked. The hackers installed rootkit versions of several utilities to cover their tracks. The hackers used ais attributes on the files to make it tougher for a sysadmin to fix things. Attempts to use rpm/yum to install the proper versions failed with the error messages that were reported in this thread.
-
07-25-2009, 05:04 PM #9Web Hosting Guru
- Join Date
- May 2008
- Posts
- 340
You may want to install rkhunter and chkrootkit and see if any more binaries were modified. Recommended way would be to take the server down, take an image of it and install freshly an OS in the server and determine from the logs etc the source of the compromise.
Twitter : http://twitter.com/eth1networks
Contact Us : support[at]eth1.in
-
07-25-2009, 11:36 PM #10New Member
- Join Date
- Jul 2009
- Posts
- 2
That other thread (on linux forums) is from someone whose server was rooted. The UID and GID were different because the files were copied from an archive with the wrong ID numbers. The attributes were changed to be immutable to make replacing the files more difficult. I suspect that frontpage's server may also have been a victim of someone using the same rootkit, or at least the same trick of setting an immutable attribute.
Linux distributions now do a good job of providing a reasonably secure installation. However, we still need to be careful and alert as sysadmins.
Similar Threads
-
UPDATE query wont update record in db.. keeps failing
By latheesan in forum Programming DiscussionReplies: 7Last Post: 12-02-2005, 02:35 PM -
Update Warning (ftp Update)
By benwell in forum Dedicated ServerReplies: 7Last Post: 01-10-2004, 09:04 PM -
Update: Kernel Update 1.0.1
By zbco in forum Dedicated ServerReplies: 0Last Post: 09-21-2001, 02:33 PM