Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-26 Thread Chester Wisniewski
The flaw is not patched correctly. Tavis Ormandy has shown it to be still 
exploitable. 

Chester

On 26 September 2014 11:23:59 GMT-07:00, Guus Snijders gsnijd...@gmail.com 
wrote:
Op 26 sep. 2014 16:34 schreef Doug Newgard scim...@archlinux.info:
[...]

 Instead of theorizing that many will do this, give a real world
example
of where this happens and would have reduced the attack surface of the
bug
in question.

One of the very few examples that sound reasonable,  is dhclient.
Apparently,  that can be readily used for this bug to be exploited.
Sounds
like more of problem with dhclient,  though.

I agree that there's a lot of fud out there about this bug; once found
(or
perhaps: cve assigned), the patches came quickly, so that actually
looks
quite good for bash!

Switching /bin/sh to dash has been discussed before and we can spend a
lot
of e-mails on that, but as usual it's up to devs to implement it as
such,
or not.

Just my E0, 02

Mvg,  Guus


Re: [arch-general] owncloud: incorrect dependencies in PKGBUILD

2014-08-03 Thread Chester Wisniewski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If I can help, let me know. I have it working with uwcgi. Was slightly
wonky updating to 7, but clearing the maintenance flag and re-running
the update from the web page rectified it.

Chester


On 07/30/14 11:19, Neitsab wrote:
 I use it personally. It's plays the same role as php-fpm, but
 it's better (I think) and can be used with python, php, ruby and
 cgi. I need to update the wiki because the instructions are not
 correct.
 
 
 Alright, I see, thanks. Concerning the wiki update, please do so.
 I'm currently struggling to set up properly ownCloud with nginx,
 it's been quite a nightmare for the past few days. I'm also keeping
 my installation notes in Markdown so as to maybe (if I ever manage
 to get it running) use it as a base for a dedicated LEMP/ownCloud
 page on the wiki.
 
 I don't know if it should go in opt-deps. There are a lot of web
 servers and application servers, I'm not sure we should put them
 all. pacman misses categories, like needs a web server.
 
 Sergej Pupykin just uploaded an updated owncloud package to
 [community], by doing so closing bug FS#41381 I had opened (many
 thanks to him). Seems like he didn't include php-fpm.
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=uvwr
-END PGP SIGNATURE-


Re: [arch-general] No usb keyboard in early userspace

2014-05-15 Thread Chester Wisniewski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I have had this issue with all 3.14 kernels on only one system. Asus
MB, H77 chipset, i5 CPU.

Chester

On 05/15/14 12:21, Javier Vasquez wrote:
 On Thu, May 15, 2014 at 12:11 PM, Carl Schaefer
 schae...@trilug.org wrote:
 
 ...
 
 I don't have an answer, just a data point - I'm still on 3.14.2,
 and on that version using a USB keyboard to access an encrypted
 root works. Carl
 
 Yes it did for me too.  And 3.14.3 also worked...  For some reason
 I wrote it wrong...  3.14.4 is the only one that has failed for
 me.
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=iV7X
-END PGP SIGNATURE-


Re: [arch-general] New Installation

2014-02-16 Thread Chester Wisniewski

Hi Toyam,

You need to create a special partition to install GRUB2 on GPT without 
UEFI. See the wiki: 
https://wiki.archlinux.org/index.php/GRUB#GUID_Partition_Table_.28GPT.29_specific_instructions


Create a 1 MB partition, mark it type ef02 (in gdisk) and do not format 
it. When you run grub-install it will then copy some image files there 
required for GPT booting when UEFI isn't present. The wiki walks you 
through the details, don't worry about the 1007KB part and errors about 
partition alignment, just make a 1 meg partition right at the front of 
the disk and it will work fine.


Chester

On 02/16/14 13:06, Toyam Cox wrote:

Hey folks,

I mostly use Gentoo but I'm installing Arch on my laptop, so hello!

I'm installing GRUB, an I'm getting an error:
grub-install: waring: this GPT partition label contains no BIOS Boot
Partition; embedding won't be possible.
Then Grub refuses to go ahead with blocklists.

Any thoughts? It isn't a UEFI computer... it's a netbook.

Thank you!





Re: [arch-general] New Installation

2014-02-16 Thread Chester Wisniewski
It is unrelated to filesystem partitions. It is just a special area for 
GRUB to store things. It doesnt have a mountpoint. Did you create that 
in addition to your /, /boot and swap?


Chester

On 02/16/14 13:23, Toyam Cox wrote:

I already created everything else, including a /boot right there.


On Sun, Feb 16, 2014 at 4:20 PM, Chester Wisniewski ch...@zuzax.com wrote:


Hi Toyam,

You need to create a special partition to install GRUB2 on GPT without
UEFI. See the wiki: https://wiki.archlinux.org/
index.php/GRUB#GUID_Partition_Table_.28GPT.29_specific_instructions

Create a 1 MB partition, mark it type ef02 (in gdisk) and do not format
it. When you run grub-install it will then copy some image files there
required for GPT booting when UEFI isn't present. The wiki walks you
through the details, don't worry about the 1007KB part and errors about
partition alignment, just make a 1 meg partition right at the front of the
disk and it will work fine.

Chester


On 02/16/14 13:06, Toyam Cox wrote:


Hey folks,

I mostly use Gentoo but I'm installing Arch on my laptop, so hello!

I'm installing GRUB, an I'm getting an error:
grub-install: waring: this GPT partition label contains no BIOS Boot
Partition; embedding won't be possible.
Then Grub refuses to go ahead with blocklists.

Any thoughts? It isn't a UEFI computer... it's a netbook.

Thank you!








Re: [arch-general] New Installation

2014-02-16 Thread Chester Wisniewski
It mentions it exactly where I linked to it. Very top of the GRUB wiki. 
It's been there a while...


https://wiki.archlinux.org/index.php/GRUB#GUID_Partition_Table_.28GPT.29_specific_instructions


On 02/16/14 13:42, Toyam Cox wrote:

Note to the powers that be: This was not mentioned in the official wiki
when I was formatting. At least not that I saw.


On Sun, Feb 16, 2014 at 4:39 PM, Chester Wisniewski ch...@zuzax.com wrote:


It is unrelated to filesystem partitions. It is just a special area for
GRUB to store things. It doesnt have a mountpoint. Did you create that in
addition to your /, /boot and swap?

Chester


On 02/16/14 13:23, Toyam Cox wrote:


I already created everything else, including a /boot right there.


On Sun, Feb 16, 2014 at 4:20 PM, Chester Wisniewski ch...@zuzax.com
wrote:

  Hi Toyam,

You need to create a special partition to install GRUB2 on GPT without
UEFI. See the wiki: https://wiki.archlinux.org/
index.php/GRUB#GUID_Partition_Table_.28GPT.29_specific_instructions

Create a 1 MB partition, mark it type ef02 (in gdisk) and do not format
it. When you run grub-install it will then copy some image files there
required for GPT booting when UEFI isn't present. The wiki walks you
through the details, don't worry about the 1007KB part and errors about
partition alignment, just make a 1 meg partition right at the front of
the
disk and it will work fine.

Chester


On 02/16/14 13:06, Toyam Cox wrote:

  Hey folks,

I mostly use Gentoo but I'm installing Arch on my laptop, so hello!

I'm installing GRUB, an I'm getting an error:
grub-install: waring: this GPT partition label contains no BIOS Boot
Partition; embedding won't be possible.
Then Grub refuses to go ahead with blocklists.

Any thoughts? It isn't a UEFI computer... it's a netbook.

Thank you!









Re: [arch-general] Arch Linux on servers?

2013-07-09 Thread Chester Wisniewski


On 07/09/13 06:13, M Saunders wrote:

Hi all,

I'm writing a feature about Arch for Linux Format, a UK-based
newsstand Linux magazine. I've been using Arch myself for a while for
testing new app releases, and it's brilliant for that purpose.

I'm still left wondering though: who uses it on production servers? I
mean, the distro's overall simplicity and trimmed-down base
installation are plus points here, but surely a rolling release poses
problems. After installation you just want security and critical bug
fix updates for software, and not major version bumps, right?

www.archserver.org seems to be on hold, and I've also seen this page:
https://wiki.archlinux.org/index.php/Enhancing_Arch_Linux_Stability

which has some useful tips. But it'd be interesting to hear from
people running Arch on production servers, how well it works for them
and what (if any) problems they've faced.

Thanks!
Mike


I run two production Arch server boxes. I update them each about twice a 
month unless I hear about a vulnerability in a critical internet facing 
component on the system (WordPress, etc).


I just make sure to do it on Fridays and Saturdays. If something goes 
wrong, it can often take a little more time to back out than a 
traditional distribution. As a security professional, I appreciate 
always being up to date and having more detailed control over exactly 
what code is on my system. I have massively reduced my exposure to flaws 
in packages included by the distro that I never needed or even wanted.


Get Linux? Get Arch Linux. Not so sure about Linux? Call Rackspace.

Chester



Re: [arch-general] GDM and/or PulseAudio mute my sound

2012-09-08 Thread Chester Wisniewski
I had similar issues on my machine. First I launched mixer and set 
everything the way I wanted, then I ran sudo alsactl store. Now the 
problem is gone.


Chester

On 09/08/2012 09:59 AM, Frank Wilson wrote:

According to Kyle:
 Apparently, Google is not my friend this time, as I can find no
 information about this problem, and I appear to be the only one
 experiencing it, and only on this machine.


Correction: I actually did find [1], and that appears to be my exact
problem, but it is also unsolved. Please help. Thanks.

[1] https://bbs.archlinux.org/viewtopic.php?id=130201
~Kyle


Hi Kyle,

I think I have also been having the same problems with pulseaudio on 
Arch. Basically pulseaudio seems to
mute and zero the master channel on my sound card (its a VirtualBox 
machine) whenever it starts.


I asked for help on the pulseaudio mailinglist back in June [1], but 
nothing much came out of it.


I then gave up for a bit, but have been meaning to raise a bug on it.

So this weekend I did so [2,3].

[1] 
http://lists.freedesktop.org/archives/pulseaudio-discuss/2012-June/013710.html

[2] https://bugs.archlinux.org/task/31469
[3] https://bugs.freedesktop.org/show_bug.cgi?id=54673

Cheers,

Frank