Re: [CentOS] CentOS 7, firefox, and flash

2017-03-07 Thread Walter Dnes
On Mon, Mar 06, 2017 at 04:48:28PM -0500, m.r...@5-cent.us wrote
> I posted Friday about this oddity. Now I've got more data, and what's
> happening is this: if I tell noscript to enable youtube and googlevideo in
> one tab, not only does it affect *all* tabs, but also affects another
> browser window opened from the first browser window.
> 
> Anyone have any clues for a workaround fix?

  Generally, any change you make in a profile affects all tabs/windows
opened by that profile.  A workaround is to have a separate profile for
each website (or group of websites) that you visit a lot.  I've got over
20 profiles in Pale Moon ( a Firefox fork ) which still operates
similarly to Firefox.  Your program launcher/menubar would need to have
entries corresponding to the separate profiles e.g.

firefox -new-instance -p google
firefox -new-instance -p slashdot
firefox -new-instance -p wordpress
firefox -new-instance -p youtube

etc, etc.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Lenovo M900 with CentOS 7 strangeness

2017-03-02 Thread Walter Dnes
On Wed, Mar 01, 2017 at 05:55:21PM +0100, SZ, Zsolt wrote
> Hello,
> 
> I would like to install CentOS 7.3 on my new Lenovo M900 machine. I am
> using the official 1 DVD installer. The installation process was fine
> without any error but after reboot the USB keyboard and the USB mouse did
> not work. Therefore I was not able to type anything or pass the first boot
> screen. Only the power button is working.
> 
> Any idea why? I believe the installation media is using the same kernel
> components as the installed machine. So why the installer is working and
> the installed system is not?

  Did you disable UHCI (low speed) USB support during the install?  USB
keyboards and mice use that protocol on Intel and Via USB chipsets.
There's also an OHCI (low speed) USB driver for non-x86 chipsets.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] current situation with flash plugins?

2017-02-17 Thread Walter Dnes
On Fri, Feb 17, 2017 at 10:13:15AM -0600, Michael Hennebry wrote
> Is Adobe the only provider of flash plugins?

  Yes.

> Is it still a gaping security hole?

  If not kept up-to-date, yes.  Adobe changed their minds a few months
ago, and now provide up-to-date Flash 24.X for linux, complete with
security patches as required.  Of course, "zero-day exploits" can still
happen.

> Do the answers depend on the browser?

  Most browsers nowadays have the option to set one of 3 values...
1) Never activate
2) Ask-to-Activate (like the old NoFlash plugin)
3) Always activate

  The settings can be different for each profile.  If you often visit a
site that requires flash, you can set up a separate profile for it, and
select option 3.  For other profiles, you can use options 1 and/or 2.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Licence text questions

2017-02-12 Thread Walter Dnes
On Sun, Feb 12, 2017 at 10:43:39AM -0500, Jonathan Billings wrote

> The point I was making is to make the old CentOS 6.5 environment as
> a chroot.

  That's exactly my intention.  As I said in my original message...

>>  * or send out a 1.3 gigabyte centos65.tar.xz and give simple
>>instructions to extract the archive, copy over /etc/resolv.conf,
>>bind-mount /dev and /proc, chroot into the directory, and get
>>going right away.

  The point of my first post was to ask about licencing.  Regardless of
whether I'm sending out a bootable ISO, or a QEMU disk image, or a
tarred up chrootable directory, I'm re-distributing Open Source code
and/or binaries, which I assume requires appropriate pointers to where
they can be obtained.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Licence text questions

2017-02-11 Thread Walter Dnes
On Sat, Feb 11, 2017 at 08:06:49AM -0500, Jonathan Billings wrote

> Wouldn't this be easier done as a mock chroot?  I realize you're
> not building RPMs, but you could use the chroot for building any
> software, and on any arbitrary CentOS or Fedora system.

  1) Not everybody runs Fedora/Redhat/CentOS

  2) The builds I'm doing are targetted at distros, like Puppy linux,
which use older libs with backported security fixes.  Pale Moon built
in a chroot or mock chroot in CentOS 6.8 and up, let alone any modern
distro, does not run on "Lucid Puppy" linux.  That's because it'll
expect the newer libs on the target machine.  This is why I have to
provide the entire old CentOS 6.5 environment complete with older libs
to build against.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Wich web browser on CentOS6 ?

2017-02-11 Thread Walter Dnes
On Sat, Feb 11, 2017 at 11:37:09AM +0100, Patrick Bégou wrote
> Yes David, I'm using a release 32 of Firefox to reach my olds C6100 
> IDRAC7 interface.
> The problem is for latest Firefox versions as they require libgtk-3 not 
> available in Centos6/RHEL6 distribution.
> 
> Today I use a very very bad solution to reach my switch with latest 
> firmware version from the latest Firefox available in CentOS: I disable 
> https and use http
> Even if it is on a private network, in a dedicated vlan behind a 
> firewall... I don't like this.

Hello;

  Disclosure: I'm the person who does the Pale Moon (Firefox fork) SSE
contributed build for linux.  Note: this build is 32-bit only.  See
https://forum.palemoon.org/viewtopic.php?f=40=13530=20#p105849
I subscribe to this list because I use a CentOS 6.5 chroot to do the
builds, and I have occasional questions.  SSE-only machines (i.e. no
SSE2 instructions) are old Pentium 3 and similar.  The SSE build will
work on newer machines, but may be a bit slower than the standard build,
because it does not use the SSE2 instruction set.

  Older machines often run distros like Puppy linux which use older
glibc, gtk2, etc.  Puppy linux does have security fixes backported.
Because Pale Moon SSE version is built in CentOS 6.5, it should work
in 32-bit CentOS.

  You can also try the mainline version of Pale Moon if you want 64-bit.
http://linux.palemoon.org/  It uses gtk2, but I don't know if it's
compatible with other old libraries that CentOS 6 uses.  My build goes
out of its way to be compatible with older libraries.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Licence text questions

2017-02-10 Thread Walter Dnes
  I'm running a CentOS 6.5 chroot to build Pale Moon (a Firefox fork)
for older machines running distros like Puppy linux.  Before anyone
asks...

* Yes, even though the older machines are using "ancient" glibc, etc,
  they do have security patches back-ported, e.g.
  http://www.murga-linux.com/puppy/viewtopic.php?t=90461
  "Lucid Puppy Revitalized as 5.2.8.7 - December, 2016"

* I realize that CentOS 6.5 is "not safe for surfing".  It starts at
  the commandline, and the only network activity is pulling down source
  code with git, and scp to send the compiled package to the host, i.e.
  my desktop PC.  If necessary, that could be done by the host OS.  It's
  used for building, and nothing else.  Currently just Pale Moon, but
  other software could also be built.


  Other people are interested in doing the same.  My choices are...
  * explain how to install CentOS 6.5, which options to choose, turn
off boot-to-gui, and how to download and build newer gcc, yasm,
and python-2.7 to duplicate my build environment, etc, etc.
  * or send out a 1.3 gigabyte centos65.tar.xz and give simple
instructions to extract the archive, copy over /etc/resolv.conf,
bind-mount /dev and /proc, chroot into the directory, and get
going right away.

  I'm not charging money, but the 2nd choice literally involves
re-distributing CentOS, and additional Open Source software.  I believe
that I'm required to provide at least the location from which it can be
obtained.  Here's a first draft of my "licences.txt".  Any problems,
suggestions?


  The tarball is a collection of various Open Source software, assembled
and bundled together by Walter Dnes <waltd...@waltdnes.org>.  It's based
on a 32-bit CentOS 6.5 install.  Additional components necessary for the
building of Pale Moon 27 were built from source.  It was originally
installed in a QEMU VM (Virtual Machine), and then rsync'd to a
directory on the host machine for use as a chroot environment.  The
tarballed directory is intended to run as a chroot environment.

  The various softwares remain subject to their original licences.  As
required by many Open Source licences, here is a list of where the
original software can be obtained.

* The CentOS 6.5 distro can be obtained at
  http://vault.centos.org/6.5/isos/i386/CentOS-6.5-i386-bin-DVD1.iso
  http://vault.centos.org/6.5/isos/i386/CentOS-6.5-i386-bin-DVD2.iso
  DVD1 is approx 3.6 gigabytes and DVD2 is approx 1 gigabyte

  The following additional source code was downloaded and used to build
additional infrastructure required for building Pale Moon.

* Python 2.7.13 can be otained at
  https://www.python.org/ftp/python/2.7.13/Python-2.7.13.tgz

* gcc 4.9.4 can be obtained at
  http://gcc.parentingamerica.com/releases/gcc-4.9.4/gcc-4.9.4.tar.bz2

* gcc 5.4.0 can be obtained at
  http://gcc.parentingamerica.com/releases/gcc-5.4.0/gcc-5.4.0.tar.bz2

* YASM 1.3.0 can be obtained at
  http://www.tortall.net/projects/yasm/releases/yasm-1.3.0.tar.gz
====

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to downgrade gtk2 libs in CentOS 6.8?

2017-01-09 Thread Walter Dnes
On Mon, Jan 09, 2017 at 11:24:14AM +, James Pearson wrote

> One way would be to do the build on the same OS as the 'older linux' ?

  The 'older linux' is "Lucid Puppy Revitalized as 5.2.8.7 - December,
2016" http://www.murga-linux.com/puppy/viewtopic.php?t=90461  It's a
low-memory end-user distro, targetted at really old, low-memory
machines.  It can do simple compiles, but it's not a development
environment suitable for building Pale Moon, which is an independant
Firefox fork.

> However, CentOS 6.5 shipped with gtk2-2.20.1-4.el6, CentOS 6.6 and
> above shipped with gtk-2.24 - see http://vault.centos.org/6.5/os/

  Thanks for the pointer; I didn't know about that URL.  I'll try to get
6.5 up and running as a VM.

> Otherwise, use a CentOS 6.5 VM to do the build (with the usual caveats
> that 6.5 is old/out-of-date/etc)?

  That seems the best route.  As it was, even on 6.8, I had to
"yum install autoconf213", and manually downloand tarballs and build
from source yasm, python 2.7, and gcc 4.9.4.  I'm not a programmer, but
I can "./configure --with-options && make && make install".  It's no
more difficult than "yum install ".

  I realize that CentOS 6.5 is "not safe for surfing", but I'll be using
it only for doing builds.  The build will not be statically linking in
libraries, so CentOS security holes are not a problem.  Lucid Puppy has
an "ancient" glibc, but has backported patches for the "Ghost" exploit,
etc.  Ditto for ssl and other exploits.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] How to downgrade gtk2 libs in CentOS 6.8?

2017-01-09 Thread Walter Dnes
  Hi all.  I'm using a CentOS 6.8 VM to do volunteer builds for an open
source project.  I want to build Pale Moon with a gtk2 library older
than 2.24, to allow people with older linuxes to run it.  Short summary,
if built against version gtk2-2.24 and/or higher, the binary will use a
function that does not exist in gtk2-2.23 and lower.  Net result is that
the program dies with an "undefined symbol:" error for people with
machines lower than gtk2-2.24.  Yes, before you ask, they do get
security fixes backported.

  The hits from my Google search suggested...

yum downgrade gtk2

  The response from yum was...

Only Upgrade available on package: gtk-2.24.23-8.e16.i686
Nothing to do

  Are there ways around this?

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SCL devtoolset-3 or 4 without eclipse?

2016-11-18 Thread Walter Dnes
On Fri, Nov 18, 2016 at 09:47:29AM -0800, Robert Arkiletian wrote
> Is there a way to install devtoolset packages without the bloat of eclipse?
> 
> I just want the new compiler and toolchain, not a big IDE.
> 
> BTW devtoolset-3 dependencies are broken in yum with C6

  You can do it manually as per the instructions at
https://gcc.gnu.org/wiki/InstallingGCC

Step 1) Download and extract the tarball for the gcc version you need.
I'll use gcc-5.4.0 in this example.  Substitute whichever version you
actually need.

#
wget http://ftpmirror.gnu.org/gcc/gcc-5.4.0/gcc-5.4.0.tar.bz2
tar xjf gcc-5.4.0.tar.bz2
#

Step 2) The tarball does not contain gmp, mpc, mpfr, and isl libs.  To
get them, and have them compiled in when you build gcc, you *MUST* run
the "download_prerequisites" script from the top-level GCC source dir.
It downloads and extracts the appropriate versions corresponding to the
version of gcc that you've downloaded.

#
cd gcc-5.4.0
contrib/download_prerequisites
#

Step 3) Build and install gcc.  The flags and enabled languages you need
may differ from mine, so check the "configure" parameters for your use
case.  I've enabled backwards compatability, and set it to install in
$HOME/gcc540 so that the entire build+install process can be done as a
regular user.  Note that you *MUST NOT* run ./configure from the GCC
source dir.

#
mkdir gcc-5.4.0/gcc-build && cd gcc-5.4.0/gcc-build

../configure --prefix=$HOME/gcc540 \
 --disable-multilib \
 --enable-libstdcxx-threads \
 --enable-libstdcxx-time \
 --enable-shared \
 --enable-__cxa_atexit \
 --disable-libunwind-exceptions \
 --disable-libada \
 --with-default-libstdcxx-abi=gcc4-compatible
#
# Depends on how many cores your cpu has.
make -j4

make install
#

Step 4) Your /usr/bin/gcc remains the default gcc compiler.  When you
want to use the gcc from $HOME/gcc540 you must *SOURCE* the following
commands.  Put them in a *PLAIN TEXT* file.  Do *NOT* set it executable
or begin it with "#!/bin/bash".  Think of it as an "include file for
bash".  If the file is named "setgcc", then execute it like so at the
start of your build script...

#
. setgcc
#

  The commands in the file, to run gcc from $HOME/gcc540 would be

#
export GCCX_ROOT=$HOME/gcc540
export PATH=$GCCX_ROOT/bin:$PATH
export MANPATH=$GCCX_ROOT/share/man:MANPATH
export INFOPATH=$GCCX_ROOT/share/info:$INFOPATH
export LD_LIBRARY_PATH=$GCCX_ROOT/lib64:$GCCX_ROOT/lib:$LD_LIBRARY_PATH
export LD_RUN_PATH=$GCCX_ROOT/lib64:$GCCX_ROOT/lib:$LD_RUN_PATH
export LIBRARY_PATH=$GCCX_ROOT/lib64:$GCCX_ROOT/lib:$LIBRARY_PATH
export INCLUDE_PATH=$GCCX_ROOT/include:$INCLUDE_PATH
export CPLUS_INCLUDE_PATH=$GCCX_ROOT/include:$CPLUS_INCLUDE_PATH
export C_INCLUDE_PATH=$GCCX_ROOT/include:$C_INCLUDE_PATH
#

  The above assumes a 64-bit install.  If you're running a 32-bit
install, change all occurences of "lib64" to "lib".

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] FireFox and Plugins

2016-11-03 Thread Walter Dnes
On Wed, Nov 02, 2016 at 09:37:03PM -0700, Alice Wonder wrote
> While doing a browser fingerprinting survey, I was quite surprised to 
> see I actually have a FireFox plugin installed.
> 
> The culprit is
> 
> /usr/lib64/mozilla/plugins/librhythmbox-itms-detection-plugin.so
> 
> It appears that whoever maintains the rhythmbox RPM has chosen not to 
> package the browser plugin separately like it probably should be. So if 
> I have the rhythmbox RPM installed, I have the plugin.
> 
> This is rather worrisome because I can find no trace of the plugin in 
> the Mozilla preferences panel, so if it is there it is very well hidden 
> and if it really isn't there, it can't be disabled there.
> 
> Is there some kind of blacklist file I can put in 
> /usr/lib64/mozilla/plugins/ or ~/.mozilla/plugins/ to specifically tell 
> FireFox not to load that plugin, or do I have to uninstall rhythmbox?

  How about manually...

sudo rm /usr/lib64/mozilla/plugins/librhythmbox-itms-detection-plugin.so

  You'll have to do it each time you update rhytmbox.

-- 
Walter Dnes <waltd...@waltdnes.org>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos